WCS Helper: Network Tunnel

Access internationally blocked websites from your China-based server.

---

When You Need This

Scenario A — "git push keeps timing out"

git push github main
# → Connection timeout

→ /万重山-隧道-开启 → try push again → succeeds

Scenario B — "npm install keeps failing for a package from GitHub"

npm install some-github-package
# → network timeout

→ /万重山-隧道-开启 → npm works through tunnel

Scenario C — "HuggingFace model download is stuck"

huggingface-cli download ...
# → timeout or connection reset

→ /万重山-隧道-开启 → download completes through tunnel

Scenario D — "ClawHub skill install is super slow"

clawhub install author/skill
# → extremely slow, often fails

→ /万重山-隧道-开启 → ClawHub installs at full speed

---

Supported Sites

Site	Use Case	Status
GitHub	git clone/push, npm packages	✅
ClawHub

skill install, plugin browsing | ✅ |
| HuggingFace | model downloads, datasets | ✅ |
| arXiv | research paper access | ✅ |
| Google | search, fonts, analytics | ✅ |
| YouTube | video embeds, APIs | ✅ |
| Twitter/X | social media embeds | ✅ |
| Reddit | forum access, APIs | ✅ |

---

Prerequisites

Required

• - A server outside China (any VPS with SSH access)

- Recommended: Tencent Cloud Singapore, AWS Singapore, or any international VPS - SSH password authentication must be enabled

• - SSH password for that server
• Server's public IP address

Recommended

• - autossh installed on your China server (auto-restarts tunnel if it drops)

- Install: apt install autossh (Debian/Ubuntu)

• - sshpass installed (for password-based SSH)

- Install: INLINECODE7

Network Flow

CODEBLOCK4

---

Setup

1. Get a Tunnel Server

Any international VPS works. Recommended:

• - Tencent Cloud Singapore (CNY ~15/month)
• AWS Singapore Free Tier
• DigitalOcean Singapore
• Vultr Tokyo/Singapore

Requirements:

• - SSH password access enabled
• Port 22 (SSH) open to China IPs

2. Install the Skill

CODEBLOCK5

3. Configure with Your Server

Send this command via Feishu private chat:

CODEBLOCK6

Example:
CODEBLOCK7

4. Start the Tunnel

CODEBLOCK8

You should see: ✅ Tunnel connected

5. Test It

CODEBLOCK9

---

All Commands

Command	What It Does
INLINECODE8	Set up tunnel server credentials
INLINECODE9

Start the tunnel |
| /万重山-隧道-关闭 | Stop the tunnel |
| /万重山-隧道-状态 | Show tunnel connection status |
| /万重山-隧道-测试 | Test tunnel speed |
| /万重山-隧道-帮助 | Show help |

---

Usage Tips

Before Running git/npm Commands

Send /万重山-隧道-状态 first. If you see "Tunnel: ✅", you're good. If "Tunnel: ❌", send /万重山-隧道-开启 first.

Tunnel Stays On Until You Close It

The tunnel runs in the background. Send /万重山-隧道-关闭 when you don't need international access any more.

Which Ports Are Proxied

Only TCP connections through the SOCKS5 proxy are tunneled:

• - GitHub (443) ✅
• ClawHub (443) ✅
• HuggingFace (443) ✅
• Google (443) ✅

UDP traffic (some gaming, VoIP) is NOT proxied.

---

How It Works

Connection Process

CODEBLOCK10

Without the Tunnel (Direct Connection)

CODEBLOCK11

With the Tunnel

CODEBLOCK12

---

Performance

Metric	Value
Tunnel latency	~50-100ms (China → Singapore)
GitHub clone speed

500KB/s - 5MB/s |
| ClawHub install | 1-5 seconds |
| Proxy overhead | ~5-10% bandwidth |

---

Troubleshooting

"Tunnel: ❌ Connection failed"
→ Check server IP, SSH port, username, password
→ Make sure SSH password auth is enabled on your VPS

"Tunnel connects but git push still times out"
→ Try again — GitHub sometimes rate-limits tunnel IPs temporarily
→ If persistent, your VPS IP may be on GitHub's blacklist

"autossh process not running after server restart"
→ Send /万重山-隧道-开启 to restart manually
→ Or set up systemd service (advanced — see auto-fix.sh)

"SSH connection refused"
→ Check if port 22 is open on your VPS firewall
→ Try SSH port 2222 if 22 is blocked

---

Security Notes

• - The tunnel only handles outbound connections from your China server
• Your VPS provider can see the traffic (GitHub, ClawHub, etc.) but NOT your China server's other traffic
• No data is stored on the VPS — only encrypted transit
• Tunnel credentials are stored locally in ~/.wcs_tunnel.conf (chmod 600)

---

Uninstall

CODEBLOCK13