Cara Terkoneksi ke WARP Cloudflare: Difference between revisions
Appearance
No edit summary |
|||
| (2 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
<syntaxhighlight lang="shell"> | |||
sudo apt install curl | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
curl https://pkg.cloudflareclient.com/pubkey.gpg | sudo gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main | echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main' | sudo tee /etc/apt/sources.list.d/cloudflare-client.list deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main | ||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
sudo apt update | |||
</syntaxhighlight>Jika error<syntaxhighlight lang="shell"> | |||
Jika error | W: GPG error: https://pkg.cloudflareclient.com focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6E2DD2174FA1C3BA | ||
E: The repository 'https://pkg.cloudflareclient.com focal InRelease' is not signed. | |||
N: Updating from such a repository can't be done securely, and is therefore disabled by default. | |||
N: See apt-secure(8) manpage for repository creation and user configuration details. | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
sudo apt-key del 835b8acb | |||
</syntaxhighlight>Ulangi kembali<syntaxhighlight lang="shell"> | |||
curl https://pkg.cloudflareclient.com/pubkey.gpg | sudo gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg | |||
Ulangi kembali | </syntaxhighlight><syntaxhighlight lang="shell"> | ||
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main' | sudo tee /etc/apt/sources.list.d/cloudflare-client.list deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
sudo apt update | |||
deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main | </syntaxhighlight><syntaxhighlight lang="shell"> | ||
sudo apt install cloudflare-warp | |||
</syntaxhighlight> | |||
==Aktifasi== | ==Aktifasi== | ||
<syntaxhighlight lang="shell"> | |||
warp-cli register | |||
Jika punya key WARP+ | </syntaxhighlight>Jika punya key WARP+<syntaxhighlight lang="shell"> | ||
warp-cli set-license 000mmm00-00011xxc-eee44452 | |||
</syntaxhighlight>Output:<syntaxhighlight lang="shell"> | |||
Output: | NOTICE: | ||
Cloudflare only collects limited DNS query and traffic data (excluding payload) | |||
that is sent to our network when you have the app enabled on your device. We | |||
will not sell, rent, share, or otherwise disclose your personal information to | |||
anyone, except as otherwise described in this Policy, without first providing | |||
you with notice and the opportunity to consent. All information is handled in | |||
accordance with our Privacy Policy. | |||
More information is available at: | |||
- https://www.cloudflare.com/application/terms/ | |||
- https://www.cloudflare.com/application/privacypolicy/ | |||
Accept Terms of Service and Privacy Policy? [y/N] y | |||
Output | Success | ||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
warp-cli connect | |||
</syntaxhighlight>Output:<syntaxhighlight lang="shell"> | |||
Success | |||
</syntaxhighlight>Testing<syntaxhighlight lang="shell"> | |||
curl https://www.cloudflare.com/cdn-cgi/trace/ | |||
</syntaxhighlight>Output<syntaxhighlight lang="shell"> | |||
fl=35f754 | |||
h=www.cloudflare.com | |||
ip=114.79.22.139 | |||
ts=1650266577.665 | |||
visit_scheme=https | |||
uag=curl/7.68.0 | |||
colo=SIN | |||
http=http/2 | |||
loc=ID | |||
tls=TLSv1.3 | |||
sni=plaintext | |||
warp=on | |||
gateway=off | |||
</syntaxhighlight>Set mode <syntaxhighlight lang="shell"> | |||
warp-cli set-mode --help | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
USAGE: | |||
warp-cli set-mode [mode] | |||
FLAGS: | |||
-h, --help Prints help information | |||
-V, --version Prints version information | |||
ARGS: | |||
<mode> [possible values: warp, doh, warp+doh, dot, warp+dot, proxy] | |||
</syntaxhighlight> | |||
==Usage== | ==Usage== | ||
<syntaxhighlight lang="shell"> | |||
warp-cli --help | |||
</syntaxhighlight><syntaxhighlight lang="shell"> | |||
WARP 2022.3.253 | |||
Cloudflare | |||
CLI to the WARP service daemon | |||
USAGE: | |||
warp-cli [FLAGS] [SUBCOMMAND] | |||
FLAGS: | |||
--accept-tos Accept the Terms of Service agreement | |||
-h, --help Prints help information | |||
-l Listen for status changes and DNS logs (if enabled) | |||
-V, --version Prints version information | |||
-v Enable verbose output. Multiple "v"s adds more verbosity | |||
SUBCOMMANDS: | |||
register Register with the WARP API, replacing any existing registration (Must be run | |||
before first connection!) | |||
teams-enroll Enroll with Cloudflare for Teams | |||
delete Delete current registration | |||
rotate-keys Generate a new key-pair, keeping the current registration | |||
status Ask the daemon to send the current status | |||
warp-stats Retrieve the stats for the current WARP connection | |||
settings Retrieve the current application settings | |||
connect Connect to WARP (Connection progress can be monitored with -l) | |||
disconnect Disconnect from WARP | |||
enable-always-on Enable Always-On mode, meaning WARP is connected whenever possible | |||
disable-always-on Disable Always-On mode | |||
disable-wifi Automatically disable WARP on Wi-Fi networks | |||
enable-wifi Allow WARP on Wi-Fi networks | |||
disable-ethernet Automatically disable WARP on ethernet networks | |||
enable-ethernet Allow WARP on ethernet networks | |||
add-trusted-ssid Add a trusted Wi-Fi network for which WARP will be automatically disconnected | |||
remove-trusted-ssid Remove a trusted Wi-Fi network | |||
exclude-private-ips Exclude private IP ranges from tunnel | |||
enable-dns-log Enable DNS logging (Use with the -l option) | |||
disable-dns-log Disable DNS logging | |||
account Display the account associated with the current registration | |||
devices Display the list of devices associated with the current registration | |||
network Display the current network information | |||
set-mode | |||
set-families-mode | |||
set-license Attach the current registration to a different account using a license key | |||
set-gateway Force the app to use the specified Gateway ID for DNS queries | |||
clear-gateway Clear the Gateway ID | |||
set-custom-endpoint Force the client to connect to the specified IP:PORT endpoint | |||
clear-custom-endpoint Remove the custom endpoint setting | |||
add-excluded-route Add an excluded IP | |||
remove-excluded-route Remove an excluded IP | |||
get-excluded-routes Get the list of excluded routes | |||
get-included-routes Get the list of included routes | |||
get-excluded-hosts Get the list of excluded hosts | |||
get-included-hosts Get the list of included hosts | |||
add-excluded-host Add an excluded host | |||
remove-excluded-host Remove an excluded host | |||
add-fallback-domain Add a domain that should be resolved with the fallback resolver instead of WARP's | |||
remove-fallback-domain Stop a domain from being resolved with the fallback resolver | |||
get-fallback-domains Get the list of domains that go to the fallback resolver | |||
restore-fallback-domains Restore the list of fallback resolver domains to its default value | |||
get-device-posture Get the current device posture | |||
override Temporarily override MDM policies that require the client to stay enabled | |||
set-proxy-port Set the listening port for WARP proxy (127.0.0.1:{port}) | |||
is-mode-switch-allowed Outputs true if Teams users should be able to change connection mode, or false if | |||
not. | |||
reset-settings Restore settings to default | |||
get-organization Get the name of the Teams organization attached to the current registration. | |||
access-reauth Force refresh authentication with Cloudflare Access. | |||
get-support-url Get the support url for the current Teams organization. | |||
get-pause-end Retrieve the pause end time | |||
get-override-end Retrieve the admin override end time | |||
disable-connectivity-checks Disable the runtime connectivity checks | |||
enable-connectivity-checks Enable the runtime connectivity checks | |||
help Prints this message or the help of the given subcommand(s) | |||
</syntaxhighlight> | |||
==Download== | ==Download== | ||
Latest revision as of 14:53, 25 August 2022
sudo apt install curl
curl https://pkg.cloudflareclient.com/pubkey.gpg | sudo gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main' | sudo tee /etc/apt/sources.list.d/cloudflare-client.list deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main
sudo apt update
Jika error
W: GPG error: https://pkg.cloudflareclient.com focal InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 6E2DD2174FA1C3BA
E: The repository 'https://pkg.cloudflareclient.com focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
sudo apt-key del 835b8acb
Ulangi kembali
curl https://pkg.cloudflareclient.com/pubkey.gpg | sudo gpg --yes --dearmor --output /usr/share/keyrings/cloudflare-warp-archive-keyring.gpg
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main' | sudo tee /etc/apt/sources.list.d/cloudflare-client.list deb [arch=amd64 signed-by=/usr/share/keyrings/cloudflare-warp-archive-keyring.gpg] https://pkg.cloudflareclient.com/ focal main
sudo apt update
sudo apt install cloudflare-warp
Aktifasi
warp-cli register
Jika punya key WARP+
warp-cli set-license 000mmm00-00011xxc-eee44452
Output:
NOTICE:
Cloudflare only collects limited DNS query and traffic data (excluding payload)
that is sent to our network when you have the app enabled on your device. We
will not sell, rent, share, or otherwise disclose your personal information to
anyone, except as otherwise described in this Policy, without first providing
you with notice and the opportunity to consent. All information is handled in
accordance with our Privacy Policy.
More information is available at:
- https://www.cloudflare.com/application/terms/
- https://www.cloudflare.com/application/privacypolicy/
Accept Terms of Service and Privacy Policy? [y/N] y
Success
warp-cli connect
Output:
Success
Testing
curl https://www.cloudflare.com/cdn-cgi/trace/
Output
fl=35f754
h=www.cloudflare.com
ip=114.79.22.139
ts=1650266577.665
visit_scheme=https
uag=curl/7.68.0
colo=SIN
http=http/2
loc=ID
tls=TLSv1.3
sni=plaintext
warp=on
gateway=off
Set mode
warp-cli set-mode --help
USAGE:
warp-cli set-mode [mode]
FLAGS:
-h, --help Prints help information
-V, --version Prints version information
ARGS:
<mode> [possible values: warp, doh, warp+doh, dot, warp+dot, proxy]
Usage
warp-cli --help
WARP 2022.3.253
Cloudflare
CLI to the WARP service daemon
USAGE:
warp-cli [FLAGS] [SUBCOMMAND]
FLAGS:
--accept-tos Accept the Terms of Service agreement
-h, --help Prints help information
-l Listen for status changes and DNS logs (if enabled)
-V, --version Prints version information
-v Enable verbose output. Multiple "v"s adds more verbosity
SUBCOMMANDS:
register Register with the WARP API, replacing any existing registration (Must be run
before first connection!)
teams-enroll Enroll with Cloudflare for Teams
delete Delete current registration
rotate-keys Generate a new key-pair, keeping the current registration
status Ask the daemon to send the current status
warp-stats Retrieve the stats for the current WARP connection
settings Retrieve the current application settings
connect Connect to WARP (Connection progress can be monitored with -l)
disconnect Disconnect from WARP
enable-always-on Enable Always-On mode, meaning WARP is connected whenever possible
disable-always-on Disable Always-On mode
disable-wifi Automatically disable WARP on Wi-Fi networks
enable-wifi Allow WARP on Wi-Fi networks
disable-ethernet Automatically disable WARP on ethernet networks
enable-ethernet Allow WARP on ethernet networks
add-trusted-ssid Add a trusted Wi-Fi network for which WARP will be automatically disconnected
remove-trusted-ssid Remove a trusted Wi-Fi network
exclude-private-ips Exclude private IP ranges from tunnel
enable-dns-log Enable DNS logging (Use with the -l option)
disable-dns-log Disable DNS logging
account Display the account associated with the current registration
devices Display the list of devices associated with the current registration
network Display the current network information
set-mode
set-families-mode
set-license Attach the current registration to a different account using a license key
set-gateway Force the app to use the specified Gateway ID for DNS queries
clear-gateway Clear the Gateway ID
set-custom-endpoint Force the client to connect to the specified IP:PORT endpoint
clear-custom-endpoint Remove the custom endpoint setting
add-excluded-route Add an excluded IP
remove-excluded-route Remove an excluded IP
get-excluded-routes Get the list of excluded routes
get-included-routes Get the list of included routes
get-excluded-hosts Get the list of excluded hosts
get-included-hosts Get the list of included hosts
add-excluded-host Add an excluded host
remove-excluded-host Remove an excluded host
add-fallback-domain Add a domain that should be resolved with the fallback resolver instead of WARP's
remove-fallback-domain Stop a domain from being resolved with the fallback resolver
get-fallback-domains Get the list of domains that go to the fallback resolver
restore-fallback-domains Restore the list of fallback resolver domains to its default value
get-device-posture Get the current device posture
override Temporarily override MDM policies that require the client to stay enabled
set-proxy-port Set the listening port for WARP proxy (127.0.0.1:{port})
is-mode-switch-allowed Outputs true if Teams users should be able to change connection mode, or false if
not.
reset-settings Restore settings to default
get-organization Get the name of the Teams organization attached to the current registration.
access-reauth Force refresh authentication with Cloudflare Access.
get-support-url Get the support url for the current Teams organization.
get-pause-end Retrieve the pause end time
get-override-end Retrieve the admin override end time
disable-connectivity-checks Disable the runtime connectivity checks
enable-connectivity-checks Enable the runtime connectivity checks
help Prints this message or the help of the given subcommand(s)