Gan, Jimmy
114 lines
3.1 KiB
Markdown
114 lines
3.1 KiB
Markdown
# Oracle Cloud Console - Open Proxy Ports
|
|
|
|
## Step-by-Step Instructions
|
|
|
|
### Step 1: Find Your VCN
|
|
From the screenshot, you have multiple VCNs. We need to find which one your server2 instance uses.
|
|
|
|
**Option A: Check from server2**
|
|
```bash
|
|
ssh server2 'ip addr show ens3 | grep "inet "'
|
|
```
|
|
This will show the IP (e.g., 10.0.0.100), which matches VCN CIDR 10.0.0.0/16.
|
|
|
|
**Option B: Check instance details**
|
|
- Go to **Compute** → **Instances**
|
|
- Find your server2 instance
|
|
- Click on it
|
|
- Check the **VCN** or **Subnet** it's attached to
|
|
|
|
### Step 2: Open the VCN
|
|
1. Click on the **VCN name** (e.g., "vcn-20250609-0221") that matches your instance
|
|
2. This opens the VCN details page
|
|
|
|
### Step 3: Navigate to Security Lists
|
|
1. In the VCN details page, look for **"Security Lists"** in the left sidebar or Resources section
|
|
2. Click on **"Security Lists"**
|
|
3. You'll see a list of security lists (usually "Default Security List for vcn-...")
|
|
|
|
### Step 4: Edit the Security List
|
|
1. Click on the **Default Security List** (or the one attached to your subnet)
|
|
2. Click **"Edit All Rules"** or **"Add Ingress Rules"**
|
|
|
|
### Step 5: Add Ingress Rules
|
|
Add these 4 rules (one for each port):
|
|
|
|
**Rule 1: HTTP Proxy (7890)**
|
|
- **Source Type:** CIDR
|
|
- **Source CIDR:** `0.0.0.0/0` (or your IP for better security)
|
|
- **IP Protocol:** TCP
|
|
- **Destination Port Range:** `7890`
|
|
- **Description:** `Clash HTTP Proxy`
|
|
|
|
**Rule 2: SOCKS5 Proxy (7891)**
|
|
- **Source Type:** CIDR
|
|
- **Source CIDR:** `0.0.0.0/0`
|
|
- **IP Protocol:** TCP
|
|
- **Destination Port Range:** `7891`
|
|
- **Description:** `Clash SOCKS5 Proxy`
|
|
|
|
**Rule 3: Mixed Proxy (7892)**
|
|
- **Source Type:** CIDR
|
|
- **Source CIDR:** `0.0.0.0/0`
|
|
- **IP Protocol:** TCP
|
|
- **Destination Port Range:** `7892`
|
|
- **Description:** `Clash Mixed Proxy`
|
|
|
|
**Rule 4: Web UI (9090)**
|
|
- **Source Type:** CIDR
|
|
- **Source CIDR:** `0.0.0.0/0`
|
|
- **IP Protocol:** TCP
|
|
- **Destination Port Range:** `9090`
|
|
- **Description:** `Clash Web UI`
|
|
|
|
### Step 6: Save
|
|
1. Click **"Save Changes"** or **"Add Ingress Rules"**
|
|
2. Wait 30-60 seconds for rules to propagate
|
|
|
|
### Step 7: Test
|
|
After adding rules, test from your iPhone:
|
|
- Open Shadowrocket
|
|
- Add server: `158.101.140.85:7890`
|
|
- Username: `proxy_user`
|
|
- Password: `Cs7yBx1Rh9oK`
|
|
- Test connection
|
|
|
|
## Security Note
|
|
|
|
Using `0.0.0.0/0` allows access from anywhere. For better security:
|
|
- Use your home IP: `YOUR_IP/32`
|
|
- Or use a VPN IP range
|
|
- The proxy has authentication, so it's somewhat protected
|
|
|
|
## Quick Navigation Path
|
|
|
|
1. **Networking** → **Virtual Cloud Networks**
|
|
2. Click your VCN (the one with 10.0.0.0/16)
|
|
3. **Security Lists** (left sidebar or Resources)
|
|
4. Click **Default Security List**
|
|
5. **Add Ingress Rules**
|
|
6. Add 4 rules (ports 7890, 7891, 7892, 9090)
|
|
7. **Save**
|
|
|
|
## Troubleshooting
|
|
|
|
**Can't find Security Lists?**
|
|
- Make sure you're in the VCN details page
|
|
- Look in the left sidebar under "Resources"
|
|
- Or check the "Resources" tab in the main content area
|
|
|
|
**Rules not working?**
|
|
- Wait 1-2 minutes for propagation
|
|
- Check that you added rules to the correct Security List
|
|
- Verify the Security List is attached to your subnet
|
|
- Check instance's subnet assignment
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|