透明代理用局域网SOCKS5作为服务器代理1080失败 #812

htmlrust · 2021-03-21T22:49:32Z

htmlrust
Mar 21, 2021

参考白话文设置说明
https://guide.v2fly.org/app/tproxy.html#%E9%85%8D%E7%BD%AE%E9%80%8F%E6%98%8E%E4%BB%A3%E7%90%86

route已经设置白名单，并且在第一个

      {
        "type": "field", 
        "ip": [ 
          "192.168.3.169"
        ],
        "outboundTag": "direct"
      },

局域网的SOCKS5服务器为 192.168.3.169

透明代理服务器运行到局域网的SOCKS5的curl，可以正常使用

curl -x socks5h://192.168.3.169:27637 https://google.com
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="https://www.google.com/">here</A>.
</BODY></HTML>

透明网关本机，访问v2ray的SOCKS5不能正常使用，无反应

 curl -so /dev/null -w "%{http_code}" google.com -x socks5://127.0.0.1:1080
 curl -x socks5h://127.0.0.1:1080 https://google.com

系统全新安装，已经关闭selinux ,iptables,firewalld
sysctl 仅设置了网关代理
echo net.ipv4.ip_forward=1 >> /etc/sysctl.conf && sysctl -p

想要实现使用局域网内的SOCKS5代理作为透明代理服务器的出口

配置文件


{
  "log":{

    "access": "access.log",
    "error": "error.log",
    "loglevel": "debug"
},
  "inbounds": [
    {
      "tag":"transparent",
      "port": 12345,
      "protocol": "dokodemo-door",
      "settings": {
        "network": "tcp,udp",
        "followRedirect": true
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ]
      },
      "streamSettings": {
        "sockopt": {
          "tproxy": "tproxy", 
          "mark":255
        }
      }
    },
    {
      "port": 1080, 
      "protocol": "socks", 
      "sniffing": {
        "enabled": true,
        "destOverride": ["http", "tls"]
      },
      "settings": {
        "auth": "noauth"
      }
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "protocol": "socks", 
      "settings": {
	
    "servers": [
	{
		"address":"192.168.3.169",
		"port":27637
	}

	]
      },
      "streamSettings": {
        "sockopt": {
          "mark": 255
        }
      },
      "mux": {
        "enabled": true
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP"
      },
      "streamSettings": {
        "sockopt": {
          "mark": 255
        }
      }      
    },
    {
      "tag": "block",
      "protocol": "blackhole",
      "settings": {
        "response": {
          "type": "http"
        }
      }
    },
    {
      "tag": "dns-out",
      "protocol": "dns",
      "streamSettings": {
        "sockopt": {
          "mark": 255
        }
      }  
    }
  ],
  "dns": {
    "servers": [
      {
        "address": "223.5.5.5", 
        "port": 53,
        "domains": [
          "geosite:cn",
          "ntp.org",   
          "192.168.3.169"
        ]
      },
      {
        "address": "114.114.114.114", 
        "port": 53,
        "domains": [
          "geosite:cn",
          "ntp.org",   
          "192.168.3.169"
        ]
      },
      {
        "address": "https+local://1.1.1.1/dns-query",
        "domains": [
          "geosite:geolocation-!cn"
        ]
      },
      {
        "address": "8.8.8.8", 
        "port": 53,
        "domains": [
          "geosite:geolocation-!cn"
        ]
      },
      {
        "address": "1.1.1.1",
        "port": 53,
        "domains": [
          "geosite:geolocation-!cn"
        ]
      }
    ]
  },
  "routing": {
    "domainStrategy": "IPOnDemand",
    "rules": [
      {
        "type": "field", 
        "ip": [ 
          "192.168.3.169"
        ],
        "outboundTag": "direct"
      },

      { 
        "type": "field",
        "inboundTag": [
          "transparent"
        ],
        "port": 53,
        "network": "udp",
        "outboundTag": "dns-out" 
      },    
      { 
        "type": "field",
        "inboundTag": [
          "transparent"
        ],
        "port": 123,
        "network": "udp",
        "outboundTag": "direct" 
      },    
      {
        "type": "field", 
        "ip": [ 
          "223.5.5.5",
          "114.114.114.114"
        ],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": [ 
          "8.8.8.8",
          "1.1.1.1"
        ],
        "outboundTag": "proxy" 
      },
      { 
        "type": "field", 
        "domain": [
          "geosite:category-ads-all"
        ],
        "outboundTag": "block"
      },
      { 
        "type": "field",
        "protocol":["bittorrent"], 
        "outboundTag": "direct"
      },
      { 
        "type": "field", 
        "ip": [
          "geoip:private",
          "geoip:cn"
        ],
        "outboundTag": "direct"
      },
      {
        "type": "field", 
        "domain": [
          "geosite:cn"
        ],
        "outboundTag": "direct"
      }
    ]
  }
}

日志


2021/03/22 06:29:33 [Debug] github.com/v2fly/v2ray-core/v4/app/log: Logger started
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DNS: created UDP client initialized for 223.5.5.5:53
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DNS: created UDP client initialized for 114.114.114.114:53
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DNS: created Local DOH client for https://1.1.1.1/dns-query
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DNS: created UDP client initialized for 8.8.8.8:53
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DNS: created UDP client initialized for 1.1.1.1:53
2021/03/22 06:29:33 [Debug] github.com/v2fly/v2ray-core/v4/app/proxyman/inbound: creating stream worker on 0.0.0.0:12345
2021/03/22 06:29:33 [Debug] github.com/v2fly/v2ray-core/v4/app/proxyman/inbound: creating stream worker on 0.0.0.0:1080
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: listening TCP on 0.0.0.0:12345
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/udp: listening UDP on 0.0.0.0:12345
2021/03/22 06:29:33 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: listening TCP on 0.0.0.0:1080
2021/03/22 06:29:33 [Warning] github.com/v2fly/v2ray-core/v4: V2Ray 4.36.2 started
2021/03/22 06:29:40 [Info] [60634351] github.com/v2fly/v2ray-core/v4/proxy/socks: TCP Connect request to tcp:46.82.174.69:443
2021/03/22 06:29:40 [Info] [60634351] github.com/v2fly/v2ray-core/v4/app/dispatcher: sniffed domain: google.com
2021/03/22 06:29:40 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com matches following rules: [geosite:geolocation-!cn(DNS idx:2) geosite:geolocation-!cn(DNS idx:3) geosite:geolocation-!cn(DNS idx:4)]
2021/03/22 06:29:40 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com will use DNS in order: [DOHL//1.1.1.1 UDP:8.8.8.8:53 UDP:1.1.1.1:53 UDP:223.5.5.5:53 UDP:114.114.114.114:53]
2021/03/22 06:29:40 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 querying: google.com.
2021/03/22 06:29:41 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeA -> [142.250.68.110] 466.394618ms
2021/03/22 06:29:41 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeAAAA -> [[2607:f8b0:4007:813::200e]] 466.669949ms
2021/03/22 06:29:41 [Info] [60634351] github.com/v2fly/v2ray-core/v4/app/dispatcher: default route for tcp:google.com:443
2021/03/22 06:29:41 [Info] [60634351] github.com/v2fly/v2ray-core/v4/common/mux: dispatching request to tcp:google.com:443
2021/03/22 06:29:41 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: dialing TCP to tcp:192.168.3.169:27637
2021/03/22 06:31:00 [Info] [180547240] github.com/v2fly/v2ray-core/v4/proxy/socks: TCP Connect request to tcp:46.82.174.69:80
2021/03/22 06:31:00 [Info] [180547240] github.com/v2fly/v2ray-core/v4/app/dispatcher: sniffed domain: google.com
2021/03/22 06:31:00 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com matches following rules: [geosite:geolocation-!cn(DNS idx:2) geosite:geolocation-!cn(DNS idx:3) geosite:geolocation-!cn(DNS idx:4)]
2021/03/22 06:31:00 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com will use DNS in order: [DOHL//1.1.1.1 UDP:8.8.8.8:53 UDP:1.1.1.1:53 UDP:223.5.5.5:53 UDP:114.114.114.114:53]
2021/03/22 06:31:00 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 cache HIT google.com -> [2607:f8b0:4007:813::200e 142.250.68.110]
2021/03/22 06:31:00 [Info] [180547240] github.com/v2fly/v2ray-core/v4/app/dispatcher: default route for tcp:google.com:80
2021/03/22 06:31:00 [Info] [180547240] github.com/v2fly/v2ray-core/v4/common/mux: dispatching request to tcp:google.com:80
2021/03/22 06:31:00 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: dialing TCP to tcp:192.168.3.169:27637

更多的日志


2021/03/22 06:44:39 [Info] [100978000] github.com/v2fly/v2ray-core/v4/proxy/socks: TCP Connect request to tcp:google.com:443
2021/03/22 06:44:39 [Info] [100978000] github.com/v2fly/v2ray-core/v4/app/dispatcher: sniffed domain: google.com
2021/03/22 06:44:39 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com matches following rules: [geosite:geolocation-!cn(DNS idx:2) geosite:geolocation-!cn(DNS idx:3) geosite:geolocation-!cn(DNS idx:4)]
2021/03/22 06:44:39 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com will use DNS in order: [DOHL//1.1.1.1 UDP:8.8.8.8:53 UDP:1.1.1.1:53 UDP:223.5.5.5:53 UDP:114.114.114.114:53]
2021/03/22 06:44:39 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 querying: google.com.
2021/03/22 06:44:40 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeAAAA -> [[2607:f8b0:4007:813::200e]] 426.288136ms
2021/03/22 06:44:40 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeA -> [216.58.217.206] 426.451133ms
2021/03/22 06:44:40 [Info] [100978000] github.com/v2fly/v2ray-core/v4/app/dispatcher: default route for tcp:google.com:443
2021/03/22 06:44:40 [Info] [100978000] github.com/v2fly/v2ray-core/v4/common/mux: dispatching request to tcp:google.com:443
2021/03/22 06:44:40 [Info] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: dialing TCP to tcp:192.168.3.169:27637

htmlrust · 2021-03-21T22:54:26Z

htmlrust
Mar 21, 2021
Author

我把MUX关了，

      "mux": {
        "enabled": false
      }

重启透明网关的V2ray，然后测试可以代理1080，是我的局域网SOCKS5不支持MUX吗？

 curl -x socks5h://127.0.0.1:1080 https://google.com
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="https://www.google.com/">here</A>.
</BODY></HTML>

0 replies

htmlrust · 2021-03-22T02:19:49Z

htmlrust
Mar 22, 2021
Author

刚才又测试了，关闭MUX的情况下，再测试，没做任何iptables规则，访问google有异常

curl -x socks5h://192.168.3.235:1080 google.com -L
curl: (52) Empty reply from server

日志截取

2021/03/22 10:17:20 [Warning] github.com/v2fly/v2ray-core/v4: V2Ray 4.36.2 started
2021/03/22 10:17:24 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/proxy/socks: TCP Connect request to tcp:google.com:80
2021/03/22 10:17:24 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/app/dispatcher: sniffed domain: google.com
2021/03/22 10:17:24 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com matches following rules: [geosite:geolocation-!cn(DNS idx:2) geosite:geolocation-!cn(DNS idx:3) geosite:geolocation-!cn(DNS idx:4)]
2021/03/22 10:17:24 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain google.com will use DNS in order: [DOHL//1.1.1.1 UDP:8.8.8.8:53 UDP:1.1.1.1:53 UDP:223.5.5.5:53 UDP:114.114.114.114:53]
2021/03/22 10:17:24 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 querying: google.com.
2021/03/22 10:17:25 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeA -> [142.250.68.110] 469.408334ms
2021/03/22 10:17:25 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: google.com. TypeAAAA -> [[2607:f8b0:4007:808::200e]] 469.448495ms
2021/03/22 10:17:25 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/app/dispatcher: default route for tcp:google.com:80
2021/03/22 10:17:25 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: dialing TCP to tcp:192.168.3.169:1082
2021/03/22 10:17:26 [Info] [1863599087] github.com/v2fly/v2ray-core/v4/proxy/socks: TCP Connect request to tcp:www.google.com:80
2021/03/22 10:17:26 [Info] [1863599087] github.com/v2fly/v2ray-core/v4/app/dispatcher: sniffed domain: www.google.com
2021/03/22 10:17:26 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain www.google.com matches following rules: [geosite:geolocation-!cn(DNS idx:2) geosite:geolocation-!cn(DNS idx:3) geosite:geolocation-!cn(DNS idx:4)]
2021/03/22 10:17:26 [Debug] github.com/v2fly/v2ray-core/v4/app/dns: domain www.google.com will use DNS in order: [DOHL//1.1.1.1 UDP:8.8.8.8:53 UDP:1.1.1.1:53 UDP:223.5.5.5:53 UDP:114.114.114.114:53]
2021/03/22 10:17:26 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 querying: www.google.com.
2021/03/22 10:17:26 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: www.google.com. TypeAAAA -> [[2607:f8b0:4007:80c::2004]] 137.428705ms
2021/03/22 10:17:26 [Info] github.com/v2fly/v2ray-core/v4/app/dns: DOHL//1.1.1.1 got answer: www.google.com. TypeA -> [142.250.68.100] 138.438163ms
2021/03/22 10:17:26 [Info] [1863599087] github.com/v2fly/v2ray-core/v4/app/dispatcher: default route for tcp:www.google.com:80
2021/03/22 10:17:26 [Info] [1863599087] github.com/v2fly/v2ray-core/v4/transport/internet/tcp: dialing TCP to tcp:192.168.3.169:1082
2021/03/22 10:17:31 [Warning] [1863599087] github.com/v2fly/v2ray-core/v4/app/proxyman/outbound: failed to process outbound traffic > github.com/v2fly/v2ray-core/v4/proxy/socks: failed to establish connection to server > github.com/v2fly/v2ray-core/v4/proxy/socks: server rejects request: 4
2021/03/22 10:17:31 [Info] [1863599087] github.com/v2fly/v2ray-core/v4/app/proxyman/inbound: connection ends > github.com/v2fly/v2ray-core/v4/proxy/socks: connection ends > github.com/v2fly/v2ray-core/v4/proxy/socks: failed to transport all TCP response > io: read/write on closed pipe
2021/03/22 10:17:32 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/app/proxyman/inbound: connection ends > github.com/v2fly/v2ray-core/v4/proxy/socks: connection ends > context canceled
2021/03/22 10:17:32 [Info] [2605955019] github.com/v2fly/v2ray-core/v4/app/proxyman/outbound: failed to process outbound traffic > github.com/v2fly/v2ray-core/v4/proxy/socks: connection ends > context canceled

0 replies

lhzw · 2021-04-17T14:40:15Z

lhzw
Apr 17, 2021

加上这个作为route的第一个规则，我的局域网代理可以正常工作了。之前只在Iptables那边设置了3.169不进v2ray。route里面有geoip:private，我心想着就是direct，应该没问题，但是就是有问题，看iptables日志，请求出去了，也回来了，但是客户端就是收不到返回的数据，让我抓狂的很。

  "routing": {
    "domainStrategy": "IPOnDemand",
    "rules": [
      {
        "type": "field", 
        "ip": [ 
          "192.168.3.169"
        ],
        "outboundTag": "direct"
      },

你的route里面，都没有使用proxy啊，只有1111 8888用了。最起码你要加这些：

      {
        "type": "field",
        "inboundTag": [
          "transparent"
        ],
        "domains": [
          "geosite:geolocation-!cn"
        ],
        "outboundTag": "proxy"
      },
      {
        "type": "field",
        "outboundTag": "proxy",      // default使用direct也行。
        "network": "udp,tcp"
      }

0 replies

lhzw · 2021-04-19T01:36:30Z

lhzw
Apr 19, 2021

额，我的是无意中升级了v2ray解决的，看来之前的版本是有bug。我是从4.29.0升级到4.37.3，然后使用局域网服务器就正常了。看来还是要经常升级才行啊！

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

透明代理用局域网SOCKS5作为服务器代理1080失败 #812

{{title}}

Replies: 4 comments

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

透明代理用局域网SOCKS5作为服务器代理1080失败 #812

htmlrust Mar 21, 2021

Replies: 4 comments

htmlrust Mar 21, 2021 Author

htmlrust Mar 22, 2021 Author

lhzw Apr 17, 2021

lhzw Apr 19, 2021

htmlrust
Mar 21, 2021

htmlrust
Mar 21, 2021
Author

htmlrust
Mar 22, 2021
Author

lhzw
Apr 17, 2021

lhzw
Apr 19, 2021