Description
完整性要求
- 我保证阅读了文档,了解所有我编写的配置文件项的含义,而不是大量堆砌看似有用的选项或默认值。
- 我提供了完整的配置文件和日志,而不是出于自己的判断只给出截取的部分。
- 我搜索了 issues, 没有发现已提出的类似问题。
- 问题在 Release 最新的版本上可以成功复现
描述
服务端从v25.5.16升级到v25.6.8后(与客户端版本无关),若只监听443一切正常,若监听多个端口(1002个)则在启动后每个端口都连接不上(无论是隧道还是用正常浏览器访问后面的网站都连不上),服务端日志没有报错,客户端抓不到Server Hello,服务端到客户端抓不到Server Hello,dest和服务端之间能抓到Server Hello。
重现方式
v25.6.8监听"443,10000-11000"任何一个端口都连不上,降级到v25.5.16恢复,或者只监听443恢复。
注:和Proxy Protocol无关,开关v1v2都试了
客户端配置
{ "log": { "loglevel": "warning", "access": "/var/log/xray/access.log", "error": "/var/log/xray/error.log" }, "inbounds": [ { "port": 12345, "listen":"::", "protocol": "dokodemo-door", "tag": "doko", "settings": { "network": "tcp,udp", "followRedirect": true }, "streamSettings": { "sockopt": { "tproxy": "tproxy" } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": true } } ], "outbounds": [ { "tag": "xxx", "protocol": "vless", "settings": { "vnext": [ { "address": "xxx", "port": 443, "users": [ { "id": "xxx", "flow": "xtls-rprx-vision", "encryption": "none" } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "fingerprint": "ios", "serverName": "example.com", "publicKey": "xxx", "shortId": "xxx", "spiderX": "/index.html" } } }, { "tag": "direct", "protocol": "freedom", "settings": { "vnext": null, "servers": null, "response": null }, "mux": null }, { "tag": "block", "protocol": "blackhole", "settings": { "vnext": null, "servers": null, "response": { "type": "http" } } } ], "routing": { "domainStrategy": "IPOnDemand", "rules": [ { "type": "field", "inboundTag": [ "doko" ], "outboundTag": "xxx" } ] } }
服务端配置
{ "log": { "loglevel": "warning", "access": "/var/log/xray/access.log", "error": "/var/log/xray/error.log" }, "inbounds": [ { "tag": "native", "listen": "::", "port": "443,10000-11000", "protocol": "vless", "settings": { "clients": [ { "id": "xxx", "flow": "xtls-rprx-vision", "email": "test@example.com" }
], "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": false, "dest": "8080", "xver": 2, "serverNames": [ "example.com" ], "privateKey": "xxx", "minClientVer": "25.6.8", "maxTimeDiff": 3600000, "shortIds": [ "xxx" ] } }, "sniffing": { "enabled": true, "destOverride": [ "http", "tls" ], "routeOnly": true } } ], "outbounds": [ { "protocol": "freedom", "tag": "direct" }, { "protocol": "blackhole", "tag": "block" } ], "routing": { "domainStrategy": "IPOnDemand", "rules": [ { "type": "field", "inboundTag": [ "native" ], "outboundTag": "direct" } ] }
}
nginx:
server {
listen 127.0.0.1:8080 ssl proxy_protocol; http2 on; set_real_ip_from 127.0.0.1; real_ip_header proxy_protocol; real_ip_recursive on; ssl_certificate xxx.cer; ssl_certificate_key xxx.key; server_name example.com; ssl_protocols TLSv1.3; ssl_prefer_server_ciphers on; ssl_session_tickets off; ssl_session_timeout 1d; ssl_session_cache shared:SSL:10m; resolver 1.1.1.1 valid=60s; resolver_timeout 5s; location / { root /var/www; }
}
客户端日志
[Info] [xxx] app/proxyman/outbound: app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [context canceled dial tcp [xxx]:443: operation was canceled] > common/retry: all retry attempts failed
服务端日志
YYYY/MM/DD HH:MM:18.931879 [Debug] app/log: Logger started
YYYY/MM/DD HH:MM:19.247582 [Debug] app/router: MphDomainMatcher is enabled for 241500 domain rule(s)
YYYY/MM/DD HH:MM:19.247608 [Debug] app/router: MphDomainMatcher is enabled for 4 domain rule(s)
YYYY/MM/DD HH:MM:19.247612 [Debug] app/router: MphDomainMatcher is enabled for 117 domain rule(s)
YYYY/MM/DD HH:MM:19.247615 [Debug] app/router: MphDomainMatcher is enabled for 416 domain rule(s)
YYYY/MM/DD HH:MM:19.247621 [Debug] app/proxyman/inbound: creating stream worker on [::]:443
YYYY/MM/DD HH:MM:19.247625 [Debug] app/proxyman/inbound: creating stream worker on [::]:10007
YYYY/MM/DD HH:MM:19.247629 [Debug] app/proxyman/inbound: creating stream worker on [::]:10008
YYYY/MM/DD HH:MM:19.247632 [Debug] app/proxyman/inbound: creating stream worker on [::]:10009
YYYY/MM/DD HH:MM:19.247636 [Debug] app/proxyman/inbound: creating stream worker on [::]:10010
YYYY/MM/DD HH:MM:19.247639 [Debug] app/proxyman/inbound: creating stream worker on [::]:10011
YYYY/MM/DD HH:MM:19.247642 [Debug] app/proxyman/inbound: creating stream worker on [::]:10012
YYYY/MM/DD HH:MM:19.247645 [Debug] app/proxyman/inbound: creating stream worker on [::]:10013
YYYY/MM/DD HH:MM:19.247648 [Debug] app/proxyman/inbound: creating stream worker on [::]:10014
YYYY/MM/DD HH:MM:19.247651 [Debug] app/proxyman/inbound: creating stream worker on [::]:10015
YYYY/MM/DD HH:MM:19.247655 [Debug] app/proxyman/inbound: creating stream worker on [::]:10016
YYYY/MM/DD HH:MM:19.247658 [Debug] app/proxyman/inbound: creating stream worker on [::]:10017
YYYY/MM/DD HH:MM:19.247661 [Debug] app/proxyman/inbound: creating stream worker on [::]:10018
YYYY/MM/DD HH:MM:19.264628 [Info] transport/internet/tcp: listening TCP on [::]:10128
YYYY/MM/DD HH:MM:19.264651 [Info] transport/internet/tcp: listening TCP on [::]:10129
YYYY/MM/DD HH:MM:19.264655 [Info] transport/internet/tcp: listening TCP on [::]:10130
YYYY/MM/DD HH:MM:19.264658 [Info] transport/internet/tcp: listening TCP on [::]:10131
YYYY/MM/DD HH:MM:19.264662 [Info] transport/internet/tcp: listening TCP on [::]:10132
YYYY/MM/DD HH:MM:19.264665 [Info] transport/internet/tcp: listening TCP on [::]:10133
YYYY/MM/DD HH:MM:19.264668 [Info] transport/internet/tcp: listening TCP on [::]:10134
YYYY/MM/DD HH:MM:19.264671 [Info] transport/internet/tcp: listening TCP on [::]:10135
YYYY/MM/DD HH:MM:19.264674 [Info] transport/internet/tcp: listening TCP on [::]:10136
YYYY/MM/DD HH:MM:19.264678 [Info] transport/internet/tcp: listening TCP on [::]:10137
YYYY/MM/DD HH:MM:19.264681 [Info] transport/internet/tcp: listening TCP on [::]:10138
YYYY/MM/DD HH:MM:19.264684 [Info] transport/internet/tcp: listening TCP on [::]:10139
YYYY/MM/DD HH:MM:19.264688 [Info] transport/internet/tcp: listening TCP on [::]:10140
YYYY/MM/DD HH:MM:19.264691 [Info] transport/internet/tcp: listening TCP on [::]:10141
YYYY/MM/DD HH:MM:19.264694 [Info] transport/internet/tcp: listening TCP on [::]:10142
YYYY/MM/DD HH:MM:19.264697 [Info] transport/internet/tcp: listening TCP on [::]:10143
YYYY/MM/DD HH:MM:19.264704 [Info] transport/internet/tcp: listening TCP on [::]:10144
YYYY/MM/DD HH:MM:19.294007 [Info] transport/internet/tcp: listening TCP on [::]:10435
YYYY/MM/DD HH:MM:19.294037 [Info] transport/internet/tcp: listening TCP on [::]:10436
YYYY/MM/DD HH:MM:19.294042 [Info] transport/internet/tcp: listening TCP on [::]:10437
YYYY/MM/DD HH:MM:19.294045 [Info] transport/internet/tcp: listening TCP on [::]:10438
YYYY/MM/DD HH:MM:19.294049 [Info] transport/internet/tcp: listening TCP on [::]:10439
YYYY/MM/DD HH:MM:19.294052 [Info] transport/internet/tcp: listening TCP on [::]:10440
YYYY/MM/DD HH:MM:19.294058 [Info] transport/internet/tcp: listening TCP on [::]:10441
YYYY/MM/DD HH:MM:19.294061 [Info] transport/internet/tcp: listening TCP on [::]:10442
YYYY/MM/DD HH:MM:19.294064 [Info] transport/internet/tcp: listening TCP on [::]:10443
YYYY/MM/DD HH:MM:19.294068 [Info] transport/internet/tcp: listening TCP on [::]:10444
YYYY/MM/DD HH:MM:19.294071 [Info] transport/internet/tcp: listening TCP on [::]:10445
YYYY/MM/DD HH:MM:19.294074 [Info] transport/internet/tcp: listening TCP on [::]:10446
YYYY/MM/DD HH:MM:19.294087 [Info] transport/internet/tcp: listening TCP on [::]:10447
YYYY/MM/DD HH:MM:19.294090 [Info] transport/internet/tcp: listening TCP on [::]:10448
YYYY/MM/DD HH:MM:19.294092 [Info] transport/internet/tcp: listening TCP on [::]:10449
YYYY/MM/DD HH:MM:19.294094 [Info] transport/internet/tcp: listening TCP on [::]:10450
YYYY/MM/DD HH:MM:19.294097 [Info] transport/internet/tcp: listening TCP on [::]:10451
YYYY/MM/DD HH:MM:19.311793 [Info] transport/internet/tcp: listening TCP on [::]:10794
YYYY/MM/DD HH:MM:19.311817 [Info] transport/internet/tcp: listening TCP on [::]:10795
YYYY/MM/DD HH:MM:19.311820 [Info] transport/internet/tcp: listening TCP on [::]:10796
YYYY/MM/DD HH:MM:19.311823 [Info] transport/internet/tcp: listening TCP on [::]:10797
YYYY/MM/DD HH:MM:19.311825 [Info] transport/internet/tcp: listening TCP on [::]:10798
YYYY/MM/DD HH:MM:19.311827 [Info] transport/internet/tcp: listening TCP on [::]:10799
YYYY/MM/DD HH:MM:19.311829 [Info] transport/internet/tcp: listening TCP on [::]:10800
YYYY/MM/DD HH:MM:19.311832 [Info] transport/internet/tcp: listening TCP on [::]:10801
YYYY/MM/DD HH:MM:19.311834 [Info] transport/internet/tcp: listening TCP on [::]:10802
YYYY/MM/DD HH:MM:19.311836 [Info] transport/internet/tcp: listening TCP on [::]:10803
YYYY/MM/DD HH:MM:19.311838 [Info] transport/internet/tcp: listening TCP on [::]:10804
YYYY/MM/DD HH:MM:19.311840 [Info] transport/internet/tcp: listening TCP on [::]:10805
YYYY/MM/DD HH:MM:19.311842 [Info] transport/internet/tcp: listening TCP on [::]:10806
YYYY/MM/DD HH:MM:19.311845 [Info] transport/internet/tcp: listening TCP on [::]:10807
YYYY/MM/DD HH:MM:19.311847 [Info] transport/internet/tcp: listening TCP on [::]:10808
YYYY/MM/DD HH:MM:19.311849 [Info] transport/internet/tcp: listening TCP on [::]:10809
YYYY/MM/DD HH:MM:19.311851 [Info] transport/internet/tcp: listening TCP on [::]:10810