Forwarded domains don't work #420
Comments
|
Some additional info:
xray config in {
"inbounds": [
{
"listen": "0.0.0.0",
"port": 1080,
"protocol": "socks",
"tag": "socks_inbound",
"settings": {
"auth": "noauth",
"accounts": null,
"udp": true
}
},
{
"listen": "0.0.0.0",
"port": 1081,
"protocol": "http",
"tag": "http_inbound",
"settings": {
"accounts": null,
"allowTransparent": false
}
},
{
"port": 1082,
"protocol": "dokodemo-door",
"tag": "tproxy_tcp_inbound_v4",
"sniffing": null,
"settings": {
"network": "tcp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1083,
"protocol": "dokodemo-door",
"tag": "tproxy_tcp_inbound_v6",
"sniffing": null,
"settings": {
"network": "tcp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1084,
"protocol": "dokodemo-door",
"tag": "tproxy_udp_inbound_v4",
"sniffing": null,
"settings": {
"network": "udp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1085,
"protocol": "dokodemo-door",
"tag": "tproxy_udp_inbound_v6",
"sniffing": null,
"settings": {
"network": "udp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 5300,
"protocol": "dokodemo-door",
"tag": "dns_server_inbound:5300",
"settings": {
"address": "1.1.1.1",
"port": 53,
"network": "tcp,udp"
}
},
{
"port": 5301,
"protocol": "dokodemo-door",
"tag": "dns_server_inbound:5301",
"settings": {
"address": "1.1.1.1",
"port": 53,
"network": "tcp,udp"
}
},
{
"port": 5302,
"protocol": "dokodemo-door",
"tag": "dns_server_inbound:5302",
"settings": {
"address": "1.1.1.1",
"port": 53,
"network": "tcp,udp"
}
},
{
"port": 5303,
"protocol": "dokodemo-door",
"tag": "dns_server_inbound:5303",
"settings": {
"address": "1.1.1.1",
"port": 53,
"network": "tcp,udp"
}
},
{
"port": 1086,
"protocol": "dokodemo-door",
"tag": "tproxy_tcp_inbound_f4",
"sniffing": {
"enabled": true,
"routeOnly": false,
"destOverride": [
"fakedns"
],
"metadataOnly": true
},
"settings": {
"network": "tcp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1087,
"protocol": "dokodemo-door",
"tag": "tproxy_tcp_inbound_f6",
"sniffing": {
"enabled": true,
"routeOnly": false,
"destOverride": [
"fakedns"
],
"metadataOnly": true
},
"settings": {
"network": "tcp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1088,
"protocol": "dokodemo-door",
"tag": "tproxy_udp_inbound_f4",
"sniffing": {
"enabled": true,
"routeOnly": false,
"destOverride": [
"fakedns"
],
"metadataOnly": true
},
"settings": {
"network": "udp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
},
{
"port": 1089,
"protocol": "dokodemo-door",
"tag": "tproxy_udp_inbound_f6",
"sniffing": {
"enabled": true,
"routeOnly": false,
"destOverride": [
"fakedns"
],
"metadataOnly": true
},
"settings": {
"network": "udp",
"followRedirect": true,
"timeout": 300
},
"streamSettings": {
"sockopt": {
"tproxy": "tproxy"
}
},
"listen": "0.0.0.0"
}
],
"outbounds": [
{
"tag": "blackhole_outbound",
"protocol": "blackhole"
},
{
"protocol": "freedom",
"tag": "direct",
"settings": {
"domainStrategy": "UseIPv4",
"redirect": ""
},
"streamSettings": {
"sockopt": {
"mark": 252
}
}
},
{
"protocol": "dns",
"settings": {
"nonIPQuery": "skip"
},
"streamSettings": {
"sockopt": {
"mark": 254
}
},
"tag": "dns_server_outbound"
},
{
"protocol": "vmess",
"tag": "fake_dns_tcp:cfg038f81@balancer_outbound:cfg024a8f",
"settings": {
"vnext": [
{
"address": "xxx.xxx.xxx.xxx",
"port": 8081,
"users": [
{
"email": null,
"id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"alterId": 0,
"security": "aes-128-gcm"
}
]
}
]
},
"streamSettings": {
"network": "tcp",
"sockopt": {
"mark": 253,
"domainStrategy": "UseIP",
"dialerProxy": null
},
"security": "none",
"tlsSettings": null,
"realitySettings": null,
"quicSettings": null,
"tcpSettings": {
"header": {
"type": "http",
"request": {
"version": "1.1",
"method": "GET",
"path": [
"/"
],
"headers": {
"Host": [
"google.com"
],
"User-Agent": [
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
"Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/601.1 (KHTML, like Gecko) CriOS/53.0.2785.109 Mobile/14A456 Safari/601.1.46"
],
"Accept-Encoding": [
"gzip, deflate"
],
"Connection": [
"keep-alive"
],
"Pragma": "no-cache"
}
},
"response": {
"version": "1.1",
"status": "200",
"reason": "OK",
"headers": {
"Content_Type": [
"application/octet-stream",
"video/mpeg"
],
"Transfer_Encoding": [
"chunked"
],
"Connection": [
"keep-alive"
],
"Pragma": "no-cache"
}
}
}
},
"kcpSettings": null,
"wsSettings": null,
"grpcSettings": null,
"httpSettings": null
}
},
{
"protocol": "vmess",
"tag": "fake_dns_udp:cfg038f81@balancer_outbound:cfg024a8f",
"settings": {
"vnext": [
{
"address": "xxx.xxx.xxx.xxx",
"port": 8081,
"users": [
{
"email": null,
"id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
"alterId": 0,
"security": "aes-128-gcm"
}
]
}
]
},
"streamSettings": {
"network": "tcp",
"sockopt": {
"mark": 253,
"domainStrategy": "UseIP",
"dialerProxy": null
},
"security": "none",
"tlsSettings": null,
"realitySettings": null,
"quicSettings": null,
"tcpSettings": {
"header": {
"type": "http",
"request": {
"version": "1.1",
"method": "GET",
"path": [
"/"
],
"headers": {
"Host": [
"google.com"
],
"User-Agent": [
"Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.143 Safari/537.36",
"Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/601.1 (KHTML, like Gecko) CriOS/53.0.2785.109 Mobile/14A456 Safari/601.1.46"
],
"Accept-Encoding": [
"gzip, deflate"
],
"Connection": [
"keep-alive"
],
"Pragma": "no-cache"
}
},
"response": {
"version": "1.1",
"status": "200",
"reason": "OK",
"headers": {
"Content_Type": [
"application/octet-stream",
"video/mpeg"
],
"Transfer_Encoding": [
"chunked"
],
"Connection": [
"keep-alive"
],
"Pragma": "no-cache"
}
}
}
},
"kcpSettings": null,
"wsSettings": null,
"grpcSettings": null,
"httpSettings": null
}
}
],
"dns": {
"hosts": {
"geosite:category-ads": [
"127.127.127.127",
"100::6c62:636f:656b:2164"
]
},
"servers": [
{
"address": "fakedns",
"domains": [
"whatismyip.com"
],
"skipFallback": true
},
{
"address": "1.1.1.1",
"port": 53
},
{
"address": "223.5.5.5",
"port": 53,
"domains": [],
"skipFallback": true
}
],
"tag": "dns_conf_inbound",
"queryStrategy": "UseIP"
},
"fakedns": [
{
"ipPool": "198.18.0.0/15",
"poolSize": 65535
},
{
"ipPool": "fc00::/18",
"poolSize": 65535
}
],
"api": null,
"metrics": null,
"policy": {
"levels": {
"0": {
"handshake": 4,
"connIdle": 300,
"uplinkOnly": 2,
"downlinkOnly": 5,
"bufferSize": 4,
"statsUserUplink": false,
"statsUserDownlink": false
}
},
"system": {
"statsInboundUplink": false,
"statsInboundDownlink": false,
"statsOutboundUplink": false,
"statsOutboundDownlink": false
}
},
"log": {
"access": "",
"loglevel": "warning",
"dnsLog": true
},
"stats": null,
"observatory": null,
"reverse": {
"bridges": []
},
"routing": {
"domainStrategy": "AsIs",
"rules": [
{
"type": "field",
"inboundTag": [
"tproxy_tcp_inbound_f4",
"tproxy_tcp_inbound_f6"
],
"domain": [
"whatismyip.com"
],
"balancerTag": "fake_dns_balancer:cfg038f81@tcp_balancer"
},
{
"type": "field",
"inboundTag": [
"tproxy_udp_inbound_f4",
"tproxy_udp_inbound_f6"
],
"domain": [
"whatismyip.com"
],
"balancerTag": "fake_dns_balancer:cfg038f81@udp_balancer"
},
{
"type": "field",
"inboundTag": [
"dns_server_inbound:5300",
"dns_server_inbound:5301",
"dns_server_inbound:5302",
"dns_server_inbound:5303"
],
"outboundTag": "dns_server_outbound"
},
{
"type": "field",
"inboundTag": [
"tproxy_tcp_inbound_v6",
"tproxy_udp_inbound_v6",
"tproxy_tcp_inbound_v4",
"socks_inbound",
"https_inbound",
"http_inbound",
"tproxy_udp_inbound_v4",
"dns_conf_inbound"
],
"outboundTag": "direct",
"ip": [
"geoip:private"
]
},
{
"type": "field",
"inboundTag": [
"tproxy_tcp_inbound_v6"
],
"balancerTag": "tcp_outbound_v6"
},
{
"type": "field",
"inboundTag": [
"tproxy_udp_inbound_v6"
],
"balancerTag": "udp_outbound_v6"
},
{
"type": "field",
"inboundTag": [
"tproxy_tcp_inbound_v4",
"socks_inbound",
"https_inbound",
"http_inbound"
],
"balancerTag": "tcp_outbound_v4"
},
{
"type": "field",
"inboundTag": [
"tproxy_udp_inbound_v4",
"dns_conf_inbound"
],
"balancerTag": "udp_outbound_v4"
}
],
"balancers": [
{
"tag": "tcp_outbound_v4",
"selector": [
"direct"
],
"strategy": {
"type": "random"
}
},
{
"tag": "udp_outbound_v4",
"selector": [
"direct"
],
"strategy": {
"type": "random"
}
},
{
"tag": "tcp_outbound_v6",
"selector": [
"direct"
],
"strategy": {
"type": "random"
}
},
{
"tag": "udp_outbound_v6",
"selector": [
"direct"
],
"strategy": {
"type": "random"
}
},
{
"tag": "fake_dns_balancer:cfg038f81@tcp_balancer",
"selector": [
"fake_dns_tcp:cfg038f81@balancer_outbound:cfg024a8f"
],
"strategy": {
"type": "random"
}
},
{
"tag": "fake_dns_balancer:cfg038f81@udp_balancer",
"selector": [
"fake_dns_udp:cfg038f81@balancer_outbound:cfg024a8f"
],
"strategy": {
"type": "random"
}
}
]
}
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I have a following server configuration:
Which works in V2BOX on iOS (following JSON is taken from the app):
{ "tag": "proxy", "protocol": "vmess", "streamSettings": { "tcpSettings": { "header": { "type": "http", "request": { "path": [ "/" ], "headers": { "Pragma": [ "no-cache" ], "Host": [ "/" ], "Accept-Encoding": [ "gzip, deflate" ], "User-Agent": [ "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.75 Safari/537.36", "Mozilla/5.0 (iPhone; CPU iPhone OS 10_0_2 like Mac OS X) AppleWebKit/601.1 (KHTML, like Gecko) CriOS/53.0.2785.109 Mobile/14A456 Safari/601.1.46" ], "Connection": [ "keep-alive" ] }, "version": "1.1", "method": "GET" } } }, "network": "tcp" }, "mux": { "concurrency": 50, "xudpConcurrency": 128, "xudpProxyUDP443": "allow", "enabled": false }, "settings": { "vnext": [ { "users": [ { "level": 8, "security": "aes-128-gcm", "alterId": 0, "email": "", "id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" } ], "port": 8081, "address": "xxx.xxx.xxx.xxx" } ] } }I am trying to proxy only specified domains (whatismyip.com in my case) via FakeDNS, so no servers are selected in General settings:
Outbound Routing → Default Ports Policy is set to Forwarded:
However if I try to open whatismyip.com (or any forwarded domain) - it doesn't work at all. If I enable global server and try to proxy everything - nothing is working.
Unfortunately there seems to be nothing useful in the logs:
From the logs it seems that request to whatismyip.com hits the FakeDNS, and that's it.
Am I missing something in my configuration? I'm running a fresh installation from https://github.com/yukipastelcat/luci-app-xray.
System info:
The text was updated successfully, but these errors were encountered: