ERROR: inbound/tun[0]: initialize vision: TLS required

Welcome

[X] Yes, I'm using the latest major release. Only such installations are supported.
[X] Yes, I'm using the latest Golang release. Only such installations are supported.
[X] Yes, I've searched similar issues on GitHub and didn't find any.
[X] Yes, I've included all information below (version, FULL config, FULL log, etc).

Description of the problem

服务端使用 Xray-core v1.7.5， sing-box v1.2.3 使用tun模式，管理员启成功，打开国内网络非常缓慢，外网 Google 打不开，日志提示 inbound/tun[0]: initialize vision: TLS required

Version of sing-box

```console $ sing-box version # v1.2.3 ```

Server and client configuration file

```console # server: "dns": { "servers": [ "https+local://1.1.1.1/dns-query", "localhost" ], "queryStrategy": "UseIPv4" }, "inbounds": [ { "port": 443, "protocol": "vless", "settings": { "clients": [ { "id": "x-x-x-x-x", "flow": "xtls-rprx-vision", "level": 0 } ], "decryption": "none", "fallbacks": [ { "dest": 1234, "xver": 1 }, { "path": "/vless", "dest": 1235, "xver": 1 } ] }, "streamSettings": { "network": "tcp", "security": "tls", "tlsSettings": { "alpn": "http/1.1", "certificates": [ { "ocspStapling": 3600, "certificateFile": "/home/ubuntu/cert/fullchain.crt", "keyFile": "/home/ubuntu/cert/cert.key" } ] } } } # client: { "log": { "disabled": false, "level": "info", "output": "D:\\sing-box\\box.log", "timestamp": true }, "dns": { "servers": [ { "tag": "google", "address": "tls://8.8.8.8" }, { "tag": "local", "address": "223.5.5.5", "detour": "direct" } ], "rules": [ { "domain": "my.domain.con", "geosite": "cn", "server": "local" } ], "strategy": "ipv4_only" }, "inbounds": [ { "type": "tun", "interface_name": "sing-box", "inet4_address": "172.19.0.1/30", "auto_route": true, "mtu": 1500, "sniff": true } ], "route": { "rules": [ { "geosite": "category-ads-all", "outbound": "block" }, { "geoip": "private", "outbound": "direct" }, { "geosite": "cn", "geoip":"cn", "outbound": "direct" }, { "geosite": [ "apple", "microsoft" ], "outbound":"direct" }, { "geosite": [ "netflix", "openai" ], "outbound":"us-unlock" }, { "protocol": "dns", "outbound": "dns-out" } ], "auto_detect_interface": true, "final": "us-unlock" }, "outbounds": [ { "tag": "us-unlock", "type": "vless", "server": "x.x.x.x", "server_port": 443, "uuid": "x-x-x-x-x", "flow": "xtls-rprx-vision", "network": "tcp", "tls":{ "enabled": true, "disable_sni": false, "server_name": "my.domain.com", "insecure": false }, "packet_encoding": "xudp", "transport": {"type": "http"}, "domain_strategy": "ipv4_only" }, { "type": "direct", "tag": "direct" }, { "type": "block", "tag": "block" }, { "type": "dns", "tag": "dns-out" } ] } ```

Server and client log file

```console # server 无日志 ```

SagerNet / sing-box