yichya / luci-app-xray

(Almost) full feature Xray client for OpenWrt
Mozilla Public License 2.0
580 stars 433 forks source link

openwrt22.03 reality xray没法连服务器 #296

Closed 3xpert closed 1 year ago

3xpert commented 1 year ago

android上的v2rayNG正常,但在openwrt连不上,参数不会错,已经check了N遍了,不知问题出在哪了

服务器error.log 2023/04/30 10:18:21 [Info] transport/internet/tcp: REALITY: processed invalid connection 2023/04/30 10:18:21 [Info] transport/internet/tcp: REALITY: processed invalid connection

openwrt (22.03) logread Sun Apr 30 10:19:23 2023 daemon.info xray[29851]: 2023/04/30 02:19:23 [Warning] [704386399] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [dial tcp VPS IP:443: i/o timeout] > common/retry: all retry attempts failed Sun Apr 30 10:19:23 2023 daemon.info xray[29851]: 2023/04/30 02:19:23 [Info] [704386399] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe Sun Apr 30 10:19:24 2023 daemon.info xray[29851]: 2023/04/30 02:19:24 [Warning] [208255251] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [dial tcp VPS IP:443: i/o timeout] > common/retry: all retry attempts failed Sun Apr 30 10:19:24 2023 daemon.info xray[29851]: 2023/04/30 02:19:24 [Info] [208255251] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe Sun Apr 30 10:19:26 2023 daemon.info xray[29851]: 2023/04/30 02:19:26 [Info] [2430334423] transport/internet/tcp: dialing TCP to tcp:VPS IP:443 Sun Apr 30 10:19:26 2023 daemon.info xray[29851]: 2023/04/30 02:19:26 [Debug] transport/internet: dialing to tcp:VPS IP:443 Sun Apr 30 10:19:27 2023 daemon.info xray[29851]: 2023/04/30 02:19:27 [Warning] [5412845] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [dial tcp VPS IP:443: i/o timeout] > common/retry: all retry attempts failed Sun Apr 30 10:19:27 2023 daemon.info xray[29851]: 2023/04/30 02:19:27 [Info] [5412845] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe

/etc/config/xray_fw4 config general
option xray_bin '/usr/bin/xray'
option mark '255'
option tproxy_port_tcp '1080'
option tproxy_port_udp '1081'
option socks_port '1082'
option http_port '1083'
option dns_port '5300'
option dns_count '3'
option secure_dns '8.8.8.8'
option default_dns '1.1.1.1'
list bypassed_domain_rules 'geosite:cn'
list forwarded_domain_rules 'geosite:geolocation-!cn' list blocked_domain_rules 'geosite:category-ads' option transparent_proxy_enable '1'
option wan_bp_list '/dev/null'
option lan_target 'TP_SPEC_WAN_AC'
option lan_ifaces 'br-lan'
option xray_api '1'
option conn_idle '300'
option handshake '4'
option uplink_only '2'
option downlink_only '5'
option buffer_size '512'
option fast_dns '119.29.29.29'
option routing_domain_strategy 'IPIfNonMatch' option main_server 'cfg034a8f'
option tproxy_udp_server 'cfg034a8f' list geoip_direct_code_list 'cn'
option loglevel 'debug'
list wan_bp_ips '114.114.114.114'
list wan_bp_ips 'xxx.xxx.xxx.xxx'
list wan_bp_ips 'xxx.xxx.xxx.xxx'

config servers
option alias 'reality@ob'
option domain_strategy 'UseIP'
option protocol 'vless'
option vless_encryption 'none'
option vless_tls 'reality'
option vless_reality_short_id 'ba1b04aaxxxxxxxx' option transport 'tcp'
option tcp_guise 'none'
option dialer_proxy 'disabled'
option server_port '443'
option vless_reality_server_name 'www.microsoft.com' option vless_reality_public_key 'B9huR7QWpC-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx' option vless_flow_reality 'xtls-rprx-vision'
option server 'VPS IP'
option password '5459f61d-3a93-5889-bc6e-xxxxxxxxxxxx'
option vless_reality_fingerprint 'randomized'

3xpert commented 1 year ago

问题出在Server Name上了。但奇怪的是用www.microsoft.com在android上可以连通而luci-app-xray上却不行。虽然RealiTLScanner可以扫出不少符合条件TLS v1.3 ALPN h2的域名来,但似乎不是个个都可以用的,还不知道该怎么甄选。