千兆宽带为什么总在『摸鱼』？深入剖析 ImmortalWrt 路由器固件：从硬件加速、网络调优到一键运维全实战

Failed to download ... Connection timed out
Signature check failed
Collected errors: opkg_download: Failed to download ...

<#
.SYNOPSIS
    ImmortalWrt / OpenWrt 自动化体检、测速与配置归档脚本 (Windows 11 原生)
.DESCRIPTION
    不依赖第三方模块，利用系统内置 NetTCPIP、OpenSSH 客户端实现全自动体检与备份。
#>
param (
    [string]$RouterHost = "",
    [string]$SshUser = "root",
    [switch]$AutoBackup = $true,
    [switch]$SwitchMirror = $false
)

$ErrorActionPreference = "Continue"

Write-Host "=================================================" -ForegroundColor Cyan
Write-Host "  ImmortalWrt 路由器自动化体检与配置归档工具" -ForegroundColor Cyan
Write-Host "  Platform: Windows 11 (Native PowerShell)" -ForegroundColor Cyan
Write-Host "=================================================" -ForegroundColor Cyan

# 1. 探测默认网关
if ([string]::IsNullOrWhiteSpace($RouterHost)) {
    $DefaultRoute = Get-NetRoute -DestinationPrefix "0.0.0.0/0" | Sort-Object RouteMetric | Select-Object -First 1
    if ($DefaultRoute) {
        $RouterHost = $DefaultRoute.NextHop
    } else {
        $RouterHost = "192.168.xx.1"
    }
}

# 脱敏显示
$MaskedHost = $RouterHost -replace '(\d+\.\d+)\.\d+\.\d+', '$1.xx.xx'
Write-Host "[*] 正在勘测本地网关: $MaskedHost" -ForegroundColor Yellow

# 2. 勘测网关延迟
$PingRes = Test-Connection -ComputerName $RouterHost -Count 4 -ErrorAction SilentlyContinue
if ($PingRes) {
    $AvgLatency = ($PingRes | Measure-Object -Property ResponseTime -Average).Average
    Write-Host "[+] 网关连通性正常，平均延迟: $AvgLatency ms" -ForegroundColor Green
} else {
    Write-Host "[-] 警告: 无法 Ping 通网关，请检查物理网线或 Wi-Fi 连接" -ForegroundColor Red
}

# 3. 探测 DNS 递归耗时
$DnsDuration = Measure-Command {
    Resolve-DnsName -Name "mirrors.tuna.tsinghua.edu.cn" -Server $RouterHost -ErrorAction SilentlyContinue
}
Write-Host "[+] 本地路由器 DNS 递归解析耗时: $($DnsDuration.TotalMilliseconds.ToString('0.00')) ms" -ForegroundColor Green

# 4. 远程 SSH 体检与配置备份
Write-Host "[*] 尝试通过 SSH 检查路由器底层状态 (用户: $SshUser)..." -ForegroundColor Yellow
$RemoteCheckCmd = @"
echo '---SYSINFO---'
uptime
free -m
echo '---ACCEL---'
lsmod | grep -E 'flow_offload|fast_path|shortcut_fe|mtk_wed' || echo 'OFFLOAD_NOT_DETECTED'
"@

$SshOutput = ssh -o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=4 "$SshUser@$RouterHost" $RemoteCheckCmd 2>$null

if ($LASTEXITCODE -eq 0 -and $SshOutput) {
    Write-Host "[+] 路由器 SSH 连接成功！" -ForegroundColor Green
    if ($SshOutput -match "OFFLOAD_NOT_DETECTED") {
        Write-Host "[-] 提示: 未检测到硬件加速内核模块，建议在后台开启 TurboACC 硬件加速" -ForegroundColor Yellow
    } else {
        Write-Host "[+] 硬件流量卸载 / 快速转发模块已正常加载！" -ForegroundColor Green
    }

    # 执行备份
    if ($AutoBackup) {
        $BackupDir = Join-Path $PSScriptRoot "immortalwrt_backups"
        if (!(Test-Path $BackupDir)) { New-Item -ItemType Directory -Path $BackupDir | Out-Null }
        $DateStr = Get-Date -Format "yyyyMMdd_HHmmss"
        $RemoteTar = "/tmp/backup_$DateStr.tar.gz"
        $LocalTar = Join-Path $BackupDir "router_backup_$DateStr.tar.gz"

        Write-Host "[*] 正在执行远程配置归档打包 (sysupgrade -b)..." -ForegroundColor Yellow
        ssh "$SshUser@$RouterHost" "sysupgrade -b $RemoteTar" 2>$null
        scp "$SshUser@$RouterHost:$RemoteTar" "$LocalTar" 2>$null
        ssh "$SshUser@$RouterHost" "rm -f $RemoteTar" 2>$null

        if (Test-Path $LocalTar) {
            $Size = (Get-Item $LocalTar).Length
            Write-Host "[+] 路由器安全备份完成！保存在: $LocalTar (大小: $Size 字节)" -ForegroundColor Green
        }
    }
} else {
    Write-Host "[!] 提示: 未配置 SSH 免密登录或 SSH 端口关闭，已完成前端网络体检。" -ForegroundColor Gray
}

Write-Host "=================================================" -ForegroundColor Cyan
Write-Host "  体检与自动化巡检完成，网络运行状态良好！" -ForegroundColor Cyan
Write-Host "=================================================" -ForegroundColor Cyan

#!/usr/bin/env bash
# ==============================================================================
# ImmortalWrt / OpenWrt 自动化体检与配置归档脚本 (Ubuntu 26.04 LTS 原生)
# 无需任何第三方包，遵循 bash 严苛安全模式
# ==============================================================================
set -euo pipefail

ROUTER_HOST="${1:-}"
SSH_USER="${2:-root}"
BACKUP_DIR="${HOME}/immortalwrt_backups"

echo "================================================="
echo "  ImmortalWrt 自动化巡检与配置归档 (Ubuntu 26.04)"
echo "================================================="

# 1. 自动发现默认网关
if [[ -z "$ROUTER_HOST" ]]; then
    ROUTER_HOST="$(ip route show default 2>/dev/null | awk '/default/ {print $3}' | head -n1 || true)"
    if [[ -z "$ROUTER_HOST" ]]; then
        ROUTER_HOST="192.168.xx.1"
    fi
fi

# 脱敏网关输出
MASKED_HOST="$(echo "$ROUTER_HOST" | sed -E 's/([0-9]+\.[0-9]+)\.[0-9]+\.[0-9]+/\1.xx.xx/')"
echo "[*] 正在勘测本地局域网默认网关: ${MASKED_HOST}"

# 2. 检查网络连通性与平均延迟
if ping -c 3 -W 2 "$ROUTER_HOST" >/dev/null 2>&1; then
    AVG_RTT="$(ping -c 3 -q "$ROUTER_HOST" | awk -F'/' 'END {print $5}')"
    echo "[+] 网关连通性正常，平均延迟: ${AVG_RTT} ms"
else
    echo "[-] 警告: 网关不可达，请检查接口状态" >&2
fi

# 3. 探测网络最佳 MTU（避免分片造成延迟突增）
echo "[*] 探测最佳 MTU 握手值..."
MTU_TEST_VAL=1472
if ping -c 1 -M do -s "$MTU_TEST_VAL" "$ROUTER_HOST" >/dev/null 2>&1; then
    echo "[+] 标准 1500 字节以太网 MTU 通信顺畅（未分片）"
else
    echo "[-] 检测到小封包分片，建议检查 PPPoE 接口 MTU 设置（通常为 1492 或 1480）"
fi

# 4. SSH 远程系统与硬件加速体检
echo "[*] 检查路由器内部硬件加速状态..."
SSH_OPTS="-o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=3"

if ssh ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}" "true" 2>/dev/null; then
    echo "[+] 路由器 SSH 认证通过！"
    
    # 获取系统基本指标
    ROUTER_LOAD="$(ssh ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}" "cat /proc/loadavg | awk '{print \$1, \$2, \$3}'")"
    echo "[+] 路由器当前负载 (1/5/15 min): ${ROUTER_LOAD}"

    # 检查硬件加速模块
    ACCEL_STATUS="$(ssh ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}" "lsmod | grep -E 'flow_offload|fast_path|mtk_wed' | wc -l")"
    if (( ACCEL_STATUS > 0 )); then
        echo "[+] 检测到 ${ACCEL_STATUS} 个硬件加速 / 流表卸载模块正全速运转！"
    else
        echo "[!] 提示: 未检测到硬件加速模块，建议在 LuCI 后台启用 TurboACC"
    fi

    # 自动执行配置归档
    mkdir -p "$BACKUP_DIR"
    TIMESTAMP="$(date +%Y%m%d_%H%M%S)"
    REMOTE_PKG="/tmp/sysupgrade_backup_${TIMESTAMP}.tar.gz"
    LOCAL_PKG="${BACKUP_DIR}/router_backup_${TIMESTAMP}.tar.gz"

    echo "[*] 正在执行无损配置打包归档..."
    ssh ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}" "sysupgrade -b ${REMOTE_PKG}" 2>/dev/null
    scp ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}:${REMOTE_PKG}" "${LOCAL_PKG}" 2>/dev/null
    ssh ${SSH_OPTS} "${SSH_USER}@${ROUTER_HOST}" "rm -f ${REMOTE_PKG}" 2>/dev/null

    if [[ -f "$LOCAL_PKG" ]]; then
        PKG_SIZE="$(du -h "$LOCAL_PKG" | cut -f1)"
        echo "[+] 路由器完整配置归档成功！文件: ${LOCAL_PKG} (${PKG_SIZE})"
    fi
else
    echo "[!] 提示: 路由器未开放免密 SSH，跳过内部模块与归档步骤"
fi

echo "================================================="
echo "  Ubuntu 26.04 巡检流水线执行完毕！"
echo "================================================="

#!/usr/bin/env zsh
# ==============================================================================
# ImmortalWrt / OpenWrt 自动化体检与配置归档脚本 (macOS 26 原生)
# 纯原生 Zsh 实现，完全不依赖 Homebrew 或第三方组件
# ==============================================================================
set -e

ROUTER_HOST="${1:-}"
SSH_USER="${2:-root}"
BACKUP_DIR="${HOME}/Documents/immortalwrt_backups"

print -P "%F{cyan}=================================================%f"
print -P "%F{cyan}  ImmortalWrt 自动化体检与配置归档 (macOS 26)%f"
print -P "%F{cyan}=================================================%f"

# 1. 探测 macOS 默认网关
if [[ -z "$ROUTER_HOST" ]]; then
    ROUTER_HOST="$(route -n get default 2>/dev/null | awk '/gateway:/ {print $2}' || true)"
    if [[ -z "$ROUTER_HOST" ]]; then
        ROUTER_HOST="192.168.xx.1"
    fi
fi

MASKED_HOST="$(echo "$ROUTER_HOST" | sed -E 's/([0-9]+\.[0-9]+)\.[0-9]+\.[0-9]+/\1.xx.xx/')"
print -P "%F{yellow}[*] 正在勘测 macOS 默认网关: ${MASKED_HOST}%f"

# 2. 网关延迟测试
if ping -c 3 -t 2 "$ROUTER_HOST" >/dev/null 2>&1; then
    AVG_PING="$(ping -c 3 -q "$ROUTER_HOST" | awk -F'/' 'END {print $5}')"
    print -P "%F{green}[+] 网关响应迅速，平均延时: ${AVG_PING} ms%f"
else
    print -P "%F{red}[-] 警告: 无法连通网关，请检查 Wi-Fi / 有线连接%f"
fi

# 3. macOS DNS 解析链路耗时
DNS_RESOLVE_MS="$(python3 -c "
import socket, time
t0 = time.time()
try:
    socket.gethostbyname('mirrors.tuna.tsinghua.edu.cn')
    print(f'{(time.time() - t0)*1000:.2f}')
except Exception:
    print('TIMEOUT')
")"
print -P "%F{green}[+] 本地 DNS 递归查询耗时: ${DNS_RESOLVE_MS} ms%f"

# 4. 远程 SSH 状态审查与自动备份
SSH_OPTS=(-o BatchMode=yes -o StrictHostKeyChecking=accept-new -o ConnectTimeout=3)

if ssh "${SSH_OPTS[@]}" "${SSH_USER}@${ROUTER_HOST}" "true" 2>/dev/null; then
    print -P "%F{green}[+] 成功建立与路由器的安全 SSH 连接！%f"

    # 获取内存与流表状态
    ROUTER_MEM="$(ssh "${SSH_OPTS[@]}" "${SSH_USER}@${ROUTER_HOST}" "free -m | awk '/Mem:/ {print \$7}'")"
    print -P "%F{green}[+] 路由器可用空闲内存: ${ROUTER_MEM} MB%f"

    # 归档配置
    mkdir -p "$BACKUP_DIR"
    TIME_TAG="$(date +%Y%m%d_%H%M%S)"
    REMOTE_FILE="/tmp/cfg_backup_${TIME_TAG}.tar.gz"
    LOCAL_FILE="${BACKUP_DIR}/mac_router_backup_${TIME_TAG}.tar.gz"

    print -P "%F{yellow}[*] 开始安全抓取配置备份...%f"
    ssh "${SSH_OPTS[@]}" "${SSH_USER}@${ROUTER_HOST}" "sysupgrade -b ${REMOTE_FILE}" 2>/dev/null
    scp "${SSH_OPTS[@]}" "${SSH_USER}@${ROUTER_HOST}:${REMOTE_FILE}" "${LOCAL_FILE}" 2>/dev/null
    ssh "${SSH_OPTS[@]}" "${SSH_USER}@${ROUTER_HOST}" "rm -f ${REMOTE_FILE}" 2>/dev/null

    if [[ -f "$LOCAL_FILE" ]]; then
        FILE_SIZE="$(ls -lh "$LOCAL_FILE" | awk '{print $5}')"
        print -P "%F{green}[+] 备份已成功保存至本地: ${LOCAL_FILE} (${FILE_SIZE})%f"
    fi
else
    print -P "%F{black}%B[!] 未检测到 SSH 免密凭证，已跳过路由器内部采集。%b%f"
fi

print -P "%F{cyan}=================================================%f"
print -P "%F{cyan}  macOS 26 运维巡检完成！%f"
print -P "%F{cyan}=================================================%f"

# 备份原软件源配置
cp /etc/opkg/distfeeds.conf /etc/opkg/distfeeds.conf.bak

# 一键替换为清华大学开源镜像站
sed -i 's#https\?://downloads.immortalwrt.org#https://mirrors.tuna.tsinghua.edu.cn/immortalwrt#g' /etc/opkg/distfeeds.conf

# 重新刷新软件源
opkg update