v2ray / v2ray-core

A platform for building proxies to bypass network restrictions.
https://www.v2ray.com/
MIT License
45.37k stars 8.94k forks source link

搭建V2ray 后,可以ping通但是无法正常联网,也无法翻墙 #2394

Closed aslkdhakjQWE23132 closed 4 years ago

aslkdhakjQWE23132 commented 4 years ago

提交 Issue 之前请先阅读 Issue 指引,然后回答下面的问题,谢谢。 除非特殊情况,请完整填写所有问题。不按模板发的 issue 将直接被关闭。 如果你遇到的问题不是 V2Ray 的 bug,比如你不清楚要如何配置,请使用Discussion进行讨论。

1) 你正在使用哪个版本的 V2Ray?(如果服务器和客户端使用了不同版本,请注明) 官方脚本,一键脚本都不行 2) 你的使用场景是什么?比如使用 Chrome 通过 Socks/VMess 代理观看 YouTube 视频。 任意浏览器都无法访问google 3) 你看到的不正常的现象是什么?(请描述具体现象,比如访问超时,TLS 证书错误等) 全局模式下无法访问任何网站 4) 你期待看到的正确表现是怎样的? 正常访问/翻墙 5) 请附上你的配置(提交 Issue 前请隐藏服务器端IP地址)。

服务器端配置:

    // 在这里附上服务器端配置文件

{ "inbounds": [ { "port":23322, "listen": "127.0.0.1", "tag": "vmess-in", "protocol": "vmess", "settings": { "clients": [ { "id":"b76ab909-4aa4-48da-a255-480cea804f04", "alterId":256 } ] }, "streamSettings": { "network": "ws", "wsSettings": { "path":"/abcd321" } } } ], "outbounds": [ { "protocol": "freedom", "settings": { }, "tag": "direct" }, { "protocol": "blackhole", "settings": { }, "tag": "blocked" } ], "routing": { "domainStrategy": "AsIs", "rules": [ { "type": "field", "inboundTag": [ "vmess-in" ], "outboundTag": "direct" } ] } }

客户端配置:

    // 在这里附上客户端配置

"log": { "access": "", "error": "", "loglevel": "warning" }, "inbounds": [ { "port": 443, "listen": null, "protocol": "vmess", "sniffing": null, "settings": { "auth": null, "udp": false, "ip": null, "clients": [ { "id": "b76ab909-4aa4-48da-a255-480cea804f04", "alterId": 256, "email": "t@t.tt", "security": null } ] }, "streamSettings": { "network": "ws", "security": "tls", "tlsSettings": { "allowInsecure": true, "serverName": null }, "tcpSettings": null, "kcpSettings": null, "wsSettings": { "connectionReuse": true, "path": "/abcd321", "headers": null }, "httpSettings": null, "quicSettings": null } } ], "outbounds": null, "dns": null, "routing": { "domainStrategy": "IPIfNonMatch", "rules": [] } } 6) 请附上出错时软件输出的错误日志。在 Linux 中,日志通常在 /var/log/v2ray/error.log 文件中。

服务器端错误日志:

    // 在这里附上服务器端日志

无 客户端错误日志: 无

    // 在这里附上客户端日志

无 7) 请附上访问日志。在 Linux 中,日志通常在 /var/log/v2ray/access.log 文件中。 无

    // 在这里附上服务器端日志

无 8) 其它相关的配置文件(如 Nginx)和相关日志。

配置 v2ray+ws+TLS

server {
    listen 443 ssl;
    ssl on;
    ssl_certificate       /etc/v2ray/***.xyz.crt;
    ssl_certificate_key   /etc/v2ray/XXX.xyz.key;
    ssl_protocols         TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers           HIGH:!aNULL:!MD5;
      ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
      server_name bbc.***.xyz;
    index index.html index.htm;
    root  /home/wwwroot/sCalc;
    error_page 400 = /400.html;
location /abcd321
    {
    proxy_redirect off;
      proxy_pass http://127.0.0.1:23322;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $http_host;
    }
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

}

配置 80重定向443 强制SSL

server {
    listen 80;
      server_name ***.xyz;
   return 301 https://***.xyz$request_uri;

9) 如果 V2Ray 无法启动,请附上 --test 输出。 正常启动 通常的命令为 /usr/bin/v2ray/v2ray --test --config /etc/v2ray/config.json。请按实际情况修改。

10) 如果 V2Ray 服务运行不正常,请附上 journal 日志。 运行正常 通常的命令为 journalctl -u v2ray

请预览一下你填的内容再提交。

ghost commented 4 years ago

該站點的 /abcd321 路徑能否通過網頁瀏覽器正常訪問?

aslkdhakjQWE23132 commented 4 years ago

/ abcd321

你好大神,请问路径是否是 域名/etc/v2ray/abcd321

ghost commented 4 years ago

/ abcd321

你好大神,请问路径是否是 域名/etc/v2ray/abcd321

域名/abcd321

aslkdhakjQWE23132 commented 4 years ago

没法访问,请教大神能否解决

ghost commented 4 years ago

没法访问,请教大神能否解决

  1. 你的伺服器是什麼作業系統?
  2. 能否通過網頁瀏覽器直接訪問該域名?
  3. 指導你進行此配置的教程是哪個?
aslkdhakjQWE23132 commented 4 years ago

Thank you for your help 1.基本所有操作系统都试过,像debian centos ubuntu各种版本都用过。 2.不可以访问。 3.youtub的大多数教程我都看过,我的另外一台服务器随便怎么搭建v2ray都可以,就是这台服务器不管装啥系统V2RAY搭建就是不行,域名解析正常,v2ray配置检测也是OK,就是无法访问网络,这是我一直很困惑的问题。

ghost commented 4 years ago

Thank you for your help 1.基本所有操作系统都试过,像debian centos ubuntu各种版本都用过。 2.不可以访问。 3.youtub的大多数教程我都看过,我的另外一台服务器随便怎么搭建v2ray都可以,就是这台服务器不管装啥系统V2RAY搭建就是不行,域名解析正常,v2ray配置检测也是OK,就是无法访问网络,这是我一直很困惑的问题。

針對 2:我的猜測是,Nginx 服務出現問題,請通過執行:

# journalctl -u nginx

提供 Log,如果 Log 過長,可以貼在 Pastebin

ghost commented 4 years ago

順便也請提供 V2Ray 的 Log。

aslkdhakjQWE23132 commented 4 years ago

v2ray和Nginx执行显示的都是 No entries

ghost commented 4 years ago

No entries

是在 root 用戶下執行的麼?

aslkdhakjQWE23132 commented 4 years ago

是的呢在root用户下执行的

ghost commented 4 years ago

是的呢在root用户下执行的

你沒有通過 systemd 管理服務麼?也就是類似:

# systemctl start nginx
# systemctl stop nginx

這樣的。


也可以嘗試執行:

# systemctl status nginx
# systemctl status v2ray

並貼出顯示的內容。

aslkdhakjQWE23132 commented 4 years ago

1.v2ray log -- Logs begin at Sun 2020-03-29 20:50:48 EDT, end at Mon 2020-03-30 00:14:30 EDT. -- Mar 30 00:14:13 racknerd-5a9ec9 systemd[1]: Stopping V2Ray - A unified platform for anti-censorship... Mar 30 00:14:13 racknerd-5a9ec9 systemd[1]: Stopped V2Ray - A unified platform for anti-censorship. 2.nginx log -- Logs begin at Sun 2020-03-29 20:50:48 EDT, end at Mon 2020-03-30 00:14:30 EDT. -- Mar 30 00:14:13 racknerd-5a9ec9 systemd[1]: Stopping V2Ray - A unified platform for anti-censorship... Mar 30 00:14:13 racknerd-5a9ec9 systemd[1]: Stopped V2Ray - A unified platform for anti-censorship.

aslkdhakjQWE23132 commented 4 years ago

-- Logs begin at Sun 2020-03-29 20:35:36 EDT, end at Mon 2020-03-30 00:12:36 EDT. -- Mar 30 00:12:26 racknerd-5a9ec9 systemd[1]: Stopping A high performance web server and a reverse proxy server... Mar 30 00:12:26 racknerd-5a9ec9 systemd[1]: Stopped A high performance web server and a reverse proxy server.

ghost commented 4 years ago

請再執行:

# cat /var/log/nginx/error.log

# cat /var/log/v2ray/error.log

並提供內容。

aslkdhakjQWE23132 commented 4 years ago

1.nginx log 2020/03/29 18:53:06 [error] 473#473: *3 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: *.68.254.248, server: crossgfw.***.xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:53:16 [error] 473#473: 11 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:53:24 [error] 473#473: 15 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:53:57 [error] 473#473: 33 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:54:20 [error] 473#473: 51 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:54:24 [error] 473#473: 55 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:54:29 [error] 473#473: 61 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:54:45 [error] 473#473: 73 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:54:55 [error] 473#473: 77 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:55:09 [error] 473#473: 89 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:55:11 [error] 473#473: 91 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:55:13 [error] 473#473: 93 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 18:55:16 [error] 473#473: 97 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 20:23:21 [error] 473#473: 362 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 20:29:28 [error] 473#473: 408 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 20:30:06 [error] 473#473: 432 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: **.68.254.248, server: crossgfw..xyz, request: "GET /abcd321 HTTP/1.1", upstream: "http://127.0.0.1:23322/abcd321", host: "bbc..xyz" 2020/03/29 21:02:53 [crit] 473#473: 470 SSL_do_handshake() failed (SSL: error:1417D18C:SSL routines:tls_process_client_hello:version too low) while SSL handshaking, client: 74.82.47.5, server: 0.0.0.0:443 2020/03/29 21:19:34 [error] 473#473: 480 "/home/wwwroot/sCalc/blog/expressvpn-rolls-out-apps-and-browser-extensions-in-over-a-dozen-languages/index.html" is not found (2: No such file or directory), client: 162.158.202.11, server: crossgfw..xyz, request: "GET /blog/expressvpn-rolls-out-apps-and-browser-extensions-in-over-a-dozen-languages/?redir=www.exp2redir2.com HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:42 [error] 473#473: 481 open() "/home/wwwroot/sCalc/favicon.ico" failed (2: No such file or directory), client: **.68.244.151, server: crossgfw..xyz, request: "GET /favicon.ico HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:47 [error] 473#473: 483 open() "/home/wwwroot/sCalc/cn" failed (2: No such file or directory), client: 162.158.6.185, server: crossgfw.****.xyz, request: "GET /cn HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:48 [error] 473#473: *484 open() "/home/wwwroot/sCalc/support/troubleshooting" failed (2: No such file or directory), client: 162.158.6.143, server: crossgfw..xyz, request: "GET /support/troubleshooting HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:49 [error] 473#473: *485 open() "/home/wwwroot/sCalc/support/troubleshooting/china-status" failed (2: No such file or directory), client: *.69.34.219, server: crossgfw.***.xyz, request: "GET /support/troubleshooting/china-status HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:52 [error] 473#473: 486 "/home/wwwroot/sCalc/support/troubleshooting/china-status/index.html" is not found (2: No such file or directory), client: 162.158.165.61, server: crossgfw.****.xyz, request: "GET /support/troubleshooting/china-status/?utm_campaign=china_get_update_ios&utm_content=download_latest_app&utm_medium=apps&utm_term=v7.3.7_p_CN_1&utm_source=rotating_message_v3_ios&redir=www.ciibdes.com&redir_t=bc5c74190c2766c97a0b7876855fee2f HTTP/1.1", host: "bbc..xyz" 2020/03/29 21:19:54 [error] 473#473: *488 open() "/home/wwwroot/sCalc/vpn-software/vpn-windows" failed (2: No such file or directory), client: *.68.245.44, server: crossgfw.***.xyz, request: "GET /vpn-software/vpn-windows HTTP/1.1", host: "bbc.*.xyz" 2020/03/29 22:32:31 [error] 473#473: 499 open() "/home/wwwroot/sCalc/400.html" failed (2: No such file or directory), client: 92.63.194.74, server: crossgfw..xyz, request: "/�Cookie: mstshash=Administr" 2020/03/29 23:54:29 [crit] 473#473: 508 SSL_do_handshake() failed (SSL: error:1417D18C:SSL routines:tls_process_client_hello:version too low) while SSL handshaking, client: 208.93.152.17, server: 0.0.0.0:443

aslkdhakjQWE23132 commented 4 years ago

cat: /var/log/v2ray/error.log: No such file or directory

ghost commented 4 years ago

這個 Log 中的 bbc..xyzcrossgfw..xyz 是你刻意修改的麼?如果不是,請檢查你所填寫的域名信息。

我注意到最後一條的內容是:

2020/03/29 23:54:29 [crit] 473#473: *508 SSL_do_handshake() failed (SSL: error:1417D18C:SSL routines:tls_process_client_hello:version too low) while SSL handshaking, client: 208.93.152.17, server: 0.0.0.0:443

請告訴我你目前所使用的作業系統以及版本號。

ghost commented 4 years ago

cat: /var/log/v2ray/error.log: No such file or directory

V2Ray 的配置中沒有開啟 Log 麼?還是將 Log 輸出到了其它路徑?

aslkdhakjQWE23132 commented 4 years ago

1.bbc.***.xyz 我看发帖要求是要隐藏地址呀,所以我把他隐藏起来了 2.系统版本号为Debian 9 64 Bit 3.v2ray我这次使用的官方的安装脚本(bash <(curl -Ls https://install.direct/go.sh)这个代码,log应该是默认开启的吧,路径我也没用动

ghost commented 4 years ago

1.bbc.***.xyz 我看发帖要求是要隐藏地址呀,所以我把他隐藏起来了 2.系统版本号为Debian 9 64 Bit 3.v2ray我这次使用的官方的安装脚本(bash <(curl -Ls https://install.direct/go.sh)这个代码,log应该是默认开启的吧,路径我也没用动。

看了一下你前面發的配置,的確是沒有開啟 Log 的,修改為該站點中的內容即可: https://pastebin.com/AN4wbf6R

ghost commented 4 years ago

也請把 Nginx 中配置 80 重定向至 443 的部分去掉,重啟 Nginx 服務。

然後分別嘗試訪問 http://https:// 的,看看 http:// 是不是可以訪問的。

ghost commented 4 years ago

還有就是,我又重新看了一下你的客戶端配置,格式化後,發現問題很大,是完全錯誤的內容。

修改為: https://pastebin.com/qDNN0rN6

其中的 address 需要你自行填寫。

ghost commented 4 years ago

還有一個問題就是,你之前所說的「没法访问」,指的是無法連通站點,還只是站點中沒有內容?

aslkdhakjQWE23132 commented 4 years ago

非常感谢指点,无法访问指的是无法连通站点,配置正在按你说的修改

ghost commented 4 years ago

重啟 Nginx 服務後,請執行一下:

$ pgrep nginx

看看是否有顯示出來數字。

aslkdhakjQWE23132 commented 4 years ago

root@racknerd-5a9ec9:~# pgrep nginx 7374 7376

ghost commented 4 years ago

root@racknerd-5a9ec9:~# pgrep nginx 7374 7376

目前能否通過網頁瀏覽器訪問你所部署的站點呢?

aslkdhakjQWE23132 commented 4 years ago

域名/abcd123 显示521 可以进去了
Error 521 Ray ID: 57c167c6884df319 • 2020-03-30 11:14:09 UTC

ghost commented 4 years ago

域名/abcd123 显示521 可以进去了 Error 521 Ray ID: 57c167c6884df319 • 2020-03-30 11:14:09 UTC

是打算通過 Cloudflare 代理麼?

這個結果表示你的源站是關閉的。

你在前面所提供的 Nginx 配置,就是全部的內容了麼?

ghost commented 4 years ago

你這個配置裡暴露域名了呢,結合你前面所提供的部分信息,我訪問了一下,HTTP 雖然是 Error 521,但 HTTPS 已經可以訪問了,並且你所配置的路徑已經顯示為 Bad Request

ghost commented 4 years ago

貼配置可以考慮使用 Pastebin,可設定過期時間。

ghost commented 4 years ago

你是通過 /etc/nginx/nginx.conf 來部署 Nginx 的麼?

aslkdhakjQWE23132 commented 4 years ago

抱歉,昨晚下线比较早,没能来得及回复你,Nginx是通过nginx.conf来配置的。

ghost commented 4 years ago

抱歉,昨晚下线比较早,没能来得及回复你,Nginx是通过nginx.conf来配置的。

是這樣的。

Debian 官方是不建議直接通過 /etc/nginx/nginx.conf 來部署 Nginx 的。

參見:https://wiki.debian.org/Nginx/DirectoryStructure

因為該文件是由 Nginx 軟體包維護者維護,裡面包含一些適配 Debian 發行版的設定。

如果你打算恢復原始設定,我猜測你安裝的是 nginx 這個包,請執行:

# apt autoremove --purge nginx

事實上,依據你的配置,只需要安裝最小的 Nginx 即可,也就是安裝 nginx-light 這個包,執行:

# apt install nginx-light

這時候,如果你再執行:

# cat /etc/nginx/nginx.conf

你會發現,其中是有不少內容的,這就包括:

include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;

/etc/nginx/conf.d/*.conf:額外的配置文件。 /etc/nginx/sites-enabled/*:符號連結到 sites-available/* 以啟用虛擬主機。

我個人是在 /etc/nginx/conf.d/ssl_tweaks.conf 中寫入以下站點中的內容: https://pastebin.com/rgNTC4uf

其中,ssl_protocols 部分需要你自行修改,Debian 9 中,OpenSSL 默認版本小於 1.1.1,無法直接使用 TLS 1.3。

假設你的域名是 example.com

/etc/nginx/sites-available/example.com 中寫入以下站點中的內容: https://pastebin.com/4mLG9mSZ

這個內容中,我依據你提供的部分信息進行調整,但其中的 server_name(這個有兩處)、ssl_certificate_keyssl_certificate 部分仍然需要你自行修改。

當一切修改完成後,執行:

# ln -s ../sites-available/example.com /etc/nginx/sites-enabled/example.com

這時候,再執行:

# ls -l /etc/nginx/sites-enabled/example.com

你會看到其中有:

/etc/nginx/sites-enabled/example.com -> ../sites-available/example.com

再執行:

# diff -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/example.com

你會看到:

Files /etc/nginx/sites-available/example.com and /etc/nginx/sites-enabled/example.com are identical

一切部署完成,現在可以嘗試重啟 Nginx 服務了:

# systemctl restart nginx.service

然後,請檢查 Nginx 是否正常運作,以及站點能否通過網頁瀏覽器進行訪問。

aslkdhakjQWE23132 commented 4 years ago

重启显示有错误代码

ghost commented 4 years ago

重启显示有错误代码

顯示的是什麼呢?

kslr commented 4 years ago

这样是在浪费彼此时间,我建议关闭该issue

除非特殊情况,请完整填写所有问题。不按模板发的 issue 将直接被关闭。

ghost commented 4 years ago

这样是在浪费彼此时间,我建议关闭该issue

除非特殊情况,请完整填写所有问题。不按模板发的 issue 将直接被关闭。

先保留吧,這個不解決,我心裡難受 XD。

ghost commented 4 years ago

@aslkdhakjQWE23132 我猜測,你說的錯誤代碼指的是 Cloudflare 所顯示的內容。

很可能還是 Error 521

請執行:

# cat /var/log/nginx/error.log

以檢查錯誤輸出。

同時請仔細檢查配置內容,包括我在前面所說的: ssl_protocolsserver_namessl_certificate_keyssl_certificate 部分,都是需要自行修改的。

aslkdhakjQWE23132 commented 4 years ago

我是怀疑我这台VPS网卡或者端口什么有问题,不管怎么安装就是用不了V2RAR,其他一台随便怎么安装都可以正常使用。

ghost commented 4 years ago

我是怀疑我这台VPS网卡或者端口什么有问题,不管怎么安装就是用不了V2RAR,其他一台随便怎么安装都可以正常使用。

可以用呀,之前已經有顯示過 Bad Request 了。

ghost commented 4 years ago

如果你不介意的話。

可以把該 VPS 的登錄信息發送到我的臨時郵箱中:spare23111@protonmail.com

我稍後直接去幫你看看是什麼問題好了。

aslkdhakjQWE23132 commented 4 years ago

大神,首先还是非常感谢你的耐心的解答,感觉这样确实是很费你的精力。我现在主要就是想知道我这台服务器到底能不能正常搭建V2ray,因为这台机我是购买了一年,目前使用了2个月左右,期间v2ray我尝试不同的方法搭建不少于20次,每次都是不能正常使用,所以不能用v2ray我觉得太浪费了, 网上我也探索过很多方法,一直无法解决,这也是我很困惑的问题,所以我就是想把这台服务器给你看看,看是否能正常搭建并使用V2ray即可。

aslkdhakjQWE23132 commented 4 years ago

已发至你的临时邮箱

ghost commented 4 years ago

問題羅列如下:

  1. 你沒有在 /etc/nginx/conf.d/ssl_tweaks.conf 中寫入內容。
  2. 你把 ssl_certificate_keyssl_certificate 的路徑內容寫錯了。
  3. 伺服器作業系統的 NTP 時鐘未同步。

針對問題 3,這個伺服器的供應商阻止了 NTP 端口通訊,導致時鐘同步失敗。

並且,硬件時鐘也是錯誤的,只能手動設置到正確的時鐘。

錯誤的時鐘是導致你這臺伺服器無法通過 V2Ray 進行通訊的主要原因。

aslkdhakjQWE23132 commented 4 years ago

对的,最早我也怀疑是时间问题,但是我手动调不过来,网上很多人也说时间没啥关系,服务商都是自动同步时间的,针对1、阻止了 NTP 端口通訊;2、硬件時鐘也是錯誤的;这俩个问题是否可以自己解决,还是需要服务商解决。

aslkdhakjQWE23132 commented 4 years ago

这是同步时间的命令 rm /etc/localtime ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

ghost commented 4 years ago

对的,最早我也怀疑是时间问题,但是我手动调不过来,网上很多人也说时间没啥关系,服务商都是自动同步时间的,针对1、阻止了 NTP 端口通訊;2、硬件時鐘也是錯誤的;这俩个问题是否可以自己解决,还是需要服务商解决。

能找服供應商解決最好,解決不了就手動調整一下 UTC 時鐘。

https://time.is/UTC

比如當前為:2020-03-31 11:32:00

# date -us '20200331 1132'

即可。

你那臺伺服器,我已經執行過了,V2Ray 應該是能用了的。

ghost commented 4 years ago

这是同步时间的命令 rm /etc/localtime ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

這個只是調整時區罷了。