RDP | 九條凜の部屋

最近又折騰了一個其實沒什麼需求的東西，把家裡Windows服務器的ip通過DDNS連接，使我在外面也能通過遠程桌面連回家裡。

其實我的路由器本身就有華碩官方的ddns，也安裝了支持cf的ddns插件，而且家裡也有公網ipv4和ipv6，所以平時我都是wg直接連回家使用家裡的遠程桌面。但是總覺得還要連一個wg有點麻煩，直接ipv4端口映射又不安全。所以想把家裡Windows服務器的ipv6直接用cf的api做成ddns。

其他小夥伴也可以參考，適用於家中有ipv6公網地址且會分配給下面的設備，想通過域名直接連回家中Windows遠程桌面的情況。需要準備：cf的域名，ipv6防火牆放行相關端口（如3389），Windows的機器安過Python。

在需要連接的機器上創建以下兩個文件：

@echo off
:loop
echo [%date% %time%] 正在更新 IPv6 地址...
python update_ipv6.py
echo 等待一小時...
ping -n 3600 127.0.0.1 > nul
goto loop

@echo off

:loop

echo [%date% %time%] 正在更新 IPv6 地址...

python update_ipv6.py

echo 等待一小時...

ping -n 3600 127.0.0.1 > nul

goto loop

import requests
import socket
import re
import time

API_TOKEN = "你的API令牌"
DNS_NAME = "你的完整域名"  # 如 sub.example.com

def get_ipv6_address():
    try:
        for info in socket.getaddrinfo(socket.gethostname(), None, socket.AF_INET6):
            addr = info[4][0]
            if not addr.startswith("fe80"):  # 排除 link-local 地址
                return addr
    except Exception as e:
        print("獲取IPv6失敗：", e)
    return None

def get_zone_id(session, headers, zone_name):
    url = f"https://api.cloudflare.com/client/v4/zones?name={zone_name}"
    resp = session.get(url, headers=headers).json()
    if resp.get("success"):
        return resp["result"][0]["id"]
    print("獲取 Zone ID 失敗：", resp.get("errors"))
    return None

def get_record(session, headers, zone_id, dns_name):
    url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records?type=AAAA&name={dns_name}"
    resp = session.get(url, headers=headers).json()
    if resp.get("success") and resp["result"]:
        return resp["result"][0]
    return None

def update_record(session, headers, zone_id, record_id, dns_name, ipv6, proxied):
    url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{record_id}"
    data = {
        "type": "AAAA",
        "name": dns_name,
        "content": ipv6,
        "ttl": 1,
        "proxied": proxied
    }
    resp = session.put(url, json=data, headers=headers).json()
    return resp.get("success", False)

def create_record(session, headers, zone_id, dns_name, ipv6):
    url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records"
    data = {
        "type": "AAAA",
        "name": dns_name,
        "content": ipv6,
        "ttl": 1,
        "proxied": False
    }
    resp = session.post(url, json=data, headers=headers).json()
    return resp.get("success", False)

def main():
    headers = {
        "Authorization": f"Bearer {API_TOKEN}",
        "Content-Type": "application/json"
    }
    zone_name = ".".join(DNS_NAME.split(".")[-2:])

    with requests.Session() as session:
        ipv6 = get_ipv6_address()
        if not ipv6:
            print("未找到有效的 IPv6 地址")
            return

        print(f"當前 IPv6：{ipv6}")

        zone_id = get_zone_id(session, headers, zone_name)
        if not zone_id:
            return

        record = get_record(session, headers, zone_id, DNS_NAME)
        if record:
            if record["content"] == ipv6:
                print("IPv6 地址未變，無需更新")
            else:
                print("IPv6 地址已變，正在更新...")
                if update_record(session, headers, zone_id, record["id"], DNS_NAME, ipv6, record["proxied"]):
                    print("更新成功")
                else:
                    print("更新失敗")
        else:
            print("未找到記錄，正在創建...")
            if create_record(session, headers, zone_id, DNS_NAME, ipv6):
                print("創建成功")
            else:
                print("創建失敗")

if __name__ == "__main__":
    main()

import requests

import socket

import re

import time

API_TOKEN = "你的API令牌"

DNS_NAME = "你的完整域名" # 如 sub.example.com

def get_ipv6_address():

try:

for info in socket.getaddrinfo(socket.gethostname(), None, socket.AF_INET6):

addr = info[4][0]

if not addr.startswith("fe80"): # 排除 link-local 地址

return addr

except Exception as e:

print("獲取IPv6失敗：", e)

return None

def get_zone_id(session, headers, zone_name):

url = f"https://api.cloudflare.com/client/v4/zones?name={zone_name}"

resp = session.get(url, headers=headers).json()

if resp.get("success"):

return resp["result"][0]["id"]

print("獲取 Zone ID 失敗：", resp.get("errors"))

return None

def get_record(session, headers, zone_id, dns_name):

url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records?type=AAAA&name={dns_name}"

resp = session.get(url, headers=headers).json()

if resp.get("success") and resp["result"]:

return resp["result"][0]

return None

def update_record(session, headers, zone_id, record_id, dns_name, ipv6, proxied):

url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{record_id}"

data = {

"type": "AAAA",

"name": dns_name,

"content": ipv6,

"ttl": 1,

"proxied": proxied

}

resp = session.put(url, json=data, headers=headers).json()

return resp.get("success", False)

def create_record(session, headers, zone_id, dns_name, ipv6):

url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records"

data = {

"type": "AAAA",

"name": dns_name,

"content": ipv6,

"ttl": 1,

"proxied": False

}

resp = session.post(url, json=data, headers=headers).json()

return resp.get("success", False)

def main():

headers = {

"Authorization": f"Bearer {API_TOKEN}",

"Content-Type": "application/json"

}

zone_name = ".".join(DNS_NAME.split(".")[-2:])

with requests.Session() as session:

ipv6 = get_ipv6_address()

if not ipv6:

print("未找到有效的 IPv6 地址")

return

print(f"當前 IPv6：{ipv6}")

zone_id = get_zone_id(session, headers, zone_name)

if not zone_id:

return

record = get_record(session, headers, zone_id, DNS_NAME)

if record:

if record["content"] == ipv6:

print("IPv6 地址未變，無需更新")

else:

print("IPv6 地址已變，正在更新...")

if update_record(session, headers, zone_id, record["id"], DNS_NAME, ipv6, record["proxied"]):

print("更新成功")

else:

print("更新失敗")

else:

print("未找到記錄，正在創建...")

if create_record(session, headers, zone_id, DNS_NAME, ipv6):

print("創建成功")

else:

print("創建失敗")

if __name__ == "__main__":

main()

update_ipv6.bat 是用來循環執行 update_ipv6.py 的，當然如果你更喜歡用計劃任務定時運行也一樣。個人愛好，我比較喜歡開機自啟bat然後能看見一個窗體讓我知道它在運行。

運行 update_ipv6.bat 即可每小時更新一次相關的dns記錄。該腳本只更新AAAA記錄，也就是ipv6，因為個人感覺ipv6連內網安全一點，如果需要連同A記錄也更新，可以自行修改，但需要通過第三方網站獲得本機外網ip（因為網卡上的ipv4是內網地址，不能直接獲得）。

如果你的服務器是2022或者以上版本應該會支持powershell，這樣的話不需要使用Python也可以，這樣更方便了。兩個文件可以改為如下：

@echo off
:loop
echo [%date% %time%] 正在更新 IPv6 地址...
powershell -ExecutionPolicy Bypass -File update-ipv6.ps1
echo 等待一小時...
ping -n 3600 127.0.0.1 > nul
goto loop

@echo off

:loop

echo [%date% %time%] 正在更新 IPv6 地址...

powershell -ExecutionPolicy Bypass -File update-ipv6.ps1

echo 等待一小時...

ping -n 3600 127.0.0.1 > nul

goto loop

$API_TOKEN = "你的token"
$DNS_NAME = "你的子域名"
$ZONE_NAME = ($DNS_NAME -split "\.")[-2..-1] -join "."

function Get-IPv6Address {
    $addresses = Get-NetIPAddress -AddressFamily IPv6 | Where-Object {
        $_.PrefixOrigin -ne "WellKnown" -and $_.IPAddress -notlike "fe80*"
    }
    return $addresses[0].IPAddress
}

function Get-ZoneID {
    param ($ZoneName)
    $url = "https://api.cloudflare.com/client/v4/zones?name=$ZoneName"
    $headers = @{
        "Authorization" = "Bearer $API_TOKEN"
        "Content-Type" = "application/json"
    }
    $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get
    if ($response.success) {
        return $response.result[0].id
    } else {
        Write-Error "獲取 Zone ID 失敗：$($response.errors | ConvertTo-Json -Depth 5)"
        return $null
    }
}

function Get-Record {
    param ($ZoneID, $DNSName)
    $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records?type=AAAA&name=$DNSName"
    $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get
    if ($response.success -and $response.result.Count -gt 0) {
        return $response.result[0]
    }
    return $null
}

function Update-Record {
    param ($ZoneID, $RecordID, $DNSName, $IPv6, $Proxied)
    $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records/$RecordID"
    $body = @{
        type = "AAAA"
        name = $DNSName
        content = $IPv6
        ttl = 1
        proxied = $Proxied
    } | ConvertTo-Json -Depth 3
    $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Put -Body $body
    return $response.success
}

function Create-Record {
    param ($ZoneID, $DNSName, $IPv6)
    $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records"
    $body = @{
        type = "AAAA"
        name = $DNSName
        content = $IPv6
        ttl = 1
        proxied = $false
    } | ConvertTo-Json -Depth 3
    $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Post -Body $body
    return $response.success
}

# 主流程
$headers = @{
    "Authorization" = "Bearer $API_TOKEN"
    "Content-Type" = "application/json"
}

$ipv6 = Get-IPv6Address
if (-not $ipv6) {
    Write-Host "未找到有效的 IPv6 地址"
    exit
}
Write-Host "當前 IPv6：$ipv6"

$zoneID = Get-ZoneID $ZONE_NAME
if (-not $zoneID) {
    exit
}

$record = Get-Record $zoneID $DNS_NAME
if ($record) {
    if ($record.content -eq $ipv6) {
        Write-Host "IPv6 地址未變，無需更新"
    } else {
        Write-Host "IPv6 地址已變，正在更新..."
        if (Update-Record $zoneID $record.id $DNS_NAME $ipv6 $record.proxied) {
            Write-Host "更新成功"
        } else {
            Write-Host "更新失敗"
        }
    }
} else {
    Write-Host "未找到記錄，正在創建..."
    if (Create-Record $zoneID $DNS_NAME $ipv6) {
        Write-Host "創建成功"
    } else {
        Write-Host "創建失敗"
    }
}

100

101

102

103

$API_TOKEN = "你的token"

$DNS_NAME = "你的子域名"

$ZONE_NAME = ($DNS_NAME -split "\.")[-2..-1] -join "."

function Get-IPv6Address {

$addresses = Get-NetIPAddress -AddressFamily IPv6 | Where-Object {

$_.PrefixOrigin -ne "WellKnown" -and $_.IPAddress -notlike "fe80*"

}

return $addresses[0].IPAddress

}

function Get-ZoneID {

param ($ZoneName)

$url = "https://api.cloudflare.com/client/v4/zones?name=$ZoneName"

$headers = @{

"Authorization" = "Bearer $API_TOKEN"

"Content-Type" = "application/json"

}

$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get

if ($response.success) {

return $response.result[0].id

} else {

Write-Error "獲取 Zone ID 失敗：$($response.errors | ConvertTo-Json -Depth 5)"

return $null

}

function Get-Record {

param ($ZoneID, $DNSName)

$url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records?type=AAAA&name=$DNSName"

$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get

if ($response.success -and $response.result.Count -gt 0) {

return $response.result[0]

}

return $null

}

function Update-Record {

param ($ZoneID, $RecordID, $DNSName, $IPv6, $Proxied)

$url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records/$RecordID"

$body = @{

type = "AAAA"

name = $DNSName

content = $IPv6

ttl = 1

proxied = $Proxied

} | ConvertTo-Json -Depth 3

$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Put -Body $body

return $response.success

}

function Create-Record {

param ($ZoneID, $DNSName, $IPv6)

$url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records"

$body = @{

type = "AAAA"

name = $DNSName

content = $IPv6

ttl = 1

proxied = $false

} | ConvertTo-Json -Depth 3

$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Post -Body $body

return $response.success

}

# 主流程

$headers = @{

"Authorization" = "Bearer $API_TOKEN"

"Content-Type" = "application/json"

}

$ipv6 = Get-IPv6Address

if (-not $ipv6) {

Write-Host "未找到有效的 IPv6 地址"

exit

}

Write-Host "當前 IPv6：$ipv6"

$zoneID = Get-ZoneID $ZONE_NAME

if (-not $zoneID) {

exit

}

$record = Get-Record $zoneID $DNS_NAME

if ($record) {

if ($record.content -eq $ipv6) {

Write-Host "IPv6 地址未變，無需更新"

} else {

Write-Host "IPv6 地址已變，正在更新..."

if (Update-Record $zoneID $record.id $DNS_NAME $ipv6 $record.proxied) {

Write-Host "更新成功"

} else {

Write-Host "更新失敗"

}

} else {

Write-Host "未找到記錄，正在創建..."

if (Create-Record $zoneID $DNS_NAME $ipv6) {

Write-Host "創建成功"

} else {

Write-Host "創建失敗"

}

以上。凜。

九條凜の部屋

Kujou Rin's Blog | Lilith Project

標籤彙整: RDP

如何通過IPv6遠程桌面連回家裡的Windows電腦

使用cf域名ddns連接家用ipv6公網地址