xtls-rprx-vision 流控在中转场景中无法使用

[morooi]

使用场景：iOS 端 APP 暂不支持 VLESS + xtls-rprx-vision，所以想借助中转服务器转发，iOS 通过 SS 连接中转服务器，中转服务器使用 VLESS + xtls-rprx-vision 访问代理服务器。

iOS -> 中转服务器（SS） -> 代理服务器（VLESS + xtls-rprx-vision）

中转服务器和代理服务器都显示有流量，中转机有报错日志。实测使用 Quantumult X、macOS Xray-core 作为客户端均无法访问网页

当代理服务器使用 VLESS + XTLS + xtls-rprx-direct 时一切正常

服务端配置

{
    "log": {
        "access": "/var/log/xray/access.log",
        "error": "/var/log/xray/error.log",
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "tag": "VLESS-in",
            "port": 11222,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "test-id",
                        "flow": "xtls-rprx-vision",
                        "level": 0
                    }
                ],
                "decryption": "none",
                "fallbacks": [
                    {
                        "dest": 5555,
                        "xver": 2
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls",
                "tlsSettings": {
                    "certificates": [
                        {
                            "certificateFile": "/ssl/xxx.crt",
                            "keyFile": "/ssl/xxx.key",
                            "ocspStapling": 3600
                        }
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls"
                ]
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "settings": {
                "domainStrategy": "UseIPv4"
            },
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "settings": {},
            "tag": "blocked"
        }
    ],
    "dns": {
        "servers": [
            "https+local://1.1.1.1/dns-query",
            "https+local://1.0.0.1/dns-query",
            "localhost"
        ]
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "domain": [
                    "geosite:cn"
                ],
                "outboundTag": "blocked"
            },
            {
                "type": "field",
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "blocked"
            }
        ]
    }
}

中转服务器配置

{
    "log": {
        "access": "/var/log/xray/access.log",
        "error": "/var/log/xray/error.log",
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "listen": "0.0.0.0",
            "port": 1234,
            "protocol": "shadowsocks",
            "settings": {
                "clients": [
                    {
                        "password": "abc-test",
                        "method": "chacha20-ietf-poly1305"
                    }
                ],
                "network": "tcp,udp"
            },
            "tag": "ss-in"
        }
    ],
    "outbounds": [
        {
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "proxy.test",
                        "port": 11222,
                        "users": [
                            {
                                "id": "test-id",
                                "encryption": "none",
                                "flow": "xtls-rprx-vision"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls",
                "tlsSettings": {
                    "serverName": "xxxx.xxx.xxxx",
                    "allowInsecure": false,
                    "fingerprint": "chrome"
                }
            },
            "tag": "vless-out"
        }
    ]
}

客户端配置

{
    "log": {
        "access": "/var/log/xray/access.log",
        "error": "/var/log/xray/error.log",
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 10809,
            "protocol": "socks",
            "settings": {
                "udp": true
            },
            "tag": "socks-in"
        }
    ],
    "outbounds": [
        {
            "protocol": "shadowsocks",
            "settings": {
                "servers": [
                    {
                        "address": "mid.test",
                        "port": 1234,
                        "password": "abc-test",
                        "method": "chacha20-ietf-poly1305"
                    }
                ]
            },
            "tag": "ss-out"
        }
    ]
}

中转机有报错日志

2022/12/04 22:28:09 [Info] [1015719912] proxy/shadowsocks: tunnelling request to tcp:osx.telegram.org:443
2022/12/04 22:28:09 [Info] [1015719912] app/dispatcher: default route for tcp:osx.telegram.org:443
2022/12/04 22:28:09 [Info] [1015719912] transport/internet/tcp: dialing TCP to tcp:proxy.test:11222
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/outbound: tunneling request to tcp:osx.telegram.org:443 via proxy.test:11222
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsFilterTls found tls client hello! 517
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsPadding 517 489 0
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: Xtls Unpadding new block0 16 content 4096 padding 0 0
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsFilterTls found tls 1.3! 1163 TLS_AES_256_GCM_SHA384
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: Xtls Unpadding new block0 0 content 1589 padding 0 0
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsPadding 80 1136 0
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsPadding 216 867 2
2022/12/04 22:28:09 [Info] [1015719912] proxy/vless/encoding: XtlsWrite writeV 1 2309 0
2022/12/04 22:28:10 [Info] [1015719912] proxy/vless/encoding: Xtls Unpadding new block0 0 content 645 padding 305 2
2022/12/04 22:28:10 [Info] [1015719912] proxy/vless/encoding: XtlsRead splice
2022/12/04 22:28:10 [Info] [1015719912] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: connection ends > proxy/vless/outbound: failed to transfer response payload > readfrom tcp 中转机本地IP:1234->客户端地址:客户端端口: splice: broken pipe
2022/12/04 22:28:10 [Info] [1015719912] app/proxyman/inbound: connection ends > proxy/shadowsocks: connection ends > proxy/shadowsocks: failed to transport all TCP response > io: read/write on closed pipe

[yuhan6665]

感谢反馈 1d7c40d 已修好等待发布

[morooi]

感谢大佬修复🎉