XX云使用体验报告：价格、节点选择、客户端与常见问题

+-------------------------------------------------------------+
|              XX云 境内接入与多隧道中转网络拓扑                |
+-------------------------------------------------------------+
| 终端用户 (中国电信 / 中国联通 / 中国移动 / 多设备并发)       |
|                            |                                |
|                            v                                |
| 境内边缘接入层 (智能 Anycast 选路 / BGP 多线接入中心)         |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 华东上海 BGP 入口  | 华南广州 BGP 入口  |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 跨境骨干中转层 (私有加密多隧道中转 / 动态负载均衡调度)       |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 主力高速中转隧道  | 备用大带宽冗余链路|            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 境外落地接入集群 (香港 / 日本 / 新加坡 / 美国 / 欧洲)         |
|                            |                                |
|        +-------------------+-------------------+            |
|        | 原生住宅 IP 机房  | 动态流媒体解锁 DNS 池 |            |
|        +-------------------+-------------------+            |
|                            |                                |
|                            v                                |
| 目标海外服务 (Netflix / Disney+ / OpenAI / Google)           |
+-------------------------------------------------------------+

graph TD
    subgraph 境内客户端多端网络
        ClientMobile[个人智能手机]
        ClientLaptop[个人办公笔记本]
        ClientDesktop[家庭工作站台式机]
        ClientLiving[客厅智能电视盒子]
    end

    subgraph 境内调度与 BGP 入口
        AnycastRouter[智能 Anycast 选路路由]
        BGP_East[华东上海 BGP 核心机房]
        BGP_South[华南广州 BGP 核心机房]
        BGP_North[华北北京 BGP 核心机房]
    end

    subgraph 跨境骨干中转传输网
        DispatchHub[多隧道负载均衡与流量编排网关]
        Tunnel_Main[主力私有加密高速中转隧道]
        Tunnel_Backup[大带宽冗余中转备用通道]
    end

    subgraph 境外优质落地机房集群
        ExitHK[香港落地机房 原生解锁]
        ExitJP[日本落地机房 低时延互联]
        ExitSG[新加坡机房 亚太枢纽]
        ExitUS[美国机房 AI专属对话]
        ExitEU[欧洲机房 广域边缘覆盖]
    end

    ClientMobile --> AnycastRouter
    ClientLaptop --> AnycastRouter
    ClientDesktop --> AnycastRouter
    ClientLiving --> AnycastRouter

    AnycastRouter -->|极速就近接入| BGP_East
    AnycastRouter -->|华南低延迟通道| BGP_South
    AnycastRouter -->|北方跨网互通| BGP_North

    BGP_East --> DispatchHub
    BGP_South --> DispatchHub
    BGP_North --> DispatchHub

    DispatchHub -->|主力业务通道| Tunnel_Main
    DispatchHub -->|大流量备份分流| Tunnel_Backup

    Tunnel_Main --> ExitHK
    Tunnel_Main --> ExitJP
    Tunnel_Main --> ExitSG
    Tunnel_Backup --> ExitUS
    Tunnel_Backup --> ExitEU

flowchart TD
    Request[客户端发起外部网络访问请求] --> RuleMatch{域名与地理位置规则匹配}

    RuleMatch -->|中国大陆境内域名| DirectLink[直连本地网络 DIRECT]
    RuleMatch -->|海外流媒体平台视频| StreamGroup[原生住宅 IP 解锁集群]
    RuleMatch -->|OpenAI / Claude / AI 工具| AIGroup[低风控专属纯净节点池]
    RuleMatch -->|Steam / GitHub / 大文件下载| BulkGroup[大带宽高吞吐中转通道]
    RuleMatch -->|常规网页浏览与社交通讯| CoreGroup[BGP 极低时延核心通道]

    StreamGroup --> OutHK[香港/台湾 原生落地]
    AIGroup --> OutUS[美国/新加坡 纯净落地]
    BulkGroup --> OutBulk[高吞吐均衡落地]
    CoreGroup --> OutCore[核心中转隧道落地]

    OutHK --> TargetNet[目标互联网公网服务]
    OutUS --> TargetNet
    OutBulk --> TargetNet
    OutCore --> TargetNet

sequenceDiagram
    autonumber
    participant App as 客户端内核
    participant EntryNode as 境内 BGP 接入网关
    participant Sentinel as 全球网络健康监测哨兵
    participant BackupTunnel as 备用多线中转隧道
    participant ExitSrv as 境外目标落地机房

    App->>EntryNode: 发送日常加密业务数据包
    EntryNode->>ExitSrv: 隧道封装密文透传
    ExitSrv-->>App: 返回海外目标数据流

    Sentinel->>EntryNode: 发起高频健康巡检心跳 (每 1500ms)
    Note over EntryNode: 突发运营商单向光缆抖动 丢包率突破 20%
    Sentinel--xEntryNode: 探针心跳连续两次超时
    Sentinel->>Sentinel: 判定当前传输通道处于亚健康状态

    Sentinel->>BackupTunnel: 立即激活备用冗余中转链路
    Sentinel->>EntryNode: 触发热重载路由重定向
    EntryNode->>BackupTunnel: 动态牵引长连接业务流量
    BackupTunnel->>ExitSrv: 恢复跨境数据高速转发
    ExitSrv-->>App: 数据传输平滑恢复零感知

# Clash Verge Rev 进阶分流配置模板
port: 7890
socks-port: 7891
allow-lan: true
mode: rule
log-level: info
ipv6: false

dns:
  enable: true
  listen: 0.0.0.0:1053
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
  fallback:
    - https://dns.google/dns-query
    - https://1.1.1.1/dns-query

proxy-groups:
  - name: 节点选择
    type: select
    proxies:
      - 自动低延迟
      - 香港集群
      - 日本集群
      - 新加坡集群
      - 美国AI专属

  - name: 自动低延迟
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    include-all-proxies: true

  - name: 香港集群
    type: select
    include-all-proxies: true
    filter: "香港"

  - name: 日本集群
    type: select
    include-all-proxies: true
    filter: "日本"

  - name: 新加坡集群
    type: select
    include-all-proxies: true
    filter: "新加坡"

  - name: 美国AI专属
    type: select
    include-all-proxies: true
    filter: "美国.*AI"

  - name: 国际流媒体
    type: select
    proxies:
      - 香港集群
      - 日本集群
      - 新加坡集群

  - name: 人工智能AI
    type: select
    proxies:
      - 美国AI专属
      - 新加坡集群
      - 日本集群

rules:
  - DOMAIN-SUFFIX,openai.com,人工智能AI
  - DOMAIN-SUFFIX,anthropic.com,人工智能AI
  - DOMAIN-SUFFIX,claude.ai,人工智能AI
  - DOMAIN-KEYWORD,netflix,国际流媒体
  - DOMAIN-KEYWORD,disney,国际流媒体
  - DOMAIN-SUFFIX,youtube.com,国际流媒体
  - DOMAIN-KEYWORD,torrent,DIRECT
  - DOMAIN-SUFFIX,steamcontent.com,DIRECT
  - GEOIP,CN,DIRECT
  - MATCH,节点选择

// Clash Verge Rev 动态策略组重组扩展脚本
function main(config) {
  const proxies = config.proxies || [];

  // 正则筛选核心节点与 AI 节点
  const coreRegex = /香港|日本|新加坡/i;
  const aiRegex = /AI|ChatGPT|OpenAI|美国/i;

  const coreProxies = proxies.filter(p => coreRegex.test(p.name)).map(p => p.name);
  const aiProxies = proxies.filter(p => aiRegex.test(p.name)).map(p => p.name);

  const customGroups = [
    {
      name: "⚡ 亚太极速池",
      type: "url-test",
      url: "http://www.gstatic.com/generate_204",
      interval: 300,
      tolerance: 50,
      proxies: coreProxies.length > 0 ? coreProxies : ["DIRECT"]
    },
    {
      name: "🤖 智能助手AI",
      type: "select",
      proxies: aiProxies.length > 0 ? aiProxies : ["⚡ 亚太极速池"]
    }
  ];

  config['proxy-groups'] = [...customGroups, ...(config['proxy-groups'] || [])];

  const customRules = [
    "DOMAIN-SUFFIX,oaistatic.com,🤖 智能助手AI",
    "DOMAIN-SUFFIX,oaiusercontent.com,🤖 智能助手AI",
    "DOMAIN-KEYWORD,openai,🤖 智能助手AI",
    "GEOIP,CN,DIRECT"
  ];
  config.rules = [...customRules, ...(config.rules || [])];

  return config;
}

[General]
loglevel = notify
skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, localhost, *.local
bypass-tun = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12
dns-server = 223.5.5.5, 119.29.29.29
encrypted-dns-server = https://dns.alidns.com/dns-query

[Proxy Group]
XXYUN-Main = select, XXYUN-Auto, XXYUN-HK, XXYUN-JP, XXYUN-SG, XXYUN-US
XXYUN-Auto = url-test, policy-path = https://sub.xxyun.xyz/surge?token=YOUR_TOKEN, url = http://www.gstatic.com/generate_204, interval = 300, tolerance = 50
XXYUN-HK = select, policy-path = https://sub.xxyun.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 香港
XXYUN-JP = select, policy-path = https://sub.xxyun.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 日本
XXYUN-SG = select, policy-path = https://sub.xxyun.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 新加坡
XXYUN-US = select, policy-path = https://sub.xxyun.xyz/surge?token=YOUR_TOKEN, policy-regex-filter = 美国.*AI

Streaming = select, XXYUN-HK, XXYUN-JP, XXYUN-SG
AI-Services = select, XXYUN-US, XXYUN-SG, XXYUN-JP

[Rule]
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list,AI-Services
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Netflix.list,Streaming
RULE-SET,https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/YouTube.list,Streaming
GEOIP,CN,DIRECT
FINAL,XXYUN-Main,dns-failed

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "dns-remote",
        "address": "tls://1.1.1.1",
        "address_resolver": "dns-local",
        "detour": "proxy"
      },
      {
        "tag": "dns-local",
        "address": "223.5.5.5",
        "detour": "direct"
      },
      {
        "tag": "dns-fake",
        "address": "fakeip"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "dns-local"
      },
      {
        "clash_mode": "Global",
        "server": "dns-fake"
      },
      {
        "geosite": "cn",
        "server": "dns-local"
      }
    ],
    "fakeip": {
      "enabled": true,
      "inet4_range": "198.18.0.0/15"
    }
  },
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080
    }
  ],
  "outbounds": [
    {
      "type": "selector",
      "tag": "proxy",
      "outbounds": ["auto-out", "hk-bgp", "jp-bgp", "us-ai", "direct"]
    },
    {
      "type": "urltest",
      "tag": "auto-out",
      "outbounds": ["hk-bgp", "jp-bgp"],
      "url": "http://www.gstatic.com/generate_204",
      "interval": "3m"
    },
    {
      "type": "shadowsocks",
      "tag": "hk-bgp",
      "server": "hk01.xxyun.xyz",
      "server_port": 10086,
      "method": "2022-blake3-aes-128-gcm",
      "password": "XXYUN_SECRET_PASSWORD"
    },
    {
      "type": "shadowsocks",
      "tag": "jp-bgp",
      "server": "jp01.xxyun.xyz",
      "server_port": 10087,
      "method": "2022-blake3-aes-128-gcm",
      "password": "XXYUN_SECRET_PASSWORD"
    },
    {
      "type": "shadowsocks",
      "tag": "us-ai",
      "server": "us01.xxyun.xyz",
      "server_port": 10088,
      "method": "2022-blake3-aes-128-gcm",
      "password": "XXYUN_SECRET_PASSWORD"
    },
    {
      "type": "direct",
      "tag": "direct"
    }
  ],
  "route": {
    "rules": [
      {
        "geoip": "private",
        "outbound": "direct"
      },
      {
        "geosite": "openai",
        "outbound": "us-ai"
      },
      {
        "geosite": "netflix",
        "outbound": "hk-bgp"
      },
      {
        "geoip": "cn",
        "outbound": "direct"
      }
    ],
    "auto_detect_interface": true
  }
}

#!/bin/sh
# OpenWrt PassWall 自动化中转守护脚本
PROBE_TARGET="http://www.gstatic.com/generate_204"
LOGGER_IDENT="XXYUN_WATCHDOG"

STATUS_CODE=$(curl -s -m 5 -o /dev/null -w "%{http_code}" -x socks5://127.0.0.1:1080 $PROBE_TARGET)

if [ "$STATUS_CODE" != "204" ]; then
    logger -t $LOGGER_IDENT "Health probe abnormal with status $STATUS_CODE. Switching to backup tunnel..."
    uci set passwall.@global[0].tcp_node='_auto_backup_group'
    uci commit passwall
    /etc/init.d/passwall restart
else
    logger -t $LOGGER_IDENT "Connection health check passed. Status code 204."
fi

# Windows PowerShell 链路健康度多维排障脚本
$TargetList = @(
    "223.5.5.5",               # 阿里公共 DNS 连通性
    "119.29.29.29",            # 腾讯公共 DNS 连通性
    "entry.xxyun.xyz",         # XX云接入网关解析
    "www.gstatic.com"          # 境外网络最终通信状态
)

Write-Host "================ 开始执行本地网络健康度巡检 ================" -ForegroundColor Cyan

foreach ($target in $TargetList) {
    Write-Host "正在探测目标: $target ..." -NoNewline
    $pingTest = Test-Connection -ComputerName $target -Count 3 -ErrorAction SilentlyContinue
    if ($pingTest) {
        $avgRtt = ($pingTest | Measure-Object -Property ResponseTime -Average).Average
        Write-Host " [成功] 平均时延: ${avgRtt}ms" -ForegroundColor Green
    } else {
        Write-Host " [失败] 无法连通目标，请检查物理链路或防火墙" -ForegroundColor Red
    }
}

$envHttp = [System.Environment]::GetEnvironmentVariable("http_proxy")
$envHttps = [System.Environment]::GetEnvironmentVariable("https_proxy")
Write-Host "当前命令行 HTTP 代理: $envHttp" -ForegroundColor Yellow
Write-Host "当前命令行 HTTPS 代理: $envHttps" -ForegroundColor Yellow
Write-Host "================ 巡检结束，请依据报错阶段处理 ================" -ForegroundColor Cyan

#!/usr/bin/env bash
# macOS / Linux 本地代理连通性快速诊断脚本
AGENT_ADDR="127.0.0.1"
AGENT_PORT="7890"
PING_TARGET="http://www.gstatic.com/generate_204"

echo "=== 检查本地代理核心监听端口 ==="
if nc -z -w 3 $AGENT_ADDR $AGENT_PORT 2>/dev/null; then
    echo "[OK] 代理监听端口 $AGENT_ADDR:$AGENT_PORT 处于正常活动状态。"
else
    echo "[ERROR] 本地端口未发现监听，请确认代理软件是否成功运行。"
    exit 1
fi

echo "=== 测试端到端代理握手时延 ==="
PROBE_RES=$(curl -s -m 6 -x "http://${AGENT_ADDR}:${AGENT_PORT}" -w "响应状态: %{http_code} | DNS耗时: %{time_namelookup}s | 握手耗时: %{time_connect}s | 总耗时: %{time_total}s\n" -o /dev/null "$PING_TARGET")

if [ $? -eq 0 ]; then
    echo "[OK] 代理通道握手通信成功。"
    echo "$PROBE_RES"
else
    echo "[ERROR] 代理握手超时，请检查节点入口状态或系统时钟设置。"
fi

flowchart TD
    Problem[网络异常 / 网页无法打开] --> StepA{本地物理网线与 Wi-Fi 是否通畅?}
    StepA -->|否| FixPhysical[排查光猫与路由器连接状态]
    StepA -->|是| StepB{代理软件监听端口是否正常启动?}

    StepB -->|否| FixSoftware[启动客户端或解除端口占用冲突]
    StepB -->|是| StepC{系统时间与 NTP 是否精确同步?}

    StepC -->|否| FixClock[校准本地系统时钟 确保误差小于 5 秒]
    StepC -->|是| StepD{能否正常解析 XX云接入网关域名?}

    StepD -->|否| FixDNS[修改本地 DNS 为 223.5.5.5 或 119.29.29.29]
    StepD -->|是| StepE{中转节点延迟测速是否有有效响应?}

    StepE -->|否| FixRoute[入口可能遭遇网络波动 切换至其他大区备用节点]
    StepE -->|是| StepF{仅特定流媒体或 AI 工具报错?}

    StepF -->|是| FixTarget[切换至专属原生住宅 IP 或 AI 专用通道]
    StepF -->|否| AllOK[网络通信恢复通畅 正常享受极速中转]