Chrome 系浏览器使用 REALITY 会报 ERR_TUNNEL_CONNECTION_FAILED

[laloe74]

浏览器具体报错为：

This site can't be reached

The webpage at https://www.dumbpipe.dev/ might be temporarily down or it may have moved permanently to a new web address.

ERR_TUNNEL_CONNECTION_FAILED

• 浏览器试过 Dia 和 Chrome，打开新网站 70% 的可能会触发这个报错，然后浏览器自动刷新就可以访问了。Safari浏览器就没问题。

• 代理工具用 Shadowrocket 和 Xray 裸核都试过，问题都会出现。

• Xray-core v25.7.26

• 系统是 macOS 15.5 (24F74)

config.yaml

# Xray-服务端
log:
  loglevel: warning # 内容从少到多: "none", "error", "warning", "info", "debug"
  access: /xxx/xray_log/access.log
  error: /xxx/xray_log/error.log
  timezone: Asia/Shanghai

dns:
  servers:
    - 8.8.8.8
    - 1.1.1.1

routing:
  domainStrategy: IPIfNonMatch
  rules:
    - type: field
      ip:
        - geoip:private
      outboundTag: block
    - type: field
      ip:
        - geoip:cn
      outboundTag: block
    - type: field
      domain:
        - geosite:category-ads-all
      outboundTag: block

# 服务端入站配置
inbounds:
  - port: 443
    protocol: vless
    settings:
      clients:
        - id: "xxx" # 必填，执行 `xray uuid` 生成，或 1-30 字节的字符串
          flow: xtls-rprx-vision # 选填，若有，客户端必须启用 XTLS
      decryption: none
    streamSettings:
      network: raw
      security: reality
      realitySettings:
        show: true # 选填，若为 true，输出调试信息
        target: xxx:443 # 必填，格式同 VLESS fallbacks 的 dest
        xver: 0 # 选填，格式同 VLESS fallbacks 的 xver
        serverNames:
        - xxx
        privateKey: "xxx" # 必填，执行 `xray x25519` 生成
        maxTimeDiff: 0 # 选填，允许的最大时间差，单位为毫秒
        shortIds:
          - xxx
          - xxx
        mldsa65Seed: "xxx" # 选填，执行 `xray mldsa65` 生成，对证书进行抗量子的额外签名

    sniffing:
      enabled: true
      destOverride:
        - http
        - tls
        - quic
      routeOnly: true

outbounds:
  - tag: proxy
    protocol: freedom
  - tag: block
    protocol: blackhole