使用非xray内核的客户端出现failed to write A response payload错误

[cvpas]

xray使用reality协议，nginx前置开启443 SNI分流，发现使用sing-box客户端(android ios linux)和clashXmeta客户端时均会在xray error.log出现如下warning，基本上每次访问一个网页都会出现。而换做v2rayNG测试一段时间发现不会出现该日志，想请问这是客户端没有完整适配xray reality协议的原因吗？

[Warning] [1259039893] app/proxyman/inbound: connection ends > proxy/vless/inbound: connection ends > proxy/vless/inbound: failed to write A response payload > write unix /dev/shm/xray_reality.sock->@: write: broken pipe

查询xray代码，搜索到该错误来源于该定义：

Xray-core/proxy/vless/inbound/inbound.go

Line 420 in 53552d7

}

nginx部分配置：

user nginx;
worker_processes auto;
pid /var/run/nginx.pid;
error_log /var/log/nginx/error.log warn;

events {
    worker_connections 1024;
}

stream {
    map $ssl_preread_server_name $backend_name {
            media.mydomain.com     xray;
            default                 ssl;
    }
    upstream xray {
            server unix:/dev/shm/xray_reality.sock;
    }
    upstream ssl {
            server unix:/dev/shm/ssl.sock;
    }
    server {
            listen 443      reuseport;
            listen [::]:443 reuseport;
            ssl_preread       on;
            proxy_protocol    on;
            proxy_pass        $backend_name;
    }
}

http {
    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    types_hash_max_size 2048;
    server_tokens off;
    gzip                on;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;


    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" "$host" ';
    
    access_log  /var/log/nginx/access.log  main;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        ""      close;
    }

    map $proxy_protocol_addr $proxy_forwarded_elem {
        ~^[0-9.]+$        "for=$proxy_protocol_addr";
        ~^[0-9A-Fa-f:.]+$ "for=\"[$proxy_protocol_addr]\"";
        default           "for=unknown";
    }

    map $http_forwarded $proxy_add_forwarded {
        "~^(,[ \\t]*)*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*([ \\t]*,([ \\t]*([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?(;([!#$%&'*+.^_`|~0-9A-Za-z-]+=([!#$%&'*+.^_`|~0-9A-Za-z-]+|\"([\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*\"))?)*)?)*$" "$http_forwarded, $proxy_forwarded_elem";
        default "$proxy_forwarded_elem";
    }

    set_real_ip_from unix:;
    # 设置可信任的来源 IP 地址范围（Cloudflare）,可能需要定期更新：https://www.cloudflare.com/zh-cn/ips/
    set_real_ip_from 103.21.244.0/22;
    set_real_ip_from 103.22.200.0/22;
    set_real_ip_from 103.31.4.0/22;
    set_real_ip_from 104.16.0.0/13;
    set_real_ip_from 104.24.0.0/14;
    set_real_ip_from 108.162.192.0/18;
    set_real_ip_from 131.0.72.0/22;
    set_real_ip_from 141.101.64.0/18;
    set_real_ip_from 162.158.0.0/15;
    set_real_ip_from 172.64.0.0/13;
    set_real_ip_from 173.245.48.0/20;
    set_real_ip_from 188.114.96.0/20;
    set_real_ip_from 190.93.240.0/20;
    set_real_ip_from 197.234.240.0/22;
    set_real_ip_from 198.41.128.0/17;
    set_real_ip_from 2400:cb00::/32;
    set_real_ip_from 2606:4700::/32;
    set_real_ip_from 2803:f800::/32;
    set_real_ip_from 2405:b500::/32;
    set_real_ip_from 2405:8100::/32;
    set_real_ip_from 2a06:98c0::/29;
    set_real_ip_from 2c0f:f248::/32;

    real_ip_header CF-Connecting-IP;
    real_ip_recursive on;

    # SSL/TLS协议设置
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers   TLS13_AES_128_GCM_SHA256:TLS13_AES_256_GCM_SHA384:TLS13_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305;
    ssl_prefer_server_ciphers on;

    # OCSP stapling
    ssl_stapling        on;
    ssl_stapling_verify on;
    resolver 8.8.8.8 1.1.1.1 valid=60s;
    resolver_timeout           2s;

    server {
        listen unix:/dev/shm/ssl.sock ssl;
        ssl_reject_handshake       on;
    }

    server {
        listen unix:/dev/shm/fallback.sock ssl  proxy_protocol;
        http2 on;
        server_name media.mydomain.com;
        access_log /var/log/nginx/debug.log debug;

        error_log  /var/log/nginx/media_error.log warn;
        access_log  /var/log/nginx/media_access.log  main;
        ssl_certificate /ssl_file/media.mydomain.com.cer;
        ssl_certificate_key /ssl_file/media.mydomain.com.key;

        ssl_session_tickets off;

        add_header Strict-Transport-Security "max-age=31536000" always;

        location / {
            index index.html;
            root /var/www/html/aplayer;
        }
    }
}

xray中inbound配置：

  "inbounds": [
      {
          "listen": "/dev/shm/xray_reality.sock,0666",
          "protocol": "vless",
          "settings": {
              "clients": [

                  ...
              ],
              "decryption": "none"
          },
          "streamSettings": {
              "network": "raw",
              "rawSettings": {
                  "acceptProxyProtocol": true
              },
              "security": "reality",
              "realitySettings": {
                  "show": false,
                  "target": "/dev/shm/fallback.sock", 
                  "xver": 1,
                  "serverNames": [
                      "media.mydomain.com"
                  ],
                  "privateKey": "WJnfNblCxZskxxxxxwLnG-k7rcCJyluyspKBEQ", 
                  "minClientVer": "1.8.0", 
                  "maxTimeDiff": 60000, 
                  "shortIds": [ 
                    "b03b";
                  ]
              }
          },
          "sniffing": {
              "enabled": true,
              "destOverride": [
                  "http",
                  "tls",
                  "quic"
              ],
              "domainsExcluded": [
                "cftunnel.com",
                "h2.cftunnel.com"
              ],
              "routeOnly": false
          }
      }
  ]

singbox outbound配置：

    {
      "type": "vless",
      "tag": "dc1_vless",
      "server": "",
      "server_port": 443,
      "uuid": "",
      "flow": "xtls-rprx-vision",
      "packet_encoding": "xudp",
      "tls": {
        "enabled": true,
        "server_name": "media.mydoamin.com",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        },
        "reality": {
          "enabled": true,
          "public_key": "",
          "short_id": "b03b"
        }
      }
    }

clashxmeta outbound配置：

  - name: server1
  type: vless
  server: 
  port: 443
  uuid: 
  network: tcp
  tls: true
  udp: false
  flow: xtls-rprx-vision
  servername: media.mydoamin.com
  reality-opts:
    public-key: xxxx
    short-id: b03b
  client-fingerprint: chrome

error.log
access.log

[cvpas]

nginx的media.mydomain.com的access日志中出现大量如下日志：

unix: - - [13/Apr/2025:19:39:48 -0700] "PROXY TCP4 11xxxx28.254 1xxx5.175 32035 443" 400 150 "-" "-" "-" "" "ASN:-" "Country:-" 
unix: - - [13/Apr/2025:19:39:49 -0700] "PROXY TCP4 11xxx28.254 1xxxxx5.175 32037 443" 400 150 "-" "-" "-" "" "ASN:-" "Country:-" 
unix: - - [13/Apr/2025:19:39:50 -0700] "PROXY TCP4 11xxx28.254 1xxx5.175 32040 443" 400 150 "-" "-" "-" "" "ASN:-" "Country:-" 

[cvpas]

xraydebug日志：
error.log