CocoDuck 2026 深度测评：套餐、线路、客户端和适合人群

+-------------------------------------------------------------+
|            CocoDuck 境内接入与跨境专线工程链路拓扑            |
+-------------------------------------------------------------+
| 终端用户 (电信 / 联通 / 移动 / 广电宽带)                     |
|                            |                                |
|                            v                                |
| 境内边缘接入层 (智能 Anycast 选路 / BGP 多线接入机房)         |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 华东上海 BGP 入口  | 华南广州 BGP 入口  |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 跨境骨干传输层 (混合架构传输管道 / 自动化容灾调度)           |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 沪日/广港 IEPL专线| 私有加密高速中转隧道|            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 境外落地接入集群 (香港 / 日本 / 新加坡 / 美国 / 欧洲)         |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 原生住宅 IP 机房  | 动态流媒体 DNS 解锁池 |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 目标互联网服务 (Netflix / Disney+ / OpenAI / Google)         |
+-------------------------------------------------------------+

graph TD
    subgraph 境内终端网络
        ClientTel[中国电信宽带用户]
        ClientUni[中国联通宽带用户]
        ClientMob[中国移动宽带用户]
    end

    subgraph 境内核心调度与入口
        GeoDNS[智能 Anycast 选路引擎]
        BGP_SH[上海 BGP 多线接入中心]
        BGP_GZ[广州 BGP 多线接入中心]
        BGP_BJ[北京 BGP 多线接入中心]
    end

    subgraph 跨境骨干互联层
        SwitchCore[智能流量调度与分流控制器]
        IEPL_HK[广港 IEPL 高速内网专线]
        IEPL_JP[沪日 IEPL 极低延迟专线]
        TunnelGlobal[大带宽私有加密中转隧道]
    end

    subgraph 境外优质落地机房
        ExitHK[香港节点 原生流媒体解锁]
        ExitJP[日本节点 住宅 IP 极速互联]
        ExitSG[新加坡节点 亚太算力枢纽]
        ExitUS[美国西海岸节点 AI专属集群]
        ExitOther[欧洲与冷门地区 边缘覆盖]
    end

    ClientTel --> GeoDNS
    ClientUni --> GeoDNS
    ClientMob --> GeoDNS

    GeoDNS -->|最优路径匹配| BGP_SH
    GeoDNS -->|华南低延迟| BGP_GZ
    GeoDNS -->|北方互联通道| BGP_BJ

    BGP_SH --> SwitchCore
    BGP_GZ --> SwitchCore
    BGP_BJ --> SwitchCore

    SwitchCore -->|核心高优先级业务| IEPL_HK
    SwitchCore -->|低延迟游戏与交互| IEPL_JP
    SwitchCore -->|大流量影音传输| TunnelGlobal

    IEPL_HK --> ExitHK
    IEPL_JP --> ExitJP
    TunnelGlobal --> ExitSG
    TunnelGlobal --> ExitUS
    TunnelGlobal --> ExitOther

flowchart TD
    Req[客户端发起外部网络访问请求] --> Match{域名与地理位置规则匹配}

    Match -->|中国大陆境内域名| Direct[直连本地网络 DIRECT]
    Match -->|海外核心流媒体平台| StreamPool[原生住宅 IP 解锁集群]
    Match -->|OpenAI / Claude / AI 工具| AIPool[低风控专属纯净节点池]
    Match -->|Steam / Git / 大文件拉取| BulkPool[大带宽私有隧道节点]
    Match -->|常规海外网页浏览与检索| MainPool[IEPL 极低延迟专线集群]

    StreamPool --> OutHK[香港/日本 原生解锁落地]
    AIPool --> OutUS[美国/新加坡 纯净 IP 落地]
    BulkPool --> OutBulk[高吞吐均衡落地]
    MainPool --> OutCore[核心低抖动专线落地]

    OutHK --> TargetNet[目标互联网公网服务]
    OutUS --> TargetNet
    OutBulk --> TargetNet
    OutCore --> TargetNet

sequenceDiagram
    autonumber
    participant App as 客户端内核
    participant EntryNode as 境内 BGP 接入网关
    participant Monitor as 全球网络巡检哨兵
    participant BackupLine as 冗余专线通道
    participant ExitSrv as 境外目标落地机房

    App->>EntryNode: 发送日常加密业务数据包
    EntryNode->>ExitSrv: 专线物理通道透传
    ExitSrv-->>App: 返回海外目标数据流

    Monitor->>EntryNode: 发起高频健康巡检心跳 (每 1500ms)
    Note over EntryNode: 突发运营商单向光缆抖动 丢包率突破 20%
    Monitor--xEntryNode: 探针心跳连续两次超时
    Monitor->>Monitor: 判定当前物理通道处于亚健康状态

    Monitor->>BackupLine: 立即激活备用冗余专线链路
    Monitor->>EntryNode: 触发热重载路由重定向
    EntryNode->>BackupLine: 动态牵引长连接业务流量
    BackupLine->>ExitSrv: 恢复跨境数据高速转发
    ExitSrv-->>App: 数据传输平滑恢复零感知

# Clash Verge Rev 进阶分流配置方案
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info
ipv6: false

dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
  fallback:
    - https://dns.google/dns-query
    - https://1.1.1.1/dns-query

proxy-groups:
  - name: 节点选择
    type: select
    proxies:
      - 自动低延迟
      - 香港专线集群
      - 日本专线集群
      - 新加坡集群
      - 美国AI专属

  - name: 自动低延迟
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    include-all-proxies: true
    filter: "专线"

  - name: 香港专线集群
    type: select
    include-all-proxies: true
    filter: "香港.*专线"

  - name: 日本专线集群
    type: select
    include-all-proxies: true
    filter: "日本"

  - name: 新加坡集群
    type: select
    include-all-proxies: true
    filter: "新加坡"

  - name: 美国AI专属
    type: select
    include-all-proxies: true
    filter: "美国.*AI"

  - name: 国际流媒体
    type: select
    proxies:
      - 香港专线集群
      - 日本专线集群
      - 新加坡集群

  - name: 人工智能AI
    type: select
    proxies:
      - 美国AI专属
      - 新加坡集群
      - 日本专线集群

rules:
  - DOMAIN-SUFFIX,openai.com,人工智能AI
  - DOMAIN-SUFFIX,anthropic.com,人工智能AI
  - DOMAIN-SUFFIX,claude.ai,人工智能AI
  - DOMAIN-KEYWORD,netflix,国际流媒体
  - DOMAIN-KEYWORD,disney,国际流媒体
  - DOMAIN-SUFFIX,youtube.com,国际流媒体
  - DOMAIN-KEYWORD,torrent,DIRECT
  - DOMAIN-SUFFIX,steamcontent.com,DIRECT
  - GEOIP,CN,DIRECT
  - MATCH,节点选择

// Clash Verge Rev 动态策略组重写扩展脚本
function main(config) {
  const proxies = config.proxies || [];

  // 正则筛选专线节点与AI专属节点
  const ieplRegex = /专线|IEPL/i;
  const aiRegex = /AI|ChatGPT|OpenAI/i;

  const ieplProxies = proxies.filter(p => ieplRegex.test(p.name)).map(p => p.name);
  const aiProxies = proxies.filter(p => aiRegex.test(p.name)).map(p => p.name);

  const customGroups = [
    {
      name: "⚡ 极速专线池",
      type: "url-test",
      url: "http://www.gstatic.com/generate_204",
      interval: 300,
      tolerance: 50,
      proxies: ieplProxies.length > 0 ? ieplProxies : ["DIRECT"]
    },
    {
      name: "🤖 智能助手AI",
      type: "select",
      proxies: aiProxies.length > 0 ? aiProxies : ["⚡ 极速专线池"]
    }
  ];

  config['proxy-groups'] = [...customGroups, ...(config['proxy-groups'] || [])];

  const customRules = [
    "DOMAIN-SUFFIX,oaistatic.com,🤖 智能助手AI",
    "DOMAIN-SUFFIX,oaiusercontent.com,🤖 智能助手AI",
    "DOMAIN-KEYWORD,openai,🤖 智能助手AI",
    "GEOIP,CN,DIRECT"
  ];
  config.rules = [...customRules, ...(config.rules || [])];

  return config;
}

[General]
loglevel = notify
skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local
bypass-tun = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12
dns-server = 223.5.5.5, 119.29.29.29
encrypted-dns-server = https://dns.alidns.com/dns-query

[Proxy Group]
CocoDuck-Main = select, CocoDuck-Auto, CocoDuck-HK, CocoDuck-JP, CocoDuck-SG, CocoDuck-US
CocoDuck-Auto = url-test, policy-path = https://sub.cocoduck.xyz/surge?token=YOUR_TOKEN, url = http://www.gstatic.com/generate_204, interval = 300, tolerance = 50, policy-regex-filter = 专线
CocoDuck-HK = select, policy-path = https://sub.cocoduck.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 香港
CocoDuck-JP = select, policy-path = https://sub.cocoduck.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 日本
CocoDuck-SG = select, policy-path = https://sub.cocoduck.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 新加坡
CocoDuck-US = select, policy-path = https://sub.cocoduck.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 美国.*AI

Streaming = select, CocoDuck-HK, CocoDuck-JP, CocoDuck-SG
AI-Services = select, CocoDuck-US, CocoDuck-SG, CocoDuck-JP

[Rule]
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list,AI-Services
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Netflix.list,Streaming
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/YouTube.list,Streaming
GEOIP,CN,DIRECT
FINAL,CocoDuck-Main,dns-failed

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "dns-remote",
        "address": "tls://1.1.1.1",
        "address_resolver": "dns-local",
        "detour": "proxy"
      },
      {
        "tag": "dns-local",
        "address": "223.5.5.5",
        "detour": "direct"
      },
      {
        "tag": "dns-fake",
        "address": "fakeip"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "dns-local"
      },
      {
        "clash_mode": "Global",
        "server": "dns-fake"
      },
      {
        "geosite": "cn",
        "server": "dns-local"
      }
    ],
    "fakeip": {
      "enabled": true,
      "inet4_range": "198.18.0.0/15"
    }
  },
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080
    }
  ],
  "outbounds": [
    {
      "type": "selector",
      "tag": "proxy",
      "outbounds": ["auto-out", "hk-专线", "jp-专线", "us-ai", "direct"]
    },
    {
      "type": "urltest",
      "tag": "auto-out",
      "outbounds": ["hk-专线", "jp-专线"],
      "url": "http://www.gstatic.com/generate_204",
      "interval": "3m"
    },
    {
      "type": "vless",
      "tag": "hk-专线",
      "server": "hk01.cocoduck.xyz",
      "server_port": 443,
      "uuid": "YOUR_UUID_TOKEN",
      "flow": "",
      "tls": {
        "enabled": true,
        "server_name": "hk01.cocoduck.xyz",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        }
      }
    },
    {
      "type": "trojan",
      "tag": "jp-专线",
      "server": "jp01.cocoduck.xyz",
      "server_port": 443,
      "password": "YOUR_TROJAN_PASSWORD",
      "tls": {
        "enabled": true,
        "server_name": "jp01.cocoduck.xyz"
      }
    },
    {
      "type": "vless",
      "tag": "us-ai",
      "server": "us01.cocoduck.xyz",
      "server_port": 443,
      "uuid": "YOUR_UUID_TOKEN",
      "tls": {
        "enabled": true,
        "server_name": "us01.cocoduck.xyz"
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "rules": [
      {
        "geoip": "private",
        "outbound": "direct"
      },
      {
        "geosite": "openai",
        "outbound": "us-ai"
      },
      {
        "geosite": "netflix",
        "outbound": "hk-专线"
      },
      {
        "geoip": "cn",
        "outbound": "direct"
      }
    ],
    "auto_detect_interface": true
  }
}

#!/bin/sh
# OpenWrt PassWall 守护看门狗检测脚本
CHECK_TARGET="http://www.gstatic.com/generate_204"
LOG_IDENT="COCODUCK_WATCHDOG"

HTTP_CODE=$(curl -s -m 5 -o /dev/null -w "%{http_code}" -x socks5://127.0.0.1:1080 $CHECK_TARGET)

if [ "$HTTP_CODE" != "204" ]; then
    logger -t $LOG_IDENT "Proxy health probe failed with code $HTTP_CODE. Triggering routing failover..."
    uci set passwall.@global[0].tcp_node='_auto_backup_group'
    uci commit passwall
    /etc/init.d/passwall restart
else
    logger -t $LOG_IDENT "Health check success. Connection normal."
fi

# Windows PowerShell 网络链路多层探测脚本
$HostsToProbe = @(
    "223.5.5.5",               # 阿里公共 DNS
    "119.29.29.29",            # 腾讯公共 DNS
    "entry.cocoduck.xyz",      # CocoDuck 接入网关解析
    "www.google.com"           # 境外核心网络连通性
)

Write-Host "================ 开始执行本地网络与节点巡检 ================" -ForegroundColor Cyan

foreach ($target in $HostsToProbe) {
    Write-Host "正在探测目标地址: $target ..." -NoNewline
    $testResult = Test-Connection -ComputerName $target -Count 3 -ErrorAction SilentlyContinue
    if ($testResult) {
        $avgLatency = ($testResult | Measure-Object -Property ResponseTime -Average).Average
        Write-Host " [连通] 平均往返时延: ${avgLatency}ms" -ForegroundColor Green
    } else {
        Write-Host " [中断] 无法连通，请检查本地物理网络或防火墙设置" -ForegroundColor Red
    }
}

$envHttp = [System.Environment]::GetEnvironmentVariable("http_proxy")
$envHttps = [System.Environment]::GetEnvironmentVariable("https_proxy")
Write-Host "当前终端 HTTP 代理变量: $envHttp" -ForegroundColor Yellow
Write-Host "当前终端 HTTPS 代理变量: $envHttps" -ForegroundColor Yellow
Write-Host "================ 巡检完毕，请依据失败阶段排查 ================" -ForegroundColor Cyan

#!/usr/bin/env bash
# macOS / Linux 本地代理连通性快速诊断脚本
PROXY_HOST="127.0.0.1"
PROXY_PORT="7890"
TARGET_URL="http://www.gstatic.com/generate_204"

echo "=== 检查本地代理核心监听 ==="
if nc -z -w 3 $PROXY_HOST $PROXY_PORT 2>/dev/null; then
    echo "[OK] 代理监听端口 $PROXY_HOST:$PROXY_PORT 正常工作。"
else
    echo "[ERROR] 未发现本地端口监听，请检查代理客户端是否正常运行。"
    exit 1
fi

echo "=== 测试端到端代理握手时延 ==="
PROBE_INFO=$(curl -s -m 6 -x "http://${PROXY_HOST}:${PROXY_PORT}" -w "状态码: %{http_code} | DNS耗时: %{time_namelookup}s | 握手耗时: %{time_connect}s | 总耗时: %{time_total}s\n" -o /dev/null "$TARGET_URL")

if [ $? -eq 0 ]; then
    echo "[OK] 代理通道通信正常。"
    echo "$PROBE_INFO"
else
    echo "[ERROR] 代理握手超时，请检查节点入口状态或系统时间设置。"
fi

flowchart TD
    Issue[网络异常 / 网页无法正常加载] --> CheckPhys{本地物理网线与 Wi-Fi 是否正常?}
    CheckPhys -->|否| FixLan[排查光猫/路由器硬件链路]
    CheckPhys -->|是| CheckPort{代理客户端端口是否处于监听状态?}

    CheckPort -->|否| StartClient[启动代理软件并检查端口冲突]
    CheckPort -->|是| CheckTime{系统时钟是否与 NTP 精确同步?}

    CheckTime -->|否| SyncClock[在系统控制面板校准时间 确保误差<10s]
    CheckTime -->|是| CheckDNS{能否正常解析 CocoDuck 接入点域名?}

    CheckDNS -->|否| SetPublicDNS[修改本地 DNS 为 223.5.5.5 或 119.29.29.29]
    CheckDNS -->|是| TestNode{客户端节点批量测速是否有响应?}

    TestNode -->|否| SwitchRegion[入口可能遭遇维护 切换至其他大区或备用节点]
    TestNode -->|是| CheckSite{仅特定流媒体或 AI 工具报错?}

    CheckSite -->|是| UseDedicated[切换至专属原生住宅 IP 或 AI 专用节点]
    CheckSite -->|否| AllGood[网络通信恢复通畅 正常享受加速服务]