使用 Cloudflare API 自建 IPv6 DDNS，让 PVE 中 Windows 11 实现公网远程访问

# =====================================================
# Cloudflare IPv6 DDNS
# Windows 11 + PVE VirtIO optimized
#
# Features:
# IPv6 stable address detection
# Cloudflare API update
# Telegram notification
# Log rotation
#
# PowerShell 5.1 compatible
# =====================================================

# 设置控制台编码
[Console]::OutputEncoding =
[System.Text.Encoding]::UTF8


# 配置文件

$config="C:\RDP_DDNS\config.ps1"


if(!(Test-Path $config))
{
    Write-Host "配置文件不存在: $config"
    exit
}

# 加载配置

. $config


# =====================================================
# 日志
# =====================================================

function Write-Log
{

    param(
        [string]$Message
    )

    $line =
    "[$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')] $Message"

    Write-Host $line

    try
    {

        Add-Content `
        -Path $logFilePath `
        -Value $line `
        -Encoding UTF8

    }
    catch
    {

    }

}

# =====================================================
# 日志轮换
# =====================================================


if(Test-Path $logFilePath)
{

    if((Get-Item $logFilePath).Length -gt 5MB)
    {

        Rename-Item `
        -Path $logFilePath `
        -NewName "$logFilePath.old" `
        -Force

    }

}


# =====================================================
# 获取公网 IPv6
# =====================================================


function Get-PublicIPv6
{
    Write-Log "开始检测IPv6"

    $ips =
    Get-NetIPAddress `
    -AddressFamily IPv6 `
    -AddressState Preferred

    # -------------------------------------------------
    # 优先寻找稳定IPv6地址
    #
    # Windows关闭隐私地址后
    # VirtIO网卡生成稳定接口ID
    #
    # 如果你的地址后缀固定:
    #
    # xxxx:xxxx:xxxx
    #
    # 可以填写到这里
    # -------------------------------------------------


    $stable =
    $ips |
    Where-Object {


        $_.IPAddress -match "^[23]" `

        -and $_.IPAddress -notlike "fe80::*" `

        -and $_.IPAddress -notlike "fc00::*" `

        -and $_.IPAddress -notlike "fd00::*"

    } |
    Select-Object -First 1

    if($stable)
    {

        Write-Log "使用稳定公网IPv6"

        return $stable.IPAddress

    }

    # -------------------------------------------------
    # 备用方案
    # -------------------------------------------------

    try
    {

        $ip =
        Invoke-RestMethod `
        -Uri "https://api6.ipify.org" `
        -TimeoutSec 10

        if($ip -match ":")
        {

            Write-Log "使用IPv6 API"

            return $ip.Trim()

        }

    }
    catch
    {

    }

    return $null

}


# =====================================================
# 获取IPv6
# =====================================================


$ipv6 =
Get-PublicIPv6

if(!$ipv6)
{

    Write-Log "错误:没有公网IPv6"

    exit

}


Write-Log "当前IPv6: $ipv6"

# =====================================================
# Cloudflare API
# =====================================================


$headers=@{


    Authorization=
    "Bearer $apiToken"
    "Content-Type"=
    "application/json"

}


$nameEncoded =
[uri]::EscapeDataString($recordName)



$getUrl =
"https://api.cloudflare.com/client/v4/zones/" +
$zoneId +
"/dns_records?type=AAAA&name=" +
$nameEncoded

try
{


    $result =
    Invoke-RestMethod `

    -Uri $getUrl `

    -Headers $headers `

    -Method Get `

    -TimeoutSec 15

    if($result.result.Count -ne 1)
    {

        throw "AAAA记录数量异常"

    }


}
catch
{

    Write-Log "获取DNS失败: $($_.Exception.Message)"

    exit

}


$record =
$result.result[0]

$recordId =
$record.id

$oldIP =
$record.content

Write-Log "Cloudflare当前IPv6: $oldIP"

# =====================================================
# 判断是否变化
# =====================================================

if($oldIP -eq $ipv6)
{

    Write-Log "IPv6没有变化，无需更新"

    exit

}


Write-Log "IPv6发生变化"

Write-Log "旧: $oldIP"

Write-Log "新: $ipv6"

# =====================================================
# 更新Cloudflare
# =====================================================

$updateUrl =

"https://api.cloudflare.com/client/v4/zones/" +

$zoneId +

"/dns_records/" +

$recordId

$body =
@{

    type="AAAA"

    name=$recordName

    content=$ipv6

    ttl=1

    proxied=$false


} |
ConvertTo-Json

try
{


    $update =

    Invoke-RestMethod `

    -Uri $updateUrl `

    -Headers $headers `

    -Method Put `

    -Body $body `

    -TimeoutSec 20

    if($update.success)
    {

        Write-Log "Cloudflare更新成功"


        $status="成功"


    }
    else
    {


        Write-Log "Cloudflare更新失败"


        $status="失败"

    }


}
catch
{

    Write-Log "更新异常: $($_.Exception.Message)"


    $status="异常"

}


# =====================================================
# Telegram通知
# =====================================================


if($telegramEnable -eq $true)
{


$msg =

"Cloudflare IPv6 DDNS更新`n" +

"状态: $status`n" +

"域名: $recordName`n" +

"旧IP: $oldIP`n" +

"新IP: $ipv6`n" +

"时间: $(Get-Date)"

try
{

    $null =
    Invoke-RestMethod `

    -Uri "https://api.telegram.org/bot$telegramBotToken/sendMessage" `

    -Method Post `

    -Body @{

        chat_id=$telegramChatId

        text=$msg
    }

}
catch
{

}

}

Write-Log "执行完成"