使用caddy前置分流的 Xray(M+F+H+K+G+B+A)+Caddy(N) 配置，使用出现一些问题。 #233

crosspacific · 2025-01-17T05:47:09Z

crosspacific
Jan 17, 2025

作者你好。

我首先使用了xray前置分流的 [Xray(M+H+K+G+B+A)+Caddy(N+T)] 的配置，删除了一些用不到的配置。配置如下：

xray分流

{
  "log": {
    "loglevel": "warning",
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log"
  },
  "inbounds": [
    {
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "1512a10a-0705-4ee4-99d6-04508fb82140",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 2023
          }
        ]
      },
      "streamSettings": {
        "network": "raw",
        "security": "reality",
        "realitySettings": {
          "target": 7443,
          "xver": 1,
          "serverNames": [
            "123.abc.xyz"
          ],
          "privateKey": "asdasdasdasdasdasdasdasdasds",
          "shortIds": [
            "12",
            "1234",
            "123456"
          ]
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    },
    {
      "listen": "127.0.0.1",
      "port": 2023,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "1512a10a-0705-4ee4-99d6-04508fb82140"
          },
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "xhttp",
        "xhttpSettings": {
          "path": "/x123"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    }
  ],
  "routing": {
    "rules": [
      {
        "type": "field",
        "protocol": [
          "bittorrent"
        ],
        "outboundTag": "blocked"
      },
      {
        "ip": [
          "geoip:private",
          "geoip:cn"
        ],
        "outboundTag": "blocked",
        "type": "field"
      }
    ]
  },
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIPv4"
      }
    },
    {
      "tag": "blocked",
      "protocol": "blackhole",
      "settings": {}
    }
  ]
}

caddy配置

{
  "admin": {
    "disabled": true,
    "config": {
      "persist": false
    }
  },
  "logging": {
    "logs": {
      "default": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/error.log"
        },
        "encoder": {
          "format": "console"
        },
        "level": "ERROR",
        "exclude": ["http.log.access.log0"]
      },
      "log0": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/access.log"
        },
        "encoder": {
          "format": "console"
        },
        "include": ["http.log.access.log0"]
      }
    }
  },
  "storage": {
    "module": "file_system",
    "root": "/home/tls"
  },
  "apps": {
    "layer4": {
      "servers": {
        "udppy": {
          "listen": ["udp/:443"],
          "routes": [{
            "handle": [{
              "handler": "proxy",
              "upstreams": [{
                "dial": ["udp/127.0.0.1:7443"]
              }]
            }]
          }]
        }
      }
    },
    "http": {
      "servers": {
        "srvh1": {
          "listen": [":80"],
          "routes": [{
            "handle": [{
              "handler": "static_response",
              "headers": {
                "Location": ["https://{http.request.host}{http.request.uri}"]
              },
              "status_code": 301
            }]
          }],
          "protocols": ["h1"]
        },
        "srvh3": {
          "listen": ["127.0.0.1:7443"],
          "listener_wrappers": [{
            "wrapper": "proxy_protocol",
            "allow": ["127.0.0.1/32"]
          },
          {
            "wrapper": "tls"
          }],
          "routes": [{
            "match": [{
              "path": ["/x123/*"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "transport": {
                "protocol": "http",
                "versions": ["h2c","2"]
              },
              "upstreams": [{
                "dial": "127.0.0.1:2023"
              }],
              "flush_interval": -1
            }]
          },
          {
            "handle": [{
              "handler": "headers",
              "response": {
                "set": {
                  "Alt-Svc": ["h3=\":443\"; ma=2592000"],
                  "Strict-Transport-Security": ["max-age=31536000; includeSubDomains; preload"]
                }
              }
            },
            {
              "handler": "file_server",
              "root": "/home/html"
            }]
          }],
          "tls_connection_policies": [{
            "match": {
              "sni": ["123.abc.xyz","456.abc.xyz"]
            },
            "cipher_suites": ["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"],
            "curves": ["x25519","secp521r1","secp384r1","secp256r1"],
            "alpn": ["h3","h2","http/1.1"]
          }],
          "trusted_proxies": {
            "source": "cloudflare",
            "interval": "12h",
            "timeout": "15s"
          },
          "logs": {
            "default_logger_name": "log0"
          },
          "protocols": ["h1","h2","h3"]
        }
      }
    },
    "tls": {
      "certificates": {
        "automate": ["*.abc.xyz"]
      },
      "automation": {
        "policies": [{
          "issuers": [{
            "module": "acme",
            "email": "[email protected]",
            "challenges": {
              "dns": {
                "provider": {
                  "name": "cloudflare",
                  "api_token": "qweqweqweqweqweqweqweqwe"
                }
              }
            }
          }]
        }]
      }
    }
  }
}

以上配置正常使用。

然后，我又重新修改了caddy前置分流的 Xray(M+F+H+K+G+B+A)+Caddy(N) 配置，配置如下：

caddy分流

{
  "admin": {
    "disabled": true,
    "config": {
      "persist": false
    }
  },
  "logging": {
    "logs": {
      "default": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/error.log"
        },
        "encoder": {
          "format": "console"
        },
        "level": "ERROR",
        "exclude": ["http.log.access.log0"]
      },
      "log0": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/access.log"
        },
        "encoder": {
          "format": "console"
        },
        "include": ["http.log.access.log0"]
      }
    }
  },
  "storage": {
    "module": "file_system",
    "root": "/home/tls"
  },
  "apps": {
    "layer4": {
      "servers": {
        "tcpsni": {
          "listen": [":443"],
          "routes": [{
            "match": [{
              "tls": {
                "sni": ["123.abc.xyz"]
              }
            }],
            "handle": [{
              "handler": "proxy",
              "proxy_protocol": "v1",
              "upstreams": [{
                "dial": ["127.0.0.1:5443"]
              }]
            }]
          },
          {
            "match": [{
              "tls": {}
            }],
            "handle": [{
              "handler": "proxy",
              "proxy_protocol": "v1",
              "upstreams": [{
                "dial": ["127.0.0.1:7443"]
              }]
            }]
          }]
        },
        "udppy": {
          "listen": ["udp/:443"],
          "routes": [{
            "handle": [{
              "handler": "proxy",
              "upstreams": [{
                "dial": ["udp/127.0.0.1:7443"]
              }]
            }]
          }]
        }
      }
    },
    "http": {
      "servers": {
        "srvh1": {
          "listen": [":80"],
          "routes": [{
            "handle": [{
              "handler": "static_response",
              "headers": {
                "Location": ["https://{http.request.host}{http.request.uri}"]
              },
              "status_code": 301
            }]
          }],
          "protocols": ["h1"]
        },
        "srvh3": {
          "listen": ["127.0.0.1:7443"],
          "listener_wrappers": [{
            "wrapper": "proxy_protocol",
            "allow": ["127.0.0.1/32"]
          },
          {
            "wrapper": "tls"
          }],
          "routes": [{
            "match": [{
              "path": ["/x123/*"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "transport": {
                "protocol": "http",
                "versions": ["h2c","2"]
              },
              "upstreams": [{
                "dial": "127.0.0.1:2023"
              }],
              "flush_interval": -1
            }]
          },
          {
            "handle": [{
              "handler": "headers",
              "response": {
                "set": {
                  "Alt-Svc": ["h3=\":443\"; ma=2592000"],
                  "Strict-Transport-Security": ["max-age=31536000; includeSubDomains; preload"]
                }
              }
            },
            {
              "handler": "file_server",
              "root": "/home/html"
            }]
          }],
          "tls_connection_policies": [{
            "match": {
              "sni": ["123.abc.xyz","456.abc.xyz"]
            },
            "cipher_suites": ["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"],
            "curves": ["x25519","secp521r1","secp384r1","secp256r1"],
            "alpn": ["h3","h2","http/1.1"]
          }],
          "trusted_proxies": {
            "source": "cloudflare",
            "interval": "12h",
            "timeout": "15s"
          },
          "logs": {
            "default_logger_name": "log0"
          },
          "protocols": ["h1","h2","h3"]
        }
      }
    },
    "tls": {
      "certificates": {
        "automate": ["*.abc.xyz"]
      },
      "automation": {
        "policies": [{
          "issuers": [{
            "module": "acme",
            "email": "[email protected]",
            "challenges": {
              "dns": {
                "provider": {
                  "name": "cloudflare",
                  "api_token": "12asdasdawdqw"
                }
              }
            }
          }]
        }]
      }
    }
  }
}

xray配置

{
  "log": {
    "loglevel": "warning",
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log" 
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 5443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "1512a10a-0705-4ee4-99d6-04508fb82140",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 2023
          }
        ]
      },
      "streamSettings": {
        "network": "raw",
        "security": "reality",
        "realitySettings": {
          "target": 7443,
          "xver": 1,
          "serverNames": [
            "123.abc.xyz"
          ],
          "privateKey": "asdadwadawdaw",
          "shortIds": [
            "12",
            "1234",
            "123456"
          ]
        },
        "rawSettings": {
          "acceptProxyProtocol": true
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    },
    {
      "listen": "127.0.0.1",
      "port": 2023,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "1512a10a-0705-4ee4-99d6-04508fb82140"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "xhttp",
        "xhttpSettings": {
          "path": "/x123"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    }
  ],
  "routing": {
    "rules": [
      {
        "type": "field",
        "protocol": [
          "bittorrent"
        ],
        "outboundTag": "blocked"
      },
      {
        "ip": [
          "geoip:private",
          "geoip:cn"
        ],
        "outboundTag": "blocked",
        "type": "field"
      }
    ]
  },
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIPv4"
      }
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {}
    }
  ]
}

在v2rayN上使用出现如下问题：

vless+xhttp+tls+cdn (456.abc.xyz)，正常使用。
vless+vision+reality和vless+xhttp+reality，测试真连接、测速有数值，但是选中节点以后右下角延迟为-1，也不能正常上网。

我找了很久也没找到原因。

lxhao61 · 2025-01-17T06:36:07Z

lxhao61
Jan 17, 2025
Maintainer

检查一下域名 123.abc.xyz 网站是否可访问，推测可能 SNI 被阻断了。

2 replies

crosspacific Jan 17, 2025
Author

caddy分流时两个网站都可以访问。xray分流时，也可以正常访问。 😂

lxhao61 Jan 17, 2025
Maintainer

晕！检查 caddy 前置分流时 Xray 中 privateKey 值，是否与 xray 前置分流时一样？

crosspacific · 2025-01-17T09:44:08Z

crosspacific
Jan 17, 2025
Author

是一致的。我的配置都是同一套，相互复制。

1 reply

lxhao61 Jan 17, 2025
Maintainer

无道理，你最好把正常可连那部分配置直接复制过去。
另外把 "domainStrategy": "UseIPv4" 删除试试。

crosspacific · 2025-01-17T14:56:08Z

crosspacific
Jan 17, 2025
Author

我暂时放弃了。先用xray分流吧，等过段时间在试试。

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

使用caddy前置分流的 Xray(M+F+H+K+G+B+A)+Caddy(N) 配置，使用出现一些问题。 #233

{{title}}

Replies: 3 comments 3 replies

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

Select a reply

使用caddy前置分流的 Xray(M+F+H+K+G+B+A)+Caddy(N) 配置，使用出现一些问题。 #233

crosspacific Jan 17, 2025

Replies: 3 comments · 3 replies

lxhao61 Jan 17, 2025 Maintainer

crosspacific Jan 17, 2025 Author

lxhao61 Jan 17, 2025 Maintainer

crosspacific Jan 17, 2025 Author

lxhao61 Jan 17, 2025 Maintainer

crosspacific Jan 17, 2025 Author

crosspacific
Jan 17, 2025

Replies: 3 comments 3 replies

lxhao61
Jan 17, 2025
Maintainer

crosspacific Jan 17, 2025
Author

lxhao61 Jan 17, 2025
Maintainer

crosspacific
Jan 17, 2025
Author

lxhao61 Jan 17, 2025
Maintainer

crosspacific
Jan 17, 2025
Author