☰

通过 VPN 访问 http 服务器

tag-icon • tag-icon linux networking iptables vpn wireguard
通过 VPN 访问 http 服务器

我有 2 个 VPS。在其中一个 VPS（我们称之为 A）上，我设置了 Wireguard vpn。我将第二个 VPS 作为对等端连接到 VPS A，同时我还作为客户端连接到 Wireguard，无法通过服务器 B 上的本地 vpn 地址访问任何 Web。Nginx 日志显示服务器 B 接受了我的请求，但没有响应我。nc -vz 命令也成功了。我该如何修复？Curl/Web 浏览器不显示任何内容

Server A: iptables -nvL
Chain INPUT (policy ACCEPT 45630 packets, 6884K bytes)
 pkts bytes target     prot opt in     out     source               destination         

Chain FORWARD (policy ACCEPT 64284 packets, 111M bytes)
 pkts bytes target     prot opt in     out     source               destination                    
   38 11371 ACCEPT     all  --  wg-172 *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 92761 packets, 119M bytes)
 pkts bytes target     prot opt in     out     source               destination   

ip r:
default via 1.1.1.1(public ip) dev eth0 
10.0.0.0/8 dev wg0 proto kernel scope link src 10.0.0.1 
1.1.1.0/24 dev eth0 proto kernel scope link src 1.1.1.1 
169.254.0.0/16 dev eth0 scope link metric 1002 
172.16.0.0/24 dev wg-172 proto kernel scope link src 172.16.0.1

tcpdump on vpn interface from my laptop

tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on utun3, link-type RAW (Raw IP), capture size 262144 bytes

18:19:16.483263 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [S], seq 2006555320, win 65535, options [mss 1380,nop,wscale 6,nop,nop,TS val 666581156 ecr 0,sackOK,eol], length 0
18:19:16.626234 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [S.], seq 2191963124, ack 2006555321, win 27360, options [mss 1380,sackOK,TS val 366766758 ecr 666581156,nop,wscale 7], length 0
18:19:16.626348 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [.], ack 1, win 2052, options [nop,nop,TS val 666581299 ecr 366766758], length 0
18:19:16.626442 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [P.], seq 1:75, ack 1, win 2052, options [nop,nop,TS val 666581299 ecr 366766758], length 74: HTTP: GET / HTTP/1.1
18:19:16.770856 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [.], ack 75, win 214, options [nop,nop,TS val 366766902 ecr 666581299], length 0
18:19:16.770866 IP 172.16.0.2.http > 172.16.0.3.49685: Flags [P.], seq 4105:5074, ack 75, win 214, options [nop,nop,TS val 366766902 ecr 666581299], length 969: HTTP
18:19:16.771006 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [.], ack 1, win 2052, options [nop,nop,TS val 666581444 ecr 366766902,nop,nop,sack 1 {4105:5074}], length 0
18:19:18.237977 IP 172.16.0.3.49685 > 172.16.0.2.http: Flags [R.], seq 75, ack 1, win 2052, length 0

相关内容