Manage ProtonVPN OpenVPN connections — connect, disconnect, rotate, check status
设计与多媒体
VPN Tunnel
试用VPN tunnel for accessing foreign websites (Google, GitHub, Docker Hub, etc.) through a cloud VPS (47.85.45.122) via WireGuard + SOCKS5 proxy. Use when: (1) N...
它能做什么
VPN tunnel for accessing foreign websites (Google, GitHub, Docker Hub, etc.) through a cloud VPS (47.85.45.122) via WireGuard + SOCKS5 proxy. Use when: (1) Need to access foreign/international websites blocked in China, (2) Need to pull Docker images from Docker Hub, (3) Need to access Google, GitHub or other overseas APIs/services that are unreachable via direct connection, (4) User asks to "use VPN", "connect to VPN", "change IP", or "access international sites". ⚠️ CRITICAL: Only use this for overseas/international sites. Do NOT use for domestic/China-accessible sites (GitHub is often directly reachable and faster). Always close the tunnel immediately after use.
技能文档
VPN Tunnel Skill
On-demand WireGuard VPN tunnel to cloud VPS (47.85.45.122 "大锤") + SSH SOCKS5 proxy for accessing foreign websites blocked in China.
⚠️ CRITICAL RULES
- Only for overseas/blocked sites — Google, Docker Hub, etc. Never use for domestic sites or sites directly reachable from China.
- Open → Use → Close immediately — Never leave the tunnel running.
- Do NOT modify local network routes — VPN only carries explicit proxy traffic.
- Local routes always take priority — Normal internet traffic stays on local NICs.
Speed Reference (tested 2026-06-19)
| Site | Direct | VPN | Verdict |
|---|---|---|---|
| ❌ blocked | ✅ 1.5s / ~50KB/s | Use VPN | |
| Docker Hub | ❌ blocked | ✅ 6.2s / ~73KB/s | Use VPN |
| GitHub | ✅ 1.0s / 545KB/s | 5.6s / 100KB/s | Prefer direct |
| PyPI | ✅ 0.3s / 68KB/s | 1.1s / 21KB/s | Prefer direct |
Rule of thumb: If a site is directly reachable (non-zero HTTP status with acceptable speed), use direct connection. Only fall back to VPN when direct connection fails or times out.
Usage
Start
bash ~/.openclaw/skills/vpn-tunnel/scripts/vpn-up.sh
With auto-test:
bash ~/.openclaw/skills/vpn-tunnel/scripts/vpn-up.sh --test
Access overseas sites via proxy
curl --proxy socks5h://127.0.0.1:1080
For web_fetch tool unavailable on overseas sites, use exec+curl:
curl -s --max-time 15 --proxy socks5h://127.0.0.1:1080
Check status
bash ~/.openclaw/skills/vpn-tunnel/scripts/vpn-status.sh
Close (MANDATORY after use)
bash ~/.openclaw/skills/vpn-tunnel/scripts/vpn-down.sh
Architecture
Local machine → WireGuard (10.0.0.3) → Cloud VPS (10.0.0.1)
→ SSH SOCKS5 (127.0.0.1:1080)
→ Internet (exit IP: 47.85.45.122)
Configuration
| Item | Value |
|---|---|
| Cloud VPS | 47.85.45.122 |
| WireGuard port | UDP 51820 |
| VPN subnet | 10.0.0.0/24 |
| Local VPN IP | 10.0.0.3 |
| Server VPN IP | 10.0.0.1 |
| SOCKS5 proxy | 127.0.0.1:1080 |
| SSH user | smile |
| WireGuard config | /etc/wireguard/wg0.conf |
Decision Flow
Need to access a URL?
├─ Is it domestic / directly reachable? → Use direct connection
├─ Is it blocked / overseas-only? → Start VPN, access, close VPN
└─ After VPN access is done → IMMEDIATELY close VPN
相关技能
面向开发者的去中心化SOCKS5代理请求工具,通过全球分布式网络节点发起HTTP请求,支持按国家地区选择出口IP. 核心能力:生成短期有效的SOCKS5代理凭证,支持按地理位置选择节点、代理租期管理、余额查询与基础请求转发. 适用场景:多地区内容验证、地理限制测试、爬虫IP轮换、API区域限流规避等网络请求场景. 差异化:重新设计中文交互流程,新增输入安全校验机制,完善错误恢复策略,去除外部依赖引用,适配国内开发者使用习惯. 适用关键词:代理、proxy、socks5、去中心化、出口IP、网络请求、地区节点
Expose local SSH servers to the public internet via aitun TCP tunnel with SSH-over-TLS routing. Each subdomain gets its own SSH endpoint on port 22 with perf...
Expose local web pages and HTTP services to the public internet via secure tunnels. Perfect for AI agents that build websites locally and need to share them...
Expose a local API service to the public internet via aitun tunnel for external testing and integration. Perfect for AI agents that build REST APIs, gRPC ser...
Create and manage DevBridge development tunnels on Huawei Cloud to securely expose local development services to remote devices. Based on DevBridge CLI v0.1.12+ and Huawei Cloud IAM authentication. Use this skill when the user wants to: (1) install and configure the DevBridge CLI, (2) create/list/update/delete tunnels, (3) manage tunnel ports and protocols, (4) host local services through tunnels, (5) connect to remote tunnels from another device, (6) manage authentication and tokens. Trigger: user mentions "DevBridge", "开发隧道", "开发者隧道", "dev tunnel", "tunnel", "host local service", "expose local port", "connect tunnel", "托管本地服务", "隧道端口", "devbridge", "DevSpace", "开发空间隧道"