请赐教: nginx+ws+tls+web 启动后客户端不能连接到服务器

[motiyb]

先介绍下自己的背景：用v2ray已经2,3年了，一直是vmess +tcp. 前段时间vps的up 被封了，琢磨着把was 提上日程了…… 花了一周时间才搞清楚tls和nginx，但是配完还是不行……

配置客户端log显示: failed to find an available destination，然后nginx和v2ray的log里都没有收到访问信息...
nginx的配置应该是没问题的： 用zc查了下, 服务器443的端口开着的，也在Qualys SSL Labs's SSL Server Test验证了tls安装没有问题。
如果服务器和客户端配置成一般的tcp的话，就v2ray可以正常工作。
看样子应该是客户端没有真正连到服务器的443端口，但是实在是不知道哪里出问题了... 麻烦大家帮我看一下， 感恩！

版本信息:
VPS: bwh
OS: Ubuntu 20.04
nginx: 1.18.0
v2ray: 4.40.1

配置文件:

v2ray 服务端:

  "log": {
    "error": "/var/log/v2ray/error.log",
    "access": "/var/log/v2ray/access.log",
    "loglevel": "debug"
  },

  "inbounds": [
    {
      "port": xxx,
      "listen":"127.0.0.1",
      "protocol": "vmess",
      "settings": {
        "clients": [
          {
            "id": "UUID",
            "alterId": 64
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "wsSettings": {
        "path": "/ray"
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {}
    }
  ]

}

v2ray 客户端

{

    "log":{
        "error":"C:\\Users\\yliu\\Downloads\\V2rayW\\log\\error.log",
        "access":"C:\\Users\\yliu\\Downloads\\V2rayW\\log\\access.log",
        "loglevel":"debug"
    },

  "inbounds": [
    {
      "port": 1080,
      "listen": "127.0.0.1",
      "protocol": "socks",
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls"]
      },
      "settings": {
        "auth": "noauth",
        "udp": false
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "vmess",
      "settings": {
        "vnext": [
          {
            "address": "xxx",
            "port": 443,
            "users": [
              {
                "id": "UUID",
                "alterId": 64
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "ws",
        "security": "tls",
        "wsSettings": {
          "path": "/ray"
        }
      }
    }
  ]
}

nginx配置文件

server {
  listen 443 ssl;
  listen [::]:443 ssl;

  ssl_certificate       /etc/nginx/certs/xxx.cer;
  ssl_certificate_key   /etc/nginx/certs/xxx.key;
  ssl_session_timeout 1d;
  ssl_session_cache shared:MozSSL:10m;
  ssl_session_tickets off;

  ssl_protocols         TLSv1.2 TLSv1.3;
  ssl_ciphers           ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
  ssl_prefer_server_ciphers off;

  server_name           xxx;
  location /ray { # 与 V2Ray 配置中的 path 保持一致
    if ($http_upgrade != "websocket") { # WebSocket协商失败时返回404
        return 404;
    }
    proxy_redirect off;
    proxy_pass http://127.0.0.1:xxx; # 假设WebSocket监听在环回地址的10000端口上
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    # Show real IP in v2ray access.log
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
}

error Log:

2021/07/16 23:36:10 [Info] [1595651398] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:10 [Info] [1869863707] proxy/socks: TCP Connect request to tcp:update.googleapis.com:443
2021/07/16 23:36:10 [Info] [1869863707] app/dispatcher: sniffed domain: update.googleapis.com
2021/07/16 23:36:10 [Info] [1869863707] app/dispatcher: default route for tcp:update.googleapis.com:443
2021/07/16 23:36:10 [Info] [1869863707] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [26179469] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Warning] [1518418495] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed
2021/07/16 23:36:11 [Info] [3247540861] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2021/07/16 23:36:11 [Info] [1595651398] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Warning] [4135885312] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed
2021/07/16 23:36:11 [Info] [3247540861] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [2341080263] app/proxyman/inbound: connection ends > proxy/socks: connection ends > context canceled
2021/07/16 23:36:11 [Info] [636302158] proxy/socks: TCP Connect request to tcp:www.google.com:443
2021/07/16 23:36:11 [Info] [2410865682] proxy/socks: TCP Connect request to tcp:www.gstatic.com:443
2021/07/16 23:36:11 [Info] [636302158] app/dispatcher: sniffed domain: www.google.com
2021/07/16 23:36:11 [Info] [636302158] app/dispatcher: default route for tcp:www.google.com:443
2021/07/16 23:36:11 [Info] [636302158] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [2410865682] app/dispatcher: sniffed domain: www.gstatic.com
2021/07/16 23:36:11 [Info] [2410865682] app/dispatcher: default route for tcp:www.gstatic.com:443
2021/07/16 23:36:11 [Info] [2410865682] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [26179469] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [2341080263] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [1580383672] proxy/socks: TCP Connect request to tcp:www.google.com:443
2021/07/16 23:36:11 [Info] [1580383672] app/dispatcher: sniffed domain: www.google.com
2021/07/16 23:36:11 [Info] [1580383672] app/dispatcher: default route for tcp:www.google.com:443
2021/07/16 23:36:11 [Info] [1580383672] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:11 [Info] [3247540861] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:12 [Info] [2341080263] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:12 [Warning] [1595651398] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed
2021/07/16 23:36:12 [Warning] [26179469] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed
2021/07/16 23:36:12 [Info] [3247540861] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:12 [Info] [2341080263] transport/internet/websocket: creating connection to tcp:xxx.xxx:443
2021/07/16 23:36:13 [Warning] [3247540861] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed
2021/07/16 23:36:13 [Warning] [2341080263] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp xx.xx.xx.xx:443: operation was canceled transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://xxx.xxx/ray):  > dial tcp: operation was canceled] > common/retry: all retry attempts failed

[motiyb]

刚才在本机试了telnet, 80可以，但是443不行，难道是搬瓦工的443没有对外开放？

[motiyb]

自己再更新一下.... 把tls端口换成非标端口，就可以了..... 看来真的是搬瓦工端口的锅....

但是这样非标准的tls端口，是不是会比较明显，不利于伪装...?

[aigooman]

同443被封，请问换成其他端口tls有被封么？