SagerNet / sing-box

The universal proxy platform
https://sing-box.sagernet.org/
Other
19.34k stars 2.3k forks source link

Shadowsocks plugin, salt not unique #768

Closed berbunda closed 1 year ago

berbunda commented 1 year ago

Welcome

Description of the problem

Hi. First of all: sorry for my english. I have a problem with config. If I write "plugin": "v2ray-plugin", in client's config.json, I can not connect to desination site. Same result with obfs-local plugin. If I erase this string, I can connect to destination site successfully. I am sorry, I do not know any dependences and conflicts of shadowsocks' plugins with specific settings. Please, help me correct my config. Need I make any manipulation with server part of sing-box (maybe download additional plugins or anything else)? Thank You in advance.

Version of sing-box

Version of server sing-box ``` ***@***:/etc/sing-box# /etc/sing-box/sing-box version sing-box version 1.3.6 Environment: go1.20.6 linux/amd64 Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_reality_server,with_clash_api Revision: 09ffa2c66e6276fda5fcf3c16da142444a984458 CGO: disabled ***@***:/etc/sing-box# ```
Version of client sing-box ``` $ sing-box version sing-box version 1.3.6 Environment: go1.20.6 windows/amd64 Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_reality_server,with_clash_api Revision: 09ffa2c66e6276fda5fcf3c16da142444a984458 CGO: disabled ```

Server and client configuration file

server-config ``` { "log": { "level": "trace", "output": "box.log", "timestamp": true }, "dns": {}, "ntp": { "enabled": true, "interval": "30m0s", "server": "pool.ntp.org", "server_port": 123 }, "inbounds": [ { "type": "shadowsocks", "tag": "ss-in", "listen": "::", "listen_port": 12346, "network": "tcp", "method": "2022-blake3-chacha20-poly1305", "password": "mypassword" } ], "route": {}, "experimental": {} } ```
client-config ``` { "log": { "level": "trace", "output": "box.log", "timestamp": true }, "dns": {}, "ntp": { "enabled": true, "interval": "30m0s", "server": "pool.ntp.org", "server_port": 123 }, "inbounds": [ { "type": "mixed", "tag": "mx-in", "listen": "::", "listen_port": 2080, "domain_strategy": "ipv4_only" } ], "outbounds": [ { "type": "shadowsocks", "tag": "ss-out", "bind_interface": "Ethernet", "inet4_bind_address": "0.0.0.0", "connect_timeout": "5s", "udp_fragment": false, "domain_strategy": "ipv4_only", "fallback_delay": "300ms", "server": "x.x.x.x", "server_port": 12346, "method": "2022-blake3-chacha20-poly1305", "password": "mypassword", "plugin": "v2ray-plugin", "udp_over_tcp": true } ], "route": {}, "experimental": {} } ```

Server and client log file

server-log ``` +0300 2023-08-10 20:23:46 INFO [940280238 0ms] inbound/shadowsocks[ss-in]: inbound connection from x.x.x.x:40983 +0300 2023-08-10 20:23:46 ERROR [940280238 0ms] inbound/shadowsocks[ss-in]: process connection from x.x.x.x:40983: shadowsocks: serve TCP from x.x.x.x:40983: salt not unique ```
client-log ``` +0300 2023-08-10 20:23:47 INFO [786411821 0ms] inbound/mixed[mx-in]: inbound connection from 127.0.0.1:60078 +0300 2023-08-10 20:23:47 INFO [786411821 3ms] inbound/mixed[mx-in]: inbound connection to ***.***:443 +0300 2023-08-10 20:23:47 DEBUG [786411821 3ms] dns: lookup domain ***.*** +0300 2023-08-10 20:23:47 INFO [786411821 3ms] dns: lookup succeed for ***.***: x.x.x.x x.x.x.x +0300 2023-08-10 20:23:47 DEBUG [786411821 3ms] dns: resolved [x.x.x.x x.x.x.x] +0300 2023-08-10 20:23:47 INFO [786411821 3ms] outbound/shadowsocks[ss-out]: outbound connection to x.x.x.x:443 +0300 2023-08-10 20:23:47 INFO [786411821 144ms] outbound/shadowsocks[ss-out]: outbound connection to x.x.x.x:443 +0300 2023-08-10 20:23:47 ERROR [786411821 321ms] inbound/mixed[mx-in]: process connection from 127.0.0.1:60078: read tcp 192.168.0.175:60079->x.x.x.x:12346: wsarecv: An existing connection was forcibly closed by the remote host. | read tcp 192.168.0.175:60080->x.x.x.x:12346: wsarecv: An existing connection was forcibly closed by the remote host. ```
nekohasekai commented 1 year ago

The shadowsocks plugin in the sing-box is written to be compatible with some commercial software that is no longer maintained, and does not have the function of anti-censorship.