THYSS 怎么样？价格、节点、线路与长期使用体验评测

+-------------------------------------------------------------+
|             THYSS 境内接入与跨境传输工程链路拓扑              |
+-------------------------------------------------------------+
| 终端用户 (电信 / 联通 / 移动 / 广电 / 教育网)                 |
|                            |                                |
|                            v                                |
| 境内边缘接入层 (智能 Anycast DNS 选路 / BGP 多线接入机房)     |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 华东上海 BGP 入口  | 华南广州 BGP 入口  |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 跨境高速隧道层 (私有封装中转链路 / 动态多入多出负载均衡)     |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 专线传输备用链路  | 大带宽骨干中转通道 |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 境外落地接入集群 (香港 / 日本 / 新加坡 / 美国 / 欧洲)         |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 原生机房优质住宅IP| 动态 DNS 流媒体分流|            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 目标互联网服务 (Netflix / OpenAI / Google / GitHub)          |
+-------------------------------------------------------------+

graph TD
    subgraph 境内客户端层
        ClientTel[电信客户端终端]
        ClientUni[联通客户端终端]
        ClientMob[移动客户端终端]
    end

    subgraph 境内核心调度与接入层
        DNSGeo[智能 Geo-DNS 调度网关]
        BGP_East[华东多线 BGP 机房]
        BGP_South[华南多线 BGP 机房]
        BGP_North[华北多线 BGP 机房]
    end

    subgraph 跨境高速中转传输层
        TunnelEngine[隧道封装引擎与流量整形]
        TunnelCore1[主干高速中转链路]
        TunnelCore2[低倍率大吞吐隧道]
        TunnelBackup[高优先级冗余专线]
    end

    subgraph 境外落地出口与流媒体解锁
        ExitHK[香港落地集群 原生解锁]
        ExitJP[日本落地集群 高速互联]
        ExitSG[新加坡落地集群 亚太枢纽]
        ExitUS[美国落地集群 AI专用]
        ExitEU[欧洲落地集群 边缘覆盖]
    end

    ClientTel --> DNSGeo
    ClientUni --> DNSGeo
    ClientMob --> DNSGeo

    DNSGeo -->|就近路由| BGP_East
    DNSGeo -->|低延迟接入| BGP_South
    DNSGeo -->|跨网优化| BGP_North

    BGP_East --> TunnelEngine
    BGP_South --> TunnelEngine
    BGP_North --> TunnelEngine

    TunnelEngine --> TunnelCore1
    TunnelEngine --> TunnelCore2
    TunnelEngine --> TunnelBackup

    TunnelCore1 --> ExitHK
    TunnelCore1 --> ExitJP
    TunnelCore2 --> ExitSG
    TunnelBackup --> ExitUS
    TunnelCore2 --> ExitEU

flowchart TD
    Req[客户端发起网络访问请求] --> Classify{流量类型与域名匹配}

    Classify -->|视频流媒体与AI对话| HighTier[高优先级业务 flow]
    Classify -->|大文件传输与BT下载| LowTier[大流量吞吐业务 flow]
    Classify -->|日常网页浏览与代码拉取| MidTier[通用访问业务 flow]

    HighTier --> Node1[1.0x 标准流媒体原生解锁节点]
    MidTier --> Node2[0.5x 均衡中转节点]
    LowTier --> Node3[0.1x / 0.2x 大带宽低倍率节点]

    Node1 --> CheckAcc1[计费扣除 100% 流量]
    Node2 --> CheckAcc2[计费扣除 50% 流量]
    Node3 --> CheckAcc3[计费扣除 10% 流量]

    CheckAcc1 --> ExitNet[海外公网目标服务器]
    CheckAcc2 --> ExitNet
    CheckAcc3 --> ExitNet

sequenceDiagram
    autonumber
    participant Client as 客户端内核
    participant EntryMain as 境内主入口 BGP
    participant EntryBackup as 境内备用 BGP
    participant Heartbeat as 集群健康巡检引擎
    participant ExitNode as 境外目标落地机房

    Client->>EntryMain: 发送业务传输数据包
    EntryMain->>ExitNode: 隧道封装密文透传
    ExitNode-->>Client: 返回海外目标数据

    Heartbeat->>EntryMain: 发送定期心跳探测包 (间隔 2000ms)
    Note over EntryMain: 遭遇运营商链路割接 / 丢包率异常飙升
    Heartbeat--xEntryMain: 探测包超时无响应
    Heartbeat->>Heartbeat: 连续三次失败 标记主入口为不可用状态

    Heartbeat->>EntryBackup: 激活备用传输中转通道
    Heartbeat->>Client: 动态下发热重载路由指令
    Client->>EntryBackup: 自动将新连接与重试流迁移至备用入口
    EntryBackup->>ExitNode: 恢复正常隧道通信
    ExitNode-->>Client: 业务数据恢复全速传输

# Clash Verge Rev 进阶分流配置模板
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info
ipv6: false

dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
  fallback:
    - https://dns.google/dns-query
    - https://1.1.1.1/dns-query

proxy-groups:
  - name: 节点选择
    type: select
    proxies:
      - 自动优选
      - 香港集群
      - 日本集群
      - 新加坡集群
      - 美国集群
      - 低倍率专用

  - name: 自动优选
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    include-all-proxies: true
    filter: "(?i)1.0x"

  - name: 香港集群
    type: load-balance
    strategy: round-robin
    url: http://www.gstatic.com/generate_204
    interval: 300
    filter: "香港.*1.0x"

  - name: 日本集群
    type: select
    include-all-proxies: true
    filter: "日本.*1.0x"

  - name: 新加坡集群
    type: select
    include-all-proxies: true
    filter: "新加坡.*1.0x"

  - name: 美国集群
    type: select
    include-all-proxies: true
    filter: "美国.*1.0x"

  - name: 低倍率专用
    type: select
    include-all-proxies: true
    filter: "(?i)(0.1x|0.2x|0.5x)"

  - name: 国际流媒体
    type: select
    proxies:
      - 香港集群
      - 新加坡集群
      - 日本集群
      - 美国集群

  - name: 人工智能AI
    type: select
    proxies:
      - 新加坡集群
      - 美国集群
      - 日本集群

  - name: 大流量下载
    type: select
    proxies:
      - 低倍率专用
      - 节点选择

rules:
  - DOMAIN-SUFFIX,openai.com,人工智能AI
  - DOMAIN-SUFFIX,anthropic.com,人工智能AI
  - DOMAIN-SUFFIX,claude.ai,人工智能AI
  - DOMAIN-KEYWORD,netflix,国际流媒体
  - DOMAIN-KEYWORD,disney,国际流媒体
  - DOMAIN-SUFFIX,youtube.com,国际流媒体
  - DOMAIN-KEYWORD,torrent,大流量下载
  - DOMAIN-SUFFIX,steamcontent.com,大流量下载
  - DOMAIN-SUFFIX,docker.com,大流量下载
  - GEOIP,CN,DIRECT
  - MATCH,节点选择

// Clash Verge Rev 动态倍率策略组构建脚本
function main(config) {
  const proxies = config.proxies || [];

  // 正则匹配识别低倍率节点
  const lowRateRegex = /(0\.1x|0\.2x|0\.5x)/i;
  const standardRegex = /1\.0x/i;

  const lowRateProxies = proxies.filter(p => lowRateRegex.test(p.name)).map(p => p.name);
  const standardProxies = proxies.filter(p => standardRegex.test(p.name)).map(p => p.name);

  const customGroups = [
    {
      name: "🚀 核心业务",
      type: "select",
      proxies: ["⚡ 自动延迟", ...standardProxies]
    },
    {
      name: "💾 低倍率下载池",
      type: "select",
      proxies: lowRateProxies.length > 0 ? lowRateProxies : ["DIRECT"]
    },
    {
      name: "⚡ 自动延迟",
      type: "url-test",
      url: "http://www.gstatic.com/generate_204",
      interval: 300,
      tolerance: 50,
      proxies: standardProxies
    }
  ];

  config['proxy-groups'] = [...customGroups, ...(config['proxy-groups'] || [])];

  // 确保大流量规则优先匹配
  const customRules = [
    "DOMAIN-KEYWORD,bittorrent,💾 低倍率下载池",
    "DOMAIN-SUFFIX,steamcontent.com,💾 低倍率下载池",
    "GEOIP,CN,DIRECT"
  ];
  config.rules = [...customRules, ...(config.rules || [])];

  return config;
}

[General]
loglevel = notify
skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local
bypass-tun = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12
dns-server = 223.5.5.5, 119.29.29.29
encrypted-dns-server = https://dns.alidns.com/dns-query

[Proxy Group]
THYSS-Main = select, THYSS-Auto, THYSS-HK, THYSS-JP, THYSS-SG, THYSS-US
THYSS-Auto = url-test, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, url = http://www.gstatic.com/generate_204, interval = 300, tolerance = 50, policy-regex-filter = 1\.0x
THYSS-HK = select, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 香港.*1\.0x
THYSS-JP = select, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 日本.*1\.0x
THYSS-SG = select, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 新加坡.*1\.0x
THYSS-US = select, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 美国.*1\.0x
THYSS-Bulk = select, policy-path = https://sub.thyss.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = (0\.1x|0\.2x|0\.5x)

Streaming = select, THYSS-HK, THYSS-SG, THYSS-JP, THYSS-US
AI-Services = select, THYSS-SG, THYSS-US, THYSS-JP
Bulk-Download = select, THYSS-Bulk, THYSS-Main

[Rule]
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list,AI-Services
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Netflix.list,Streaming
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/YouTube.list,Streaming
DOMAIN-KEYWORD,steamcontent,Bulk-Download
DOMAIN-SUFFIX,ubuntu.com,Bulk-Download
GEOIP,CN,DIRECT
FINAL,THYSS-Main,dns-failed

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "dns-remote",
        "address": "tls://8.8.8.8",
        "address_resolver": "dns-local",
        "detour": "proxy"
      },
      {
        "tag": "dns-local",
        "address": "223.5.5.5",
        "detour": "direct"
      },
      {
        "tag": "dns-fake",
        "address": "fakeip"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "dns-local"
      },
      {
        "clash_mode": "Global",
        "server": "dns-fake"
      },
      {
        "geosite": "cn",
        "server": "dns-local"
      }
    ],
    "fakeip": {
      "enabled": true,
      "inet4_range": "198.18.0.0/15"
    }
  },
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080
    }
  ],
  "outbounds": [
    {
      "type": "selector",
      "tag": "proxy",
      "outbounds": ["auto-out", "low-cost-out", "direct"]
    },
    {
      "type": "urltest",
      "tag": "auto-out",
      "outbounds": ["hk-node", "jp-node", "sg-node"],
      "url": "http://www.gstatic.com/generate_204",
      "interval": "3m"
    },
    {
      "type": "selector",
      "tag": "low-cost-out",
      "outbounds": ["hk-low-node", "jp-low-node"]
    },
    {
      "type": "shadowsocks",
      "tag": "hk-node",
      "server": "hk01.thyss.xyz",
      "server_port": 10086,
      "method": "2022-blake3-aes-128-gcm",
      "password": "THYSS_SECURE_TOKEN"
    },
    {
      "type": "shadowsocks",
      "tag": "hk-low-node",
      "server": "hk-bulk.thyss.xyz",
      "server_port": 10087,
      "method": "2022-blake3-aes-128-gcm",
      "password": "THYSS_SECURE_TOKEN"
    },
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "rules": [
      {
        "geoip": "private",
        "outbound": "direct"
      },
      {
        "geosite": "openai",
        "outbound": "proxy"
      },
      {
        "geosite": "category-games-download",
        "outbound": "low-cost-out"
      },
      {
        "geoip": "cn",
        "outbound": "direct"
      }
    ],
    "auto_detect_interface": true
  }
}

#!/bin/sh
# OpenWrt PassWall 守护检测脚本示范
CHECK_URL="http://www.gstatic.com/generate_204"
LOG_TAG="PASSWALL_WATCHDOG"

STATUS_CODE=$(curl -s -m 5 -o /dev/null -w "%{http_code}" -x socks5://127.0.0.1:1080 $CHECK_URL)

if [ "$STATUS_CODE" != "204" ]; then
    logger -t $LOG_TAG "Detect connection failure code $STATUS_CODE. Restarting PassWall routing engine..."
    uci set passwall.@global[0].tcp_node='_auto_backup_group'
    uci commit passwall
    /etc/init.d/passwall restart
else
    logger -t $LOG_TAG "Connection health check passed. Status code 204."
fi

# Windows PowerShell 网络诊断与接入点延迟排查脚本
$Targets = @(
    "119.29.29.29",            # 境内公共 DNS 连通性
    "223.5.5.5",               # 阿里 DNS 连通性
    "entry.thyss.xyz",         # THYSS 境内入口域名解析
    "www.gstatic.com"          # 境外网络目标连通性
)

Write-Host "================ 开始执行本地网络健康度巡检 ================" -ForegroundColor Cyan

foreach ($item in $Targets) {
    Write-Host "正在测试探测目标: $item ..." -NoNewline
    $pingRes = Test-Connection -ComputerName $item -Count 3 -ErrorAction SilentlyContinue
    if ($pingRes) {
        $avgRtt = ($pingRes | Measure-Object -Property ResponseTime -Average).Average
        Write-Host " [成功] 平均时延: ${avgRtt}ms" -ForegroundColor Green
    } else {
        Write-Host " [失败] 无法连通目标节点，请检查物理链路或防火墙" -ForegroundColor Red
    }
}

# 检测本地系统代理环境变量
$ProxyHttp = [System.Environment]::GetEnvironmentVariable("http_proxy")
$ProxyHttps = [System.Environment]::GetEnvironmentVariable("https_proxy")
Write-Host "当前终端 HTTP 代理环境变量: $ProxyHttp" -ForegroundColor Yellow
Write-Host "当前终端 HTTPS 代理环境变量: $ProxyHttps" -ForegroundColor Yellow
Write-Host "================ 巡检结束，请根据失败项针对性调试 ================" -ForegroundColor Cyan

#!/usr/bin/env bash
# macOS / Linux 本地代理连通性快速诊断脚本
PROXY_ADDR="127.0.0.1"
PROXY_PORT="7890"
TEST_TARGET="http://www.gstatic.com/generate_204"

echo "=== 检查本地代理端口监听状态 ==="
if nc -z -w 3 $PROXY_ADDR $PROXY_PORT 2>/dev/null; then
    echo "[OK] 代理监听端口 $PROXY_ADDR:$PROXY_PORT 处于活动状态。"
else
    echo "[ERROR] 本地未检测到 $PROXY_ADDR:$PROXY_PORT 监听，请确认代理软件是否正常启动。"
    exit 1
fi

echo "=== 测试端到端代理握手时延 ==="
CURL_RESULT=$(curl -s -m 6 -x "http://${PROXY_ADDR}:${PROXY_PORT}" -w "HTTP状态: %{http_code} | DNS解析耗时: %{time_namelookup}s | 建联耗时: %{time_connect}s | 总耗时: %{time_total}s\n" -o /dev/null "$TEST_TARGET")

if [ $? -eq 0 ]; then
    echo "[OK] 代理通道握手成功。"
    echo "$CURL_RESULT"
else
    echo "[ERROR] 代理通道超时或无法建立 TLS 握手，请排查节点入口或系统时间。"
fi

flowchart TD
    Start[网络连接出现故障 / 网页无法打开] --> Step1{物理网络是否连通?}
    Step1 -->|否| FixNet[排查本地光猫/路由器与网线连接]
    Step1 -->|是| Step2{本地代理软件端口是否正常监听?}

    Step2 -->|否| FixPort[重启客户端软件或解决端口占用冲突]
    Step2 -->|是| Step3{系统时间与 NTP 是否精确同步?}

    Step3 -->|否| FixTime[校准本地系统时钟 确保误差小于 15 秒]
    Step3 -->|是| Step4{能否正常解析 THYSS 接入点 IP?}

    Step4 -->|否| FixDNS[更换本地 DNS 为 223.5.5.5 或 119.29.29.29]
    Step4 -->|是| Step5{节点延时测速是否有有效响应?}

    Step5 -->|否| FixEntry[可能入口遭遇维护 切换至其他大区或备用入口]
    Step5 -->|是| Step6{目标站点是否属于被风控流媒体/AI?}

    Step6 -->|是| FixNode[更换为该平台专属的原生解锁 IP 节点]
    Step6 -->|否| Normal[网络恢复通畅 正常享受跨境加速]