VLESS-XHTTP3-Nginx的配置似乎不成功

[shinyboy]

Xray 24.12.18

VLESS-XHTTP3-Nginx的配置会在xray server端报错
proxy/vless/inbound: connection ends > context canceled

xray server端报错如下：
2024/12/31 13:16:34 from XXXX请求IP:0 accepted tcp:developers.google.com:443
2024/12/31 13:16:34 [Info] [2621369704] proxy/freedom: connection opened to tcp:developers.google.com:443, local endpoint 10.0.0.82:40978, remote endpoint 172.217.25.174:443
2024/12/31 13:16:34 [Info] [2621369704] proxy: CopyRawConn readv
2024/12/31 13:16:35 [Info] [2621369704] app/proxyman/inbound: connection ends > proxy/vless/inbound: connection ends > context canceled

server端相关配置如下：
"inbounds": [
{
"listen": "/dev/shm/xrxh.socket,0666",
"protocol": "vless",
"settings": {
"clients": [
{
"id": "XXX"
}
],
"decryption": "none"
},
"streamSettings": {
"network": "xhttp",
"xhttpSettings": {
"mode": "stream-one",
"path": "/split"
}
}
},

client端配置如下：

"outbounds": [
{
"protocol": "vless",
"settings": {
"vnext": [
{
"address": "XXX",
"port": 443,
"users": [
{
"id": "XXX" //填写你的 UUID
}
]
}
]
},
"streamSettings": {
"network": "xhttp",
"xhttpSettings": {
"path": "/split", //填写你的 path
"mode": "stream-one",
"xmux": {
"maxConcurrency": 128,
"cMaxReuseTimes": 1000,
"cMaxLifetimeMs": 3600000
}
}
"security": "tls",
"tlsSettings": {
"alpn": [
"h3"
]
}
}
}

nginx相关配置如下：

  location /split/ {
    client_max_body_size 0;
    grpc_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    client_body_timeout 5m;
    grpc_read_timeout 315;
    grpc_send_timeout 5m;
    grpc_pass unix:/dev/shm/xrxh.socket;
  }

[4nonch]

I'm having issues with XHTTP3 too.
But different kind of error: [Info] transport/internet/splithttp: invalid x_padding length:0
Could you provide help please?

I'm using:

• nginx/1.26.2
• Xray 24.12.31

I'm serving some application and tried to add XHTTP3 support within application's nginx.
Let's define some variables:

• myhost - server alias (just server string for some directories)
• my.host.com - server name to access within HTTP (ex: https://my.host.com/)
• mypath - path used to communicate with xray instance
• myuuid - uuid used for my client

Here is nginx configuration:

upstream myhost {
    server unix:/srv/.venvs/myhost/run/gunicorn.sock fail_timeout=0;
}

server {
    server_name my.host.com;
    listen 80;
    return 301 https://my.host.com$request_uri;
}

server {
    server_name my.host.com;
    listen 443 ssl;
    listen 443 quic reuseport ipv6only=off;

    ssl_protocols TLSv1.3 TLSv1.2;
    ssl_certificate /etc/letsencrypt/live/my.host.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/my.host.com/privkey.pem;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GC    M-SHA384;

    client_header_timeout 5m;
    keepalive_timeout 5m;

    client_max_body_size 15M;

    access_log /var/log/myhost/nginx/access/access.log;
    error_log /var/log/myhost/nginx/error/error.log;

    location /mypath {
        client_max_body_size 0;
        grpc_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        client_body_timeout 5m;
        grpc_read_timeout 315;
        grpc_send_timeout 5m;
        grpc_pass unix:/dev/shm/xrxh.socket;
    }

    location /static/ {
        alias /srv/myhost/static/;
    }

    location / {
        proxy_pass http://myhost/;
        proxy_http_version 1.1;

        proxy_connect_timeout 1;

        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

Here is xray server configuration:

{
    "log": {
        "loglevel": "debug",
        "access": "/var/log/xray/access.log",
        "error": "/var/log/xray/error.log",
        "dnsLog": false
    },
    "inbounds": [
        {
            "listen": "/dev/shm/xrxh.socket,0666",
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "myuuid"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "xhttp",
                "xhttpSettings": {
                    "mode": "stream-up",
                    "path": "/mypath"
                }
            }
        }
    ],
    "outbounds": [
        {
            "tag": "direct",
            "protocol": "freedom",
            "settings": {}
        },
        {
            "tag": "blocked",
            "protocol": "blackhole",
            "settings": {}
        }
    ],
    "routing": {
        "domainStrategy": "AsIs",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:private"
                ],
                "outboundTag": "blocked"
            },
            {
                "type": "field",
                "domain": ["geosite:category-ads-all"],
                "outboundTag": "block"
            }
        ]
    }
}

Here is xray client configuration:

{
    "log": {},
    "inbounds": [
        {
            "port": "1080",
            "listen": "127.0.0.1",
            "protocol": "socks",
            "settings": {
                "udp": true
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "vless",
            "settings": {
                "vnext": [
                    {
                        "address": "my.host.com",
                        "port": 443,
                        "users": [
                            {
                                "id": "myuuid",
                                "encryption": "none"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "xhttp",
                "xhttpSettings": {
                    "path": "/mypath",
                    "mode": "stream-up",
                    "#xmux": {
                        "maxConcurrency": 128,
                        "hMaxRequestTimes": 1000,
                        "hMaxReusableSecs": 3600
                    },
                    "#downloadSettings": {
                        "address": "my.host.com",
                        "port": 443,
                        "network": "xhttp",
                        "xhttpSettings": {
                            "path": "/mypath",
                            "#xmux": {
                                "maxConcurrency": 128,
                                "hMaxRequestTimes": 1000,
                                "hMaxReusableSecs": 3600
                            }
                        },
                        "security": "tls"
                    }
                },
                "security": "tls",
                "tlsSettings": {
                    "alpn": [
                        "h3"
                    ]
                }
            }
        },
        {
            "tag": "direct",
            "protocol": "freedom",
            "settings": {}
        },
        {
            "tag": "blocked",
            "protocol": "blackhole",
            "settings": {}
        }
    ],
    "routing": {
        "domainStrategy": "IPOnDemand",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:private"
                ],
                "outboundTag": "direct"
            }
        ]
    }
}

[xqzr]

I'm having issues with XHTTP3 too.
But different kind of error: [Info] transport/internet/splithttp: invalid x_padding length:0

Try xPaddingBytes: -1 in xhttpSettings

[xqzr]

看起来服务端（入站）已经收到并理解请求，检查与 TCP 172.217.25.174:443 的连接。
提供客户端（出站）日志

[4nonch]

Try xPaddingBytes: -1 in xhttpSettings

OK, i'm sorry for silly question. I should've test client with debug log mode before asking. xPaddingBytes issue occured when i tried to make curl request to my path and i mistook it for client log. So actual issue is: client can't reach my host

Client requests for some reason fails to execute:

2025/01/04 01:37:17 [Debug] [2049168422] transport/internet: dialing to udp:my.host.com:443
2025/01/04 01:37:17 [Info] [2049168422] transport/internet/splithttp: failed to POST https://my.host.com/mypath/7300f7be-ced5-411d-b209-ba16096ac392?x_padding=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Post "https://my.host.com/mypath/7300f7be-ced5-411d-b209-ba16096ac392?x_padding=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": lookup my.host.com: no such host
2025/01/04 01:37:17 [Info] [2049168422] proxy/vless/outbound: tunneling request to tcp:130.255.77.28:443 via my.host.com:443
2025/01/04 01:37:18 [Info] [2049168422] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2025/01/04 01:37:18 [Info] [1788824348] proxy/socks: TCP Connect request to tcp:130.255.77.28:443
2025/01/04 01:37:18 [Info] [1788824348] app/dispatcher: default route for tcp:130.255.77.28:443
2025/01/04 01:37:18 [Info] [1788824348] transport/internet/splithttp: XHTTP is dialing to udp:my.host.com:443, mode stream-up, HTTP version 3, host my.host.com
2025/01/04 01:37:18 [Debug] [1788824348] transport/internet: dialing to udp:my.host.com:443
2025/01/04 01:37:18 from tcp:127.0.0.1:65297 accepted tcp:130.255.77.28:443
2025/01/04 01:37:18 [Info] [1788824348] transport/internet/splithttp: failed to GET https://my.host.com/mypath/c6edd6a5-bf19-4a60-9c8a-681ea555b57e?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Get "https://my.host.com/mypath/c6edd6a5-bf19-4a60-9c8a-681ea555b57e?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": lookup my.host.com: no such host
2025/01/04 01:37:18 [Debug] [1788824348] transport/internet: dialing to udp:my.host.com:443
2025/01/04 01:37:18 [Info] [1788824348] transport/internet/splithttp: failed to POST https://my.host.com/mypath/c6edd6a5-bf19-4a60-9c8a-681ea555b57e?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Post "https://my.host.com/mypath/c6edd6a5-bf19-4a60-9c8a-681ea555b57e?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": lookup my.host.com: no such host
2025/01/04 01:37:18 [Info] [1788824348] proxy/vless/outbound: tunneling request to tcp:130.255.77.28:443 via my.host.com:443
2025/01/04 01:37:19 [Info] [1788824348] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2025/01/04 01:37:22 [Debug] app/log: Logger closing

Probably some poor client/nginx configuration occurred. Will try to fix it later.

[xqzr]

lookup my.host.com: no such host

check ur DNS

[4nonch]

check ur DNS

Gosh, i hate it. It was a host typo. Noticed after making record to HOSTS file, lol.

But weird behavior still occur: timeout: no recent network activity
No logs for xray/nginx on the server itself.

I suppose that probably XHTTP is intended to work only through CDN like CF and my straightforward design is simply not allowed here or something.

2025/01/04 02:09:43 [Info] [2279113200] transport/internet/splithttp: XHTTP is dialing to udp:my.host.com:443, mode stream-up, HTTP version 3, host my.host.com
2025/01/04 02:09:43 from tcp:127.0.0.1:57906 accepted tcp:130.255.77.28:443
2025/01/04 02:09:47 [Info] [2279113200] transport/internet/splithttp: failed to GET https://my.host.com/xxx/d147a73b-cc81-4498-9681-c66d03d2bcb9?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Get "https://my.host.com/mypath/d147a73b-cc81-4498-9681-c66d03d2bcb9?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": timeout: no recent network activity
2025/01/04 02:09:47 [Info] [4142068304] transport/internet/splithttp: failed to POST https://my.host.com/xxx/3533c363-8add-4ab0-9e03-7bc8a8593d5f?x_padding=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Post "https://my.host.com/mypath/3533c363-8add-4ab0-9e03-7bc8a8593d5f?x_padding=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": timeout: no recent network activity
2025/01/04 02:09:47 [Info] [4142068304] proxy/vless/outbound: tunneling request to tcp:142.250.65.164:443 via my.host.com:443
2025/01/04 02:09:47 [Debug] [2279113200] transport/internet: dialing to udp:my.host.com:443
2025/01/04 02:09:48 [Info] [4142068304] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2025/01/04 02:09:48 [Info] [1739706259] proxy/socks: TCP Connect request to tcp:142.250.65.164:443
2025/01/04 02:09:48 [Info] [1739706259] app/dispatcher: default route for tcp:142.250.65.164:443
2025/01/04 02:09:48 [Info] [1739706259] transport/internet/splithttp: XHTTP is dialing to udp:my.host.com:443, mode stream-up, HTTP version 3, host my.host.com
2025/01/04 02:09:48 from tcp:127.0.0.1:57907 accepted tcp:142.250.65.164:443
2025/01/04 02:09:52 [Info] [2279113200] transport/internet/splithttp: failed to POST https://my.host.com/xxx/d147a73b-cc81-4498-9681-c66d03d2bcb9?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Post "https://my.host.com/mypath/d147a73b-cc81-4498-9681-c66d03d2bcb9?x_padding=00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": timeout: no recent network activity
2025/01/04 02:09:52 [Info] [1739706259] transport/internet/splithttp: failed to GET https://my.host.com/xxx/54c2b095-676f-4994-b4d8-54a5d2fca83e?x_padding=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 > Get "https://my.host.com/mypath/54c2b095-676f-4994-b4d8-54a5d2fca83e?x_padding=0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000": timeout: no recent network activity
2025/01/04 02:09:52 [Info] [2279113200] proxy/vless/outbound: tunneling request to tcp:130.255.77.28:443 via my.host.com:443
2025/01/04 02:09:52 [Debug] [1739706259] transport/internet: dialing to udp:my.host.com:443
2025/01/04 02:09:53 [Info] [2279113200] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2025/01/04 02:09:53 [Info] [883022489] proxy/socks: TCP Connect request to tcp:130.255.77.28:443
2025/01/04 02:09:53 [Info] [883022489] app/dispatcher: default route for tcp:130.255.77.28:443
2025/01/04 02:09:53 [Info] [883022489] transport/internet/splithttp: XHTTP is dialing to udp:my.host.com:443, mode stream-up, HTTP version 3, host my.host.com
2025/01/04 02:09:53 from tcp:127.0.0.1:57910 accepted tcp:130.255.77.28:443
2025/01/04 02:09:56 [Debug] app/log: Logger closing

[Fangliding]

没模板不处理
按主项目那个模板发