8000 从v25.5.16升级到v25.6.8后多端口无法连接 · Issue #4843 · XTLS/Xray-core · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
从v25.5.16升级到v25.6.8后多端口无法连接 #4843
Closed
@kmb21y66

Description

@kmb21y66

完整性要求

  • 我保证阅读了文档,了解所有我编写的配置文件项的含义,而不是大量堆砌看似有用的选项或默认值。
  • 我提供了完整的配置文件和日志,而不是出于自己的判断只给出截取的部分。
  • 我搜索了 issues, 没有发现已提出的类似问题。
  • 问题在 Release 最新的版本上可以成功复现

描述

服务端从v25.5.16升级到v25.6.8后(与客户端版本无关),若只监听443一切正常,若监听多个端口(1002个)则在启动后每个端口都连接不上(无论是隧道还是用正常浏览器访问后面的网站都连不上),服务端日志没有报错,客户端抓不到Server Hello,服务端到客户端抓不到Server Hello,dest和服务端之间能抓到Server Hello。

重现方式

v25.6.8监听"443,10000-11000"任何一个端口都连不上,降级到v25.5.16恢复,或者只监听443恢复。
注:和Proxy Protocol无关,开关v1v2都试了

客户端配置


{
  "log": {
    "loglevel": "warning",
    "access": "/var/log/xray/access.log",
    "error": "/var/log/xray/error.log"
  },
  "inbounds": [
  {
      "port": 12345,
      "listen":"::",
      "protocol": "dokodemo-door",
      "tag": "doko",
      "settings": {
        "network": "tcp,udp",
        "followRedirect": true
      },
      "streamSettings": {
        "sockopt": {
          "tproxy": "tproxy"
        }
      },
      "sniffing": {
          "enabled": true,
          "destOverride": [
              "http",
              "tls"
          ],
          "routeOnly": true
      }
    }
  ],
  "outbounds": [
        {
            "tag": "xxx",
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "xxx",
                        "port": 443,
                        "users": [
                            {
                                "id": "xxx",
                                "flow": "xtls-rprx-vision",
                                "encryption": "none"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "fingerprint": "ios",
                    "serverName": "example.com",
                    "publicKey": "xxx",
                    "shortId": "xxx",
                    "spiderX": "/index.html"
                }
            }
        },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "vnext": null,
        "servers": null,
        "response": null
      },
      "mux": null
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "vnext": null,
        "servers": null,
        "response": {
          "type": "http"
        }
      }
    }
  ],
  "routing": {
    "domainStrategy": "IPOnDemand",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
            "doko"
        ],
        "outboundTag": "xxx"
      }
    ]
  }
}

服务端配置


  {
    "log": {
      "loglevel": "warning",
      "access": "/var/log/xray/access.log",
      "error": "/var/log/xray/error.log"
    },
      "inbounds": [
          {
              "tag": "native",
              "listen": "::",
              "port": "443,10000-11000",
              "protocol": "vless",
              "settings": {
                  "clients": [
                      {
                          "id": "xxx",
                          "flow": "xtls-rprx-vision",
                          "email": "test@example.com"
                      }
              ],
              "decryption": "none"
          },
          "streamSettings": {
              "network": "tcp",
              "security": "reality",
              "realitySettings": {
                  "show": false,
                  "dest": "8080",
                  "xver": 2,
                  "serverNames": [
                      "example.com"
                  ],
                  "privateKey": "xxx",
                  "minClientVer": "25.6.8",
                  "maxTimeDiff": 3600000,
                  "shortIds": [ 
                      "xxx"

                  ]
              }
          },
          "sniffing": {
            "enabled": true,
            "destOverride": [
              "http",
              "tls"
            ],
            "routeOnly": true
          }
      }
  ],
  "outbounds": [
      {
          "protocol": "freedom",
          "tag": "direct"
      },
      {
          "protocol": "blackhole",
          "tag": "block"
      }

  ],
  "routing": {
      "domainStrategy": "IPOnDemand",
      "rules": [
    {
        "type": "field",
        "inboundTag": [
            "native"
        ],

        "outboundTag": "direct"
    }
      ]
  }

}


nginx:


server {
listen              127.0.0.1:8080 ssl proxy_protocol;
http2 on;

set_real_ip_from 127.0.0.1;
real_ip_header proxy_protocol;
real_ip_recursive on;

ssl_certificate     xxx.cer;
ssl_certificate_key xxx.key;
server_name example.com;
ssl_protocols       TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_session_tickets off;
ssl_session_timeout 1d;
ssl_session_cache   shared:SSL:10m;
resolver            1.1.1.1 valid=60s;
resolver_timeout    5s;
location / {
       root /var/www;
}

}

客户端日志


[Info] [xxx] app/proxyman/outbound: app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [context canceled dial tcp [xxx]:443: operation was canceled] > common/retry: all retry attempts failed

服务端日志


YYYY/MM/DD HH:MM:18.931879 [Debug] app/log: Logger started
YYYY/MM/DD HH:MM:19.247582 [Debug] app/router: MphDomainMatcher is enabled for 241500 domain rule(s)
YYYY/MM/DD HH:MM:19.247608 [Debug] app/router: MphDomainMatcher is enabled for 4 domain rule(s)
YYYY/MM/DD HH:MM:19.247612 [Debug] app/router: MphDomainMatcher is enabled for 117 domain rule(s)
YYYY/MM/DD HH:MM:19.247615 [Debug] app/router: MphDomainMatcher is enabled for 416 domain rule(s)
YYYY/MM/DD HH:MM:19.247621 [Debug] app/proxyman/inbound: creating stream worker on [::]:443
YYYY/MM/DD HH:MM:19.247625 [Debug] app/proxyman/inbound: creating stream worker on [::]:10007
YYYY/MM/DD HH:MM:19.247629 [Debug] app/proxyman/inbound: creating stream worker on [::]:10008
YYYY/MM/DD HH:MM:19.247632 [Debug] app/proxyman/inbound: creating stream worker on [::]:10009
YYYY/MM/DD HH:MM:19.247636 [Debug] app/proxyman/inbound: creating stream worker on [::]:10010
YYYY/MM/DD HH:MM:19.247639 [Debug] app/proxyman/inbound: creating stream worker on [::]:10011
YYYY/MM/DD HH:MM:19.247642 [Debug] app/proxyman/inbound: creating stream worker on [::]:10012
YYYY/MM/DD HH:MM:19.247645 [Debug] app/proxyman/inbound: creating stream worker on [::]:10013
YYYY/MM/DD HH:MM:19.247648 [Debug] app/proxyman/inbound: creating stream worker on [::]:10014
YYYY/MM/DD HH:MM:19.247651 [Debug] app/proxyman/inbound: creating stream worker on [::]:10015
YYYY/MM/DD HH:MM:19.247655 [Debug] app/proxyman/inbound: creating stream worker on [::]:10016
YYYY/MM/DD HH:MM:19.247658 [Debug] app/proxyman/inbound: creating stream worker on [::]:10017
YYYY/MM/DD HH:MM:19.247661 [Debug] app/proxyman/inbound: creating stream worker on [::]:10018
YYYY/MM/DD HH:MM:19.264628 [Info] transport/internet/tcp: listening TCP on [::]:10128
YYYY/MM/DD HH:MM:19.264651 [Info] transport/internet/tcp: listening TCP on [::]:10129
YYYY/MM/DD HH:MM:19.264655 [Info] transport/internet/tcp: listening TCP on [::]:10130
YYYY/MM/DD HH:MM:19.264658 [Info] transport/internet/tcp: listening TCP on [::]:10131
YYYY/MM/DD HH:MM:19.264662 [Info] transport/internet/tcp: listening TCP on [::]:10132
YYYY/MM/DD HH:MM:19.264665 [Info] transport/internet/tcp: listening TCP on [::]:10133
YYYY/MM/DD HH:MM:19.264668 [Info] transport/internet/tcp: listening TCP on [::]:10134
YYYY/MM/DD HH:MM:19.264671 [Info] transport/internet/tcp: listening TCP on [::]:10135
YYYY/MM/DD HH:MM:19.264674 [Info] transport/internet/tcp: listening TCP on [::]:10136
YYYY/MM/DD HH:MM:19.264678 [Info] transport/internet/tcp: listening TCP on [::]:10137
YYYY/MM/DD HH:MM:19.264681 [Info] transport/internet/tcp: listening TCP on [::]:10138
YYYY/MM/DD HH:MM:19.264684 [Info] transport/internet/tcp: listening TCP on [::]:10139
YYYY/MM/DD HH:MM:19.264688 [Info] transport/internet/tcp: listening TCP on [::]:10140
YYYY/MM/DD HH:MM:19.264691 [Info] transport/internet/tcp: listening TCP on [::]:10141
YYYY/MM/DD HH:MM:19.264694 [Info] transport/internet/tcp: listening TCP on [::]:10142
YYYY/MM/DD HH:MM:19.264697 [Info] transport/internet/tcp: listening TCP on [::]:10143
YYYY/MM/DD HH:MM:19.264704 [Info] transport/internet/tcp: listening TCP on [::]:10144
YYYY/MM/DD HH:MM:19.294007 [Info] transport/internet/tcp: listening TCP on [::]:10435
YYYY/MM/DD HH:MM:19.294037 [Info] transport/internet/tcp: listening TCP on [::]:10436
YYYY/MM/DD HH:MM:19.294042 [Info] transport/internet/tcp: listening TCP on [::]:10437
YYYY/MM/DD HH:MM:19.294045 [Info] transport/internet/tcp: listening TCP on [::]:10438
YYYY/MM/DD HH:MM:19.294049 [Info] transport/internet/tcp: listening TCP on [::]:10439
YYYY/MM/DD HH:MM:19.294052 [Info] transport/internet/tcp: listening TCP on [::]:10440
YYYY/MM/DD HH:MM:19.294058 [Info] transport/internet/tcp: listening TCP on [::]:10441
YYYY/MM/DD HH:MM:19.294061 [Info] transport/internet/tcp: listening TCP on [::]:10442
YYYY/MM/DD HH:MM:19.294064 [Info] transport/internet/tcp: listening TCP on [::]:10443
YYYY/MM/DD HH:MM:19.294068 [Info] transport/internet/tcp: listening TCP on [::]:10444
YYYY/MM/DD HH:MM:19.294071 [Info] transport/internet/tcp: listening TCP on [::]:10445
YYYY/MM/DD HH:MM:19.294074 [Info] transport/internet/tcp: listening TCP on [::]:10446
YYYY/MM/DD HH:MM:19.294087 [Info] transport/internet/tcp: listening TCP on [::]:10447
YYYY/MM/DD HH:MM:19.294090 [Info] transport/internet/tcp: listening TCP on [::]:10448
YYYY/MM/DD HH:MM:19.294092 [Info] transport/internet/tcp: listening TCP on [::]:10449
YYYY/MM/DD HH:MM:19.294094 [Info] transport/internet/tcp: listening TCP on [::]:10450
YYYY/MM/DD HH:MM:19.294097 [Info] transport/internet/tcp: listening TCP on [::]:10451
YYYY/MM/DD HH:MM:19.311793 [Info] transport/internet/tcp: listening TCP on [::]:10794
YYYY/MM/DD HH:MM:19.311817 [Info] transport/internet/tcp: listening TCP on [::]:10795
YYYY/MM/DD HH:MM:19.311820 [Info] transport/internet/tcp: listening TCP on [::]:10796
YYYY/MM/DD HH:MM:19.311823 [Info] transport/internet/tcp: listening TCP on [::]:10797
YYYY/MM/DD HH:MM:19.311825 [Info] transport/internet/tcp: listening TCP on [::]:10798
YYYY/MM/DD HH:MM:19.311827 [Info] transport/internet/tcp: listening TCP on [::]:10799
YYYY/MM/DD HH:MM:19.311829 [Info] transport/internet/tcp: listening TCP on [::]:10800
YYYY/MM/DD HH:MM:19.311832 [Info] transport/internet/tcp: listening TCP on [::]:10801
YYYY/MM/DD HH:MM:19.311834 [Info] transport/internet/tcp: listening TCP on [::]:10802
YYYY/MM/DD HH:MM:19.311836 [Info] transport/internet/tcp: listening TCP on [::]:10803
YYYY/MM/DD HH:MM:19.311838 [Info] transport/internet/tcp: listening TCP on [::]:10804
YYYY/MM/DD HH:MM:19.311840 [Info] transport/internet/tcp: listening TCP on [::]:10805
YYYY/MM/DD HH:MM:19.311842 [Info] transport/internet/tcp: listening TCP on [::]:10806
YYYY/MM/DD HH:MM:19.311845 [Info] transport/internet/tcp: listening TCP on [::]:10807
YYYY/MM/DD HH:MM:19.311847 [Info] transport/internet/tcp: listening TCP on [::]:10808
YYYY/MM/DD HH:MM:19.311849 [Info] transport/internet/tcp: listening TCP on [::]:10809
YYYY/MM/DD HH:MM:19.311851 [Info] transport/internet/tcp: listening TCP on [::]:10810

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0