KCPTun 一種基於UDP協議的TCP加速方案

前言

tcp加速方案有很多，比如銳速，谷歌bbr，以及很多已經放棄維護的雙邊TCP加速方案，這次為大家介紹的是KCPTun

項目地址 https://github.com/xtaci/kcptun

服務器端搭建

服務器採用centos7系統

案例

我使用kcp 888端口為ssh 22端口加速

創建kcptun目錄

mkdir /kcpcd /kcp

下載kcptun

wget https://github.com/xtaci/kcptun/releases/download/v20171021/kcptun-linux-amd64-20171021.tar.gz
tar xfvz kcptun-linux-amd64-20171021.tar.gz

防火牆開放端口 注意：kcp是UDP端口

[root@baidu kcp]# firewall-cmd --zone=public --permanent --add-port=888/udpsuccess
[root@baidu kcp]# firewall-cmd --reloadAsuccess
[root@baidu kcp]# firewall-cmd --zone=public --list-allpublic (active)
 target: default
 icmp-block-inversion: no
 interfaces: venet0
 sources:
 services: ssh dhcpv6-client
 ports: 22/tcp 80/tcp 443/tcp 888/udp
 protocols:
 masquerade: no
 forward-ports:
 source-ports:
 icmp-blocks:
 rich rules:

簡單測試

./server_linux_amd64 -t 127.0.0.1:22 -l :888 --key mima --crypt aes-128 --mode fast2

編寫啟動腳本

touch /etc/init.d/kcptun 

chmod +x /etc/init.d/kcptun
vi /etc/init.d/kcptun

內容如下

#!/bin/bashBASE=$(basename $0)# modify these in /etc/sysconfig/$BASE (/etc/sysconfig/kcptun)KCPTUN=/kcp/server_linux_amd64
KCPTUN_PIDFILE=/var/run/$BASE.pid
KCPTUN_LOGFILE=/var/log/$BASE.log
KCPTUN_LOCKFILE=/var/lock/subsys/$BASEKCPTUN_OPTS="-t 127.0.0.1:22 -l :888 --key mima --crypt aes-128 --mode fast2"KCPTUN_DESC="KCPTUN"# Source function library.. /etc/rc.d/init.d/functionsif [ -f /etc/sysconfig/$BASE ]; then
 . /etc/sysconfig/$BASEfi# Check kcptun server is presentif [ ! -x $KCPTUN ]; then
 echo "$KCPTUN not present or not executable!"
 exit 1fiRETVAL=0
STOP_TIMEOUT=${STOP_TIMEOUT-10}start() { if [ -f ${KCPTUN_LOCKFILE} ]; then
 if [ -s ${KCPTUN_PIDFILE} ]; then
 echo "$BASE might be still running, stop it first!"
 killproc -p ${KCPTUN_PIDFILE} -d ${STOP_TIMEOUT} $KCPTUN
 else
 echo "$BASE was not shut down correctly!"
 fi
 rm -f ${KCPTUN_PIDFILE} ${KCPTUN_LOCKFILE}
 sleep 2 fi
 echo -n $"Starting $BASE: "
 $KCPTUN --log ${KCPTUN_LOGFILE} $KCPTUN_OPTS &
 RETVAL=$? if [ "$RETVAL" = "0" ]; then
 success
 sleep 2
 ps -A o pid,cmd | grep "$KCPTUN --log ${KCPTUN_LOGFILE} $KCPTUN_OPTS" | awk '{print $1}' | head -n 1 > ${KCPTUN_PIDFILE}
 else
 failure fi
 echo
 [ $RETVAL = 0 ] && touch ${KCPTUN_LOCKFILE}
 return $RETVAL}stop() { echo -n $"Stopping $BASE: "
 killproc -p ${KCPTUN_PIDFILE} -d ${STOP_TIMEOUT} $KCPTUN
 RETVAL=$? echo
 [ $RETVAL = 0 ] && rm -f ${KCPTUN_PIDFILE} ${KCPTUN_LOCKFILE}
 return $RETVAL}case "$1" in
 start)
 start
 ;;
 stop)
 stop
 ;;
 status)
 status -p ${KCPTUN_PIDFILE} $KCPTUN
 RETVAL=$?
 ;;
 restart)
 stop
 start
 ;; 

 *) echo $"Usage: $BASE { start | stop | restart | status }"
 RETVAL=2
 ;;esacexit $RETVAL

啟動管理

systemctl daemon-reload
systemctl start kcptun
systemctl status kcptun
systemctl enable kcptun

客戶端

下載客戶端主程序

https://github.com/xtaci/kcptun/releases

下載客戶端GUI

https://github.com/dfdragon/kcptun_gclient/releases/

將gui和主程序放在同一目錄，運行gui

使用管理員運行

添加 - 程序開機自啟 - 啟動後最小化
kcptun客戶端 - 本地監聽端口 - kcp服務器地址 - 端口 -通訊密鑰 - 加密方式
傳輸模式 - 模式選擇

啟動

測試結果

ssh之前連接服務器22端口，現在只需要連接127.0.0.1的3300端口即可。

連接前

連接後

ssh均有3倍左右提升

而在網頁加速下提升為10倍左右

閱讀更多 9Sblog 的文章

關鍵字: Linux 加速 AWK