Hysteria2 UDP 测试不通过 hy2官方服务端则没有问题

操作系统

Linux

系统版本

Ubuntu 22.04

安装类型

sing-box 原始命令行程序

如果您使用图形客户端程序，请提供该程序版本。

NekoBox 3.23-2023-10-14

版本

sing-box version unknown

Environment: go1.21.3 linux/amd64 Tags: with_quic,with_quic,with_dhcp,with_wireguard,with_shadowsocksr,with_ech,with_utls,with_reality_server,with_acme,with_clash_api,with_v2ray_api,with_gvisor CGO: disabled

（通过source安装的最新版） https://sing-box.sagernet.org/installation/from-source/

描述

进行TCP和UDP，UDP测试不通过。同一个机子上官方hy2服务端的可以通。注：udp是通过win2socks 和 https://github.com/HMBSbige/NatTypeTester 这两个工具测试都没通。

重现方式

注：服务器信息脱敏了。

udp是通过win2socks 和 https://github.com/HMBSbige/NatTypeTester 这两个工具测试都没用通。同一个机子上官方hy2服务端的可以通。麻烦帮忙看看什么问题，谢谢了。试过脚本搭的，还有这个是我按照文档手搭的，都是不通。

还需要什么信息麻烦告知一下，我这边提供一下，谢谢。

服务端sing-box配置

{
    "dns": {
        "servers": [
            {
                "address": "tls://8.8.8.8"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "::",
            "listen_port": 20000,
            "tag": "hy2-in",
            "tls": {
                "acme": {
                    "data_directory": "/usr/local/etc/sing-box",
                    "default_server_name": "",
                    "domain": [
                        "xxxx.com"
                    ],
                    "email": "me@xxxx.com",
                    "provider": "letsencrypt"
                },
                "alpn": [
                    "h3"
                ],
                "certificate_path": "",
                "enabled": true,
                "key_path": "",
                "max_version": "1.3",
                "min_version": "1.2",
                "server_name": "xxxx.com"
            },
            "type": "hysteria2",
            "users": [
                {
                    "password": "123456"
                }
            ]
        }
    ],
    "log": {
        "level": "info"
    },
    "outbounds": [
        {
            "type": "direct"
        },
        {
            "tag": "dns-out",
            "type": "dns"
        }
    ],
    "route": {
        "rules": [
            {
                "outbound": "dns-out",
                "protocol": "dns"
            }
        ]
    }
}

nekobox客户端：

{
    "bean": {
        "_v": 0,
        "addr": "xxxx.com",
        "allowInsecure": false,
        "connectionReceiveWindow": 0,
        "disableMtuDiscovery": false,
        "disableSni": false,
        "downloadMbps": 0,
        "forceExternal": false,
        "hopInterval": 10,
        "name": "xxxx",
        "password": "123456",
        "port": 20000,
        "streamReceiveWindow": 0,
        "uploadMbps": 0
    },
    "gid": 6,
    "id": 797,
    "traffic": {
        "dl": 39768212,
        "ul": 3935502
    },
    "type": "hysteria2",
    "yc": 0
}

hy2://123456@xxxx.com:20000#hysteria2

udp是通过win2socks 和 https://github.com/HMBSbige/NatTypeTester 这两个工具测试都没用通。同一个机子上官方hy2服务端的可以通。

日志

这个是相关请求时，服务端的信息。没有崩溃信息或者其他报错信息。如需更完整的日志麻烦告知，这边提供一下。谢谢！

INFO[0045] [2444682794 0ms] inbound/hysteria2[hy2-in]: [xxxxxxxx] inbound packet connection to stun.l.google.com:3478
INFO[0045] [2444682794 0ms] outbound/direct[0]: outbound packet connection
DEBUG[0045] [2444682794 0ms] dns: lookup domain stun.l.google.com
DEBUG[0045] [2444682794 0ms] dns: lookup succeed for stun.l.google.com: 74.125.204.127 2404:6800:4008:c04::7f
INFO[0045] [3491877495 0ms] inbound/hysteria2[hy2-in]: [xxxxxxxx] inbound connection to www.google.com:443
DEBUG[0045] [3491877495 0ms] router: sniffed protocol: tls, domain: www.google.com
INFO[0045] [3491877495 0ms] outbound/direct[0]: outbound connection to www.google.com:443
DEBUG[0045] [3491877495 0ms] dns: lookup domain www.google.com
DEBUG[0045] [3491877495 1ms] dns: lookup succeed for www.google.com: 172.217.24.228 2404:6800:4005:801::2004

INFO[0245] [2726308592 0ms] inbound/hysteria2[hy2-in]: inbound packet connection to stun.syncthing.net:3478
INFO[0245] [2726308592 0ms] outbound/direct[0]: outbound packet connection
INFO[0245] [529477018 0ms] inbound/hysteria2[hy2-in]: inbound connection to www.google.com:443
INFO[0245] [529477018 0ms] outbound/direct[0]: outbound connection to www.google.com:443
INFO[0245] dns: exchanged www.google.com A www.google.com. 280 IN A 142.250.204.100
INFO[0245] [59245542 0ms] inbound/hysteria2[hy2-in]: inbound connection to www.google.com.hk:443
INFO[0245] [59245542 0ms] outbound/direct[0]: outbound connection to www.google.com.hk:443
INFO[0263] [178526373 0ms] inbound/hysteria2[hy2-in]: inbound packet connection to stun.l.google.com:3478
INFO[0263] [178526373 0ms] outbound/direct[0]: outbound packet connection
INFO[0263] [854945025 0ms] inbound/hysteria2[hy2-in]: inbound connection to www.google.com:443
INFO[0263] [854945025 0ms] outbound/direct[0]: outbound connection to www.google.com:443
INFO[0265] [3757210467 0ms] inbound/hysteria2[hy2-in]: inbound connection to ctldl.windowsupdate.com:80
INFO[0265] [3757210467 0ms] outbound/direct[0]: outbound connection to ctldl.windowsupdate.com:80

SagerNet / sing-box