有大神遇到 - 油管视频无法播放

[kulongwangzhi85]

油管可以页面正常浏览，速度也不错。chrome使用SwitchyOmega插件可以播放。但使用透明代理时就卡住了，需要转圈圈很久才可以。
透明代理使用fakedns结合tproxy模式
版本：服务器和客户端都是最新预览版

xray客户端部分配置：
{
"fakedns": [
{
"ipPool": "193.168.0.0/16",
"poolSize": 65535
}
],
"dns":{
"servers": [
{
"address": "xx.xx.xx.xx",
"port": 53,
"skipFallback": true,
"domains": [
"geosite:apple-cn",
"geosite:google-cn",
"geosite:category-games@cn",
"geosite:tld-cn",
"geosite:icloud",
"geosite:cn"
],
"expectIPs": [
"geoip:cn"
]
},
{
"address": "1.1.1.1",
"domains": [
"domain:xxx.cc"
],
"skipFallback": true,
"port": 53
},
{
"address": "fakedns",
"domains": [
"geosite:google",
"domain:icloud-content.com",
"geosite:gfw",
"geosite:tld-!cn",
"geosite:geolocation-!cn"
]
},
{
"address": "58.22.96.66",
"skipFallback": true,
"port": 53
},
"8.8.8.8"
]
},
"inbounds": [
{
"address": "0.0.0.0",
"port": 7070,
"protocol": "socks",
"tag": "Socks-In",
"sniffing": {
"enabled": true,
"destOverride": [
"http",
"tls"
]
},
"settings": {
"auth": "noauth"
}
},
{
"tag": "dns-in",
"port": 53,
"protocol": "dokodemo-door",
"settings": {
"followRedirect": false,
"timeout": 3,
"address": "218.104.128.106",
"port": 53,
"network": "tcp,udp"
}
},
{
"tag": "transparent_udp",
"port": 7072,
"protocol": "dokodemo-door",
"settings": {
"network": "udp",
"timeout": 10,
"followRedirect": true
},
"sniffing": {
"enabled": true,
"metadataOnly": false,
"destOverride": [
"http", "tls", "quic", "fakedns"
]
},
"streamSettings": {
"sockopt": {
"domainStrategy": "UseIP",
"tproxy": "tproxy"
}
}
},
{
"tag": "transparent_tcp",
"port": 7072,
"protocol": "dokodemo-door",
"settings": {
"network": "tcp",
"timeout": 10,
"followRedirect": true
},
"sniffing": {
"enabled": true,
"metadataOnly": false,
"destOverride": [
"http", "tls", "quic", "fakedns"
]
},
"streamSettings": {
"sockopt": {
"domainStrategy": "UseIP",
"tproxy": "tproxy"
}
}
}
],
"outbounds": [
{
"protocol": "vless",
"tag": "grpc-proxy",
"settings": {
"vnext": [
{
"address": "xx.xxxx.cc",
"port": 443,
"users": [
{
"id": "UUID",
"encryption": "none"
}
]
}
]
},
"streamSettings": {
"network": "quic",
"quicSettings": {
"security": "none",
"key": "",
"header": {
"type": "none"
}
},
"sockopt": {
"domainStrategy": "UseIP",
"mark": 255
},
"security": "tls",
"tlsSettings": {
"serverName": "xx.xxx.cc",
"minVersion": "1.3",
"allowInsecure": true
}
}
},
{
"protocol": "dns",
"tag": "dns-out",
"address": "8.8.8.8",
"port": 53,
"proxySettings": {
"tag": "grpc-proxy",
"transportLayer": true
}
},
{
"protocol": "freedom",
"tag": "direct",
"settings": {
"sockopt": {
"domainStrategy": "UseIPv4",
"mark": 255
}
}
},
{
"protocol": "blackhole",
"settings": {},
"tag": "discard"
}
],
"routing": {
"strategy": "rules",
"domainStrategy": "AsIs",
"domainMatcher": "hybrid",
"settings": {
"rules": [
{
"type": "field",
"inboundTag": [
"dns-in"
],
"network": "udp,tcp",
"outboundTag": "dns-out"
},
{
"type": "field",
"ip": [
"193.168.0.0/16",
"fd22::/64"
],
"outboundTag": "discard"
},
{
"type": "field",
"outboundTag": "direct",
"ip": [
"192.168.2.0/24",
"192.168.3.0/24",
"192.168.8.0/24",
"fd11:66::/64",
"fd11:88::/64",
"fe80::/16",
"ff02::/16",
"geoip:private",
"geoip:cn"
],
"network": "udp,tcp"
},
{
"type": "field",
"domain": [
"geosite:category-ads-all"
],
"outboundTag": "discard"
},
{
"type": "field",
"inboundTag": [
"transparent_udp",
"Socks-In",
"transparent_tcp"
],
"network": "udp,tcp",
"outboundTag": "grpc-proxy"
}
]
}
}
}
nft防火墙配置
chain v2ray {
meta l4proto { tcp, udp } meta mark set 0x00000001 tproxy to :7072
}

chain prerouting {
	type filter hook prerouting priority mangle; policy accept;
	meta l4proto { tcp, udp } socket transparent 1 meta mark set 0x00000001 accept
	meta mark 0x000000ff counter packets 0 bytes 0 return
	ip daddr { vps-ip, 127.0.0.1, 192.168.0.0/20, 224.0.0.0-255.255.255.255 } return
	ip6 daddr { ::1, ::ffff:192.168.0.0/112 } return
	ip6 daddr != 2000::/3 return
	udp sport 6881 return
	ip daddr 193.168.0.0/16 goto v2ray
	ip6 daddr { ::ffff:193.168.0.0/112, fd22::/64 } goto v2ray
	meta l4proto { tcp, udp } ip daddr != @china_ip goto v2ray
	meta l4proto { tcp, udp } ip6 daddr != @china_ip6 goto v2ray
}

chain forward {
	type filter hook forward priority mangle; policy accept;
	tcp flags syn tcp option maxseg size set rt mtu
}

chain output {
	type route hook output priority filter; policy accept;
	oif "ppp0" udp sport 19999 return
	meta mark 0x000000ff return
	ip daddr { 1.0.0.1, 1.1.1.1, 8.8.4.4, 8.8.8.8 } meta mark set 0x00000001
}

[kulongwangzhi85]

日志：
2022/08/23 15:43:28 [Debug] transport/internet/udp: UDP original destination: udp:193.168.160.12:3478
2022/08/23 15:43:28 [Debug] [3265512590] proxy/dokodemo: processing connection from: 192.168.2.31:22000
2022/08/23 15:43:28 [Info] [3265512590] proxy/dokodemo: received request for 192.168.2.31:22000
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Warning] [3265512590] app/dispatcher: [fakedns client] failed to find domain! :193.168.160.12 for xUDP buffer at 0
2022/08/23 15:43:28 [Info] [3265512590] app/dispatcher: taking detour [discard] for [udp:193.168.160.12:3478]
2022/08/23 15:43:28 [Info] [3265512590] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe
2022/08/23 15:43:28 [Debug] transport/internet/udp: UDP original destination: udp:193.168.160.12:3478
2022/08/23 15:43:28 [Debug] [1284897811] proxy/dokodemo: processing connection from: 192.168.2.31:22000
2022/08/23 15:43:28 [Info] [1284897811] proxy/dokodemo: received request for 192.168.2.31:22000
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Warning] [1284897811] app/dispatcher: [fakedns client] failed to find domain! :193.168.160.12 for xUDP buffer at 0
2022/08/23 15:43:28 [Info] [1284897811] app/dispatcher: taking detour [discard] for [udp:193.168.160.12:3478]
2022/08/23 15:43:28 [Info] [1284897811] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe
2022/08/23 15:43:28 [Debug] transport/internet/udp: UDP original destination: udp:193.168.160.12:3478
2022/08/23 15:43:28 [Debug] [2964097491] proxy/dokodemo: processing connection from: 192.168.2.31:22000
2022/08/23 15:43:28 [Info] [2964097491] proxy/dokodemo: received request for 192.168.2.31:22000
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Info] app/dns/fakedns: A fake ip request to 193.168.160.12, however there is no matching domain name in fake DNS
2022/08/23 15:43:28 [Warning] [2964097491] app/dispatcher: [fakedns client] failed to find domain! :193.168.160.12 for xUDP buffer at 0
2022/08/23 15:43:28 [Info] [2964097491] app/dispatcher: taking detour [discard] for [udp:193.168.160.12:3478]
2022/08/23 15:43:28 [Info] [2964097491] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport response > io: read/write on closed pipe
2022/08/23 15:43:28 [Debug] transport/internet/udp: UDP original destination: udp:193.168.160.12:3478
2022/08/23 15:43:28 [Debug] [123196444] proxy/dokodemo: processing connection from: 192.168.2.31:22000
2022/08/23 15:43:28 [Info] [123196444] proxy/dokodemo: received request for 192.168.2.31:22000

不知道是不是fakedns的问题

[kulongwangzhi85]

这个问题能删除吗？问题解决了。
都是无知惹得祸
一条防火墙规则
meta l4proto { tcp, udp } socket transparent 1 meta mark set 0x00000001 accept
删除后就可以了