search

shadowsocks / shadowsocks-windows

A C# port of shadowsocks
Other
58.3k stars 16.4k forks source link

刚打开的一瞬间可以从浏览器登录google，过一会就不行了 #3334

Open SincerelyUnique opened 2 years ago

SincerelyUnique commented 2 years ago

简要描述问题

每次都是刚打开时可以打开一会google，大概也就一两分钟的样子，然后google刷不了，电脑网也上不了了，切换pac和全局模式都不行都不能上网，请问一下这个是怎么回事呀？ 是从搬瓦工上自己搭建的ss，我记得加密方式是aes-256那个，好像是wget 了一个shell脚本那种安装方式

环境

自己购买的搬瓦工是centos7.6 使用的是ss-windows 4.4.1.0 （从github下载的，装在windows10上）

操作步骤

打开ss，选择pac模式或全局模式，打开浏览器，可以直接进google，一两分钟后， 网都上不了了，之后再多次关闭ss和打开ss，都没办法上网了，可能间隔个几天，打开又可以上一两分钟，之后还是上不了网

期望的结果

能够一直使用ss上网

实际结果

打开后只能上一两分钟

配置文件和日志文件（请隐去敏感信息）

2022-07-13 04:31:36 ERROR    Finalize cipher failed
2022-07-13 04:31:36 ERROR    Finalize cipher failed
2022-07-13 04:31:43 ERROR    Finalize cipher failed
2022-07-13 22:08:27 ERROR    Finalize cipher failed
2022-07-14 11:12:48 INFO     connecting clients2.googleusercontent.com:443 from 116.149.199.174:39020
2022-07-14 11:12:49 INFO     connecting accounts.google.com:443 from 116.149.199.174:39027
2022-07-14 11:12:51 INFO     connecting clients2.google.com:443 from 116.149.199.174:39028
2022-07-14 11:13:00 INFO     connecting clients4.google.com:443 from 116.149.199.174:39041
2022-07-14 11:13:02 INFO     connecting easylist-downloads.adblockplus.org:443 from 116.149.199.174:39049
2022-07-14 11:13:05 INFO     connecting mail.google.com:443 from 116.149.199.174:39061
2022-07-14 11:13:09 INFO     connecting www.google.com:443 from 116.149.199.174:39088
2022-07-14 11:13:09 INFO     connecting www.google.com:443 from 116.149.199.174:39089
2022-07-14 11:13:10 INFO     connecting www.google.com:443 from 116.149.199.174:39075
2022-07-14 11:13:10 INFO     connecting login.live.com:443 from 116.149.199.174:39083
2022-07-14 11:13:10 INFO     connecting lh3.googleusercontent.com:443 from 116.149.199.174:39095
2022-07-14 11:13:11 INFO     connecting aa.google.com:443 from 116.149.199.174:39100
2022-07-14 11:13:11 INFO     connecting apis.google.com:443 from 116.149.199.174:39099
2022-07-14 11:13:11 INFO     connecting login.live.com:443 from 116.149.199.174:39101
2022-07-14 11:13:11 INFO     connecting content-autofill.googleapis.com:443 from 116.149.199.174:39104
2022-07-14 11:13:12 INFO     connecting play.google.com:443 from 116.149.199.174:39105
2022-07-14 11:13:12 INFO     connecting www.loom.com:443 from 116.149.199.174:39106
2022-07-14 11:13:12 INFO     connecting play.google.com:443 from 116.149.199.174:39109
2022-07-14 11:13:12 INFO     connecting play.google.com:443 from 116.149.199.174:39110
2022-07-14 11:13:13 INFO     connecting play.google.com:443 from 116.149.199.174:39113
2022-07-14 11:13:13 INFO     connecting play.google.com:443 from 116.149.199.174:39112
2022-07-14 11:13:13 INFO     connecting cdn.loom.com:443 from 116.149.199.174:39107
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39117
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39116
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39115
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39121
2022-07-14 11:13:13 INFO     connecting lh5.googleusercontent.com:443 from 116.149.199.174:39119
2022-07-14 11:13:13 INFO     connecting lh5.googleusercontent.com:443 from 116.149.199.174:39123
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39120
2022-07-14 11:13:13 INFO     connecting encrypted-tbn0.gstatic.com:443 from 116.149.199.174:39122
2022-07-14 11:13:14 INFO     connecting play.google.com:443 from 116.149.199.174:39111
2022-07-14 11:13:15 INFO     connecting lh5.googleusercontent.com:443 from 116.149.199.174:39125
2022-07-14 11:13:15 INFO     connecting api.segment.io:443 from 116.149.199.174:39128
2022-07-14 11:13:16 INFO     connecting ogs.google.com:443 from 116.149.199.174:39130
2022-07-14 11:13:16 INFO     connecting api.webtest.net:443 from 116.149.199.174:39131
2022-07-14 11:13:18 INFO     connecting id.google.com:443 from 116.149.199.174:39142
2022-07-14 11:13:25 INFO     connecting accounts.google.com:443 from 116.149.199.174:39153
2022-07-14 11:13:27 INFO     connecting www.speedtest.net:443 from 116.149.199.174:39156
2022-07-14 11:13:28 INFO     connecting www.googletagmanager.com:443 from 116.149.199.174:39169
2022-07-14 11:13:28 INFO     connecting snap.licdn.com:443 from 116.149.199.174:39170
2022-07-14 11:13:28 INFO     connecting px.ads.linkedin.com:443 from 116.149.199.174:39171
2022-07-14 11:13:29 INFO     connecting s754876867.t.eloqua.com:443 from 116.149.199.174:39184
2022-07-14 11:13:29 INFO     connecting www.linkedin.com:443 from 116.149.199.174:39193
2022-07-14 11:13:30 INFO     connecting www.linkedin.com:443 from 116.149.199.174:39195
2022-07-14 11:13:30 INFO     connecting www.linkedin.com:443 from 116.149.199.174:39196
2022-07-14 11:13:30 INFO     connecting privacy-policy.truste.com:443 from 116.149.199.174:39201
2022-07-14 11:13:30 INFO     connecting privacy-policy.truste.com:443 from 116.149.199.174:39200
2022-07-14 11:13:31 INFO     connecting www.googleadservices.com:443 from 116.149.199.174:39202
2022-07-14 11:13:31 INFO     connecting p.adsymptotic.com:443 from 116.149.199.174:39203
2022-07-14 11:13:31 INFO     connecting www.google-analytics.com:443 from 116.149.199.174:39204
2022-07-14 11:13:32 INFO     connecting googleads.g.doubleclick.net:443 from 116.149.199.174:39205
2022-07-14 11:13:32 INFO     connecting clients4.google.com:443 from 111.85.200.131:58700
2022-07-14 11:13:32 ERROR    [Errno 104] Connection reset by peer
2022-07-14 11:13:33 ERROR    Finalize cipher failed
2022-07-14 11:13:35 INFO     connecting bat.bing.com:443 from 116.149.199.174:39210
2022-07-14 11:13:35 INFO     connecting analytics.tiktok.com:443 from 116.149.199.174:39212
2022-07-14 11:13:35 INFO     connecting analytics.tiktok.com:443 from 116.149.199.174:39213
2022-07-14 11:13:36 INFO     connecting www.googleapis.com:443 from 116.149.199.174:39216
2022-07-14 11:13:37 INFO     connecting stats.g.doubleclick.net:443 from 116.149.199.174:39215
2022-07-14 11:13:37 INFO     connecting clients4.google.com:443 from 116.149.199.174:39233
2022-07-14 11:13:38 INFO     connecting clients2.google.com:443 from 116.149.199.174:39250
2022-07-14 11:13:39 INFO     connecting clients2.googleusercontent.com:443 from 116.149.199.174:39268
2022-07-14 11:13:39 INFO     connecting v20.events.data.microsoft.com:443 from 116.149.199.174:39272
2022-07-14 11:14:05 INFO     connecting www.google.com:443 from 116.149.199.174:39348
2022-07-14 11:14:10 INFO     connecting beacons4.gvt2.com:443 from 116.149.199.174:39350
2022-07-14 11:14:11 INFO     connecting android.clients.google.com:443 from 116.149.199.174:39351
SincerelyUnique commented 2 years ago

搬瓦工服务器里log里面就11点12，11点13和11点14分钟的log，之后我这边就连不上了，好惨

chenshaoju commented 2 years ago

请尝试套个插件试试：https://github.com/shadowsocks/shadowsocks-windows/issues/2228#issuecomment-465047836

JamasChuang94 commented 2 years ago

请更换混淆方式或插件，我今天也被封了，出现流量异常就该更换了，因为防火墙已经开始特征识别的前兆

xiaosaaaa commented 1 year ago

加密方式换一下，再不行就用加密插件

sbwfnhn commented 1 year ago

应该是无差别式识别，只要是家庭宽带或个人设备的IP访问海外IP，全部都每隔几分钟断网又恢复。 我试过了，公司的海外服务器正常业务，用家庭宽带或5G访问，都存在每隔一段时间断开的问题。 但是用企业备案过的IP访问均正常。 所以可以确定，不是企业宽带用户，也就是没有在工信部备案过的个人5G设备或家庭宽带IP访问海外IP，无差别式不定时间隔性断网。这个就无解了。

JamasChuang94 commented 1 year ago

应该是无差别式识别，只要是家庭宽带或个人设备的IP访问海外IP，全部都每隔几分钟断网又恢复。 我试过了，公司的海外服务器正常业务，用家庭宽带或5G访问，都存在每隔一段时间断开的问题。 但是用企业备案过的IP访问均正常。 所以可以确定，不是企业宽带用户，也就是没有在工信部备案过的个人5G设备或家庭宽带IP访问海外IP，无差别式不定时间隔性断网。这个就无解了。

说明所有出境包都被特征识别审核了，还有对你所访问的IP 进行行为探测如果符合特征就封锁，作为备案的服务器都应该会被上面所监管或提供数据API给上面审核，加上现在国内情况审核制度越来越敏感，部分zf要求限制某些言论是可控的等等

sbwfnhn commented 1 year ago

应该是无差别式识别，只要是家庭宽带或个人设备的IP访问海外IP，全部都每隔几分钟断网又恢复。 我试过了，公司的海外服务器正常业务，用家庭宽带或5G访问，都存在每隔一段时间断开的问题。 但是用企业备案过的IP访问均正常。 所以可以确定，不是企业宽带用户，也就是没有在工信部备案过的个人5G设备或家庭宽带IP访问海外IP，无差别式不定时间隔性断网。这个就无解了。

说明所有出境包都被特征识别审核了，还有对你所访问的IP 进行行为探测如果符合特征就封锁，作为备案的服务器都应该会被上面所监管或提供数据API给上面审核，加上现在国内情况审核制度越来越敏感，部分zf要求限制某些言论是可控的等等

不是的，是正常的ssh登录，还有正常的http访问，不存在黑名单的问题，平常不翻墙也能正常访问，这段时间突然就所有海外业务连接不正常，每年都一样，已经好多年了。只要开大会，海外所有业务虽然能访问，但是不稳定。