[Bug] Reality protocol (xtls-rprx-vision) does not works :(

[hamedsbt]

Verify steps

• 确保你使用的是本仓库最新的的 clash 或 clash Alpha 版本 Ensure you are using the latest version of Clash or Clash Premium from this repository.
• 如果你可以自己 debug 并解决的话，提交 PR 吧 Is this something you can debug and fix? Send a pull request! Bug fixes and documentation fixes are welcome.
• 我已经在 Issue Tracker 中找过我要提出的问题 I have searched on the issue tracker for a related issue.
• 我已经使用 Alpha 分支版本测试过，问题依旧存在 I have tested using the dev branch, and the issue still exists.
• 我已经仔细看过 Documentation 并无法自行解决问题 I have read the documentation and was unable to solve the issue.
• 这是 Clash 核心的问题，并非我所使用的 Clash 衍生版本（如 OpenClash、KoolClash 等）的特定问题 This is an issue of the Clash core per se, not to the derivatives of Clash, like OpenClash or KoolClash.

Clash version

Clash Meta alpha-1d94546 linux amd64 with go1.20.5

What OS are you seeing the problem on?

Linux

Clash config

proxies:
  - name: "vless-reality-vision"
    type: vless
    server: 185.219.221.39
    port: 8443
    uuid: 0000000-0000-0000-86b5-2603f318f313
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: discord.com # REALITY servername
    reality-opts:
      public-key: UK7qDDJ2UIxHnqmmqqJButWWGfRQcQfwaGp4jxve8Ae
      short-id: e6 # optional
    client-fingerprint: chrome # cannot be empty

  - name: "3 US🇺🇸5.161.110.255:10881"
    type: vless
    server: 5.161.110.255
    port: 10881
    uuid: 0000000-0000-0000-d97b-f7275e555f3c
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: discord.com # REALITY servername
    reality-opts:
      public-key: y9LuJBEUNwuTn70ugzlXi1xvcPCFGOn-FMJqrx3Wpla
      short-id: d88f8adf # optional
    client-fingerprint: chrome # cannot be empty

Clash log

INFO[2023-06-20T22:11:58.336365567+03:30] Start initial configuration in progress      
INFO[2023-06-20T22:11:58.336906461+03:30] Geodata Loader mode: memconservative         
INFO[2023-06-20T22:11:58.33793501+03:30] Initial configuration complete, total time: 1ms 
INFO[2023-06-20T22:11:58.388709317+03:30] Sniffer is closed                            
INFO[2023-06-20T22:11:58.3890576+03:30] Mixed(http+socks) proxy listening at: [::]:7890 
WARN[2023-06-20T22:11:58.38959068+03:30] [TUN] default interface changed by monitor,  => enp6s0 
ERRO[2023-06-20T22:11:58.38972961+03:30] Start TUN listening error: configure tun interface: operation not permitted 
INFO[2023-06-20T22:11:58.389860556+03:30] Start initial compatible provider BLOCK      
INFO[2023-06-20T22:11:58.389912794+03:30] Start initial compatible provider Select     
INFO[2023-06-20T22:11:58.389937219+03:30] Start initial compatible provider Direct     
INFO[2023-06-20T22:11:58.389946537+03:30] Start initial compatible provider default    
INFO[2023-06-20T22:11:58.389953009+03:30] Start initial provider provider1             
WARN[2023-06-20T22:11:58.390755714+03:30] To use xtls-rprx-vision, ensure your server is upgrade to Xray-core v1.8.0+ 
WARN[2023-06-20T22:11:58.390917868+03:30] To use xtls-rprx-vision, ensure your server is upgrade to Xray-core v1.8.0+ 
INFO[2023-06-20T22:11:58.391226877+03:30] Start initial provider iran-sites-ips        
DEBU[2023-06-20T22:11:58.410088701+03:30] [DNS] myserver.net --> [2a00:b6e0:1:20:13::1], from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.410472912+03:30] [DNS] resolve myserver.net from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.410516774+03:30] [DNS] resolve myserver.net from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.410522404+03:30] [DNS] resolve myserver.net from https://free.my-doh.xyz:443/dns-query 
DEBU[2023-06-20T22:11:58.410732869+03:30] creating a new http client                   
DEBU[2023-06-20T22:11:58.410767324+03:30] [https://free.my-doh.xyz:443/dns-query] using HTTP/2 for this upstream: <nil> 
DEBU[2023-06-20T22:11:58.410531542+03:30] [DNS] resolve myserver.net from udp://127.0.0.1:53 
DEBU[2023-06-20T22:11:58.410838667+03:30] [DNS] myserver.net --> [185.31.40.22], from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.41099465+03:30] [DNS] resolve myserver.net from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.411038783+03:30] [DNS] resolve free.my-doh.xyz from udp://127.0.0.1:53 
DEBU[2023-06-20T22:11:58.411054532+03:30] [DNS] resolve free.my-doh.xyz from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.41110112+03:30] [DNS] resolve free.my-doh.xyz from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.411057247+03:30] [DNS] resolve free.my-doh.xyz from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.411235832+03:30] [DNS] resolve free.my-doh.xyz from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.411201728+03:30] [DNS] resolve free.my-doh.xyz from udp://127.0.0.1:53 
DEBU[2023-06-20T22:11:58.411047208+03:30] [DNS] resolve myserver.net from udp://127.0.0.1:53 
DEBU[2023-06-20T22:11:58.411046116+03:30] [DNS] resolve myserver.net from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.411069981+03:30] [DNS] resolve myserver.net from https://free.my-doh.xyz:443/dns-query 
DEBU[2023-06-20T22:11:58.4134692+03:30] [DNS] myserver.net --> [2a00:b6e0:1:20:13::1], from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.444314231+03:30] [DNS] myserver.net --> [185.31.40.22], from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.520883402+03:30] initial random HelloID:safari                
DEBU[2023-06-20T22:11:58.521019547+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:11:58.534085254+03:30] [DNS] dns.my-doh.xyz --> [185.51.200.2 178.22.122.100], from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.536827014+03:30] [DNS] dns.my-doh.xyz --> [], from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.546371169+03:30] [DNS] free.my-doh.xyz --> [178.22.122.100 185.51.200.2], from udp://192.168.1.1:53 
DEBU[2023-06-20T22:11:58.546440349+03:30] [DNS] free.my-doh.xyz --> [185.51.200.2 178.22.122.100], from udp://192.168.0.16:53 
DEBU[2023-06-20T22:11:58.564217599+03:30] [DNS] free.my-doh.xyz --> [], from udp://192.168.1.1:53 
INFO[2023-06-20T22:11:58.581897157+03:30] [TCP] clash.meta --> myserver.net:443 match DomainSuffix(alwaysdata.net) using DIRECT 
INFO[2023-06-20T22:11:58.583693204+03:30] [TCP] clash.meta --> myserver.net:443 match DomainSuffix(alwaysdata.net) using DIRECT 
DEBU[2023-06-20T22:11:58.614675213+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:11:58.653371875+03:30] REALITY Authentication: true                 
DEBU[2023-06-20T22:11:58.653613939+03:30] XTLS Vision write padding2: command=0, payloadLen=277, paddingLen=774 
DEBU[2023-06-20T22:11:58.782616548+03:30] Health Checked vless-reality-vision : false 65535 ms {00000000-0000-4cdf-b58c-8f9549e2b6aa} 
DEBU[2023-06-20T22:11:58.84118052+03:30] REALITY Authentication: false                
DEBU[2023-06-20T22:11:58.841267292+03:30] Health Checked 3 US🇺🇸5.161.110.255:10881 : false 65535 ms {00000000-0000-4cdf-b58c-8f9549e2b6aa} 
DEBU[2023-06-20T22:11:58.841296678+03:30] Finish A Health Checking {00000000-0000-4cdf-b58c-8f9549e2b6aa} 
DEBU[2023-06-20T22:11:59.035954343+03:30] [Rule] use default rules                     
INFO[2023-06-20T22:11:59.165934926+03:30] [TCP] clash.meta --> myserver.net:443 match DomainSuffix(alwaysdata.net) using DIRECT 
DEBU[2023-06-20T22:11:59.796479715+03:30] [Rule] use default rules                     
INFO[2023-06-20T22:11:59.935772377+03:30] [TCP] clash.meta --> myserver.net:443 match DomainSuffix(alwaysdata.net) using DIRECT 
DEBU[2023-06-20T22:12:02.384514017+03:30] [Rule] use default rules                     
DEBU[2023-06-20T22:12:02.503870252+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:12:02.638129712+03:30] REALITY Authentication: true                 
DEBU[2023-06-20T22:12:02.638223908+03:30] XTLS Vision write padding2: command=0, payloadLen=517, paddingLen=753 
INFO[2023-06-20T22:12:02.63833163+03:30] [TCP] 127.0.0.1:35466 --> ifconfig.co:443 match Match using Select[vless-reality-vision] 
DEBU[2023-06-20T22:12:02.774634049+03:30] [Rule] use default rules                     
DEBU[2023-06-20T22:12:02.898601701+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:12:03.041165621+03:30] REALITY Authentication: true                 
DEBU[2023-06-20T22:12:03.041267993+03:30] XTLS Vision write padding2: command=0, payloadLen=517, paddingLen=510 
INFO[2023-06-20T22:12:03.041381666+03:30] [TCP] 127.0.0.1:35470 --> ifconfig.co:443 match Match using Select[vless-reality-vision] 
DEBU[2023-06-20T22:12:04.065466883+03:30] [Rule] use default rules                     
DEBU[2023-06-20T22:12:04.190338822+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:12:04.322021391+03:30] REALITY Authentication: true                 
DEBU[2023-06-20T22:12:04.322119866+03:30] XTLS Vision write padding2: command=0, payloadLen=563, paddingLen=730 
INFO[2023-06-20T22:12:04.322226997+03:30] [TCP] 127.0.0.1:35474 --> ifconfig.co:443 match Match using Select[vless-reality-vision] 
DEBU[2023-06-20T22:12:04.457338795+03:30] [Rule] use default rules                     
DEBU[2023-06-20T22:12:04.584682659+03:30] use specified fingerprint:Chrome             
DEBU[2023-06-20T22:12:04.723547295+03:30] REALITY Authentication: true                 
DEBU[2023-06-20T22:12:04.723626814+03:30] XTLS Vision write padding2: command=0, payloadLen=517, paddingLen=502 
INFO[2023-06-20T22:12:04.723762448+03:30] [TCP] 127.0.0.1:35478 --> ifconfig.co:443 match Match using Select[vless-reality-vision]

Description

Hi, both of provided Reality servers are working with other client (nekobox and...) but in ClashMeta Linux (and android) they don't work.

Thank you for your support, I appreciate it.

[yoohooyoo]

discord.com
在国内是无法直连的吧。
你换一个在国内能用的国外服务。

[xishang0128]

@yoohooyoo 人是老外)

[hamedsbt]

discord.com 在国内是无法直连的吧。 你换一个在国内能用的国外服务。

I translated your reply, but I couldn't understand what you meant. I'm not from China, and I'm not Chinese. As I mentioned earlier, both configurations are working (discord.com as SNI) with other clients (nokobox) on Linux and Android in my current location.
According to the ClashMata debug log, no errors occur, but no data is being transferred, so the proxy is not working.

Do you have any solution?
🙏

[qist]

你先用7890 端口代理看看能访问么。linux 内核版本尽量大于4 tun 才好使，低于建议使用iptables 模式，你同时应该看看服务端日志。有没收到数据什么的。

[hamedsbt]

你先用7890 端口代理看看能访问么。linux 内核版本尽量大于4 tun 才好使，低于建议使用iptables 模式，你同时应该看看服务端日志。有没收到数据什么的。

Thank hou for your reply🙏

The port 7890 is open, so I'm sure the issue is not due to the operating system's network stack. However, vmess, trojan, ss, and ssr are working in ClashMeta. Additionally, when I start surfing a website, ClashMata begins logging synchronously. The issue only occurs with Reality. Unfortunately, I am using free services/servers and do not have access to server logs.

[qist]

你可以使用 windows 浏览器配置 代理试试 或者linux 配置 clash log 日志级别改成debug模式看看日志打印如果可以修改servername 改成其它也可以，或者dest 使用自己的证书或者1.1.1.1 serverNames 配置任意域名试试可以是一个不存在的域名也可以是一个常规下载站点什么的域名试试(serverNames 必须有这个域名客户端才能连接或者留空 不使用域名进行连接)，你这个客户端配置没任何错误。下面是我的配置，使用没任何问题你也可以试着升级一下客户端

  - name: "any_SNI_No_SNI"
    type: vless
    server:  ip
    port: 443
    uuid: uuid
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: pvp.tets.com
    reality-opts:
      public-key: sfUX7nUQZC2ch0n7xXzgKzqmsUs0W_2derwqreq
      short-id: d6b9

配置linux 系统代理然后试试是否可以代理出去。

export http_proxy=http://ip:7890
export https_proxy=http://ip:7890

[H1JK]

I have tested using Vision with REALITY for 2 days and can't repro this... Sorry for hearing that.

I noticed some REALITY authentication failures, so you may be being censored and disrupted at the time. In a recent issue in the Xray community I heard that Iran is disrupting Chrome fingerprint, so you can try other fingerprinting.

[hamedsbt]

I had forgotten set "tls" to "true". Now it works, thank you developers 😍

[ChineseOldboy]

怎么解决啊