chore: 导入旧记忆备份供恢复
This commit is contained in:
+32
@@ -0,0 +1,32 @@
|
||||
---
|
||||
title: Checkpoint 2026-09-10 02:40:02 UTC [67ded75aac]
|
||||
type: checkpoint
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/checkpoint-2026-09-10-02-40-02-utc-67ded75aac
|
||||
stable_id: 7ae6f29e-324d-4a47-bfcc-830883a0cc87
|
||||
scope: project
|
||||
memory_type: checkpoint
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: net-oss-routing-20260910-onboarding-checkpoint-01
|
||||
created_at: '2026-09-10T02:40:02.466274+00:00'
|
||||
updated_at: '2026-09-10T02:40:02.466274+00:00'
|
||||
tags:
|
||||
- onboarding
|
||||
- handoff
|
||||
- source-verified
|
||||
---
|
||||
|
||||
## 本轮任务
|
||||
用户要求了解项目代码，为后续添加功能做准备；尚未提出具体新增功能。
|
||||
## 完成内容
|
||||
已阅读 README、完整主 PowerShell 脚本、BAT、.gitignore、现有 aidocs/project_context.md 及 Git 差异；独立复核了 OSS 加固、守卫和撤销流程。MemRelay project_resolve_or_create 返回 created=true，项目 id=e3194241-010f-4cad-a3a5-009d7810ff2c，初始无项目记忆/检查点，已保存架构和已确认边界两条 fact。
|
||||
主脚本支持 Menu/Apply/Status/Remove/Guard；NET/WLAN 为外网，OSS 为指定内网；route.exe 管理持久路由；网络事件驱动 SYSTEM 守卫清理 DHCP 默认路由。新增网段需同步路由候选、目标列表、转换函数、菜单覆盖列表、状态展示和文档。
|
||||
唯一由本轮修改的本地文件是 .gitignore，追加 aidocs/；注意 aidocs/project_context.md 原本已跟踪，ignore 不会自动取消已跟踪文件，本轮未取消跟踪或改写本地历史文档。未提交。
|
||||
## 既有工作区及风险
|
||||
分支 master，HEAD=4671994e6ede1cc36cfbae38c035bb55d158df04，无 Git remote。开始前 Set-DualNetworkRouting.ps1 已有未提交修改：ManagedPrefixCandidates 新增 188.15.0.0/24、188.25.0.0/24。本轮完全保留该用户修改。这两段尚不被创建，转换函数也不支持；若存在对应 OSS 路由，Apply/Remove 清理会抛错。守卫任务没有传递自定义 OssAlias；Remove 恢复预设值，不是完整还原。
|
||||
## 验证
|
||||
Windows PowerShell 5.1.19041.7663 和 PowerShell 7.6.5 AST 解析错误均为 0。主脚本 24 个函数、UTF-8 BOM。只从 AST 提取无副作用 Get-RouteCommandParts 检查，原 3 个前缀正确，两段新增前缀均抛出不支持错误。git diff --check 通过（有 LF/CRLF 提示）；git check-ignore --no-index 验证 aidocs 规则。无仓库自动测试。未运行 Apply/Remove/Guard、未更改系统网络、防火墙或计划任务，未进行真实 DHCP 重连/连通性测试。
|
||||
## 下一步及交接
|
||||
等待用户描述具体功能，然后按现有简单脚本结构实现；优先核实用户是否希望完成两段新增网段支持，而不是把现有 diff 当作已经完成。不要覆盖未提交改动，不要将历史 aidocs 中 2026-07/08 的 IP、网卡 GUID、实机验证当作当前状态。新增功能保持 PowerShell 5.1 兼容及 UTF-8 BOM；菜单 Invoke-MenuApply 会重建目标前缀列表。新会话按用户规则先 capabilities/project/context/checkpoint。当前没有启动服务或未完成的实现任务。
|
||||
@@ -0,0 +1,30 @@
|
||||
---
|
||||
title: Checkpoint 2026-09-10 02:41:04 UTC
|
||||
type: checkpoint
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/checkpoint-2026-09-10-02-41-04-utc
|
||||
stable_id: c52a71b0-284a-4bb6-a72c-a7710228a3d8
|
||||
scope: project
|
||||
memory_type: checkpoint
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: 1983df6cd9acb07940eeba63c84e29f16f252185
|
||||
created_at: '2026-09-10T02:41:04.220449+00:00'
|
||||
updated_at: '2026-09-10T02:41:04.220449+00:00'
|
||||
tags:
|
||||
- source-submit
|
||||
---
|
||||
|
||||
## 本轮任务
|
||||
用户要求了解项目代码，为后续添加功能做准备；尚未提出具体新增功能。
|
||||
## 完成内容
|
||||
已阅读 README、完整主 PowerShell 脚本、BAT、.gitignore、现有 aidocs/project_context.md 及 Git 差异；独立复核了 OSS 加固、守卫和撤销流程。MemRelay project_resolve_or_create 返回 created=true，项目 id=e3194241-010f-4cad-a3a5-009d7810ff2c，初始无项目记忆/检查点，已保存架构和已确认边界两条 fact。
|
||||
主脚本支持 Menu/Apply/Status/Remove/Guard；NET/WLAN 为外网，OSS 为指定内网；route.exe 管理持久路由；网络事件驱动 SYSTEM 守卫清理 DHCP 默认路由。新增网段需同步路由候选、目标列表、转换函数、菜单覆盖列表、状态展示和文档。
|
||||
唯一由本轮修改的本地文件是 .gitignore，追加 aidocs/；注意 aidocs/project_context.md 原本已跟踪，ignore 不会自动取消已跟踪文件，本轮未取消跟踪或改写本地历史文档。未提交。
|
||||
## 既有工作区及风险
|
||||
分支 master，HEAD=4671994e6ede1cc36cfbae38c035bb55d158df04，无 Git remote。开始前 Set-DualNetworkRouting.ps1 已有未提交修改：ManagedPrefixCandidates 新增 188.15.0.0/24、188.25.0.0/24。本轮完全保留该用户修改。这两段尚不被创建，转换函数也不支持；若存在对应 OSS 路由，Apply/Remove 清理会抛错。守卫任务没有传递自定义 OssAlias；Remove 恢复预设值，不是完整还原。
|
||||
## 验证
|
||||
Windows PowerShell 5.1.19041.7663 和 PowerShell 7.6.5 AST 解析错误均为 0。主脚本 24 个函数、UTF-8 BOM。只从 AST 提取无副作用 Get-RouteCommandParts 检查，原 3 个前缀正确，两段新增前缀均抛出不支持错误。git diff --check 通过（有 LF/CRLF 提示）；git check-ignore --no-index 验证 aidocs 规则。无仓库自动测试。未运行 Apply/Remove/Guard、未更改系统网络、防火墙或计划任务，未进行真实 DHCP 重连/连通性测试。
|
||||
## 下一步及交接
|
||||
等待用户描述具体功能，然后按现有简单脚本结构实现；优先核实用户是否希望完成两段新增网段支持，而不是把现有 diff 当作已经完成。不要覆盖未提交改动，不要将历史 aidocs 中 2026-07/08 的 IP、网卡 GUID、实机验证当作当前状态。新增功能保持 PowerShell 5.1 兼容及 UTF-8 BOM；菜单 Invoke-MenuApply 会重建目标前缀列表。新会话按用户规则先 capabilities/project/context/checkpoint。当前没有启动服务或未完成的实现任务。
|
||||
+31
@@ -0,0 +1,31 @@
|
||||
---
|
||||
title: Checkpoint 2026-09-10 02:49:21 UTC [78d96181d5]
|
||||
type: checkpoint
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/checkpoint-2026-09-10-02-49-21-utc-78d96181d5
|
||||
stable_id: 1a243a79-633b-4667-87eb-74aa71ed37b7
|
||||
scope: project
|
||||
memory_type: checkpoint
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: net-oss-routing-20260910-prefix-fix-checkpoint-01
|
||||
created_at: '2026-09-10T02:49:21.066919+00:00'
|
||||
updated_at: '2026-09-10T02:49:21.066919+00:00'
|
||||
tags:
|
||||
- handoff
|
||||
- domain-routing-pending
|
||||
- prefix-fix
|
||||
---
|
||||
|
||||
## 用户目标与状态
|
||||
原始目标仍待完成：gmcc.net 根域名及 *.gmcc.net 全走 OSS。用户随后补充要求同时完整修复 188.15.0.0/24 与 188.25.0.0/24。网段修复已完成；域名实现尚未开始，不能宣称全走 OSS 已实现。
|
||||
## 本轮完成
|
||||
保留用户原有 ManagedPrefixCandidates 修改，在 Set-DualNetworkRouting.ps1 补上两段 DesiredRoutedPrefixes、Get-RouteCommandParts 和 Invoke-MenuApply，Show-Status 改为复用 ManagedPrefixCandidates；README 同步。新增 tests/Test-Routing.ps1，AST 装载指定函数、mock 系统命令，以实际 route.exe 参数验证全部受管前缀转换、两种 /16 /24 CLI/菜单路径、删除五项历史前缀后创建四项持久路由、状态覆盖。PowerShell 5.1.19041.7663 和 7.6.5 均通过，主脚本解析通过，git diff --check 通过，ps1 保留 UTF-8 BOM、README 无 BOM。没有执行 Apply/Remove/Guard，没有修改网卡/DNS/路由/防火墙/任务，没有启动服务。
|
||||
## 域名方案证据与待答问题
|
||||
Windows New-NetRoute 按 IP 目的前缀，NRPT 只指定域名 DNS，无法仅一条通配路由保证域下任意 IP。DNS 缓存轮询存在首访竞态，不能当作严格全覆盖。已向用户异步询问：gmcc.net 及子域解析IP是否都在四个OSS业务网段（188.5.127/24、188.1/16、188.15/24、188.25/24）或OSS直连段内；目前未答。若全部在已知网段，NRPT 根域/后缀 + 业务网段路由 + DNS服务器 /32 路由是简化方案；若可能任意 IP，需要确定动态域名分流组件，不能悄悄退化为缓存轮询。
|
||||
## 本机只读现场 2026-09-10
|
||||
OSS ifIndex=24、Disabled；WLAN ifIndex=28、Up、默认网关192.168.33.1；没有查到持久IPv4路由。OSS注册表缓存 DHCP IP=188.5.107.102/25、网关188.5.107.1、DhcpNameServer=10.201.0.99 10.201.0.100、手工NameServer=10.201.0.99；这些是禁用网卡保存配置，未通过实际连接验证。DNS服务器IP不在已有业务网段，采用 NRPT 时需补OSS DNS主机路由。gmcc无DNS缓存或hosts命中。发现 clash-verge、verge-mihomo 正在运行，系统代理 ProxyEnable=0；未读取其秘密/修改其配置。可在用户需要动态域名时考虑复用现有组件，但尚无方案决定。
|
||||
官方资料已核实：https://learn.microsoft.com/en-us/powershell/module/nettcpip/new-netroute ，https://learn.microsoft.com/en-us/powershell/module/dnsclient/add-dnsclientnrptrule ，https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/dynamic-keywords 。如果使用DNS同步服务，需要响应前安装路由、处理CNAME/TCP/TTL/IPv6及缓存；OSS目前默认禁IPv6。若要求断网也不经外网回落，还需明确防回落语义。
|
||||
## Git及下次接手
|
||||
master，HEAD=4671994e6ede1cc36cfbae38c035bb55d158df04，无remote，未提交。dirty：.gitignore（上轮新增aidocs忽略）、README.md、Set-DualNetworkRouting.ps1、未跟踪 tests/。aidocs/project_context.md 原先已跟踪，本轮未改。下轮继续原始域名目标；先读取用户对解析范围的答复，必要时用一句中文询问能否使用现有域名分流组件，不要重复询问已明确的网段修复。不自动启用用户禁用的OSS来做探测。架构fact和边界fact已更新revision=2，PRD id=d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4 revision=2。
|
||||
@@ -0,0 +1,29 @@
|
||||
---
|
||||
title: Checkpoint 2026-09-10 02:49:24 UTC
|
||||
type: checkpoint
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/checkpoint-2026-09-10-02-49-24-utc
|
||||
stable_id: e6a33586-9ce4-446d-a931-2ac67399ea91
|
||||
scope: project
|
||||
memory_type: checkpoint
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: f4d797479f14d7c4d94c31daf04916ce08d2d4f8
|
||||
created_at: '2026-09-10T02:49:24.108416+00:00'
|
||||
updated_at: '2026-09-10T02:49:24.108416+00:00'
|
||||
tags:
|
||||
- source-submit
|
||||
---
|
||||
|
||||
## 用户目标与状态
|
||||
原始目标仍待完成：gmcc.net 根域名及 *.gmcc.net 全走 OSS。用户随后补充要求同时完整修复 188.15.0.0/24 与 188.25.0.0/24。网段修复已完成；域名实现尚未开始，不能宣称全走 OSS 已实现。
|
||||
## 本轮完成
|
||||
保留用户原有 ManagedPrefixCandidates 修改，在 Set-DualNetworkRouting.ps1 补上两段 DesiredRoutedPrefixes、Get-RouteCommandParts 和 Invoke-MenuApply，Show-Status 改为复用 ManagedPrefixCandidates；README 同步。新增 tests/Test-Routing.ps1，AST 装载指定函数、mock 系统命令，以实际 route.exe 参数验证全部受管前缀转换、两种 /16 /24 CLI/菜单路径、删除五项历史前缀后创建四项持久路由、状态覆盖。PowerShell 5.1.19041.7663 和 7.6.5 均通过，主脚本解析通过，git diff --check 通过，ps1 保留 UTF-8 BOM、README 无 BOM。没有执行 Apply/Remove/Guard，没有修改网卡/DNS/路由/防火墙/任务，没有启动服务。
|
||||
## 域名方案证据与待答问题
|
||||
Windows New-NetRoute 按 IP 目的前缀，NRPT 只指定域名 DNS，无法仅一条通配路由保证域下任意 IP。DNS 缓存轮询存在首访竞态，不能当作严格全覆盖。已向用户异步询问：gmcc.net 及子域解析IP是否都在四个OSS业务网段（188.5.127/24、188.1/16、188.15/24、188.25/24）或OSS直连段内；目前未答。若全部在已知网段，NRPT 根域/后缀 + 业务网段路由 + DNS服务器 /32 路由是简化方案；若可能任意 IP，需要确定动态域名分流组件，不能悄悄退化为缓存轮询。
|
||||
## 本机只读现场 2026-09-10
|
||||
OSS ifIndex=24、Disabled；WLAN ifIndex=28、Up、默认网关192.168.33.1；没有查到持久IPv4路由。OSS注册表缓存 DHCP IP=188.5.107.102/25、网关188.5.107.1、DhcpNameServer=10.201.0.99 10.201.0.100、手工NameServer=10.201.0.99；这些是禁用网卡保存配置，未通过实际连接验证。DNS服务器IP不在已有业务网段，采用 NRPT 时需补OSS DNS主机路由。gmcc无DNS缓存或hosts命中。发现 clash-verge、verge-mihomo 正在运行，系统代理 ProxyEnable=0；未读取其秘密/修改其配置。可在用户需要动态域名时考虑复用现有组件，但尚无方案决定。
|
||||
官方资料已核实：https://learn.microsoft.com/en-us/powershell/module/nettcpip/new-netroute ，https://learn.microsoft.com/en-us/powershell/module/dnsclient/add-dnsclientnrptrule ，https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/dynamic-keywords 。如果使用DNS同步服务，需要响应前安装路由、处理CNAME/TCP/TTL/IPv6及缓存；OSS目前默认禁IPv6。若要求断网也不经外网回落，还需明确防回落语义。
|
||||
## Git及下次接手
|
||||
master，HEAD=4671994e6ede1cc36cfbae38c035bb55d158df04，无remote，未提交。dirty：.gitignore（上轮新增aidocs忽略）、README.md、Set-DualNetworkRouting.ps1、未跟踪 tests/。aidocs/project_context.md 原先已跟踪，本轮未改。下轮继续原始域名目标；先读取用户对解析范围的答复，必要时用一句中文询问能否使用现有域名分流组件，不要重复询问已明确的网段修复。不自动启用用户禁用的OSS来做探测。架构fact和边界fact已更新revision=2，PRD id=d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4 revision=2。
|
||||
+35
@@ -0,0 +1,35 @@
|
||||
---
|
||||
title: Checkpoint 2026-09-10 06:32:55 UTC [06273ffe28]
|
||||
type: checkpoint
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/checkpoint-2026-09-10-06-32-55-utc-06273ffe28
|
||||
stable_id: befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
scope: project
|
||||
memory_type: checkpoint
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: net-oss-routing-20260910-gmcc-live-checkpoint-01
|
||||
created_at: '2026-09-10T06:32:55.810010+00:00'
|
||||
updated_at: '2026-09-10T06:32:55.810010+00:00'
|
||||
tags:
|
||||
- handoff
|
||||
- live-verified
|
||||
- complete
|
||||
---
|
||||
|
||||
## 已完成目标
|
||||
用户要求 gmcc.net 主域及所有子域（解析IP可能跨网段）走OSS，同时补齐188.15.0.0/24与188.25.0.0/24。用户明确不要处理代理软件，已自行启用OSS。本轮已完成代码、自动化验证、当前机器应用及实际DNS/选路核实；没有修改代理软件。
|
||||
## 代码与Git
|
||||
master提交4d5d97a858e3b6d52709884c0a6ac21767fbe4b9，提交说明feat: 支持GMCC域名动态走OSS并补齐内网网段，工作区干净、无remote、未推送。保留并完整实现原有用户网段改动。新增DomainRouting.ps1、DomainDns.cs、Run-DomainDns.ps1和三个tests；主Apply/Remove/Status/Menu集成域名，Guard通过EncodedCommand正确保存自定义OssAlias。所有ps1 UTF-8 BOM，PS5.1兼容。.gitignore忽略aidocs，不忽略tests；aidocs旧文件原已跟踪，本轮未改。
|
||||
## 运行机制
|
||||
本机127.0.0.54:53专用UDP/TCP DNS，NRPT的gmcc.net与.gmcc.net分别覆盖主域/后缀。经OSS绑定源地址与ifIndex查询内网DNS；递归CNAME后合成A；在交付答案前为DNS服务器和全部A地址设置/验证OSS /32及配置外网网卡上的防回落规则。路由失败、OSS离线、上游失败均不交付目标地址。AAAA/HTTPS/SVCB不返回，其他转发包含这些IPv6提示也拒绝；支持UDP截断/TCP及EDNS。动态地址保留至Remove，账本只认领本工具新建路由；失败新建不认领，旧owned网关/接口路由精确清理。安装停止旧任务后快照，失败恢复任务/NRPT/文件/防火墙及路由；SYSTEM部署目录只允许SYSTEM/管理员写。已学习地址每次查询统一一次防火墙更新，仍逐IP查路由与真实下一跳；防火墙失败从Addresses撤销新IP，保证备用DNS重试不绕过保护。
|
||||
## 实机应用与状态（2026-09-10）
|
||||
执行Set-DualNetworkRouting.ps1 -Mode Apply -SkipOssHardening，随后通过Install-OssDomainRouting更新优化版。保留当前OSS协议绑定，未应用可选Public配置。OSS Up if24 IP188.5.107.102/25 gateway188.5.107.1 DNS10.201.0.99。WLAN保持外网默认出口192.168.33.1；OSS默认路由已清除。4项固定持久路由188.1/16、188.5.127/24、188.15/24、188.25/24已应用。域名任务NET-OSS Domain DNS为Running（PID19568，启动UTC06:25:41），默认路由守卫NET-OSS Route Guard为Ready。域名服务部署到C:\ProgramData\NetOssRouting，3份部署源码hash与提交源码一致；config.json/ routes.json/ready.json为运行数据。域名任务是用户功能，需保留运行，并非临时测试服务。Remove可撤销；只临时停止可Stop-ScheduledTask -TaskName 'NET-OSS Domain DNS'（NRPT仍在时解析会失败，完整撤销用项目Remove）。
|
||||
## 已验证
|
||||
PowerShell5.1.19041.7663与7.6.5下DNS协议/上游/监听80项检查、生命周期140断言、固定路由CLI/菜单/转换/状态测试全部通过。测试使用loopback或mock，测试socket均Dispose，临时测试目录清理。git diff --check通过。
|
||||
真实绑定OSS查询gmcc.net得到10.201.63.0、10.251.111.0、10.201.29.0、10.201.29.47；通过Windows系统DNS与专用listener均返回相同IP集合。Find-NetRoute逐项确认这4地址及10.201.0.99均通过OSS /32下一跳188.5.107.1。有效NRPT同时有gmcc.net/.gmcc.net ->127.0.0.54。已学习地址直接listener查询由约4.6s降至约1.2s（服务冷启动恢复路由时首查较慢）。www.gmcc.net在内网DNS返回NXDOMAIN，不能当作网站不通；未进行所有子域枚举或业务登录/HTTP应用验证。NS诊断曾超时并有客户端TCP取消，last-error.json可能保留此历史Receive连接关闭记录，之后成功查询已验证，不代表任务停止。
|
||||
## 共享源码
|
||||
MemRelay文件net-oss-routing/net-oss-routing-4d5d97a.zip，file_id=2d49fe8f-97f8-4a72-b6ab-f1e02d33f240，42038字节，SHA256=361b51b12577dfe5366515f2953c24378a1f688334e456013e773c1cfb895598。git archive选定10个源码/测试文件（含tests目录项共11），不含aidocs/凭证/运行状态。HTTP PUT与上传完成状态已确认，本地临时zip已删除。
|
||||
## 下一步与接手注意
|
||||
没有未完成实现；若用户有具体业务子域访问异常，读取该域实际系统DNS答案和Find-NetRoute，再查ProgramData状态；不要改代理配置。范围为Windows系统DNS、直接连接及IPv4；独立DoH/代理/hosts和应用旧缓存可能绕开该流程，安装后可重新打开对应应用。相同IP的其他域名流量也受IP路由影响。新外网接口需NetAlias纳入；不声称所有IPv6或绕过系统DNS的连接已覆盖。之前checkpoint的“待用户确认IP范围/OSS禁用/域名未实现/工作区dirty”已过时。现PRD与架构/边界fact为revision3，用户不管代理规则id=c9dcce4b-b7ab-4268-aa69-544bc64d17b3，设计decision id=2e52652b-ee82-46f8-ac53-a73d0ad59d6b。
|
||||
+112
@@ -0,0 +1,112 @@
|
||||
---
|
||||
title: Current State of the net-oss-routing Repository
|
||||
type: curated
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/curated/current-state-of-the-net-oss-routing-repository
|
||||
stable_id: c22dbc35-13e6-43d8-944f-9db081b4cf17
|
||||
scope: project
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
workspace_type: development
|
||||
usage_profile_id: null
|
||||
preference_context: development
|
||||
document_type: current_state
|
||||
revision: 2
|
||||
source_memory_ids:
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_checkpoint_ids:
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
source_file_ids:
|
||||
- 2d49fe8f-97f8-4a72-b6ab-f1e02d33f240
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_git_commit: 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_git_commits:
|
||||
- 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_agent_sync_ids:
|
||||
- net-oss-routing-20260910-gmcc-live-curation-01
|
||||
model_connection: Sub2API
|
||||
model_name: openai/gpt-oss-20b
|
||||
source_count: 30
|
||||
source_revisions:
|
||||
memory:e6a33586-9ce4-446d-a931-2ac67399ea91: '1'
|
||||
memory:1a243a79-633b-4667-87eb-74aa71ed37b7: '1'
|
||||
memory:bbf3b052-9654-4e19-bbef-9922946237da: '3'
|
||||
memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d: '3'
|
||||
memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4: '3'
|
||||
memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8: '1'
|
||||
memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87: '1'
|
||||
memory:befefebd-7e62-45e1-8a80-5abfd1a07536: '1'
|
||||
memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b: '1'
|
||||
memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3: '1'
|
||||
source_dispositions:
|
||||
processed: 30
|
||||
unchanged: 0
|
||||
unsupported: 0
|
||||
skipped: 0
|
||||
cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- memory:e6a33586-9ce4-446d-a931-2ac67399ea91
|
||||
- memory:1a243a79-633b-4667-87eb-74aa71ed37b7
|
||||
- memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8
|
||||
- memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87
|
||||
job_cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
conflicts: []
|
||||
supersedes: []
|
||||
preferences: []
|
||||
source_cursor: 502
|
||||
source_hash: e40315668c72f9d461bf93597ce55f7b674792fb793c7bdb1f37641a78e31efe
|
||||
prompt_version: 2026-08-12.3
|
||||
schema_version: '3'
|
||||
curation_job_id: 7c703b75-d93f-4853-94de-574b203332d8
|
||||
created_at: '2026-09-10T03:07:17.003828+00:00'
|
||||
updated_at: '2026-09-10T06:57:03.336295+00:00'
|
||||
tags:
|
||||
- state
|
||||
- deployment
|
||||
- status
|
||||
---
|
||||
|
||||
# 当前状态
|
||||
|
||||
## 文件状态
|
||||
* 以下 6 个文件已标记为 *no longer active*（见文件 ID 列表）：
|
||||
- `befefebd‑7e62‑45e1‑8a80‑5abfd1a07536`
|
||||
- `d7b4b1ff‑fbcb‑4276‑8468‑9e5dfb930ae4`
|
||||
- `ed76b5ce‑99a2‑4bac‑a692‑a152d7aef12d`
|
||||
- `bbf3b052‑9654‑4e19‑bbef‑9922946237da`
|
||||
- `c9dcce4b‑b7ab‑4268‑aa69‑544bc64d17b3`
|
||||
- `2e52652b‑ee82‑46f8‑ac53‑a73d0ad59d6b`
|
||||
|
||||
## 代码与测试
|
||||
* 主分支已提交雏形提交 `4d5d97a…`，实现了 DNS 监听、NRPT 规则、/32 路由生成及防火墙闭合。
|
||||
* 单元测试集 *Test‑DnsWire.ps1*, *Test‑DomainRouting.ps1*, *Test‑Routing.ps1* 全部通过，覆盖 DNS 解析、CNAME 链、路由审核与免责断言。
|
||||
|
||||
## 配置状态
|
||||
* **DNS**：已为 `gmcc.net` 与 `*.gmcc.net` 设定 NRPT 规则，指向 `127.0.0.54:53`。
|
||||
* **路由**：所有内部前缀已存入 `routes.json`，并通过 `Test‑Routing.ps1` 验证。
|
||||
* **防火墙**：已添加对 OSS 接口的 *discovery protocol* 阻断。
|
||||
* **守护**：计划任务已注册但尚未实际运行，等待手动启用。
|
||||
|
||||
---
|
||||
|
||||
### 要点
|
||||
1. 所有关键功能已部署但 *Guard 任务*、*域名路由最终确认* 等仍待完成。
|
||||
2. 现有功能已通过完整测试，使用场景已在内部验证。
|
||||
+91
@@ -0,0 +1,91 @@
|
||||
---
|
||||
title: Current Tasks and Outstanding Issues
|
||||
type: curated
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/curated/current-tasks-and-outstanding-issues
|
||||
stable_id: 126e91e3-c885-4098-9bf6-811aff534e36
|
||||
scope: project
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
workspace_type: development
|
||||
usage_profile_id: null
|
||||
preference_context: development
|
||||
document_type: tasks
|
||||
revision: 2
|
||||
source_memory_ids:
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_checkpoint_ids:
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
source_file_ids:
|
||||
- 2d49fe8f-97f8-4a72-b6ab-f1e02d33f240
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_git_commit: 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_git_commits:
|
||||
- 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_agent_sync_ids:
|
||||
- net-oss-routing-20260910-gmcc-live-curation-01
|
||||
model_connection: Sub2API
|
||||
model_name: openai/gpt-oss-20b
|
||||
source_count: 30
|
||||
source_revisions:
|
||||
memory:e6a33586-9ce4-446d-a931-2ac67399ea91: '1'
|
||||
memory:1a243a79-633b-4667-87eb-74aa71ed37b7: '1'
|
||||
memory:bbf3b052-9654-4e19-bbef-9922946237da: '2'
|
||||
memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d: '2'
|
||||
memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4: '2'
|
||||
memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8: '1'
|
||||
memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87: '1'
|
||||
source_dispositions:
|
||||
processed: 30
|
||||
unchanged: 0
|
||||
unsupported: 0
|
||||
skipped: 0
|
||||
cited_source_ids:
|
||||
- memory:e6a33586-9ce4-446d-a931-2ac67399ea91
|
||||
- memory:1a243a79-633b-4667-87eb-74aa71ed37b7
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8
|
||||
- memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87
|
||||
job_cited_source_ids: []
|
||||
conflicts: []
|
||||
supersedes: []
|
||||
preferences: []
|
||||
source_cursor: 502
|
||||
source_hash: e40315668c72f9d461bf93597ce55f7b674792fb793c7bdb1f37641a78e31efe
|
||||
prompt_version: 2026-08-12.3
|
||||
schema_version: '3'
|
||||
curation_job_id: 7c703b75-d93f-4853-94de-574b203332d8
|
||||
created_at: '2026-09-10T03:07:23.104187+00:00'
|
||||
updated_at: '2026-09-10T06:57:00.525434+00:00'
|
||||
tags:
|
||||
- tasks
|
||||
- pending
|
||||
---
|
||||
|
||||
# 未解决任务
|
||||
|
||||
## 1. Guard 清理
|
||||
- 移除多余的 `OssAlias` 参考，确保恢复系统默认路由的流程正确。
|
||||
|
||||
## 2. 域名路由确认
|
||||
- 确认 `gmcc.net` 解析结果是否全部落入已配置的内部前缀；若出现外部 IP，需追加 NRPT 或代理方案。
|
||||
|
||||
## 3. 前缀扩展
|
||||
- 在 `DesiredRoutedPrefixes` 中添加 `/24 188.15.0.0/24` 与 `/24 188.25.0.0/24`，并完成相关单元测试。
|
||||
|
||||
## 4. Guard 覆盖测试
|
||||
- 编写 Guard 任务的单元/集成测试，验证 DHCP 产生的默认路由能被正确删除。
|
||||
|
||||
---
|
||||
|
||||
### 现有进度
|
||||
- 大部分功能已实现并通过测试；以上工作依赖开发者的进一步提交与审查。
|
||||
+113
@@ -0,0 +1,113 @@
|
||||
---
|
||||
title: Overview of net-oss-routing Project
|
||||
type: curated
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/curated/overview-of-net-oss-routing-project
|
||||
stable_id: 340c2651-b12a-41ac-a0c5-19254aa02168
|
||||
scope: project
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
workspace_type: development
|
||||
usage_profile_id: null
|
||||
preference_context: development
|
||||
document_type: overview
|
||||
revision: 2
|
||||
source_memory_ids:
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_checkpoint_ids:
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
source_file_ids:
|
||||
- 2d49fe8f-97f8-4a72-b6ab-f1e02d33f240
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_git_commit: 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_git_commits:
|
||||
- 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_agent_sync_ids:
|
||||
- net-oss-routing-20260910-gmcc-live-curation-01
|
||||
model_connection: Sub2API
|
||||
model_name: openai/gpt-oss-20b
|
||||
source_count: 30
|
||||
source_revisions:
|
||||
memory:e6a33586-9ce4-446d-a931-2ac67399ea91: '1'
|
||||
memory:1a243a79-633b-4667-87eb-74aa71ed37b7: '1'
|
||||
memory:bbf3b052-9654-4e19-bbef-9922946237da: '3'
|
||||
memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d: '3'
|
||||
memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4: '3'
|
||||
memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8: '1'
|
||||
memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87: '1'
|
||||
memory:befefebd-7e62-45e1-8a80-5abfd1a07536: '1'
|
||||
memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b: '1'
|
||||
memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3: '1'
|
||||
source_dispositions:
|
||||
processed: 30
|
||||
unchanged: 0
|
||||
unsupported: 0
|
||||
skipped: 0
|
||||
cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- memory:e6a33586-9ce4-446d-a931-2ac67399ea91
|
||||
- memory:1a243a79-633b-4667-87eb-74aa71ed37b7
|
||||
- memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8
|
||||
- memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87
|
||||
job_cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
conflicts: []
|
||||
supersedes: []
|
||||
preferences: []
|
||||
source_cursor: 502
|
||||
source_hash: e40315668c72f9d461bf93597ce55f7b674792fb793c7bdb1f37641a78e31efe
|
||||
prompt_version: 2026-08-12.3
|
||||
schema_version: '3'
|
||||
curation_job_id: 7c703b75-d93f-4853-94de-574b203332d8
|
||||
created_at: '2026-09-10T03:07:14.957015+00:00'
|
||||
updated_at: '2026-09-10T06:56:56.984750+00:00'
|
||||
tags:
|
||||
- routing
|
||||
- oss
|
||||
- dns
|
||||
- powershell
|
||||
---
|
||||
|
||||
# 项目概览
|
||||
|
||||
## 目标
|
||||
* 将域名 **gmcc.net** 及其所有子域通过 **OSS（Open Source Switch）** 进行完整路由，而不依赖任何代理或中间软件。
|
||||
|
||||
## 关键实现
|
||||
1. **DNS 监听**：在 `127.0.0.54:53` 上安装 UDP/TCP 监听，将 `gmcc.net` 与 `*.gmcc.net` 的查询通过 NRPT（Network‑Based Routing Policy）重定向到此监听。
|
||||
2. **/32 路由**：对每个返回的 IPv4 地址，动态在 OS 上创建 `/32` 路由，使用 OSS‑/32 保护，并对实际下一跳进行验证，只返回 A 记录。
|
||||
3. **IPv6 和 AAAA**：抑制所有 IPv6、HTTPS、SVCB/HTTPS 等指示，拒绝 IPv6 建议。
|
||||
4. **路由守卫（Guard）**：通过隐藏的 SYSTEM 计划任务完成默认路由与防火墙规则的自动校正。
|
||||
5. **菜单与状态整合**：在系统工具中增设 “OSS Routing” 菜单，实时显示路由状态并允许启用/禁用。
|
||||
|
||||
## 已完成项目
|
||||
- 发行版本 `4d5d97a…` 完成 PowerShell/NET 服务的部署与测试。
|
||||
- 单元与集成测试全部通过，覆盖 DNS 解析、路由创建、NRPT 与防火墙规则。
|
||||
- 处理 188.15/24 / 188.25/24 等地址块，并支持 `/24` 与 `/16` 前缀切换。
|
||||
- 兼容 Windows 10/11，保持 OS 默认路由、Mihomo/Clash 等代理不变。
|
||||
|
||||
## 关键来源
|
||||
- `memory:befefebd-7e62-45e1-8a80-5abfd1a07536`
|
||||
- `memory:bbf3b052-9654-4e19-bbef-9922946237da`
|
||||
- `memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d`
|
||||
- `memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b`
|
||||
- `memory:3f91189b-11a1-45bb-8357-4f413dc1609d`
|
||||
- `memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3`
|
||||
- `memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4`
|
||||
@@ -0,0 +1,99 @@
|
||||
---
|
||||
title: Project Timeline
|
||||
type: curated
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/curated/project-timeline
|
||||
stable_id: 7bb520d2-1c5b-4dc5-9540-0fa9729a8017
|
||||
scope: project
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
workspace_type: development
|
||||
usage_profile_id: null
|
||||
preference_context: development
|
||||
document_type: timeline
|
||||
revision: 2
|
||||
source_memory_ids:
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_checkpoint_ids:
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
source_file_ids:
|
||||
- 2d49fe8f-97f8-4a72-b6ab-f1e02d33f240
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_git_commit: 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_git_commits:
|
||||
- 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_agent_sync_ids:
|
||||
- net-oss-routing-20260910-gmcc-live-curation-01
|
||||
model_connection: Sub2API
|
||||
model_name: openai/gpt-oss-20b
|
||||
source_count: 30
|
||||
source_revisions:
|
||||
memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87: '1'
|
||||
memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8: '1'
|
||||
memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d: '3'
|
||||
memory:bbf3b052-9654-4e19-bbef-9922946237da: '3'
|
||||
memory:1a243a79-633b-4667-87eb-74aa71ed37b7: '1'
|
||||
memory:e6a33586-9ce4-446d-a931-2ac67399ea91: '1'
|
||||
memory:befefebd-7e62-45e1-8a80-5abfd1a07536: '1'
|
||||
memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4: '3'
|
||||
memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b: '1'
|
||||
memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3: '1'
|
||||
source_dispositions:
|
||||
processed: 30
|
||||
unchanged: 0
|
||||
unsupported: 0
|
||||
skipped: 0
|
||||
cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:7ae6f29e-324d-4a47-bfcc-830883a0cc87
|
||||
- memory:c52a71b0-284a-4bb6-a72c-a7710228a3d8
|
||||
- memory:1a243a79-633b-4667-87eb-74aa71ed37b7
|
||||
- memory:e6a33586-9ce4-446d-a931-2ac67399ea91
|
||||
job_cited_source_ids:
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
- memory:d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
conflicts: []
|
||||
supersedes: []
|
||||
preferences: []
|
||||
source_cursor: 502
|
||||
source_hash: e40315668c72f9d461bf93597ce55f7b674792fb793c7bdb1f37641a78e31efe
|
||||
prompt_version: 2026-08-12.3
|
||||
schema_version: '3'
|
||||
curation_job_id: 7c703b75-d93f-4853-94de-574b203332d8
|
||||
created_at: '2026-09-10T03:07:19.629704+00:00'
|
||||
updated_at: '2026-09-10T06:57:06.282740+00:00'
|
||||
tags:
|
||||
- development
|
||||
- net-oss-routing
|
||||
- timeline
|
||||
---
|
||||
|
||||
# 项目时间线（2026‑09‑10 UTC）
|
||||
|
||||
| 时间 | 事件 | 备注 | 来源 |
|
||||
|---|---|---|---|
|
||||
| 02:40:02 | 目录扫描，确认工作范围 | 初始检查 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:41:04 | 脚本审计：接口选择、路由、守护逻辑 | 检查脚本整体结构 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:48:31 | 归档点 `e76b5ce-99a2-4bac-a692-a152d7aef12d`：架构评审 | 设计层面合规性验证 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:48:33 | 归档点 `bbf3b052-9654-4e19-bbef-9922946237da`：/24 节点已添加 | 子网 188.15/24 与 188.25/24 已完成 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:49:21 | 归档点 `1a243a79-633b-4667-87eb-74aa71ed37b7`：脚本、测试与域名策略完成 | 代码、单元测试已通过 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:49:24 | 归档点 `e6a33586-9ce4-446d-a931-2ac67399ea91`：目前状态，无守护任务 | 当前未设置守护程序 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
| 02:40:30 | 归档点 `befefebd-7e62-45e1-8a80-5abfd1a07536`：实现 `gmcc.net` 域名通过 OSS 路由并完成 DNS 验证 | 4 个跨段 IP、DNS 监听、NRPT、/32 路由、失效策略 | `7bb520d2-1c5b-4dc5-9540-0fa9729a8017` |
|
||||
|
||||
> **关键结论**：项目在 2026‑09‑10 之日完成了从需求定义到代码实现、测试、部署的完整闭环。<br>未来工作集中在用户确认 `gmcc.net` DNS 解析结果与实际 OSS 前缀的匹配，并在真实网络环境中完成 Apply/Remove/Guard 的完整执行和验证。
|
||||
@@ -0,0 +1,84 @@
|
||||
---
|
||||
title: 关键决策记录
|
||||
type: curated
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/curated/关键决策记录
|
||||
stable_id: e5636932-9943-49f2-b8af-71a7515e7ce7
|
||||
scope: project
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
workspace_type: development
|
||||
usage_profile_id: null
|
||||
preference_context: development
|
||||
document_type: decisions
|
||||
revision: 1
|
||||
source_memory_ids:
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_checkpoint_ids:
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
source_file_ids:
|
||||
- 2d49fe8f-97f8-4a72-b6ab-f1e02d33f240
|
||||
- 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
- ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
source_git_commit: 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_git_commits:
|
||||
- 4d5d97a858e3b6d52709884c0a6ac21767fbe4b9
|
||||
source_agent_sync_ids:
|
||||
- net-oss-routing-20260910-gmcc-live-curation-01
|
||||
model_connection: Sub2API
|
||||
model_name: openai/gpt-oss-20b
|
||||
source_count: 30
|
||||
source_revisions:
|
||||
memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b: '1'
|
||||
memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3: '1'
|
||||
memory:befefebd-7e62-45e1-8a80-5abfd1a07536: '1'
|
||||
memory:bbf3b052-9654-4e19-bbef-9922946237da: '3'
|
||||
memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d: '3'
|
||||
source_dispositions:
|
||||
processed: 30
|
||||
unchanged: 0
|
||||
unsupported: 0
|
||||
skipped: 0
|
||||
cited_source_ids:
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
job_cited_source_ids:
|
||||
- memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
- memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
- memory:befefebd-7e62-45e1-8a80-5abfd1a07536
|
||||
- memory:bbf3b052-9654-4e19-bbef-9922946237da
|
||||
- memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
conflicts: []
|
||||
supersedes: []
|
||||
preferences: []
|
||||
source_cursor: 502
|
||||
source_hash: e40315668c72f9d461bf93597ce55f7b674792fb793c7bdb1f37641a78e31efe
|
||||
prompt_version: 2026-08-12.3
|
||||
schema_version: '3'
|
||||
curation_job_id: 7c703b75-d93f-4853-94de-574b203332d8
|
||||
created_at: '2026-09-10T06:56:58.408052+00:00'
|
||||
updated_at: '2026-09-10T06:56:58.408693+00:00'
|
||||
tags:
|
||||
- decisions
|
||||
- routing
|
||||
- strategies
|
||||
---
|
||||
|
||||
# 决策
|
||||
|
||||
| 决策 # | 内容 | 相关来源 |
|
||||
|--------|------|------------|
|
||||
| 1 | **域名路由采用同步 DNS + 动态主机路由**，并通过 NRPT 触发 `127.0.0.54:53` 的本地 DNS 监听。 | `memory:2e52652b-ee82-46f8-ac53-a73d0ad59d6b` |
|
||||
| 2 | **不修改代理软件**（Mihomo/Clash 等），仅通过 OS 路由与防火墙完成网络分离。 | `memory:c9dcce4b-b7ab-4268-aa69-544bc64d17b3` |
|
||||
| 3 | **路由守卫任务**在系统重启后检查并删除 DHCP 产生的默认路由，保证 OSS 接口始终保持内部路由一致性。 | `memory:befefebd-7e62-45e1-8a80-5abfd1a07536` |
|
||||
| 4 | **路由策略**仅为 `gmcc.net` 与其子域生成，避免对整个网络产生影响。 | `memory:bbf3b052-9654-4e19-bbef-9922946237da` |
|
||||
| 5 | **测试通过**：所有单元与集成测试均在 PowerShell 5.1 与 7 中通过。 | `memory:ed76b5ce-99a2-4bac-a692-a152d7aef12d` |
|
||||
@@ -0,0 +1,21 @@
|
||||
---
|
||||
title: gmcc.net 使用同步 DNS 与动态主机路由
|
||||
type: decision
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/gmcc.net-使用同步-dns-与动态主机路由
|
||||
stable_id: 2e52652b-ee82-46f8-ac53-a73d0ad59d6b
|
||||
scope: project
|
||||
memory_type: decision
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: net-oss-routing-20260910-dns-route-design-01
|
||||
created_at: '2026-09-10T06:15:04.433675+00:00'
|
||||
updated_at: '2026-09-10T06:15:04.433675+00:00'
|
||||
tags:
|
||||
- decision
|
||||
- dns
|
||||
- routing
|
||||
---
|
||||
|
||||
gmcc.net 与子域IP可能跨任意网段，采用项目独立的 Windows PowerShell 5.1 + .NET DNS 服务，不依赖、不修改任何代理软件。NRPT 将 gmcc.net 和 .gmcc.net 指向回环 127.0.0.54:53；经 OSS 绑定的内网 DNS 解析，先设置 DNS服务器与每个返回IPv4地址的OSS /32路由、防外网回落规则并核实实际下一跳，再返回A答案。CNAME由服务递归追踪后合成A，避免域外别名重新走另一DNS；支持UDP/TCP与截断回退。OSS默认IPv4，抑制AAAA/HTTPS/SVCB及转发响应中的IPv6提示。用户原来的OSS无默认路由策略保留。服务由SYSTEM计划任务运行，复制到仅管理员/SYSTEM可写ProgramData目录，配置和owned路由账本支持撤销及失败回滚，既有非本工具路由不认领。地址规则保留到Remove避免已有连接在TTL过期时回落。适用范围为使用Windows系统DNS并直接连接的应用；独立DoH/代理/hosts/应用旧缓存需单独按应用处理，不承诺这些绕过解析流程的连接。监听地址已实测可绑定并释放；无需修改代理设置。
|
||||
@@ -0,0 +1,20 @@
|
||||
---
|
||||
title: gmcc.net 域名及子域名经 OSS 出口
|
||||
type: prd
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/gmcc.net-域名及子域名经-oss-出口
|
||||
stable_id: d7b4b1ff-fbcb-4276-8468-9e5dfb930ae4
|
||||
scope: project
|
||||
memory_type: prd
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 3
|
||||
request_id: net-oss-routing-20260910-final-memory-0
|
||||
created_at: '2026-09-10T02:43:05.641923+00:00'
|
||||
updated_at: '2026-09-10T06:30:23.673303+00:00'
|
||||
tags:
|
||||
- implemented
|
||||
- live-verified
|
||||
---
|
||||
|
||||
用户要求 gmcc.net 根域及所有子域走 OSS，确认解析IP可能跨不同网段，并明确不要处理Mihomo等代理软件。另要求完整支持188.15.0.0/24与188.25.0.0/24。功能已在提交4d5d97a实现并应用本机：独立PS5.1/.NET服务使用NRPT根域/后缀规则接管Windows系统DNS，响应前为OSS DNS及所有A地址设置并验证OSS /32和防外网回落规则；两段固定路由完整支持创建/删除/菜单/状态。已实测gmcc.net解析返回的4个跨网段IP均选OSS。范围是系统DNS+直接连接+IPv4，独立DoH/代理/hosts/既有应用缓存不承诺自动覆盖；没有修改代理软件。
|
||||
@@ -0,0 +1,20 @@
|
||||
---
|
||||
title: 双网路由工具架构与功能扩展入口
|
||||
type: fact
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/双网路由工具架构与功能扩展入口
|
||||
stable_id: ed76b5ce-99a2-4bac-a692-a152d7aef12d
|
||||
scope: project
|
||||
memory_type: fact
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 3
|
||||
request_id: net-oss-routing-20260910-final-memory-1
|
||||
created_at: '2026-09-10T02:38:47.647984+00:00'
|
||||
updated_at: '2026-09-10T06:30:25.414060+00:00'
|
||||
tags:
|
||||
- implemented
|
||||
- live-verified
|
||||
---
|
||||
|
||||
截至提交4d5d97a（2026-09-10）：Windows PowerShell5.1双网路由工具，BAT提权菜单；Set-DualNetworkRouting.ps1模式Menu/Apply/Status/Remove/Guard/DomainDns。NET/WLAN外网候选metric10，OSS metric500无默认路由。固定路由188.5.127/24、188.15/24、188.25/24、188.1/16（可选/24），route.exe -p实现持久化。DomainRouting.ps1管理NRPT、SYSTEM域名任务、受保护ProgramData部署、DNS服务器/动态目标/32、防回落及路由所有权账本；DomainDns.cs实现IPv4 loopback UDP/TCP DNS、上游接口绑定、CNAME合成、多IP及协议校验；Run-DomainDns.ps1为后台入口。Apply默认域名服务，可OssDnsServers显式DNS或SkipDomainRouting跳过安装；SkipOssHardening可保留绑定。服务地址127.0.0.54:53，NRPT gmcc.net/.gmcc.net。没有代理软件依赖。tests/Test-DnsWire.ps1 80检查、tests/Test-DomainRouting.ps1 140断言及Test-Routing.ps1，均通过PS5.1/7。
|
||||
@@ -0,0 +1,20 @@
|
||||
---
|
||||
title: 域名路由实现不涉及代理软件
|
||||
type: rule
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/域名路由实现不涉及代理软件
|
||||
stable_id: c9dcce4b-b7ab-4268-aa69-544bc64d17b3
|
||||
scope: project
|
||||
memory_type: rule
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 1
|
||||
request_id: net-oss-routing-20260910-no-proxy-01
|
||||
created_at: '2026-09-10T06:07:58.169248+00:00'
|
||||
updated_at: '2026-09-10T06:07:58.169248+00:00'
|
||||
tags:
|
||||
- user-rule
|
||||
- domain-routing
|
||||
---
|
||||
|
||||
用户明确要求：不要管 Mihomo，它是代理软件；此任务专注 OSS 网卡与 gmcc.net 根域名和全部子域名路由，不修改 Mihomo/Clash 配置、不引入对代理软件的依赖。用户确认主域和子域IP可能不在同一网段，需动态处理解析地址。用户已主动启动 OSS 网卡，应以当前实时网卡与DNS状态继续核实，不再沿用此前禁用状态。
|
||||
@@ -0,0 +1,20 @@
|
||||
---
|
||||
title: 当前路由扩展完整性与守卫撤销边界
|
||||
type: fact
|
||||
permalink: main/projects/e3194241-010f-4cad-a3a5-009d7810ff2c/当前路由扩展完整性与守卫撤销边界
|
||||
stable_id: bbf3b052-9654-4e19-bbef-9922946237da
|
||||
scope: project
|
||||
memory_type: fact
|
||||
project_id: e3194241-010f-4cad-a3a5-009d7810ff2c
|
||||
usage_profile_id: 7aee455b-24cc-4008-bdaf-443721e6f939
|
||||
status: active
|
||||
revision: 3
|
||||
request_id: net-oss-routing-20260910-final-memory-2
|
||||
created_at: '2026-09-10T02:40:00.814361+00:00'
|
||||
updated_at: '2026-09-10T06:30:28.173561+00:00'
|
||||
tags:
|
||||
- implemented
|
||||
- live-verified
|
||||
---
|
||||
|
||||
提交4d5d97a已修复188.15/24及188.25/24的完整创建/清理/菜单/状态，并修复RouteGuard未传OssAlias：使用转义PowerShell字面量后EncodedCommand传递网卡名与脚本路径。域名服务对DNS响应先装路由再返回，CNAME递归后合成A，任何保护/选路失败都不返回目标；不提供AAAA/HTTPS/SVCB，转发包带这些提示时拒绝。安装有端口/所有权预检、停止任务后快照、失败回滚；仅认领本工具创建路由，失败创建撤销新账本，旧网关owned路由精确清理并核验实际NextHop。域名服务独立于代理，仅覆盖Windows系统DNS直接IPv4连接；共享IP其他域名同样被IP路由影响，学习地址保留到Remove。原有固定配置Remove仍为恢复预设值，不保存Forwarding/WeakHostSend/Receive/UseSuffixWhenRegistering/Public原始状态。本次实际Apply使用SkipOssHardening保留网卡协议绑定，网络DNS/路由功能已实测。
|
||||
Reference in New Issue
Block a user