Cloudflare Tunnel无法建立QUIC连接问题求助

问题现象 #

运行Cloudflare Tunnel时，未手动开启实验性后量子隧道功能却收到相关提示，同时持续出现QUIC连接超时错误：

2023-11-27T22:23:30Z ERR Failed to create new quic connection error="failed to dial to edge with quic: timeout: no recent network activity" connIndex=0 event=0 ip=198.41.200.193
2023-11-27T22:23:30Z INF Retrying connection in up to 2s connIndex=0 event=0 ip=198.41.200.193
2023-11-27T22:23:37Z ERR Failed to create new quic connection error="failed to dial to edge with quic: timeout: no recent network activity" connIndex=0 event=0 ip=198.41.200.53
2023-11-27T22:23:37Z INF Retrying connection in up to 4s connIndex=0 event=0 ip=198.41.200.53
2023-11-27T22:23:44Z ERR Failed to create new quic connection error="failed to dial to edge with quic: timeout: no recent network activity" connIndex=0 event=0 ip=198.41.200.33
2023-11-27T22:23:44Z INF Retrying connection in up to 8s connIndex=0 event=0 ip=198.41.200.33
2023-11-27T22:23:51Z ERR Failed to create new quic connection error="failed to dial to edge with quic: timeout: no recent network activity" connIndex=0 event=0 ip=198.41.200.193

解决步骤 #

1. 禁用后量子隧道特性 #

部分新版本cloudflared会默认启用实验性后量子特性，即使未手动配置，可通过以下方式禁用：

• 命令行启动时添加参数：在启动命令末尾追加 --post-quantum=false
• 配置文件修改：编辑Cloudflare Tunnel配置文件（通常为~/.cloudflared/config.yml），添加一行：

  post_quantum: false
  

2. 修复QUIC连接超时问题 #

QUIC基于UDP协议，超时多因UDP端口被拦截或网络不支持，可尝试以下方案：

• 强制使用TCP协议：启动时添加 --protocol tcp 参数，切换至TCP连接，绕过UDP限制
• 检查本地防火墙：确保Endeavour OS的防火墙（如ufw、firewalld）允许cloudflared出站访问UDP 7844端口（Cloudflare Tunnel默认QUIC端口）
• 重装cloudflared：若为版本bug导致，卸载当前版本后重新安装官方稳定版
• 排查网络环境：确认服务器网络可正常访问Cloudflare边缘节点，若在受限网络环境下，可尝试更换网络或调整网络策略

内容的提问来源于stack exchange，提问作者Ianyourgod