最近又折腾了一个其实没什么需求的东西，把家里Windows服务器的ip通过DDNS连接，使我在外面也能通过远程桌面连回家里。
其实我的路由器本身就有华硕官方的ddns，也安装了支持cf的ddns插件，而且家里也有公网ipv4和ipv6，所以平时我都是wg直接连回家使用家里的远程桌面。但是总觉得还要连一个wg有点麻烦，直接ipv4端口映射又不安全。所以想把家里Windows服务器的ipv6直接用cf的api做成ddns。
其他小伙伴也可以参考，适用于家中有ipv6公网地址且会分配给下面的设备，想通过域名直接连回家中Windows远程桌面的情况。需要准备：cf的域名，ipv6防火墙放行相关端口（如3389），Windows的机器安过Python。
在需要连接的机器上创建以下两个文件：
|
1 2 3 4 5 6 7 |
@echo off :loop echo [%date% %time%] 正在更新 IPv6 地址... python update_ipv6.py echo 等待一小时... ping -n 3600 127.0.0.1 > nul goto loop |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 |
import requests import socket import re import time API_TOKEN = "你的API令牌" DNS_NAME = "你的完整域名" # 如 sub.example.com def get_ipv6_address(): try: for info in socket.getaddrinfo(socket.gethostname(), None, socket.AF_INET6): addr = info[4][0] if not addr.startswith("fe80"): # 排除 link-local 地址 return addr except Exception as e: print("获取IPv6失败：", e) return None def get_zone_id(session, headers, zone_name): url = f"https://api.cloudflare.com/client/v4/zones?name={zone_name}" resp = session.get(url, headers=headers).json() if resp.get("success"): return resp["result"][0]["id"] print("获取 Zone ID 失败：", resp.get("errors")) return None def get_record(session, headers, zone_id, dns_name): url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records?type=AAAA&name={dns_name}" resp = session.get(url, headers=headers).json() if resp.get("success") and resp["result"]: return resp["result"][0] return None def update_record(session, headers, zone_id, record_id, dns_name, ipv6, proxied): url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records/{record_id}" data = { "type": "AAAA", "name": dns_name, "content": ipv6, "ttl": 1, "proxied": proxied } resp = session.put(url, json=data, headers=headers).json() return resp.get("success", False) def create_record(session, headers, zone_id, dns_name, ipv6): url = f"https://api.cloudflare.com/client/v4/zones/{zone_id}/dns_records" data = { "type": "AAAA", "name": dns_name, "content": ipv6, "ttl": 1, "proxied": False } resp = session.post(url, json=data, headers=headers).json() return resp.get("success", False) def main(): headers = { "Authorization": f"Bearer {API_TOKEN}", "Content-Type": "application/json" } zone_name = ".".join(DNS_NAME.split(".")[-2:]) with requests.Session() as session: ipv6 = get_ipv6_address() if not ipv6: print("未找到有效的 IPv6 地址") return print(f"当前 IPv6：{ipv6}") zone_id = get_zone_id(session, headers, zone_name) if not zone_id: return record = get_record(session, headers, zone_id, DNS_NAME) if record: if record["content"] == ipv6: print("IPv6 地址未变，无需更新") else: print("IPv6 地址已变，正在更新...") if update_record(session, headers, zone_id, record["id"], DNS_NAME, ipv6, record["proxied"]): print("更新成功") else: print("更新失败") else: print("未找到记录，正在创建...") if create_record(session, headers, zone_id, DNS_NAME, ipv6): print("创建成功") else: print("创建失败") if __name__ == "__main__": main() |
update_ipv6.bat 是用来循环执行 update_ipv6.py 的，当然如果你更喜欢用计划任务定时运行也一样。个人爱好，我比较喜欢开机自启bat然后能看见一个窗体让我知道它在运行。
运行 update_ipv6.bat 即可每小时更新一次相关的dns记录。该脚本只更新AAAA记录，也就是ipv6，因为个人感觉ipv6连内网安全一点，如果需要连同A记录也更新，可以自行修改，但需要通过第三方网站获得本机外网ip（因为网卡上的ipv4是内网地址，不能直接获得）。
如果你的服务器是2022或者以上版本应该会支持powershell，这样的话不需要使用Python也可以，这样更方便了。两个文件可以改为如下：
|
1 2 3 4 5 6 7 |
@echo off :loop echo [%date% %time%] 正在更新 IPv6 地址... powershell -ExecutionPolicy Bypass -File update-ipv6.ps1 echo 等待一小时... ping -n 3600 127.0.0.1 > nul goto loop |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 |
$API_TOKEN = "你的token" $DNS_NAME = "你的子域名" $ZONE_NAME = ($DNS_NAME -split "\.")[-2..-1] -join "." function Get-IPv6Address { $addresses = Get-NetIPAddress -AddressFamily IPv6 | Where-Object { $_.PrefixOrigin -ne "WellKnown" -and $_.IPAddress -notlike "fe80*" } return $addresses[0].IPAddress } function Get-ZoneID { param ($ZoneName) $url = "https://api.cloudflare.com/client/v4/zones?name=$ZoneName" $headers = @{ "Authorization" = "Bearer $API_TOKEN" "Content-Type" = "application/json" } $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get if ($response.success) { return $response.result[0].id } else { Write-Error "获取 Zone ID 失败：$($response.errors | ConvertTo-Json -Depth 5)" return $null } } function Get-Record { param ($ZoneID, $DNSName) $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records?type=AAAA&name=$DNSName" $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get if ($response.success -and $response.result.Count -gt 0) { return $response.result[0] } return $null } function Update-Record { param ($ZoneID, $RecordID, $DNSName, $IPv6, $Proxied) $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records/$RecordID" $body = @{ type = "AAAA" name = $DNSName content = $IPv6 ttl = 1 proxied = $Proxied } | ConvertTo-Json -Depth 3 $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Put -Body $body return $response.success } function Create-Record { param ($ZoneID, $DNSName, $IPv6) $url = "https://api.cloudflare.com/client/v4/zones/$ZoneID/dns_records" $body = @{ type = "AAAA" name = $DNSName content = $IPv6 ttl = 1 proxied = $false } | ConvertTo-Json -Depth 3 $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Post -Body $body return $response.success } # 主流程 $headers = @{ "Authorization" = "Bearer $API_TOKEN" "Content-Type" = "application/json" } $ipv6 = Get-IPv6Address if (-not $ipv6) { Write-Host "未找到有效的 IPv6 地址" exit } Write-Host "当前 IPv6：$ipv6" $zoneID = Get-ZoneID $ZONE_NAME if (-not $zoneID) { exit } $record = Get-Record $zoneID $DNS_NAME if ($record) { if ($record.content -eq $ipv6) { Write-Host "IPv6 地址未变，无需更新" } else { Write-Host "IPv6 地址已变，正在更新..." if (Update-Record $zoneID $record.id $DNS_NAME $ipv6 $record.proxied) { Write-Host "更新成功" } else { Write-Host "更新失败" } } } else { Write-Host "未找到记录，正在创建..." if (Create-Record $zoneID $DNS_NAME $ipv6) { Write-Host "创建成功" } else { Write-Host "创建失败" } } |
以上。凛。
