400 Bad Request

[Finder0519]

你正在使用哪个版本的 V2Ray？

服务端：v2ray-Core 4.34.0
客户端：Xray 1.3.1

你的使用场景是什么？

比如使用 Chrome 通过 Socks/VMess 代理观看 YouTube 视频

你看到的异常现象是什么？

原本想配合websocket+nginx作反代，结果无法连接，客户端报错，提示400 Bad Request

你期待看到的正常表现是怎样的？

可以正常打开Google首页

请附上你的配置

服务端配置：

// 在这里附上服务器端配置文件
{
	"log": {
		"access": "/var/log/v2ray/access.log",
		"error": "/var/log/v2ray/error.log",
		"loglevel": "warning"
	},
	"inbounds": [
		{
			"port": 8639,
			"protocol": "vmess",
			"settings": {
				"clients": [
					{
						"id": "<隐藏的UUID>",
						"level": 1,
						"alterId": 0
					}
				]
			},
			"streamSettings": {
				"network": "ws",
                "wsSettings":{
                    "path":"/jp2/",
                    "headers":{
                        "Host": "<隐藏的域名>"
                    }
                }
			},
			"sniffing": {
				"enabled": true,
				"destOverride": [
					"http",
					"tls"
				]
			}
		}
		//include_ss
		//include_socks
		//include_mtproto
		//include_in_config
		//
	],
	"outbounds": [
		{
			"protocol": "freedom",
			"settings": {
				"domainStrategy": "UseIP"
			},
			"tag": "direct"
		},
		{
			"protocol": "blackhole",
			"settings": {},
			"tag": "blocked"
        },
		{
			"protocol": "mtproto",
			"settings": {},
			"tag": "tg-out"
		}
		//include_out_config
		//
	],
	"dns": {
		"servers": [
			"https+local://cloudflare-dns.com/dns-query",
			"1.1.1.1",
			"1.0.0.1",
			"8.8.8.8",
			"8.8.4.4",
			"localhost"
		]
	},
	"routing": {
		"domainStrategy": "IPOnDemand",
		"rules": [
			{
				"type": "field",
				"ip": [
					"0.0.0.0/8",
					"10.0.0.0/8",
					"100.64.0.0/10",
					"127.0.0.0/8",
					"169.254.0.0/16",
					"172.16.0.0/12",
					"192.0.0.0/24",
					"192.0.2.0/24",
					"192.168.0.0/16",
					"198.18.0.0/15",
					"198.51.100.0/24",
					"203.0.113.0/24",
					"::1/128",
					"fc00::/7",
					"fe80::/10"
				],
				"outboundTag": "blocked"
			},
			{
				"type": "field",
				"inboundTag": ["tg-in"],
				"outboundTag": "tg-out"
			}
			,
			{
				"type": "field",
				"domain": [
					"domain:epochtimes.com",
					"domain:epochtimes.com.tw",
					"domain:epochtimes.fr",
					"domain:epochtimes.de",
					"domain:epochtimes.jp",
					"domain:epochtimes.ru",
					"domain:epochtimes.co.il",
					"domain:epochtimes.co.kr",
					"domain:epochtimes-romania.com",
					"domain:erabaru.net",
					"domain:lagranepoca.com",
					"domain:theepochtimes.com",
					"domain:ntdtv.com",
					"domain:ntd.tv",
					"domain:ntdtv-dc.com",
					"domain:ntdtv.com.tw",
					"domain:minghui.org",
					"domain:renminbao.com",
					"domain:dafahao.com",
					"domain:dongtaiwang.com",
					"domain:falundafa.org",
					"domain:wujieliulan.com",
					"domain:ninecommentaries.com",
					"domain:shenyun.com",
					"domain:pincong.rocks"
				],
				"outboundTag": "blocked"
			}			,
                {
                    "type": "field",
                    "protocol": [
                        "bittorrent"
                    ],
                    "outboundTag": "blocked"
                }
			//include_ban_ad
			//include_rules
			//
		]
	},
	"transport": {
		"kcpSettings": {
            "uplinkCapacity": 100,
            "downlinkCapacity": 100,
            "congestion": true
        }
	}
}

客户端配置：

// 在这里附上客户端配置
{
    "outbounds": [
        {
            "_QV2RAY_USE_GLOBAL_FORWARD_PROXY_": false,
            "mux": {
                "concurrency": 1,
                "enabled": null
            },
            "protocol": "vmess",
            "sendThrough": "0.0.0.0",
            "settings": {
                "vnext": [
                    {
                        "address": "<隐藏的域名>",
                        "port": 443,
                        "users": [
                            {
                                "alterId": 0,
                                "id": "<隐藏的UUID>",
                                "level": 0,
                                "security": "auto",
                                "testsEnabled": "none"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "dsSettings": {
                    "path": "/"
                },
                "httpSettings": {
                    "host": [
                    ],
                    "path": "/"
                },
                "kcpSettings": {
                    "congestion": false,
                    "downlinkCapacity": 20,
                    "header": {
                        "type": "none"
                    },
                    "mtu": 1350,
                    "readBufferSize": 1,
                    "seed": "",
                    "tti": 20,
                    "uplinkCapacity": 5,
                    "writeBufferSize": 1
                },
                "network": "ws",
                "quicSettings": {
                    "header": {
                        "type": "none"
                    },
                    "key": "",
                    "security": ""
                },
                "security": "none",
                "sockopt": {
                    "mark": 0,
                    "tcpFastOpen": false,
                    "tproxy": "off"
                },
                "tcpSettings": {
                    "header": {
                        "request": {
                            "headers": {
                            },
                            "method": "GET",
                            "path": [
                            ],
                            "version": "1.1"
                        },
                        "response": {
                            "headers": {
                            },
                            "reason": "OK",
                            "status": "200",
                            "version": "1.1"
                        },
                        "type": "none"
                    }
                },
                "tlsSettings": {
                    "allowInsecure": false,
                    "allowInsecureCiphers": false,
                    "alpn": [
                    ],
                    "certificates": [
                    ],
                    "disableSessionResumption": true,
                    "disableSystemRoot": false,
                    "serverName": ""
                },
                "wsSettings": {
                    "headers": {
                        "Host": "<隐藏的域名>"
                    },
                    "path": "/jp2/"
                }
            },
            "tag": "outBound_PROXY"
        }
    ]
}

请附上出错时软件输出的错误日志

服务器端错误日志：

// 在这里附上服务器端日志
2021/03/09 23:24:36 [Warning] v2ray.com/core: V2Ray 4.34.0 started
2021/03/09 23:49:47 [Warning] v2ray.com/core: V2Ray 4.34.0 started
2021/03/09 23:54:31 [Warning] v2ray.com/core: V2Ray 4.34.0 started

客户端错误日志：

// 在这里附上客户端日志
Xray 1.3.1 (Xray, Penetrates Everything.) Custom (go1.16 windows/amd64)
A unified platform for anti-censorship.
2021/03/10 00:08:23 [Info] infra/conf/serial: Reading config: C:/Users/sunzh/AppData/Local/qv2ray/generated/config.gen.json
2021/03/10 00:08:23 [Warning] core: Xray 1.3.1 started
2021/03/10 00:08:23 tcp:[::1]:9909 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:23 tcp:127.0.0.1:9916 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:23 127.0.0.1:9906 accepted tcp:127.0.0.1:0 [_QV2RAY_API_INBOUND_ -> _QV2RAY_API_]
2021/03/10 00:08:25 tcp:[::1]:9920 accepted tcp:www.google.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:28 tcp:[::1]:9926 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:30 [Warning] [1651953797] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:30 tcp:[::1]:9933 accepted tcp:www.google.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:34 tcp:[::1]:9938 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:34 [Warning] [921859658] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:34 tcp:[::1]:9940 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:36 [Warning] [553175013] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/):  > read tcp 192.168.10.131:9918->172.67.208.16:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:36 tcp:[::1]:9948 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:41 [Warning] [2516426856] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:41 tcp:[::1]:9957 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:42 tcp:[::1]:9962 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:43 [Warning] [1885168733] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/):  > read tcp 192.168.10.131:9934->172.67.208.16:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:44 [Warning] [992180255] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/):  > read tcp 192.168.10.131:9925->172.67.208.16:443: i/o timeout transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/):  > read tcp 192.168.10.131:9942->172.67.208.16:443: i/o timeout] > common/retry: all retry attempts failed
2021/03/10 00:08:44 tcp:[::1]:9967 accepted tcp:alive.github.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:44 tcp:[::1]:9971 accepted tcp:www.google.com:443 [socks_IN -> outBound_PROXY]
2021/03/10 00:08:44 [Warning] [1929721920] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2021/03/10 00:08:45 [Warning] [492429659] app/proxyman/outbound: failed to process outbound traffic > proxy/vmess/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (ws://<隐藏的域名>:443/jp2/): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed

请附上访问日志

// 在这里附上服务器端日志
2021/03/09 23:51:50 101.80.83.178:6409 accepted tcp:dash.cloudflare.com:443 [direct]
2021/03/09 23:51:50 101.80.83.178:6405 accepted tcp:dash.cloudflare.com:443 [direct]
2021/03/09 23:51:51 101.80.83.178:6216 accepted tcp:m.stripe.com:443 [direct]
2021/03/09 23:52:01 101.80.83.178:7117 accepted tcp:clients4.google.com:443 [direct]
2021/03/09 23:55:03 101.80.83.178:4987 accepted tcp:beacons.gcp.gvt2.com:443 [direct]
2021/03/09 23:55:04 101.80.83.178:4986 accepted tcp:www.google.com:443 [direct]
2021/03/09 23:55:04 101.80.83.178:4530 accepted tcp:beacons.gvt2.com:443 [direct]
2021/03/09 23:55:23 101.80.83.178:7361 accepted tcp:github.com:443 [direct]
2021/03/09 23:55:25 101.80.83.178:7410 accepted tcp:avatars.githubusercontent.com:443 [direct]
2021/03/09 23:55:25 101.80.83.178:7420 accepted tcp:content-autofill.googleapis.com:443 [direct]

其它相关的配置文件（如 Nginx）和相关日志

server
{
listen 80;
listen 443 ssl http2;
server_name <隐藏的域名>;
index index.php index.html index.htm default.php default.htm default.html;
root /www/wwwroot/<隐藏的域名>;

#SSL-START SSL相关配置，请勿删除或修改下一行带注释的404规则
#error_page 404/404.html;
#HTTP_TO_HTTPS_START
if ($server_port !~ 443){
    rewrite ^(/.*)$ https://$host$1 permanent;
}
#HTTP_TO_HTTPS_END
ssl_certificate    /www/server/panel/vhost/cert/<隐藏的域名>/fullchain.pem;
ssl_certificate_key    /www/server/panel/vhost/cert/<隐藏的域名>/privkey.pem;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
add_header Strict-Transport-Security "max-age=31536000";
error_page 497  https://$host$request_uri;

#SSL-END

#ERROR-PAGE-START  错误页配置，可以注释、删除或修改
#error_page 404 /404.html;
#error_page 502 /502.html;
#ERROR-PAGE-END

#PHP-INFO-START  PHP引用配置，可以注释或修改
include enable-php-00.conf;
#PHP-INFO-END

#REWRITE-START URL重写规则引用,修改后将导致面板设置的伪静态规则失效
include /www/server/panel/vhost/rewrite/<隐藏的域名>.conf;
#REWRITE-END

#禁止访问的文件或目录
location ~ ^/(\.user.ini|\.htaccess|\.git|\.svn|\.project|LICENSE|README.md)
{
    return 404;
}

#一键申请SSL证书验证目录相关设置
location ~ \.well-known{
    allow all;
}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
{
    expires      30d;
    error_log /dev/null;
    access_log off;
}
location ~ .*\.(js|css)?$
{
    expires      12h;
    error_log /dev/null;
    access_log off;
}
location /jp2 {
    proxy_redirect off;
    proxy_pass http://localhost:8639;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $http_host;
}
  access_log  /www/wwwlogs/<隐藏的域名>.log;
error_log  /www/wwwlogs/<隐藏的域名>.error.log;

}