使用xhttp作为反向代理的传输层协议时无法传输大文件

[Shiming-Liang]

概要

在使用vless+xhttp做反向代理的连接，从bridge拉取大文件时，portal端内存占用会不断上升，最终拉取失败。

具体配置与对应症状

portal与bridge的配置与文档一致，除了inbound和outbound使用vless+xhttp经过cloudflare连接。xhttp仅配置了path，mode为auto，日志显示选择的是packet-up。bridge端出口是一个用caddy暴露在端口8080的本地文件夹。portal是用caddy把子域名反代到任意门。

从这个文件夹中下载大文件（~1G）时，portal的cpu会跑满，内存占用会不断上升，直到下载被切断。

portal配置

{
  "api": {
    "services": [
      "HandlerService",
      "LoggerService",
      "StatsService"
    ],
    "tag": "api"
  },
  "dns": null,
  "fakeDns": null,
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 62789,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1"
      },
      "sniffing": null,
      "streamSettings": null,
      "tag": "api"
    },
    {
      "listen": "localhost",
      "port": portal的端口,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "flow": "",
            "id": "portal的id"
          }
        ],
        "decryption": "none",
        "fallbacks": []
      },
      "sniffing": {
        "destOverride": [
          "http",
          "tls",
          "quic",
          "fakedns"
        ],
        "domainsExcluded": [],
        "enabled": false,
        "metadataOnly": false,
        "routeOnly": false
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "none",
        "xhttpSettings": {
          "headers": {},
          "host": "",
          "mode": "auto",
          "noGRPCHeader": false,
          "noSSEHeader": false,
          "path": "/portal的路径/",
          "scMaxBufferedPosts": 100,
          "scMaxEachPostBytes": 1000000,
          "scMinPostsIntervalMs": 30,
          "scStreamUpServerSecs": "20-80",
          "xPaddingBytes": "100-1000",
          "xmux": {
            "cMaxLifetimeMs": 0,
            "cMaxReuseTimes": "64-128",
            "hKeepAlivePeriod": 45,
            "hMaxRequestTimes": "800-900",
            "maxConcurrency": 0,
            "maxConnections": "16-32"
          }
        }
      },
      "tag": "inbound-10824"
    },
    {
      "listen": "127.0.0.1",
      "port": 任意门的端口,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1",
        "network": "tcp,udp",
        "port": 8080
      },
      "sniffing": {},
      "streamSettings": {
        "network": "tcp",
        "security": "none",
        "tcpSettings": {
          "header": {
            "type": "none"
          }
        }
      },
      "tag": "inbound-10828"
    }
  ],
  "log": {
    "access": "/var/log/xray/access.log",
    "error": "/var/log/xray/error.log",
    "loglevel": "info"
  },
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "tag": "blocked"
    }
  ],
  "policy": {
    "levels": {
      "0": {
        "connIdle": 120,
        "downlinkOnly": 1,
        "handshake": 2,
        "uplinkOnly": 1
      }
    },
    "system": {
      "statsInboundDownlink": true,
      "statsInboundUplink": true,
      "statsOutboundDownlink": true,
      "statsOutboundUplink": true
    }
  },
  "reverse": {
    "portals": [
      {
        "domain": "反代的域名",
        "tag": "vpshome"
      }
    ]
  },
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api",
        "type": "field"
      },
      {
        "domain": [
          "www.gstatic.com"
        ],
        "outboundTag": "direct",
        "type": "field"
      },
      {
        "domain": [
          "geosite:category-ads-all",
          "geosite:cn",
          "geosite:geolocation-cn"
        ],
        "outboundTag": "blocked",
        "type": "field"
      },
      {
        "ip": [
          "geoip:cn"
        ],
        "outboundTag": "blocked",
        "type": "field"
      },
      {
        "outboundTag": "blocked",
        "protocol": [
          "bittorrent"
        ],
        "type": "field"
      },
      {
        "inboundTag": [
          "inbound-10828"
        ],
        "outboundTag": "vpshome",
        "type": "field"
      },
      {
        "inboundTag": [
          "inbound-10824"
        ],
        "outboundTag": "vpshome",
        "type": "field"
      }
    ]
  },
  "stats": {},
  "transport": null
}

bridge配置

{
  "log": {
    "loglevel": "info"
  },

  "reverse": {
    "bridges": [
      {
        "tag": "vpshome",
        "domain": "反代的域名"
      }
    ]
  },

  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "rules": [
      {
        "type": "field",
        "inboundTag": [
          "vpshome"
        ],
        "domain": [
          "full:反代的域名"
        ],
        "outboundTag": "vps"
      },
      {
        "type": "field",
        "inboundTag": [
          "vpshome"
        ],
        "outboundTag": "home"
      }
    ]
  },

  "outbounds": [
    {
      "tag": "home",
      "protocol": "freedom"
    },
    {
      "mux": {
        "concurrency": -1,
        "enabled": false
      },
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "address": "portal的域名",
            "port": 443,
            "users": [
              {
                "encryption": "none",
                "flow": "",
                "id": "portal的id",
                "level": 8
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "tls",
        "tlsSettings": {
          "allowInsecure": false,
          "show": false
        },
        "xhttpSettings": {
          "host": "",
          "mode": "auto",
          "path": "/portal的路径/"
        }
      },
      "tag": "vps"
    }
  ]
}

日志与测试

bridge端日志

Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574246 [Info] common/mux: received request for tcp:127.0.0.1:8080
Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574335 [Info] app/dispatcher: taking detour [home] for [tcp:127.0.0.1:8080]
Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574349 [Info] transport/internet/tcp: dialing TCP to tcp:127.0.0.1:8080
Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574483 from  accepted tcp:127.0.0.1:8080 [vpshome -> home]
Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574575 [Info] proxy/freedom: connection opened to tcp:127.0.0.1:8080, local endpoint 127.0.0.1:42684, remote endpoint 127.0.0.1:8080
Sep 01 14:22:45 debian12 xray[331865]: 2025/09/01 14:22:45.574587 [Info] proxy: CopyRawConn readv
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246418 [Info] common/mux: received request for tcp:127.0.0.1:8080
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246479 [Info] app/dispatcher: taking detour [home] for [tcp:127.0.0.1:8080]
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246488 [Info] transport/internet/tcp: dialing TCP to tcp:127.0.0.1:8080
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246493 from  accepted tcp:127.0.0.1:8080 [vpshome -> home]
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246653 [Info] proxy/freedom: connection opened to tcp:127.0.0.1:8080, local endpoint 127.0.0.1:42694, remote endpoint 127.0.0.1:8080
Sep 01 14:22:46 debian12 xray[331865]: 2025/09/01 14:22:46.246660 [Info] proxy: CopyRawConn readv
Sep 01 14:23:13 debian12 xray[331865]: 2025/09/01 14:23:13.087087 [Info] common/mux: session 7 ends. > io: read/write on closed pipe
Sep 01 14:23:16 debian12 xray[331865]: 2025/09/01 14:23:16.678845 [Info] common/mux: session 6 ends. > io: read/write on closed pipe
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516598 [Info] common/mux: received request for tcp:127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516677 [Info] app/dispatcher: taking detour [home] for [tcp:127.0.0.1:8080]
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516693 [Info] transport/internet/tcp: dialing TCP to tcp:127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516772 from  accepted tcp:127.0.0.1:8080 [vpshome -> home]
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516954 [Info] proxy/freedom: connection opened to tcp:127.0.0.1:8080, local endpoint 127.0.0.1:54166, remote endpoint 127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.516968 [Info] proxy: CopyRawConn readv
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842533 [Info] common/mux: received request for tcp:127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842551 [Info] app/dispatcher: taking detour [home] for [tcp:127.0.0.1:8080]
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842585 from  accepted tcp:127.0.0.1:8080 [vpshome -> home]
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842612 [Info] transport/internet/tcp: dialing TCP to tcp:127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842674 [Info] proxy/freedom: connection opened to tcp:127.0.0.1:8080, local endpoint 127.0.0.1:54170, remote endpoint 127.0.0.1:8080
Sep 01 14:23:24 debian12 xray[331865]: 2025/09/01 14:23:24.842678 [Info] proxy: CopyRawConn readv
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.804633 [Info] common/mux: session 9 ends. > io: read/write on closed pipe
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.804647 [Info] common/mux: session 8 ends. > io: read/write on closed pipe
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.804649 [Info] common/mux: session 1 ends. > io: read/write on closed pipe
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.833160 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.833416 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.844851 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.845175 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.855548 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.974915 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error
Sep 01 14:23:46 debian12 xray[331865]: 2025/09/01 14:23:46.977306 [Info] transport/internet/splithttp: failed to send upload > transport/internet/splithttp: bad status code:500 Internal Server Error

portal端日志

2025/09/01 12:36:40.487845 [Info] [4268158726] app/proxyman/inbound: connection ends > proxy/vless/inbound: connection ends > proxy/vless/inbound: failed to transfer request payload > transport/internet/splithttp: packet queue is too large
2025/09/01 12:36:40.487917 [Info] common/mux: failed to read metadata > io: read/write on closed pipe
2025/09/01 12:36:40.487941 [Info] common/mux: failed to fetch all input > io: read/write on closed pipe
2025/09/01 12:36:40.487982 [Info] [670894514] common/mux: failed to fetch all input > io: read/write on closed pipe
2025/09/01 12:36:40.489108 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:40.514533 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:40.551020 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:40.588865 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:40.616412 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:40.657917 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:41.489285 [Info] [670894514] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > context canceled
2025/09/01 12:36:41.880077 [Info] [989549647] proxy/vless/inbound: firstLen = 41
2025/09/01 12:36:41.880180 [Info] [989549647] proxy/vless/inbound: received request for tcp:反向代理的域名:0
2025/09/01 12:36:41.880433 [Info] [989549647] app/dispatcher: taking detour [vpshome] for [tcp:反向代理的域名:0]
2025/09/01 12:36:41.880447 [Info] common/mux: dispatching request to udp:reverse.internal.v2fly.org:0
2025/09/01 12:36:44.002518 [Info] [119036715] proxy/dokodemo: received request for 127.0.0.1:36596
2025/09/01 12:36:44.003763 [Info] [119036715] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/09/01 12:36:47.439955 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:48.696417 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:51.359913 [Info] transport/internet/splithttp: failed to upload (PushPayload) > transport/internet/splithttp: packet queue closed
2025/09/01 12:36:54.005687 [Info] [220723246] proxy/dokodemo: received request for 127.0.0.1:51842
2025/09/01 12:36:54.006945 [Info] [220723246] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/09/01 12:36:54.010916 [Info] [220723246] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport request > read tcp 127.0.0.1:62789->127.0.0.1:51842: read: connection reset by peer

其他配置不变，将xhttp换成ws，则portal的cpu和内存占用都不大，下载也会顺利完成。

...
      "streamSettings": {
        "network": "ws",
        "security": "none",
        "wsSettings": {
          "headers": {},
          "path": "/vpshome/"
        }
      },
...

麻烦各位大佬看看是哪里出问题了，谢谢！