Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tls+ws+vmess被陌生ip成功访问 #2971

Closed
xyc0123456789 opened this issue Apr 13, 2024 · 2 comments
Closed

tls+ws+vmess被陌生ip成功访问 #2971

xyc0123456789 opened this issue Apr 13, 2024 · 2 comments

Comments

@xyc0123456789
Copy link

你正在使用哪个版本的 V2Ray?

V2Ray 5.14.1 (V2Fly, a community-driven edition of V2Ray.) Custom (go1.22.0 linux/amd64)

你的使用场景是什么?

tls+ws+vmess

你看到的异常现象是什么?

查询ip发现陌生IP成功访问

你期待看到的正常表现是怎样的?

应当没有陌生ip能成功访问

请附上你的配置

服务端配置:

{
    "log": {
        "access": "/var/log/v2ray/access.log",
        "error": "/var/log/v2ray/error.log",
        "loglevel": "info"
    },
    "routing": {
        "domainStrategy": "AsIs",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:private"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": port,
            "protocol": "vmess",
            "settings": {
                "clients": [
                    {
                        "id": "****",
                        "alterId": 0,
                        "security": "aes-128-gcm",
                        "network":"ws"
                    }

                ]
            },
            "streamSettings": {
                "network": "ws",
                "wsSettings": {
                    "path": "/ws/path"
                }
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ]
}

请附上访问日志

// 在这里附上服务器端日志
2024/04/xx xx:xx:xx xxx.xxx.xxx.xxx:0 accepted tcp:xxx.google.com:xxxx [direct]

其它相关的配置文件(如 Nginx)和相关日志

"xxx.xxx.xxx.xxx" - "-" - - [xx/Apr/2024:xx:xx:xx +0000] "GET /ws/path HTTP/1.1" 101 287 "-" "Go-http-client/1.1" "TLSv1.3" "TLS_AES_256_GCM_SHA384"

目前观察到两条陌生请求,第一次被v2ray拒绝,第二次被v2ray接受,两次访问同属于一个ip段,间隔了大概两个礼拜

请问这种情况可能是什么原因?应该如何处理?

@xyc0123456789
Copy link
Author

目前修改了id+ws path,我再观察下吧

@xyc0123456789
Copy link
Author

找到问题了,虚惊一场,陌生ip段访问是手机流量访问导致的。因为wifi信号一直很好,并且关闭了数据加速(使用移动数据网络加速),没想到这个可能性。只能解释为wifi有无法直接感知的不稳定,导致某一个包通过移动网络发送了。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant