使用Xray(M+F+H+K+A)+Caddy(N)配置中的VLESS+XHTTP+TLS遇到的奇怪问题

[smaxad47]

感谢作者大佬提供如此详细的配置，根据此配置以及Discussions中的Q&A，最终使用了VLESS+Vision+REALITY直连，VLESS+XHTTP+TLS套CDN，以及反代本地siteproxy应用。
直连和反代本地应用使用都非常完美，但VLESS+XHTTP+TLS使用时就遇到了奇怪的问题。
症状是，如同时访问几个GFW的域名会随机出现部分能上部分不能上，例如使用隐身模式确保不是缓存问题，youtube可以观看，github可以访问，但同一时间就无法访问google，无论是否套用CF的CDN，都会出现这个情况。
使用VLESS+Vision+REALITY时是非常稳定的，可以排除是VPS网络的问题。
配置如下：

Caddy配置

{
  "admin": {
    "disabled": true,
    "config": {
      "persist": false
    }
  },
  "logging": {
    "logs": {
      "default": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/error.log"
        },
        "encoder": {
          "format": "console"
        },
        "level": "ERROR",
        "exclude": ["http.log.access.log0"]
      },
      "log0": {
        "writer": {
          "output": "file",
          "filename": "/var/log/caddy/access.log"
        },
        "encoder": {
          "format": "console"
        },
        "include": ["http.log.access.log0"]
      }
    }
  },
  "storage": {
    "module": "file_system",
    "root": "/root/tls"
  },
  "apps": {
    "layer4": {
      "servers": {
        "tcpsni": {
          "listen": [":443"],
          "routes": [{
            "match": [{
              "tls": {
                "sni": ["v.v.org"]
              }
            }],
            "handle": [{
              "handler": "proxy",
              "proxy_protocol": "v1",
              "upstreams": [{
                "dial": ["127.0.0.1:5443"]
              }]
            }]
          },
          {
            "match": [{
              "tls": {}
            }],
            "handle": [{
              "handler": "proxy",
              "proxy_protocol": "v2",
              "upstreams": [{
                "dial": ["127.0.0.1:8443"]
              }]
            }]
          }]
        },
        "udppy": {
          "listen": ["udp/:443"],
          "routes": [{
            "handle": [{
              "handler": "proxy",
              "upstreams": [{
                "dial": ["udp/127.0.0.1:8443"]
              }]
            }]
          }]
        }
      }
    },
    "http": {
      "servers": {
        "srvh1": {
          "listen": [":80"],
          "routes": [{
            "handle": [{
              "handler": "static_response",
              "headers": {
                "Location": ["https://{http.request.host}{http.request.uri}"]
              },
              "status_code": 301
            }]
          }],
          "protocols": ["h1"]
        },
        "srvh3": {
          "listen": ["127.0.0.1:8443"],
          "listener_wrappers": [{
            "wrapper": "proxy_protocol",
            "allow": ["127.0.0.1/32"]
          },
          {
            "wrapper": "tls"
          }],
          "routes": [{
            "match": [{
              "host": ["p.v.org"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "upstreams": [{
                "dial": "127.0.0.1:5006"
              }],
              "headers": {
                "request": {
                  "set": {
                    "Host": ["{http.reverse_proxy.upstream.hostport}"],
                    "X-Real-IP": ["{http.request.remote.host}"],
                    "X-Forwarded-Port": ["{http.request.port}"],
                    "Accept-Encoding": ["identity"]
                  }
                }
              }
            }]
          },
          {
            "match": [{
              "path": ["/xthhp9527/*"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "transport": {
                "protocol": "http",
                "versions": ["h2c","2"]
              },
              "upstreams": [{
                "dial": "127.0.0.1:2023"
              }]
            }]
          },
          {
            "handle": [{
              "handler": "headers",
              "response": {
                "set": {
                  "Alt-Svc": ["h3=\":443\"; ma=2592000"],
                  "Strict-Transport-Security": ["max-age=31536000; includeSubDomains; preload"]
                }
              }
            },
            {
              "handler": "file_server",
              "root": "/var/wwwroot"
            }]
          }],
          "tls_connection_policies": [{
            "match": {
              "sni": ["v.v.org","p.v.org","x.v.org"]
            },
            "cipher_suites": ["TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"],
            "alpn": ["h3","h2","http/1.1"]
          }],
          "automatic_https": {
            "disable": true
          },
          "trusted_proxies": {
            "source": "cloudflare",
            "interval": "12h",
            "timeout": "15s"
          },
          "logs": {
            "default_logger_name": "log0"
          },
          "protocols": ["h1","h2","h3"]
        }
      }
    },
    "tls": {
      "certificates": {
        "automate": ["v.v.org","p.v.org","x.v.org"]
      },
      "automation": {
        "policies": [{
          "issuers": [{
            "module": "acme",
        
            "email": ""
          }]
        }]
      }
    }
  }
}

Xray服务端配置

{
  "log": {
    "loglevel": "warning",
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log" 
  },
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 5443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "",
            "flow": "xtls-rprx-vision",
            "email": ""
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 2023
          }
        ]
      },
      "streamSettings": {
        "network": "raw",
        "security": "reality",
        "realitySettings": {
          "target": 8443,
          "xver": 2,
          "serverNames": [
            "v.v.org"
          ],
          "privateKey": "",
          "shortIds": [
            ""
          ]
        },
        "rawSettings": {
          "acceptProxyProtocol": true
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    },
    {
      "listen": "127.0.0.1",
      "port": 2023,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "",
            "email": ""
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "xhttp",
        "xhttpSettings": {
          "path": "/xthhp9527"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    }
  ],
  "routing": {
    "rules": [
      {
        "type": "field",
        "protocol": [
          "bittorrent"
        ],
        "outboundTag": "block"
      }
    ]
  },
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {}
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {}
    }
  ]
}

Xray客户端配置

{
  "log": {},
  "inbounds": [
    {
      "port": "1080",
      "protocol": "socks",
      "settings": {
        "udp": true
      }
    },
    {
      "port": "1081",
      "protocol": "http",
      "settings": {}
    }
  ],
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "type": "field",
        "domain": ["geosite:cn"],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": [
          "geoip:cn",
          "geoip:private"
        ],
        "outboundTag": "direct"
      }
    ]
  },
  "outbounds": [
    {
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "address": "x.v.org",
            "port": 443,
            "users": [
              {
                "id": "",
                "encryption": "none"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "tls",
        "tlsSettings": {
          "alpn": ["h2"],
          "fingerprint": "chrome"
        },
        "xhttpSettings": {
          "mode": "auto",
          "path": "/xthhp9527"
        }
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {}
    }
  ]
}

客户端和服务端的Xray均没有报错的日志
Caddy中的access.log中是可以看到客户端的访问记录的.
access.log
该日志中记录了尝试访问youtube和github，youtube可以访问，github无法访问。
求解答疑惑🙏

[lxhao61]

你客户端是在白名单地区(如:河南等)使用，还是非白名单地区使用？

[lxhao61]

客气了。修改 Caddy 的配置后 h2+stream-up 与 h2+packet-up 无改善，还是报错？

[smaxad47]

h2+packet-up 依然还是会出现protocol error: received DATA after END_STREAM
h2+stream-up 和 stream-one 目前用测试下来最稳定的2个 没有报错 这两者稳定性感觉差不多了

[lxhao61]

哦，了解了。你若有空 Caddy 换成 Nginx 试试；若一样，那么就这样可结束了。

[smaxad47]

🙏好的,感谢大佬指点,哪天摸鱼的时候试一下到时候来反馈

[lxhao61]

好的，等你反馈。