search

v2ray / Planning

Deprecated. Please use v2ray-core for feature requests
60 stars 13 forks source link

Vmess: Separate time difference error in log #41

Closed astrataro closed 6 years ago

astrataro commented 6 years ago

Currently, if the client time differs from the server time, the server will log the error as "invalid user". It would be better to separate this from a real "invalid user" error, to make it easier for debugging, as well as for writing exclusive rules for log parsers like fail2ban.

DarienRaymond commented 6 years ago

It is not possible to tell such case. The authentication bytes in VMess are not decryptable. The server can't simply check whether the client uses the correct id, but just not proper timestamp. Otherwise it would be easy for attacker to intercept authentication messages and decrypt the id used by client.