ERR_HTTP2_PROTOCOL_ERROR

mkmark commented 2 weeks ago

Integrity requirements

[X] I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
[X] I provided the complete config and logs, rather than just providing the truncated parts based on my own judgment.
[X] I searched issues and did not find any similar issues.
[X] The problem can be successfully reproduced in the latest Release

Description

Chrome reports ERR_HTTP2_PROTOCOL_ERROR when visiting https://www.xda-developers.com

tested under
- chrome with SwitchyOmega, windows
- nghttp with proxychains, linux
this is a special case as
- most sites have a http/1.1 fallback but this site does not
- I can actually visit other sites using http/2 (e.g. https://cloudflare-quic.com/ will correctly fallback to http/2 when udp is disabled)
I know it's a xray issue because
- if connected directly without xray, there will be no such error
- if connected using sing-box (with a similar minimal config with just a socks inbound and a direct outbound) and everything else remains the same, there will be no such error
I know it's about http/2 because
- Chrome reports so
- validated by nghttp, (see below)

Reproduction Method

visit https://www.xda-developers.com

Client config

{
  "log": {
    "level": "debug"
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 1080,
      "protocol": "socks",
      "tag": "socks"
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "freedom"
    }
  ]
}

Server config

no server required

Client log

Xray 24.11.5 (Xray, Penetrates Everything.) afc7ec5 (go1.23.2 linux/amd64)
A unified platform for anti-censorship.
2024/11/10 16:11:46 [Info] infra/conf/serial: Reading config: &{Name:/usr/local/etc/xray/config/socks.json Format:json}
2024/11/10 16:11:46 [Warning] core: Xray 24.11.5 started
2024/11/10 16:12:41 from tcp:127.0.0.1:51098 accepted tcp:www.xda-developers.com:443 [socks >> freedom]

Server log

no server required

additional http/2 test using proxychains and nghttp

$ proxychains -q nghttp -v https://www.xda-developers.com
[  0.074] Connected
The negotiated protocol: h2
[  0.240] send SETTINGS frame <length=12, flags=0x00, stream_id=0>
          (niv=2)
          [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
          [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
[  0.240] send PRIORITY frame <length=5, flags=0x00, stream_id=3>
          (dep_stream_id=0, weight=201, exclusive=0)
[  0.240] send PRIORITY frame <length=5, flags=0x00, stream_id=5>
          (dep_stream_id=0, weight=101, exclusive=0)
[  0.240] send PRIORITY frame <length=5, flags=0x00, stream_id=7>
          (dep_stream_id=0, weight=1, exclusive=0)
[  0.240] send PRIORITY frame <length=5, flags=0x00, stream_id=9>
          (dep_stream_id=7, weight=1, exclusive=0)
[  0.240] send PRIORITY frame <length=5, flags=0x00, stream_id=11>
          (dep_stream_id=3, weight=1, exclusive=0)
[  0.240] send HEADERS frame <length=45, flags=0x25, stream_id=13>
          ; END_STREAM | END_HEADERS | PRIORITY
          (padlen=0, dep_stream_id=11, weight=16, exclusive=0)
          ; Open new stream
          :method: GET
          :path: /
          :scheme: https
          :authority: www.xda-developers.com
          accept: */*
          accept-encoding: gzip, deflate
          user-agent: nghttp2/1.59.0
[  0.304] recv SETTINGS frame <length=18, flags=0x00, stream_id=0>
          (niv=3)
          [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):128]
          [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65536]
          [SETTINGS_MAX_FRAME_SIZE(0x05):16777215]
[  0.304] recv WINDOW_UPDATE frame <length=4, flags=0x00, stream_id=0>
          (window_size_increment=2147418112)
[  0.304] recv SETTINGS frame <length=0, flags=0x01, stream_id=0>
          ; ACK
          (niv=0)
[  0.305] recv RST_STREAM frame <length=4, flags=0x00, stream_id=13>
          (error_code=PROTOCOL_ERROR(0x01))
[  0.305] send GOAWAY frame <length=8, flags=0x00, stream_id=0>
          (last_stream_id=0, error_code=NO_ERROR(0x00), opaque_data(0)=[])
Some requests were not processed. total=1, processed=0

For comparison, if using sing-box, with everything else exactly the same

$ proxychains -q nghttp -v https://www.xda-developers.com
[  0.009] Connected
The negotiated protocol: h2
[  0.554] send SETTINGS frame <length=12, flags=0x00, stream_id=0>
          (niv=2)
          [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):100]
          [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65535]
[  0.554] send PRIORITY frame <length=5, flags=0x00, stream_id=3>
          (dep_stream_id=0, weight=201, exclusive=0)
[  0.554] send PRIORITY frame <length=5, flags=0x00, stream_id=5>
          (dep_stream_id=0, weight=101, exclusive=0)
[  0.554] send PRIORITY frame <length=5, flags=0x00, stream_id=7>
          (dep_stream_id=0, weight=1, exclusive=0)
[  0.554] send PRIORITY frame <length=5, flags=0x00, stream_id=9>
          (dep_stream_id=7, weight=1, exclusive=0)
[  0.554] send PRIORITY frame <length=5, flags=0x00, stream_id=11>
          (dep_stream_id=3, weight=1, exclusive=0)
[  0.554] send HEADERS frame <length=45, flags=0x25, stream_id=13>
          ; END_STREAM | END_HEADERS | PRIORITY
          (padlen=0, dep_stream_id=11, weight=16, exclusive=0)
          ; Open new stream
          :method: GET
          :path: /
          :scheme: https
          :authority: www.xda-developers.com
          accept: */*
          accept-encoding: gzip, deflate
          user-agent: nghttp2/1.64.0
[  0.816] recv SETTINGS frame <length=18, flags=0x00, stream_id=0>
          (niv=3)
          [SETTINGS_MAX_CONCURRENT_STREAMS(0x03):128]
          [SETTINGS_INITIAL_WINDOW_SIZE(0x04):65536]
          [SETTINGS_MAX_FRAME_SIZE(0x05):16777215]
[  0.816] recv WINDOW_UPDATE frame <length=4, flags=0x00, stream_id=0>
          (window_size_increment=2147418112)
[  0.816] recv SETTINGS frame <length=0, flags=0x01, stream_id=0>
          ; ACK
          (niv=0)
[  0.816] send SETTINGS frame <length=0, flags=0x01, stream_id=0>
          ; ACK
          (niv=0)
[  1.086] recv (stream_id=13) :status: 200
...

Fangliding commented 2 weeks ago

It works on my device, both chrome and nghttp. According to your configuration, xda's domain should not be displayed in the log. The information you provided may not be complete

mkmark commented 2 weeks ago

Thanks for your time! Sorry I just found out that www.xda-developers.com blocked the ip of the device on which I tested xray. Some of the claim in the original test were wrong (I forgot to control the machine I used to test), my apologies.

XTLS / Xray-core