[{"data":1,"prerenderedAt":696},["ShallowReactive",2],{"docs:/docs/remote/troubleshooting":3},{"id":4,"title":5,"body":6,"description":688,"extension":689,"meta":690,"navigation":691,"path":692,"seo":693,"stem":694,"__hash__":695},"docs/docs/remote/troubleshooting.md","常见问题排查",{"type":7,"value":8,"toc":673},"minimark",[9,12,21,140,145,152,199,201,216,218,237,239,281,297,300,386,388,454,456,459,489,503,505,554,579,582,627,646,649],[10,11,5],"h1",{"id":5},[13,14,15,16,20],"p",{},"按「先看哪一段」的顺序排：",[17,18,19],"strong",{},"网关进程 → 地址 → 信令（在线） → 通道（打洞） → 目标机（协议与凭据）","。",[22,23,24,40],"table",{},[25,26,27],"thead",{},[28,29,30,34,37],"tr",{},[31,32,33],"th",{},"现象",[31,35,36],{},"最可能的原因",[31,38,39],{},"看哪一节",[41,42,43,55,66,85,96,107,118,129],"tbody",{},[28,44,45,49,52],{},[46,47,48],"td",{},"打开地址显示「地址无效」（404）",[46,50,51],{},"凭证段被截断 / 改动，或网关已经换了 markID",[46,53,54],{},"地址无效",[28,56,57,60,63],{},[46,58,59],{},"页面提示「网关离线」",[46,61,62],{},"网关没在跑、Key 不对、或地址不是这次启动打印的那条",[46,64,65],{},"网关离线",[28,67,68,75,82],{},[46,69,70,71],{},"列表空白：",[72,73,74],"code",{},"网关没有可连接的服务（检查启动参数 -connect）",[46,76,77,78,81],{},"没给 ",[72,79,80],{},"-connect","，或目标全部被额度截断",[46,83,84],{},"清单为空",[28,86,87,90,93],{},[46,88,89],{},"通道建好但停在「正在建立会话…」",[46,91,92],{},"网关 TCP 连不到目标机的 3389 / 5900",[46,94,95],{},"连不上目标机",[28,97,98,101,104],{},[46,99,100],{},"RDP 报认证失败 / 立刻被断",[46,102,103],{},"NLA（CredSSP）与账号口令问题",[46,105,106],{},"RDP 认证与 NLA",[28,108,109,112,115],{},[46,110,111],{},"有画面但黑屏 / 一直等首帧",[46,113,114],{},"首帧依赖分辨率协商与显示通道",[46,116,117],{},"黑屏与画面异常",[28,119,120,123,126],{},[46,121,122],{},"家宽能连、公司网连不上",[46,124,125],{},"对称 NAT 打洞失败",[46,127,128],{},"打洞失败",[28,130,131,134,137],{},[46,132,133],{},"只有前 2 台机器在列表 / 启动就打印版本提示退出",[46,135,136],{},"被控端额度截断、版本低于最低要求",[46,138,139],{},"额度与版本",[141,142,144],"h2",{"id":143},"地址无效404","地址无效（404）",[13,146,147,148,151],{},"入口路由在",[17,149,150],{},"查用户之前","先校验凭证段，格式不对、对不上用户、或该用户已注销，一律返回 404「地址无效」—— 不暴露「这个地址存在但不可用」。逐项确认：",[153,154,155,176,189],"ol",{},[156,157,158,161,162,165,166,165,169,165,172,175],"li",{},[17,159,160],{},"整串复制","：凭证段是 base64，里面可能出现 ",[72,163,164],{},"/","、",[72,167,168],{},"+",[72,170,171],{},"_",[72,173,174],{},"-","，从聊天软件或终端里复制最容易被截断 —— 重新从日志横幅那一行整行复制。",[156,177,178,181,182,184,185,188],{},[17,179,180],{},"结尾斜杠","：网关打印的带 ",[72,183,164],{},"，控制台列表那条不带，两种本站都能打开；自己在网关前面加了 CDN / 反向代理时，确认没把 ",[72,186,187],{},"/r/xxx/yyy"," 的多段路径改写掉。",[156,190,191,194,195,198],{},[17,192,193],{},"地址属于哪次启动","：非会员每次启动随机分配 markID，",[17,196,197],{},"重启过网关旧地址就永久失效","，控制台列表里的新行才是当前那条。",[141,200,65],{"id":65},[13,202,203,204,207,208,211,212,215],{},"页面会先探测网关在不在（",[72,205,206],{},"gw-probe","），探测失败",[17,209,210],{},"直接报「网关离线」","，不会干等打洞超时。依次查：网关进程是否还在；启动日志里有没有 ",[72,213,214],{},"✅ 信令服务已连接","（没有就是 Key 错 —— 注意首尾空格、区分大小写 —— 或网络出不去）；被控机是否休眠；地址里的 markID 与当前运行的网关是否同一个。",[141,217,84],{"id":84},[13,219,220,222,223,225,226,232,233,236],{},[72,221,74],{}," 有两种来源：启动时确实没给 ",[72,224,80],{},"（",[17,227,228,229,231],{},"漏写一次 ",[72,230,80],{}," 会让程序直接报错退出","，不会静默当成空清单）；或给了但超出被控端额度 —— 免费版最多 2 台，",[17,234,235],{},"超出部分不进列表","，只在网关日志出现一行提示。",[141,238,95],{"id":95},[13,240,241,242,245,246,249,250,253,254,256,257,260,261,264,265,268,269,272,273,276,277,280],{},"会话建不起来、或表单显示 ",[72,243,244],{},"连接失败: \u003C原因>","，几乎都是网关到目标机那一段 TCP 不通：",[17,247,248],{},"远程桌面没开","（Windows 系统属性 → 远程 → 勾选允许远程连接）；",[17,251,252],{},"端口不对","（不是 3389 / 5900 就要在 ",[72,255,80],{}," 里显式写，VNC 常见 5901）；",[17,258,259],{},"防火墙拦了","（要为「远程桌面」在",[17,262,263],{},"专用网络","放行，第三方安全软件常单独拦 3389）；",[17,266,267],{},"跨网段 / VLAN","（把网关放到能路由到那台机器的位置，容器则要确认用的是 host 网络）；",[17,270,271],{},"地址写错","（填的是",[17,274,275],{},"内网地址","，",[72,278,279],{},"*.local"," / 裸主机名要靠网关所在机器的解析能力）。",[282,283,286],"callout",{"title":284,"type":285},"验证链路最快的办法","tip",[13,287,288,289,292,293,296],{},"在网关所在机器上直接测端口通不通：Windows ",[72,290,291],{},"Test-NetConnection 192.168.10.7 -Port 3389","，Linux ",[72,294,295],{},"nc -vz 192.168.10.7 3389","。不通就先解决内网这一段，远程桌面帮不上忙。",[141,298,106],{"id":299},"rdp-认证与-nla",[22,301,302,315],{},[25,303,304],{},[28,305,306,309,312],{},[31,307,308],{},"情况",[31,310,311],{},"表现",[31,313,314],{},"处理",[41,316,317,328,343,364,375],{},[28,318,319,322,325],{},[46,320,321],{},"填了用户名 + 口令",[46,323,324],{},"优先走 NLA（CredSSP），失败自动回退标准安全层",[46,326,327],{},"保持这个用法，绝大多数机器不用改设置",[28,329,330,333,336],{},[46,331,332],{},"用户名留空",[46,334,335],{},"直接连接后要面对远端登录界面",[46,337,338,339,342],{},"这条路径",[17,340,341],{},"要求目标机关闭 NLA","（Win10 / 11 默认开启）",[28,344,345,348,355],{},[46,346,347],{},"无凭据连上后约 30 秒被断开",[46,349,350,351,354],{},"服务端下发 Error Info ",[72,352,353],{},"0x0000000C","（LocalSessionManager 事件 40）",[46,356,357,360,361],{},[17,358,359],{},"已知且预期","：无人完成登录的「登录会话」会被主机主动收掉。无凭据连接只适合看画面与验链路，",[17,362,363],{},"填了凭据的会话不受影响",[28,365,366,369,372],{},[46,367,368],{},"域账号",[46,370,371],{},"需要填「域（可选）」",[46,373,374],{},"本机账户请留空，别填机器名",[28,376,377,380,383],{},[46,378,379],{},"空口令账户",[46,381,382],{},"连不上",[46,384,385],{},"Windows 默认策略禁止空口令远程登录，给账户设口令或换一个账户",[141,387,117],{"id":117},[22,389,390,398],{},[25,391,392],{},[28,393,394,396],{},[31,395,33],{},[31,397,314],{},[41,399,400,408,416,428,442],{},[28,401,402,405],{},[46,403,404],{},"连上后一直黑屏",[46,406,407],{},"先点工具栏「Ctrl+Alt+Del」把远端从锁屏救回来；仍无画面就断开重连",[28,409,410,413],{},[46,411,412],{},"画面只出上半部分 / 尺寸不对",[46,414,415],{},"用分辨率下拉换一档再点「切换分辨率」；服务器不支持原地改时会带新分辨率自动重连（约 1-2 秒黑屏，正常）",[28,417,418,421],{},[46,419,420],{},"「切换分辨率」点了没反应",[46,422,423,424,427],{},"目标机不支持 display 通道；若你启动时加了 ",[72,425,426],{},"-rdp-no-display","（排查兼容性用）就是自己关掉了这能力，去掉该参数",[28,429,430,433],{},[46,431,432],{},"输不进字",[46,434,435,436],{},"点一下桌面让画布取得焦点。看网关的会话结束日志：",[17,437,438,441],{},[72,439,440],{},"浏览器 → 网关 0 B"," 说明输入根本没送到",[28,443,444,447],{},[46,445,446],{},"VNC 画面发糊",[46,448,449,450,453],{},"VNC 按窗口铺满做",[17,451,452],{},"本地缩放","，不请求远端改尺寸。远端分辨率调大或把浏览器窗口拉大",[141,455,128],{"id":128},[13,457,458],{},"家宽正常、公司网络 / 多层 NAT 环境连不上，通常是对称 NAT：",[153,460,461,468,475],{},[156,462,463,464,467],{},"网关侧加 ",[72,465,466],{},"-force-relay"," 再启动一次 —— 能连上就说明是 NAT 类型问题，不是配置错；",[156,469,470,471,474],{},"确认服务端已给这个账户下发 TURN（浏览器侧只配 STUN，中继由",[17,472,473],{},"网关侧的 TURN"," 兜底，一侧有中继候选就能配对）；",[156,476,477,478,481,482,481,485,488],{},"需要指定自建中继时用 ",[72,479,480],{},"-turn"," / ",[72,483,484],{},"-turn-user",[72,486,487],{},"-turn-pass"," 覆盖（STUN 不可覆盖）；中继带宽有限，先降分辨率再试。",[282,490,493],{"title":491,"type":492},"不要拿 -debug 当线上用法","warning",[13,494,495,498,499,502],{},[72,496,497],{},"-debug"," 会在本机开一个 HTTP 端口（默认 ",[72,500,501],{},"127.0.0.1:8081","）提供内嵌页面，并把日志降到 Debug 级。它是联调手段，长期跑会把机器暴露在本网段任何能访问该端口的人面前。",[141,504,139],{"id":139},[22,506,507,523],{},[25,508,509],{},[28,510,511,514,517,520],{},[31,512,513],{},"限制",[31,515,516],{},"免费版",[31,518,519],{},"会员版",[31,521,522],{},"超了会怎样",[41,524,525,542],{},[28,526,527,533,536,539],{},[46,528,529,530,532],{},"最多 ",[72,531,80],{}," 目标数",[46,534,535],{},"2",[46,537,538],{},"10",[46,540,541],{},"超出部分不进列表（只在网关日志出现）",[28,543,544,547,549,551],{},[46,545,546],{},"最大并发桌面会话",[46,548,535],{},[46,550,538],{},[46,552,553],{},"新的选择被拒绝，表单显示失败原因；多个标签页各连一台会各占一份",[13,555,556,557,20,562,569,570,574,575,578],{},"数值由服务端随信令凭证下发，升级见 ",[558,559,561],"a",{"href":560},"/docs/guide/pricing","套餐与计费",[17,563,564,565,568],{},"版本低于服务端最低要求（当前 ",[72,566,567],{},"1.0.0","）时启动即退出"," —— 这是版本门控，旧协议和新页面对不上，到 ",[558,571,573],{"href":572},"/docs/update-log/remote","远程桌面更新日志"," 下载新版本替换二进制。日志里 ",[72,576,577],{},"⚠ 服务端提示"," 那一行黄色高亮是运营文案，不参与任何判定，看到它不需要处理。",[141,580,581],{"id":581},"其它",[22,583,584,593],{},[25,585,586],{},[28,587,588,590],{},[31,589,33],{},[31,591,592],{},"说明",[41,594,595,603,619],{},[28,596,597,600],{},[46,598,599],{},"「本页面不支持嵌入 iframe」",[46,601,602],{},"有意限制：一条 P2P 连接会占一份并发额度，请直接访问地址",[28,604,605,608],{},[46,606,607],{},"「全屏」按钮点不动",[46,609,610,611,614,615,618],{},"浏览器只允许在 ",[72,612,613],{},"localhost"," 或 ",[17,616,617],{},"https"," 页面进入全屏",[28,620,621,624],{},[46,622,623],{},"剪贴板 / Ctrl+Alt+Del 按钮不见了",[46,625,626],{},"当前连的是 VNC：这三项依赖 RDP 虚拟通道，RFB 没有对应机制",[13,628,629,630,633,634,637,638,641,642,20],{},"仍未解决请带上网关日志（已自动脱敏）到 QQ 群 ",[17,631,632],{},"980221634","。本机 RDP 协商诊断（",[72,635,636],{},"probe","）、无头截图（",[72,639,640],{},"shot","）与日志字段见 ",[558,643,645],{"href":644},"/docs/dev/remote-internals","远程桌面内部实现",[141,647,648],{"id":648},"相关",[650,651,652,659,666],"ul",{},[156,653,654,658],{},[558,655,657],{"href":656},"/docs/remote/desktop","浏览器端连接桌面","：状态行与工具栏的正常表现",[156,660,661,665],{},[558,662,664],{"href":663},"/docs/remote/security","安全与凭证","：地址即凭证与作废方式",[156,667,668,672],{},[558,669,671],{"href":670},"/docs/remote/targets","目标串与被控机要求","：被控机需要开的设置",{"title":674,"searchDepth":675,"depth":675,"links":676},"",3,[677,679,680,681,682,683,684,685,686,687],{"id":143,"depth":678,"text":144},2,{"id":65,"depth":678,"text":65},{"id":84,"depth":678,"text":84},{"id":95,"depth":678,"text":95},{"id":299,"depth":678,"text":106},{"id":117,"depth":678,"text":117},{"id":128,"depth":678,"text":128},{"id":139,"depth":678,"text":139},{"id":581,"depth":678,"text":581},{"id":648,"depth":678,"text":648},"p2pee 远程桌面排障手册：地址无效、网关离线、连不上目标机、NLA 认证失败、无凭据会话 30 秒被断开、黑屏、打洞失败、并发超限与版本过低。","md",{},true,"/docs/remote/troubleshooting",{"title":5,"description":688},"docs/remote/troubleshooting","E21SvUeS20dRHGFhR-ZG7kF6LaRyoyfjyrisBgMSmak",1792518096330]