XTLS only supports TLS and REALITY direct for now error on client when using VPS as proxy

[fasmat]

I'm receiving errors like this when I try to tunnel my notebooks traffic through XRay on my VPS:

client:

2024/02/05 21:20:18 [Info] [3294473568] proxy/http: request to Method [GET] Host [www.google.com] with URL [http://www.google.com/]
2024/02/05 21:20:18 [Info] [3294473568] app/dispatcher: taking detour [VPS] for [tcp:www.google.com:80]
2024/02/05 21:20:18 [Info] [3294473568] transport/internet/tcp: dialing TCP to tcp:{VPS}:443
2024/02/05 21:20:18 [Info] [3294473568] proxy/vless/outbound: tunneling request to tcp:www.google.com:80 via {VPS}:443
2024/02/05 21:20:18 [Warning] [3294473568] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: XTLS only supports TLS and REALITY directly for now.
2024/02/05 21:20:18 [Warning] [3294473568] proxy/http: failed to read response from www.google.com > io: read/write on closed pipe
2024/02/05 21:20:18 [Info] [3294473568] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > EOF

server:

2024/02/05 20:56:14 [Info] [3783186550] proxy/vless/inbound: firstLen = 0
2024/02/05 20:56:14 [Info] [3783186550] proxy/vless/inbound: fallback starts > proxy/vless/inbound: fallback directly
2024/02/05 20:56:14 [Info] [3783186550] proxy/vless/inbound: realName = 
2024/02/05 20:56:14 [Info] [3783186550] proxy/vless/inbound: realAlpn = 
2024/02/05 20:56:15 [Info] [3783186550] app/proxyman/inbound: connection ends > proxy/vless/inbound: fallback ends > context canceled

XRay configuration on the server (v1.8.7):

{
  "log": {
    "loglevel": "info",
    "access": "{log_dir}/access.log",
    "error": "{log_dir}/error.log"
  },
  "dns": {
    "servers": [
      "https+local://1.1.1.1/dns-query",
      "localhost"
    ]
  },
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "type": "field",
        "ip": [
          "geoip:private"
        ],
        "outboundTag": "block"
      },
      {
        "type": "field",
        "ip": ["geoip:cn"],
        "outboundTag": "block"
      },
      {
        "type": "field",
        "domain": [
          "geosite:category-ads-all"
        ],
        "outboundTag": "block"
      }
    ]
  },
  "inbounds": [
    {
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "{uuid}",
            "flow": "xtls-rprx-vision",
            "level": 0,
          }
        ],
        "decryption": "none",
        "fallbacks": [
          {
            "dest": 8080
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "security": "tls",
        "tlsSettings": {
          "alpn": "http/1.1",
          "certificates": [
            {
              "certificateFile": "{cert_dir}/xray.crt",
              "keyFile": "{cert_dir}/xray.key"
            }
          ]
        }
      }
    }
  ],
  "outbounds": [
    {
      "tag": "direct",
      "protocol": "freedom"
    },
    {
      "tag": "block",
      "protocol": "blackhole"
    }
  ]
}

client configuration (V2RayXS v1.5.9 with XRay 1.8.4):

{
  "routing" : {
    "name" : "all_to_main",
    "domainStrategy" : "AsIs",
    "rules" : [
      {
        "type" : "field",
        "outboundTag" : "test",
        "port" : "0-65535"
      }
    ]
  },
  "inbounds" : [
    {
      "listen" : "127.0.0.1",
      "protocol" : "socks",
      "settings" : {
        "ip" : "127.0.0.1",
        "auth" : "noauth",
        "udp" : false
      },
      "tag" : "socksinbound",
      "port" : 1081
    },
    {
      "listen" : "127.0.0.1",
      "protocol" : "http",
      "settings" : {
        "timeout" : 0
      },
      "tag" : "httpinbound",
      "port" : 8001
    }
  ],
  "dns" : {
    "servers" : [
      "localhost"
    ]
  },
  "log" : {
    "error" : "\/var\/folders\/4z\/mx354sss66ndtlb135lfjnmc0000gn\/T\/cenmrev.v2rayx.log\/error.log",
    "loglevel" : "info",
    "access" : "\/var\/folders\/4z\/mx354sss66ndtlb135lfjnmc0000gn\/T\/cenmrev.v2rayx.log\/access.log"
  },
  "outbounds" : [
    {
      "sendThrough" : "0.0.0.0",
      "mux" : {
        "enabled" : false,
        "concurrency" : 8
      },
      "protocol" : "vless",
      "settings" : {
        "vnext" : [
          {
            "address" : "{VPS}",
            "users" : [
              {
                "flow" : "xtls-rprx-vision",
                "id" : "{uuid}",
                "alterId" : 0,
                "security" : "none",
                "level" : 0,
                "encryption" : "none"
              }
            ],
            "port" : 443
          }
        ]
      },
      "tag" : "test",
      "streamSettings" : {
        "sockopt" : {

        },
        "tlsSettings" : {
          "allowInsecure" : false,
          "alpn" : [
            "http\/1.1"
          ],
          "serverName" : "server.cc",
          "allowInsecureCiphers" : false
        },
        "wsSettings" : {
          "path" : "",
          "headers" : {

          }
        },
        "tcpSettings" : {
          "header" : {
            "type" : "none"
          }
        },
        "kcpSettings" : {
          "header" : {
            "type" : "none"
          },
          "mtu" : 1350,
          "congestion" : false,
          "tti" : 20,
          "uplinkCapacity" : 5,
          "writeBufferSize" : 1,
          "readBufferSize" : 1,
          "seed" : "",
          "downlinkCapacity" : 20
        },
        "httpSettings" : {
          "path" : "",
          "host" : [
            ""
          ]
        },
        "security" : "none",
        "grpcSettings" : {
          "multiMode" : false
        },
        "quicSettings" : {
          "key" : "",
          "security" : "none",
          "header" : {
            "type" : "none"
          }
        },
        "realitySettings" : {

        },
        "network" : "tcp",
        "xtlsSettings" : {
          "serverName" : "server.cc",
          "alpn" : [
            "http\/1.1"
          ],
          "allowInsecure" : false
        }
      }
    }
  ]
}

any pointers to what could be the issue?

[FLAYhhh]

same question

[FLAYhhh]

I have solved the problem.
Do not use v2rayxs in your macos, i guess it does not support the config. Instead:

brew install xray
xray run -c conf.json

the conf.json can use some template like this: https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-Vision-TLS/config_client.json

[fasmat]

@FLAYhhh thanks for your help!

You were right that v2rayxs was the problem in my setup! 🙂

I took the config template from your comment and updated it with my domain and UUID. Then I deleted all settings in v2rayxs and imported that config. It complained that tag direct is reserved - so I had to remove it (in the v2rayxs outbound config settings). It now looks like its working as expected!