求助: nginx+ws+tls+web 搭配使用后无法连接并报 unable to drain connection 错误 (已解决)

[davuses]

问题:

客户端尝试连接时，服务器 nginx 和 v2ray 都有访问记录，伪装的 web 网站浏览器能以 https 正常打开，但是客户端无法连通， nginx 报 499 错误码。

版本信息:

VPS: bwh
OS: Ubuntu16.4
nginx: 1.10.3
v2ray: 4.41.1

配置文件:

v2ray 服务端:

{
  "log": {
    "loglevel": "debug",
    "access": "/var/log/v2ray/access.log",
    "error": "/var/log/v2ray/error.log"
  },
  "inbounds": [
    {
      "tag": "proxy",
      "listen":"127.0.0.1",
      "port": xxxx,
      "protocol": "vmess", 
      "settings": {
        "clients": [
          {
            "id": "UUID",
            "alterId": 1
          }
        ]
      },
      "streamSetting":{
        "network": "ws",
        "wsSettings": {"path": "/ray"}
      }
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {}
    }
  ]
}

v2ray 客户端:

{
  "inbounds": [
    {
      "port": 1080,
      "protocol": "socks",
      "listen": "0.0.0.0",
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls"],
        "metadataOnly": false
      },
      "settings": { "auth": "noauth", "udp": true },
      "streamSettings": null,
      "tag": "socks"
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "domain.name",
            "port": 443,
            "users": [
              {
                "id": "UUID",
                "alterId": 1
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "security": "tls",
        "wsSettings": {
          "path": "/ray"
        }
      }
    }
  ]
}

nginx配置文件:

server {
    server_name domain.name;
    listen 443 ssl reuseport fastopen=10;

    ssl_certificate .../fullchain.pem;
    ssl_certificate_key .../privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

    ssl_ciphers TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
    ssl_ecdh_curve secp384r1;
    ssl_prefer_server_ciphers off;


    index index.html index.htm  index.php;
    location ~ .*\.(js|jpg|JPG|jpeg|JPEG|css|bmp|gif|GIF|png)$ { access_log off; }
    location / { index index.html; }

    location /ray
        proxy_pass http://127.0.0.1:****;  # 此处和服务端v2ray inbounds 端口号一致，以隐去
        proxy_redirect off;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        # Show real IP in v2ray access.log
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

v2ray 服务端日志:

2021/09/03 14:36:56 127.0.0.1:42020 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:40:03 127.0.0.1:42022 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:40:11 127.0.0.1:42024 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:40:19 127.0.0.1:42026 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:40:28 127.0.0.1:42028 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:40:36 127.0.0.1:42030 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:41:31 127.0.0.1:42032 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:41:39 127.0.0.1:42034 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:41:47 127.0.0.1:42036 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:41:56 127.0.0.1:42038 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:42:04 127.0.0.1:42040 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:46:01 127.0.0.1:42044 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:46:09 127.0.0.1:42046 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:46:17 127.0.0.1:42048 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:46:26 127.0.0.1:42050 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 14:46:34 127.0.0.1:42052 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:02:17 127.0.0.1:42054 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:02:25 127.0.0.1:42056 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:02:33 127.0.0.1:42058 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:02:42 127.0.0.1:42060 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:02:50 127.0.0.1:42062 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:13:45 127.0.0.1:42064 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:13:53 127.0.0.1:42066 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:14:01 127.0.0.1:42068 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:14:10 127.0.0.1:42070 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 15:14:18 127.0.0.1:42072 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 16:22:22 127.0.0.1:42086 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 16:22:30 127.0.0.1:42088 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 16:22:38 127.0.0.1:42090 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 16:22:46 127.0.0.1:42092 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
2021/09/03 16:22:55 127.0.0.1:42094 rejected  common/drain: common/drain: unable to drain connection > EOF > proxy/vmess/encoding: invalid user > proxy/vmess: Not Found
...

nginx 日志:

ipaddress - - [03/Sep/2021:15:13:45 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:15:13:53 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:15:14:01 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:15:14:10 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:15:14:18 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:16:22:22 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:16:22:30 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:16:22:38 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:16:22:46 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
ipaddress - - [03/Sep/2021:16:22:55 +0800] "GET /ray HTTP/1.1" 499 0 "-" "Go-http-client/1.1"
...

[kingwilliam]

v2ray invalid user
nginx 499

您看看 uuid, 如没发现问题, 试试重新 generate 一个新的 uuid