vless reality client v1.11.6 does not work with newer versions of server

[ls819011]

Operating system

Android

System version

Readme A2+; Android 13 (Go edition); Build No: 13 V14.0.24.0.TGORUXM

Installation type

Others

If you are using a graphical client, please provide the version of the client.

SFA-1.11.6

Version

Description

If server is running sing-box 1.11.7 or 1.11.8, SFA-1.11.6 gets warning while connecting:

WARN [0002] inbound/tun[tun-in]: bind forwarder to interface: operation not permitted

After getting this warning nothing works.
It looks like sing-box windows console vless reality clients v1.11.6 and earlier have the same problem with newer server.
SFA-1.11.6 vless reality client works with sing-box 1.12.0-beta.5.

Reproduction

{
"dns": {
"independent_cache": true,
"rules": [
{
"outbound": "any",
"server": "dns-local"
},
{
"query_type": [
32,
33
],
"server": "dns-block"
},
{
"domain_suffix": ".lan",
"server": "dns-block"
}
],
"servers": [
{
"address": "rcode://success",
"tag": "dns-block"
},
{
"address": "local",
"detour": "direct",
"tag": "dns-local"
}
]
},
"inbounds": [
{
"type": "tun",
"tag": "tun-in",
"mtu": 9000,
"address": "172.18.0.1/30",
"auto_route": true,
"strict_route": true,
"stack": "mixed",
"sniff": true
}
],
"outbounds": [
{
"domain_strategy": "",
"flow": "xtls-rprx-vision",
"packet_encoding": "",
"server": "",
"server_port": 443,
"tag": "proxy",
"tls": {
"enabled": true,
"reality": {
"enabled": true,
"public_key": "BYcze4iNY3cmGEcGSxnIuN0I__C1XVkObdSArPHuOSQ",
"short_id": "247646003cc365a3"
},
"server_name": "www.nokia.com",
"utls": {
"enabled": true,
"fingerprint": "chrome"
}
},
"type": "vless",
"uuid": "8ee2f35d-0b1b-4d92-8127-deb5a1235741"
},
{
"type": "direct",
"tag": "direct"
},
{
"type": "direct",
"tag": "bypass"
},
{
"tag": "block",
"type": "block"
}
],
"log": {
"level": "info"
},
"route": {
"auto_detect_interface": false,
"final": "direct",
"rules": [
{
"domain_keyword": [
],
"domain": [
],
"domain_suffix": [
"bbc.co.uk",
"4pda.to",
"signal.org",
"viber.com"
],
"rule_set": [
"antizapret",
"youtube",
"spotify",
"signal",
"rakuten"
],
"outbound": "proxy"
},
{
"rule_set": [
"category-ads-all",
"category-ads"
],
"outbound": "block"
}
],
"rule_set": [
{
"tag": "antizapret",
"type": "remote",
"format": "binary",
"url": "https://github.com/savely-krasovsky/antizapret-sing-box/releases/latest/download/antizapret.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "youtube",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-youtube.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "spotify",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-spotify.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "signal",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-signal.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "rakuten",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-rakuten.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "category-ads-all",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-category-ads-all.srs",
"download_detour": "proxy",
"update_interval": "1d"
},
{
"tag": "category-ads",
"type": "remote",
"format": "binary",
"url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-category-ads.srs",
"download_detour": "proxy",
"update_interval": "1d"
}
]
}
}

Logs

Supporter

• I am a sponsor

Integrity requirements

• I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
• I confirm that I have provided the server and client configuration files and process that can be reproduced locally, instead of a complicated client configuration file that has been stripped of sensitive data.
• I confirm that I have provided the simplest configuration that can be used to reproduce the error I reported, instead of depending on remote servers, TUN, graphical interface clients, or other closed-source software.
• I confirm that I have provided the complete configuration files and logs, rather than just providing parts I think are useful out of confidence in my own intelligence.

[ls819011]

Just tested SFA-1.11.7 with server running 1.11.7.
Client gets the same warning and also does not work.

[ls819011]

SFA-1.11.6 is working with server running 1.11.9.
Closing.