vision遇到问题

[whatpig]

iphone ipad登陆同一appleid 设置了短信转发 登陆同一个tg 登陆同一gmail账户

只要是vision节点就会导致ipad短信收不到 facetime电话打不出去 tg消息通知也收不到 gmail邮件也收不到

只要切到其他协议节点就立马正常

客户端是passwall2

其他上网功能都正常

不知道是vision的问题还是passwall2客户端的问题，所以来问一哈

vision客户端服务端都是1.7.2

先把我的配置贴出来

以下是xtls-rprx-direct配置

{
    "log": {
        "loglevel": "warning"
    },
    "inbounds": [
        {
            "port": 443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "xxx", 
                        "flow": "xtls-rprx-direct"
                    }
                ],
                "decryption": "none",
                "fallbacks": [
                    {
                        "dest": 8388
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "xtls",
                "xtlsSettings": {
                    "alpn": [
                        "http/1.1"
                    ],
                    "certificates": [
                        {
                            "certificateFile": "/root/.acme.sh/xxx_ecc/fullchain.cer", 
                            "keyFile": "/root/.acme.sh/xxx_ecc/xxx.key"
                        }
                    ]
                }
            }
        },
        {
            "port": 8388,
            "listen": "127.0.0.1",
            "protocol": "trojan",
            "settings": {
                "clients": [
                    {
                        "password": "123"
                    }
                ],
                "fallbacks": [
                    {
                        "dest": "80"
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "none"
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom"
        }
    ]
}

以下是vision配置文件

{
    "log": {
        "loglevel": "warning"
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:cn",
                    "geoip:private"
                ],
                "outboundTag": "block"
           }
        ]
    },
    "inbounds": [
        {
            "port": 443, 
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "xxx", 
                        "flow": "xtls-rprx-vision"  
                    }
                ],
                "decryption": "none",
                "fallbacks": [
                    {
                        "dest": 30066, 
                        "xver": 1
                    } 
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls",
                "tlsSettings": {
                    "rejectUnknownSni": true,
                    "alpn": [
                        "http/1.1"
                    ],
                    "certificates": [
                        {
                            "certificateFile": "/root/.acme.sh/xxx_ecc/fullchain.cer", 
                            "keyFile": "/root/.acme.sh/xxx_ecc/xxx.key"
                        }
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls"
                ]
            }
        },
        {
            "port": 30066, 
            "listen": "127.0.0.1",
            "protocol": "trojan",
            "settings": {
                "clients": [
                    {
                        "password": "xxx" 
                    }
                ],
                "fallbacks": [
                    {
                        "dest": 80 
                    }
                ]
            },
            "streamSettings": {
                "network": "tcp",
                "security": "none",
                "tcpSettings": {
                    "acceptProxyProtocol": true
                }
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ]
}

[whatpig]

补充一点

我都设置了trojan回落

把客户端协议切换到trojan也能正常使用ipad所有功能

[whatpig]

如果问题仍然存在，升级1.7.5。参考 #1612 #1500，因为iOS不支持vision，前面肯定有其他代理协议。

刚刚都试了，没有用，只要不是vision一切正常，用vision除了ipad不能同步收到通知其他也一切正常。。。。

[RPRX]

测一下 v1.7.5

[RPRX]

（两边都要升级）

[whatpig]

测一下 v1.7.5

两边都是1.7.5也不行，，，

[RPRX]

在电脑上开 Xray-core 然后给 iPad 设置 HTTP 代理试试

[whatpig]

在电脑上开 Xray-core 然后给 iPad 设置 HTTP 代理试试

大佬

我用不回落得原版配置就正常了

配置如下：

{
    "log": {
        "loglevel": "warning"
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "0.0.0.0",
            "port": 443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "xxx",
                        "flow": "xtls-rprx-vision"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls",
                "tlsSettings": {
                    "certificates": [
                        {
                            "certificateFile": "/root/.acme.sh/xxx_ecc/fullchain.cer", 
                            "keyFile": "/root/.acme.sh/xxx_ecc/xxx.key"
                        }
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls"
                ]
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ]
}

但是有个问题 不能在"geoip:cn"下面加"geoip:private" 加了也不行！！！

那么问题来了~第一 为啥回落不行呀 第二 下面加"geoip:private"为啥也不行。

[whatpig]

在电脑上开 Xray-core 然后给 iPad 设置 HTTP 代理试试

大佬

我用不回落得原版配置就正常了

配置如下：

{
    "log": {
        "loglevel": "warning"
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "0.0.0.0",
            "port": 443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "xxx",
                        "flow": "xtls-rprx-vision"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "tls",
                "tlsSettings": {
                    "certificates": [
                        {
                            "certificateFile": "/root/.acme.sh/xxx_ecc/fullchain.cer", 
                            "keyFile": "/root/.acme.sh/xxx_ecc/xxx.key"
                        }
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls"
                ]
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ]
}

但是有个问题 不能在"geoip:cn"下面加"geoip:private" 加了也不行！！！

那么问题来了~第一 为啥回落不行呀 第二 下面加"geoip:private"为啥也不行。

再补充一个 加回落的配置 把"geoip:private"删掉也是不行的~

[wilsonkor]

软路由pa55wa11 版本4.56，x1ay 双端1.72，vision正常，ipad，macbook正常。

[ZqinKing]

ios上现在能用vision了么？不是只能用none么？

[chika0801]

ios上现在能用vision了么？不是只能用none么？

ios上不能。

如果加了none，实际是（网上交流简称）vless tcp tls 的组合，风险是vps被封端口。

建议ios用hysteria tuic

[RPRX]

看起来是与协议无关的路由配置问题

[alireza1023]

Can vision be used on ios now? Isn't it only possible to use none?

now it's supported on ShadowRocket