XrayR-project / XrayR

A Xray backend framework that can easily support many panels. 一个基于Xray的后端框架,支持V2ay,Trojan,Shadowsocks协议,极易扩展,支持多面板对接
https://xrayr-project.github.io/XrayR-doc/
Mozilla Public License 2.0
1.9k stars 783 forks source link

Can XrayR solve this issue? Incorrect Password Attack #563

Closed ballardmandy69 closed 6 months ago

ballardmandy69 commented 7 months ago

When a user attempts to connect with an incorrect password, the server tries to decrypt each incoming packet using the passwords of all users, eventually resulting in an error due to the inability to find the correct user.

Each incorrect password attempt, whether it's a TCP connection or a UDP packet, forces the server to repeat this process, significantly increasing the server's CPU usage and degrading the experience for regular users.

If there are many such incorrect password connection attempts, such as in the case of a deliberate attack on the server, the server's CPU usage can become fully saturated, preventing normal users from using the service effectively.