Vless链式转发/中转流量 配置请教

[plumn]

之前使用vmess+ws+tls时候，中转机器配置好outbound 的vmess发送到落地机，落地机接收vmess数据即可正常中转成功。
更新v2ray后，尝试配置vless+ws+tls，落地机数据在nginx 处理path处报错400 error，无法被落地机的vless正常处理，落地机v2ray无error和access记录。
配置如下，希望有大佬指点哪里出错了
中转机：

{
    "log": {
        "loglevel": "warning", 
        "access": "/var/log/v2ray/access.log", 
        "error": "/var/log/v2ray/error.log"
    }, 
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 12345, 
            "protocol": "vless", 
            "settings": {
                "clients": [
                    {
                        "email": "[email protected]", 
                        "id": "UUID", 
                        "level": 0
                    }
                ],
	"decryption": "none"
            }, 
            "sniffing": {
              "destOverride": [
              "http",
              "tls"
              ],
              "enabled": true
            },
            "streamSettings": {
                "network": "ws", 
                "security": "auto",
                "wsSettings": {
                    "headers": {},
                    "path": "/mypath"
                }
            }
        }
    ], 
    "outbounds": [
        {
            "protocol": "freedom", 
            "settings": { }, 
            "tag": "direct"
        }, 
        {
            "protocol": "vless", 
            "settings": {
                "vnext": [
                    {
                        "address": "v2.domain.com", 
                        "port": 443, 
                        "users": [
                            {
                                "email": "[email protected]", 
                                "alterId": 0,
                                "id": "UUID", 
                                "encryption":"none",
                                "level": 0,
                                "security": "auto"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "ws", 
                "security": "tls", 
                "tlsSettings": {
                    "allowInsecure": false,
                    "serverName": "v2.domain.com"
                }, 
                "wsSettings": {
                    "certificates": [
                        {
                            "certificateFile": "/usr/local/cert/domain.crt",
                            "keyFile": "/usr/local/cert/domain.key"
                        }
		],
	    "headers": {
	      "Host":"v2.domain.com"
		},
                    "path": "/mypath"
                }
            }, 
            "tag": "zz"
        }
    ], 
    "routing": {
        "strategy": "rules", 
        "settings": {
            "domainStrategy": "IPOnDemand", 
            "rules": [
                {
                    "type": "field", 
                    "outboundTag": "direct", 
                    "domain": [
                        "geosite:cn"
                    ]
                }, 
                {
                    "type": "field", 
                    "outboundTag": "direct", 
                    "ip": [
                        "geoip:cn", 
                        "geoip:private"
                    ]
                }, 
                {
                    "type": "field", 
                    "user": [
                        "[email protected]"
                    ], 
                    "outboundTag": "zz"
                }
            ]
        }
    }
}

落地机配置：

{
    "log": {
        "loglevel": "warnning",
        "access": "/var/log/v2ray/access.log",
        "error": "/var/log/v2ray/error.log"
    }
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 12345,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "email": "[email protected]",
                        "id": "UUID",
                        "level": 0
                    }
                ],
	"decryption": "none"
            },
            "sniffing": {
              "destOverride": [
              "http",
              "tls"
              ],
              "enabled": true
            },
            "streamSettings": {
                "network": "ws",
                "security": "tls",
                "wsSettings": {
                    "headers": {},
                    "path": "/mypath"
                }
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "settings": { }
        }
    ],
    "routing": {
        "settings": {
            "rules": [
                {
                }
            ]
        },
        "strategy": "rules"
    }
}

如果中转机不能直接将vless流量直接转发，那么应该配置成什么协议转发到落地机呢？
当然我知道中转机可以单独配置iptables或者gost纯转发，只是两台机器都有nginx+vless了，想直接用现成工具解决问题。
我理解出错可能是tls下的vless数据只是普通http数据，那这种数据应该怎样链式中转呢？感谢大佬们指点，谢谢！

[plumn]

好吧，大佬们对vless直接中转貌似都没兴趣，我还是自己用vmess outbound折中方案替代了

[wongclouds]

好吧，大佬们对vless直接中转貌似都没兴趣，我还是自己用vmess outbound折中方案替代了

你好，能否参考一下你的vmess+ws+tls中转机和落地机的配置？

[plumn]

中转机:

{
    "stats": { }, 
    "log": {
        "loglevel": "warning", 
        "access": "/var/log/v2ray/access.log", 
        "error": "/var/log/v2ray/error.log"
    }, 
    "api": {
        "tag": "api", 
        "services": [
            "StatsService"
        ]
    }, 
    "policy": {
        "levels": {
            "0": {
                "statsUserUplink": true, 
                "statsUserDownlink": true
            }
        }, 
        "system": {
            "statsInboundUplink": true, 
            "statsInboundDownlink": true
        }
    }, 
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 12345, 
            "protocol": "vless", 
            "settings": {
                "clients": [
                    {
                        "email": "[email protected]", 
                        "id": "UUID_1", 
                        "level": 0
                    }, 
                    {
                        "email": "[email protected]", 
                        "id": "UUID_2", 
                        "level": 0
                    }, 
                    {
                        "email": "[email protected]", 
                        "id": "UUID_3", 
                        "level": 0
                    }
                ],
	"decryption": "none"
            }, 
            "sniffing": {
              "destOverride": [
              "http",
              "tls"
              ],
              "enabled": true
            },
            "streamSettings": {
                "network": "ws", 
                "security": "auto",
                "wsSettings": {
                    "headers": {},
                    "path": "/yourpath"
                }
            }
        }, 
        {
            "listen": "127.0.0.1", 
            "port": 8080, 
            "protocol": "dokodemo-door", 
            "settings": {
                "address": "127.0.0.1"
            }, 
            "tag": "api"
        }
    ], 
    "outbounds": [
        {
            "protocol": "freedom", 
            "settings": { }, 
            "tag": "direct"
        }, 
        {
            "protocol": "vmess", 
            "settings": {
                "vnext": [
                    {
                        "address": "hkt.your.domain", 
                        "port": 23333, #落地机nat nginx对应的外部端口是23333，所以中转鸡outbound转发到落地机的监听端口是23333.
                        "users": [
                            {
                                "email": "[email protected]", 
                                "alterId": 0,
                                "id": "UUID_2", 
                                "level": 0,
                                "security": "auto"
                            }
                        ]
                    }
                ]
            },
            "streamSettings": {
                "network": "ws", 
                "security": "tls", 
                "tlsSettings": {
                    "allowInsecure": false,
                    "serverName": "hkt.your.domain"
                }, 
                "wsSettings": {
#                    "certificates": [ #我自己用的是同一个泛域名证书转发，不确定如果你的落地机使用不同的域名或者证书是否需要添加对应落地机的证书配置，放着供参考
#                        {
#                            "certificateFile": "/usr/local/cert/your_domain.crt",
#                            "keyFile": "/usr/local/cert/your_domain.key"
#                       }
#		],
	    "headers": {
	      "Host":"hkt.your.domain"
		},
                    "path": "/yourpath"
                }
            }, 
            "tag": "hkt"
        }, 
        {
            "protocol": "shadowsocks", 
            "settings": {
                "servers": [
                    {
                        "address": "2.2.2.2", 
                        "method": "aes-256-gcm", 
                        "password": "mypassword", 
                        "port": 1997, 
                        "ota": false
                    }
                ]
            }, 
            "tag": "ss"
        }
    ], 
    "routing": {
        "strategy": "rules", 
        "settings": {
            "domainStrategy": "IPOnDemand", 
            "rules": [
                {
                    "type": "field", 
                    "outboundTag": "direct", 
                    "domain": [
                        "geosite:cn"
                    ]
                }, 
                {
                    "type": "field", 
                    "outboundTag": "direct", 
                    "ip": [
                        "geoip:cn", 
                        "geoip:private"
                    ]
                }, 
                {
                    "type": "field", 
                    "user": [
                        "[email protected]"
                    ], 
                    "outboundTag": "hkt"
                }, 
                {
                    "type": "field", 
                    "domain": [
                        "xx.xx"
                    ], 
                    "outboundTag": "ss"
                }, 
                {
                    "inboundTag": [
                        "api"
                    ], 
                    "outboundTag": "api", 
                    "type": "field"
                }
            ]
        }
    }
}

落地机:

{
    "stats": { },
    "log": {
        "loglevel": "warning",
        "access": "/var/log/v2ray/access.log",
        "error": "/var/log/v2ray/error.log"
    },
    "api": {
        "tag": "api",
        "services": [
            "StatsService"
        ]
    },
    "policy": {
        "levels": {
            "0": {
                "statsUserUplink": true,
                "statsUserDownlink": true
            }
        },
        "system": {
            "statsInboundUplink": true,
            "statsInboundDownlink": true
        }
    },
    "inbounds": [
        {
            "port": 12345,
            "protocol": "vmess",
            "settings": {
                "clients": [
                    {
                        "email": "[email protected]",
                        "id": "UUID_1",
                        "level": 0,
                        "alterId": 0
                    },
                    {
                        "email": "[email protected]", #这里对接的是中转机UUID_2，从nat外部端口23333映射到内网443端口，nginx监听443后反代配置传到vps内部12345本地端口。
                        "id": "UUID_2",
                        "level": 0,
                        "alterId": 0
                    },
                    {
                        "email": "[email protected]",
                        "id": "UUID_3",
                        "level": 0,
                        "alterId": 0
                    }
                ]
            },
            "streamSettings": {
                "network": "ws",
                "wsSettings": {
                    "path": "/yourpath"
                }
            }
        },
        {
            "listen": "127.0.0.1",
            "port": 8080,
            "protocol": "dokodemo-door",
            "settings": {
                "address": "127.0.0.1"
            },
            "tag": "api"
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "settings": { }
        }
    ],
    "routing": {
        "settings": {
            "rules": [
                {
                    "inboundTag": [
                        "api"
                    ],
                    "outboundTag": "api",
                    "type": "field"
                }
            ]
        },
        "strategy": "rules"
    }
}
//使用/usr/bin/v2ray/v2ctl api --server=127.0.0.1:8080 StatsService.QueryStats 'pattern: "" reset: false'查询>流量数据
///usr/bin/v2ray/v2ctl api --server=127.0.0.1:8080 StatsService.GetStats 'name: "user>>>[email protected]>>>traffic>>>uplink" reset: false'查询指定用户流量

最传统的vmess无限套vmess网上很多示例，你也可以把上面中转机的inbound vless改成vmess即可

[yjdn99diy]

您好，我按照您的配置做啦中转机和落地机，能教我下客户端该怎么写吗？？？刚刚起步学习一点v2ray，想学习下，感谢

[yjdn99diy]

另外之前我的两台vps 都是做个ws+tls+cloudflare的，不知道 能不能行

[ghost]

挖个坟，参照配置文件 | Project X。首先，tlsSettings应该在inbound里，中转机里把证书写在outbound的wsSettings了；其次，使用nginx分流的情况下，tls应该是在nginx中配置，v2ray.inbound里不应该再配置tls，否则nginx拿不到明文；最后，落地机配置的inbounds前面缺个逗号