Docker 代理加速(Cloudflare Worker)

使用 `Cloudflare Worker` 部署代理

**相关链接：**
- Cloudflare：https://dash.cloudflare.com/
- cloudflare-docker-proxy：https://github.com/ciiiii/cloudflare-docker-proxy
  - 我的转存：https://github.com/ai773203918/cloudflare-docker-proxy (增加 Web使用提示)
- Cloudflare Docs：https://developers.cloudflare.com/
  - Wrangler：https://developers.cloudflare.com/workers/get-started/guide/
  - wrangler.toml：https://developers.cloudflare.com/workers/wrangler/configuration/

## Wrangler 部署至 Cloudflare Workers
```bash
# 安装 npm

# npm create cloudflare@latest  # 创建新的 Worker 项目
npm create cloudflare@latest -- --template https://github.com/ai773203918/cloudflare-docker-proxy  # 从外部源创建项目

# 修改 项目文件(参考下方的 项目文件修改说明)

npx wrangler dev  # 开发测试
npx wrangler deploy  # 部署项目
```

## GitHub 部署至 Cloudflare Workers
fork [cloudflare-docker-proxy](https://github.com/ciiiii/cloudflare-docker-proxy) 仓库到自己账号下

根据 [项目文件修改说明](#项目文件修改说明) 进行修改

### 修改 `README.md`
修改 Deploy with Workers 自动部署地址为自己转存地址
```md
# 修改 Deploy with Workers 图标对应链接(两个都修改)
# 原链接
https://deploy.workers.cloudflare.com/?url=https://github.com/ciiiii/cloudflare-docker-proxy

# 修改后链接
https://deploy.workers.cloudflare.com/?url=https://github.com/ai773203918/cloudflare-docker-proxy
```

### 部署
1. 点击 [![Deploy to Cloudflare Workers](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/ai773203918/cloudflare-docker-proxy) 图标进行部署
2. 根据提示操作
Cloudflare 的 [Account ID](https://dash.cloudflare.com/?to=/:account/workers)(是 账户ID 而非账户)，[API Token](https://dash.cloudflare.com/profile/api-tokens)(使用具有 `编辑 Cloudflare Workers` 权限的API令牌)
3. [Github](https://github.com/ai773203918/cloudflare-docker-proxy) 查看 [Action](https://github.com/ai773203918/cloudflare-docker-proxy/actions) 执行进度
4. [Cloudflare Dashboard](https://dash.cloudflare.coms/) 查看创建的 Worker
5. 等待 `Workers 和 Pages——{刚创建项目}——设置——触发器` 自定义域 中证书签发后即可使用

## 项目文件修改说明
已下为需修改点

### 修改 `src/index.js`，修改你的域名对应至仓库
```js
// 修改绑定域名
const routes = {
  "docker.918178.xyz": "https://registry-1.docker.io",
  "quay.918178.xyz": "https://quay.io",
  "gcr.918178.xyz": "https://gcr.io",
  "k8s-gcr.918178.xyz": "https://k8s.gcr.io",
  "k8s.918178.xyz": "https://registry.k8s.io",
  "ghcr.918178.xyz": "https://ghcr.io",
  "cloudsmith.918178.xyz": "https://docker.cloudsmith.io",
};

// 加载 help.html 文件(帮助页面)
import DOCS from './help.html'  // 添加到头部即可

// 添加帮助页面的根路由(/)
  const isDockerHub = upstream == dockerHub;  // 参考位置
  const authorization = request.headers.get("Authorization");  // 参考位置
  // 添加到该位置👇
  if (url.pathname === "/") {
    return new Response(DOCS, {
      status: 200,
      headers: {
        "content-type": "text/html"
      }
    });
  }
```

### 修改 `wrangler.toml`，修改你的域名(会自动添加 Cloudflare Workers 自定义域)
```bash
# 修改绑定域名
[env.production]
name = "cloudflare-docker-proxy"
routes = [
  { pattern = "docker.918178.xyz", custom_domain = true },
  { pattern = "quay.918178.xyz", custom_domain = true },
  { pattern = "gcr.918178.xyz", custom_domain = true },
  { pattern = "k8s-gcr.918178.xyz", custom_domain = true },
  { pattern = "k8s.918178.xyz", custom_domain = true },
  { pattern = "ghcr.918178.xyz", custom_domain = true },
  { pattern = "cloudsmith.918178.xyz", custom_domain = true },
]

[env.production.vars]
MODE = "production"
TARGET_UPSTREAM = ""

[env.staging]
name = "cloudflare-docker-proxy-staging"
route = { pattern = "docker-staging.918178.xyz", custom_domain = true }
```

### 添加 `src/help.html`，帮助页面
```html
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>镜像使用说明_造物者W</title>
    <style>
        body {
            font-family: 'Roboto', sans-serif;
            margin: 0;
            padding: 0;
            background-color: #f4f4f4;
        }
        .header {
            background: linear-gradient(135deg, #667eea, #764ba2);
            color: #fff;
            padding: 20px 0;
            text-align: center;
            box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
            position: relative;
        }
        .github-link {
            position: absolute;
            top: 10px;
            right: 20px;
            color: #fff;
            text-decoration: none;
        }
        .github-icon {
            width: 24px;
            height: 24px;
            vertical-align: middle;
        }
        .container {
            max-width: 800px;
            margin: 40px auto;
            padding: 20px;
            background-color: #fff;
            box-shadow: 0 4px 8px rgba(0, 0, 0, 0.1);
            border-radius: 10px;
        }
        .content {
            margin-bottom: 20px;
        }
        .footer {
            text-align: center;
            padding: 20px 0;
            background-color: #333;
            color: #fff;
        }
        pre {
            background-color: #272822;
            color: #f8f8f2;
            padding: 15px;
            border-radius: 5px;
            overflow-x: auto;
        }
        code {
            font-family: 'Source Code Pro', monospace;
        }
        a {
            color: #4CAF50;
            text-decoration: none;
        }
        a:hover {
            text-decoration: underline;
        }
        @media (max-width: 600px) {
            .container {
                margin: 20px;
                padding: 15px;
            }
            .header {
                padding: 15px 0;
            }
        }
    </style>
    <link href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&family=Source+Code+Pro:wght@400;700&display=swap" rel="stylesheet">
</head>
<body>
<div class="header">
    <h1>镜像使用说明</h1>
    <a href="https://github.com/ai773203918/cloudflare-docker-proxy" target="_blank" class="github-link">
        <img src="https://github.githubassets.com/images/modules/logos_page/GitHub-Mark.png" alt="GitHub" class="github-icon">
    </a>
</div>
<div class="container">
    <div class="content">
        <p>为了加速 Docker 镜像拉取，你可以使用以下命令设置 registry mirror:</p>
        <pre><code id="registry-config">sudo tee /etc/docker/daemon.json &lt;&lt;EOF
{
    "registry-mirrors": ["https://{{host}}"]
}
EOF
# 配置完后需要重启 Docker 服务
sudo systemctl restart docker
</code></pre>
        <p>使用该代理从不同的镜像仓库拉取镜像，请参考以下命令：</p>
        <pre><code id="commands">
# docker pull nginx:latest
docker pull docker.{{host}}/library/nginx:latest  # 拉取 Docker 官方镜像(library 不可省略)

# docker pull quay.io/coreos/etcd:latest
docker pull quay.{{host}}/coreos/etcd:latest  # 拉取 Quay 镜像

# docker pull gcr.io/google-containers/busybox:latest
docker pull gcr.{{host}}/google-containers/busybox:latest  # 拉取 GCR 镜像

# docker pull k8s.gcr.io/pause:latest
docker pull k8s-gcr.{{host}}/pause:latest  # 拉取 k8s.gcr.io 镜像

# docker pull registry.k8s.io/pause:latest
docker pull k8s.{{host}}/pause:latest  # 拉取 registry.k8s.io 镜像

# docker pull ghcr.io/github/super-linter:latest
docker pull ghcr.{{host}}/github/super-linter:latest  # 拉取 GitHub 容器镜像

# docker pull docker.cloudsmith.io/public/repo/image:latest
docker pull cloudsmith.{{host}}/public/repo/image:latest  # 拉取 Cloudsmith 镜像
</code></pre>
        <p>为了避免 Worker 用量耗尽，你可以手动 pull 镜像然后 re-tag 之后 push 至本地镜像仓库。</p>
    </div>
</div>
<div class="footer">
    <p>由 Cloudflare Workers 提供支持</p>
    <p><a href="https://doc.918178.xyz" target="_blank">造物者W</a></p>
</div>
<script>
    document.addEventListener('DOMContentLoaded', function() {
        const host = window.location.hostname;
        const mainDomain = host.split('.').slice(-2).join('.');
        const registryConfigElement = document.getElementById('registry-config');
        const commandsElement = document.getElementById('commands');

registryConfigElement.innerHTML = registryConfigElement.innerHTML.replace(/{{host}}/g, host);
        commandsElement.innerHTML = commandsElement.innerHTML.replace(/{{host}}/g, mainDomain);
    });
</script>
</body>
</html>
```

## 手动部署
`worker.js` Web页面整合一起的
```js
addEventListener("fetch", (event) => {
  event.passThroughOnException();
  event.respondWith(handleRequest(event.request));
});

const dockerHub = "https://registry-1.docker.io";

// 修改为你的域名(多域名)，然后添加对应的自定义域
const routes = {
  // production
  "docker.918178.xyz": dockerHub,
  "quay.918178.xyz": "https://quay.io",
  "gcr.918178.xyz": "https://gcr.io",
  "k8s-gcr.918178.xyz": "https://k8s.gcr.io",
  "k8s.918178.xyz": "https://registry.k8s.io",
  "ghcr.918178.xyz": "https://ghcr.io",
  "cloudsmith.918178.xyz": "https://docker.cloudsmith.io",

// staging
  "docker-staging.918178.xyz": dockerHub,
};

// Web页面
const htmlContent = `
<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>镜像使用说明_造物者W</title>
    <style>
        body {
            font-family: 'Roboto', sans-serif;
            margin: 0;
            padding: 0;
            background-color: #f4f4f4;
        }
        .header {
            background: linear-gradient(135deg, #667eea, #764ba2);
            color: #fff;
            padding: 20px 0;
            text-align: center;
            box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);
            position: relative;
        }
        .github-link {
            position: absolute;
            top: 10px;
            right: 20px;
            color: #fff;
            text-decoration: none;
        }
        .github-icon {
            width: 24px;
            height: 24px;
            vertical-align: middle;
        }
        .container {
            max-width: 800px;
            margin: 40px auto;
            padding: 20px;
            background-color: #fff;
            box-shadow: 0 4px 8px rgba(0, 0, 0, 0.1);
            border-radius: 10px;
        }
        .content {
            margin-bottom: 20px;
        }
        .footer {
            text-align: center;
            padding: 20px 0;
            background-color: #333;
            color: #fff;
        }
        pre {
            background-color: #272822;
            color: #f8f8f2;
            padding: 15px;
            border-radius: 5px;
            overflow-x: auto;
        }
        code {
            font-family: 'Source Code Pro', monospace;
        }
        a {
            color: #4CAF50;
            text-decoration: none;
        }
        a:hover {
            text-decoration: underline;
        }
        @media (max-width: 600px) {
            .container {
                margin: 20px;
                padding: 15px;
            }
            .header {
                padding: 15px 0;
            }
        }
    </style>
    <link href="https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&family=Source+Code+Pro:wght@400;700&display=swap" rel="stylesheet">
</head>
<body>
<div class="header">
    <h1>镜像使用说明</h1>
    <a href="https://github.com/ai773203918/cloudflare-docker-proxy" target="_blank" class="github-link">
        <img src="https://github.githubassets.com/images/modules/logos_page/GitHub-Mark.png" alt="GitHub" class="github-icon">
    </a>
</div>
<div class="container">
    <div class="content">
        <p>为了加速 Docker 镜像拉取，你可以使用以下命令设置 registry mirror:</p>
        <pre><code id="registry-config">sudo tee /etc/docker/daemon.json &lt;&lt;EOF
{
    "registry-mirrors": ["https://{{host}}"]
}
EOF
# 配置完后需要重启 Docker 服务
sudo systemctl restart docker
</code></pre>
        <p>使用该代理从不同的镜像仓库拉取镜像，请参考以下命令：</p>
        <pre><code id="commands">
# docker pull nginx:latest
docker pull docker.{{host}}/library/nginx:latest  # 拉取 Docker 官方镜像(library 不可省略)

# docker pull quay.io/coreos/etcd:latest
docker pull quay.{{host}}/coreos/etcd:latest  # 拉取 Quay 镜像

# docker pull gcr.io/google-containers/busybox:latest
docker pull gcr.{{host}}/google-containers/busybox:latest  # 拉取 GCR 镜像

# docker pull k8s.gcr.io/pause:latest
docker pull k8s-gcr.{{host}}/pause:latest  # 拉取 k8s.gcr.io 镜像

# docker pull registry.k8s.io/pause:latest
docker pull k8s.{{host}}/pause:latest  # 拉取 registry.k8s.io 镜像

# docker pull ghcr.io/github/super-linter:latest
docker pull ghcr.{{host}}/github/super-linter:latest  # 拉取 GitHub 容器镜像

# docker pull docker.cloudsmith.io/public/repo/image:latest
docker pull cloudsmith.{{host}}/public/repo/image:latest  # 拉取 Cloudsmith 镜像
</code></pre>
        <p>为了避免 Worker 用量耗尽，你可以手动 pull 镜像然后 re-tag 之后 push 至本地镜像仓库。</p>
    </div>
</div>
<div class="footer">
    <p>由 Cloudflare Workers 提供支持</p>
    <p><a href="https://doc.918178.xyz" target="_blank">造物者W</a></p>
</div>
<script>
    document.addEventListener('DOMContentLoaded', function() {
        const host = window.location.hostname;
        const mainDomain = host.split('.').slice(-2).join('.');
        const registryConfigElement = document.getElementById('registry-config');
        const commandsElement = document.getElementById('commands');

registryConfigElement.innerHTML = registryConfigElement.innerHTML.replace(/{{host}}/g, host);
        commandsElement.innerHTML = commandsElement.innerHTML.replace(/{{host}}/g, mainDomain);
    });
</script>
</body>
</html>
`

function routeByHosts(host) {
  if (host in routes) {
    return routes[host];
  }
  if (MODE == "debug") {
    return TARGET_UPSTREAM;
  }
  return "";
}

async function handleRequest(request) {
  const url = new URL(request.url);
  const upstream = routeByHosts(url.hostname);
  if (upstream === "") {
    return new Response(
      JSON.stringify({
        routes: routes,
      }),
      {
        status: 404,
      }
    );
  }
  const isDockerHub = upstream == dockerHub;
  const authorization = request.headers.get("Authorization");
  // return docs
  if (url.pathname === "/") {
    return new Response(htmlContent, {
      status: 200,
      headers: {
        "content-type": "text/html"
      }
    });
  }
  if (url.pathname == "/v2/") {
    const newUrl = new URL(upstream + "/v2/");
    const headers = new Headers();
    if (authorization) {
      headers.set("Authorization", authorization);
    }
    // check if need to authenticate
    const resp = await fetch(newUrl.toString(), {
      method: "GET",
      headers: headers,
      redirect: "follow",
    });
    if (resp.status === 401) {
      if (MODE == "debug") {
        headers.set(
          "Www-Authenticate",
          `Bearer realm="http://${url.host}/v2/auth",service="cloudflare-docker-proxy"`
        );
      } else {
        headers.set(
          "Www-Authenticate",
          `Bearer realm="https://${url.hostname}/v2/auth",service="cloudflare-docker-proxy"`
        );
      }
      return new Response(JSON.stringify({ message: "UNAUTHORIZED" }), {
        status: 401,
        headers: headers,
      });
    } else {
      return resp;
    }
  }
  // get token
  if (url.pathname == "/v2/auth") {
    const newUrl = new URL(upstream + "/v2/");
    const resp = await fetch(newUrl.toString(), {
      method: "GET",
      redirect: "follow",
    });
    if (resp.status !== 401) {
      return resp;
    }
    const authenticateStr = resp.headers.get("WWW-Authenticate");
    if (authenticateStr === null) {
      return resp;
    }
    const wwwAuthenticate = parseAuthenticate(authenticateStr);
    let scope = url.searchParams.get("scope");
    // autocomplete repo part into scope for DockerHub library images
    // Example: repository:busybox:pull => repository:library/busybox:pull
    if (scope && isDockerHub) {
      let scopeParts = scope.split(":");
      if (scopeParts.length == 3 && !scopeParts[1].includes("/")) {
        scopeParts[1] = "library/" + scopeParts[1];
        scope = scopeParts.join(":");
      }
    }
    return await fetchToken(wwwAuthenticate, scope, authorization);
  }
  // redirect for DockerHub library images
  // Example: /v2/busybox/manifests/latest => /v2/library/busybox/manifests/latest
  if (isDockerHub) {
    const pathParts = url.pathname.split("/");
    if (pathParts.length == 5) {
      pathParts.splice(2, 0, "library");
      const redirectUrl = new URL(url);
      redirectUrl.pathname = pathParts.join("/");
      return Response.redirect(redirectUrl, 301);
    }
  }
  // foward requests
  const newUrl = new URL(upstream + url.pathname);
  const newReq = new Request(newUrl, {
    method: request.method,
    headers: request.headers,
    redirect: "follow",
  });
  return await fetch(newReq);
}

async function fetchToken(wwwAuthenticate, scope, authorization) {
  const url = new URL(wwwAuthenticate.realm);
  if (wwwAuthenticate.service.length) {
    url.searchParams.set("service", wwwAuthenticate.service);
  }
  if (scope) {
    url.searchParams.set("scope", scope);
  }
  headers = new Headers();
  if (authorization) {
    headers.set("Authorization", authorization);
  }
  return await fetch(url, { method: "GET", headers: headers });
}
```
部署后在 `Cloudflare Worker——设置——触发器` 添加对应的`自定义域`

## 使用
直接访问 [https://docker.918178.xyz/](https://docker.918178.xyz/) 即可查看使用提示
需注意的是 DockerHub 的官方库无法识别需要带 `library` 使用
如：`docker pull nginx → docker pull docker.918178.xyz/library/nginx`

**相关教程：**
[基于 Cloudflare Workers 和 cloudflare-docker-proxy 搭建镜像加速服务](https://www.lixueduan.com/posts/docker/12-docker-mirror/)