debug.sh

#!/bin/bash

MODE="short"
for arg in "$@"; do
    [ "$arg" = "--full" ] && MODE="full"
done

G='\033[0;32m'; Y='\033[1;33m'; C='\033[0;36m'; R='\033[0;31m'; N='\033[0m'; B='\033[1m'
OK="${G}+${N}"; FAIL="${R}x${N}"

MY_IP=$(curl -4s --max-time 3 ifconfig.me 2>/dev/null || echo "N/A")
CF_IP=$(getent ahostsv4 engage.cloudflareclient.com 2>/dev/null | awk '{print $1; exit}')
CT_CUR=$(cat /proc/sys/net/netfilter/nf_conntrack_count 2>/dev/null || echo "?")
CT_MAX=$(cat /proc/sys/net/netfilter/nf_conntrack_max 2>/dev/null || echo "?")
FWD=$(sysctl -n net.ipv4.ip_forward 2>/dev/null)
CONNTRACK_DATA=$(conntrack -L -o extended -p udp 2>/dev/null | grep -v "dport=22")
ASSURED=$(echo "$CONNTRACK_DATA" | grep -c "ASSURED")
UNREPLIED=$(echo "$CONNTRACK_DATA" | grep -c "UNREPLIED")
UNIQUE_COUNT=$(echo "$CONNTRACK_DATA" | grep -oP '^.*?src=\K[0-9.]+' | grep -v "^162\.159\." | grep -v "^${MY_IP}$" | sort -u | wc -l)

format_speed() {
    local bits=$(( $1 * 8 ))
    if [ $bits -gt 1000000 ]; then
        echo "$(echo "scale=1; $bits / 1000000" | bc) Mbps"
    elif [ $bits -gt 1000 ]; then
        echo "$(echo "scale=0; $bits / 1000" | bc) kbps"
    else
        echo "${bits} bps"
    fi
}

# ══════════════════════════════════════
# КРАТКИЙ РЕЖИМ
# ══════════════════════════════════════
if [ "$MODE" = "short" ]; then

    echo ""
    echo -e "${B}=== WARP Relay Debug ===${N}"
    echo -e "${C}Host:${N} $(hostname) (${MY_IP})"
    echo -e "${C}Load:${N} $(cat /proc/loadavg | awk '{print $1}') | ${C}RAM:${N} $(free -h | awk '/^Mem:/ {printf "%s/%s", $3, $2}') | ${C}Up:${N} $(uptime -p 2>/dev/null | sed 's/up //')"

    # Forward
    if [ "$FWD" = "1" ]; then echo -e "${C}Forward:${N} ${OK} on"
    else echo -e "${C}Forward:${N} ${FAIL} OFF"; fi

    # CF
    if [ -n "$CF_IP" ]; then
        PING_MS=$(ping -c 2 -W 2 "$CF_IP" 2>/dev/null | tail -1 | awk -F'/' '{print $5}')
        echo -e "${C}CF:${N} ${OK} ${CF_IP} (${PING_MS:-?}ms)"
    else
        echo -e "${C}CF:${N} ${FAIL} DNS fail"
    fi

    # Подключения
    echo -e "${C}Clients:${N} ${B}${UNIQUE_COUNT}${N} unique | ${G}${ASSURED} active${N} | ${UNREPLIED} pending | conntrack ${CT_CUR}/${CT_MAX}"

    # Трафик суммарный
    TRAFFIC=$(iptables -L FORWARD -n -v 2>/dev/null | grep "WR_RULE" | \
        awk '{
            gsub(/K/,"e3",$2); gsub(/M/,"e6",$2); gsub(/G/,"e9",$2)
            bytes += $2+0
            if ($8 == "162.159.192.1") dl += $2+0
            else ul += $2+0
        } END {
            printf "%.1f GB up / %.1f GB down / %.1f GB total", ul/1073741824, dl/1073741824, bytes/1073741824
        }')
    echo -e "${C}Traffic:${N} ${TRAFFIC} (since boot)"

    # Скорость (5 сек)
    IFACE=$(ip route | awk '/default/ {print $5; exit}')
    if [ -n "$IFACE" ]; then
        RX1=$(cat /sys/class/net/$IFACE/statistics/rx_bytes)
        TX1=$(cat /sys/class/net/$IFACE/statistics/tx_bytes)
        printf "  measuring speed..."
        sleep 5
        RX2=$(cat /sys/class/net/$IFACE/statistics/rx_bytes)
        TX2=$(cat /sys/class/net/$IFACE/statistics/tx_bytes)
        printf "\r                     \r"
        AVG_RX=$(( (RX2 - RX1) / 5 ))
        AVG_TX=$(( (TX2 - TX1) / 5 ))
        echo -e "${C}Speed:${N} ${G}$(format_speed $AVG_RX) down${N} / ${G}$(format_speed $AVG_TX) up${N}"
    fi

    echo -e "${C}Ports:${N} $(echo "$CONNTRACK_DATA" | grep -oP 'dport=\K[0-9]+' | sort | uniq -c | sort -rn | head -5 | awk '{printf "%s(%s) ", $2, $1}')"
    echo ""

    exit 0
fi

# ══════════════════════════════════════
# ПОЛНЫЙ РЕЖИМ (--full)
# ══════════════════════════════════════

echo ""
echo -e "${B}════════════════════════════════════════════${N}"
echo -e "${B}   WARP Relay Server Debug (full)${N}"
echo -e "${B}════════════════════════════════════════════${N}"
echo -e "${C}Время:${N}  $(date '+%Y-%m-%d %H:%M:%S')"
echo -e "${C}Хост:${N}   $(hostname)"
echo -e "${C}IP:${N}     ${MY_IP}"

# ── Система ──
echo ""
echo -e "${Y}── Система ──${N}"
echo -e "${C}Uptime:${N}  $(uptime -p 2>/dev/null || uptime)"
LOAD=$(cat /proc/loadavg | awk '{print $1, $2, $3}')
CORES=$(nproc 2>/dev/null || echo 1)
echo -e "${C}Load:${N}    ${LOAD} (${CORES} cores)"
echo -e "${C}RAM:${N}     $(free -h | awk '/^Mem:/ {printf "%s / %s (%.0f%%)", $3, $2, $3/$2*100}')"

# ── IP Forward ──
echo ""
echo -e "${Y}── IP Forward ──${N}"
if [ "$FWD" = "1" ]; then echo -e "  ${OK} ip_forward включён"
else echo -e "  ${FAIL} ip_forward ВЫКЛЮЧЕН"; fi

# ── CF Endpoint ──
echo ""
echo -e "${Y}── Cloudflare Endpoint ──${N}"
if [ -n "$CF_IP" ]; then
    echo -e "  ${OK} ${CF_IP} (engage.cloudflareclient.com)"
    PING_RESULT=$(ping -c 3 -W 2 "$CF_IP" 2>/dev/null | tail -1 | awk -F'/' '{print $5}')
    if [ -n "$PING_RESULT" ]; then
        echo -e "  ${OK} Ping: ${PING_RESULT}ms"
    else
        echo -e "  ${C}Ping: ICMP заблокирован (нормально для CF)${N}"
    fi
else
    echo -e "  ${FAIL} DNS не резолвится"
fi

# ── Подключения ──
echo ""
echo -e "${Y}── Подключения ──${N}"
echo -e "${C}Conntrack:${N}  ${B}${CT_CUR}${N} / ${CT_MAX}"

if [ -n "$CONNTRACK_DATA" ]; then
    echo -e "${C}Активных (ASSURED):${N}    ${B}${G}${ASSURED}${N}"
    echo -e "${C}Ожидание (UNREPLIED):${N}  ${B}${UNREPLIED}${N}"
    echo -e "${C}Уникальных клиентов:${N}   ${B}${UNIQUE_COUNT}${N}"

    # Топ клиентов
    echo ""
    echo -e "${C}Топ-10 клиентов (по сессиям):${N}"
    echo "$CONNTRACK_DATA" | grep -oP '^.*?src=\K[0-9.]+' | \
        grep -v "^162\.159\." | grep -v "^${MY_IP}$" | \
        sort | uniq -c | sort -rn | head -10 | \
        while read count ip; do
            SESS_ASSURED=$(echo "$CONNTRACK_DATA" | grep "src=${ip} " | grep -c "ASSURED")
            SESS_UNREPLIED=$(echo "$CONNTRACK_DATA" | grep "src=${ip} " | grep -c "UNREPLIED")
            echo -e "  ${B}${count}${N} сессий  ${ip}  (active:${SESS_ASSURED} pending:${SESS_UNREPLIED})"
        done

    # Порты
    echo ""
    echo -e "${C}Использование портов:${N}"
    echo "$CONNTRACK_DATA" | grep -oP 'dport=\K[0-9]+' | head -1000 | \
        sort | uniq -c | sort -rn | head -10 | \
        while read count port; do
            BAR=""
            for ((i=0; i<count && i<30; i++)); do BAR="${BAR}#"; done
            echo -e "  port ${B}${port}${N}  ${count} ${G}${BAR}${N}"
        done
else
    echo -e "  ${R}conntrack пуст или не доступен${N}"
    echo -e "  Попробуй: apt install conntrack"
fi

# ── iptables ──
echo ""
echo -e "${Y}── iptables (WR_RULE) ──${N}"
NAT_RULES=$(iptables -t nat -S 2>/dev/null | grep -c "WR_RULE")
FWD_RULES=$(iptables -S FORWARD 2>/dev/null | grep -c "WR_RULE")
echo -e "${C}NAT правил:${N}      ${NAT_RULES}"
echo -e "${C}FORWARD правил:${N}  ${FWD_RULES}"

echo ""
echo -e "${C}Трафик через FORWARD (с аптайма):${N}"
iptables -L FORWARD -n -v 2>/dev/null | grep "WR_RULE" | \
    awk '{
        dir = "???"
        if ($9 == "162.159.192.1") dir = "CLIENT->CF"
        else if ($8 == "162.159.192.1") dir = "CF->CLIENT"
        printf "  %-12s  pkts=%-10s  bytes=%-8s  %s -> %s\n", dir, $1, $2, $8, $9
    }'

echo ""
echo -e "${C}Суммарный трафик:${N}"
iptables -L FORWARD -n -v 2>/dev/null | grep "WR_RULE" | \
    awk '{
        gsub(/K/,"e3",$1); gsub(/M/,"e6",$1); gsub(/G/,"e9",$1)
        gsub(/K/,"e3",$2); gsub(/M/,"e6",$2); gsub(/G/,"e9",$2)
        pkts += $1+0; bytes += $2+0
        if ($8 == "162.159.192.1") { dl_bytes += $2+0; dl_pkts += $1+0 }
        else { ul_bytes += $2+0; ul_pkts += $1+0 }
    }
    END {
        printf "  Upload:    %.1f GB  (%d M pkts)\n", ul_bytes/1073741824, ul_pkts/1000000
        printf "  Download:  %.1f GB  (%d M pkts)\n", dl_bytes/1073741824, dl_pkts/1000000
        printf "  Total:     %.1f GB\n", bytes/1073741824
    }'

# ── Скорость ──
echo ""
DURATION=10
echo -e "${Y}── Скорость (замер ${DURATION} сек) ──${N}"
IFACE=$(ip route | awk '/default/ {print $5; exit}')
if [ -n "$IFACE" ]; then
    PREV_RX=$(cat /sys/class/net/$IFACE/statistics/rx_bytes)
    PREV_TX=$(cat /sys/class/net/$IFACE/statistics/tx_bytes)
    FIRST_RX=$PREV_RX
    FIRST_TX=$PREV_TX
    MAX_RX=0
    MAX_TX=0

    for ((sec=1; sec<=DURATION; sec++)); do
        sleep 1
        NOW_RX=$(cat /sys/class/net/$IFACE/statistics/rx_bytes)
        NOW_TX=$(cat /sys/class/net/$IFACE/statistics/tx_bytes)
        SEC_RX=$(( NOW_RX - PREV_RX ))
        SEC_TX=$(( NOW_TX - PREV_TX ))
        [ $SEC_RX -gt $MAX_RX ] && MAX_RX=$SEC_RX
        [ $SEC_TX -gt $MAX_TX ] && MAX_TX=$SEC_TX
        PREV_RX=$NOW_RX
        PREV_TX=$NOW_TX
        printf "\r  замер... %d/%d сек" "$sec" "$DURATION"
    done
    printf "\r                          \r"

    AVG_RX=$(( (NOW_RX - FIRST_RX) / DURATION ))
    AVG_TX=$(( (NOW_TX - FIRST_TX) / DURATION ))

    echo -e "  ${B}${IFACE}${N} средняя:  ${G}down $(format_speed $AVG_RX)${N}   ${G}up $(format_speed $AVG_TX)${N}"
    echo -e "  ${B}${IFACE}${N} пиковая:  ${G}down $(format_speed $MAX_RX)${N}   ${G}up $(format_speed $MAX_TX)${N}"
else
    echo -e "  ${FAIL} Не определён интерфейс"
fi

# ── Интерфейсы ──
echo ""
echo -e "${Y}── Интерфейсы ──${N}"
for iface in $(ls /sys/class/net/ | grep -v lo); do
    RX=$(cat /sys/class/net/$iface/statistics/rx_bytes 2>/dev/null || echo 0)
    TX=$(cat /sys/class/net/$iface/statistics/tx_bytes 2>/dev/null || echo 0)
    RX_H=$(numfmt --to=iec $RX 2>/dev/null || echo "${RX}")
    TX_H=$(numfmt --to=iec $TX 2>/dev/null || echo "${TX}")
    STATE=$(cat /sys/class/net/$iface/operstate 2>/dev/null || echo "?")
    IP=$(ip -4 addr show $iface 2>/dev/null | awk '/inet / {print $2}' | head -1)
    echo -e "  ${B}${iface}${N} (${STATE}) ${IP:-no ip}  total: ${G}down ${RX_H}${N} ${G}up ${TX_H}${N}"
done

echo ""
echo -e "${B}════════════════════════════════════════════${N}"
echo -e "${G}Done.${N}"
echo ""