How to use v2ray with VPN (inside a docker)?

[hellohawaii2]

what I want to do

I want to use V2ray to access a VPN service. I think in this way, we can also break through the limit of the number of devices by VPN vendor.

I install VPN and v2ray on a docker on VPS. So when the client accesses the port of V2ray, since v2ray is using VPN, the client can also get access to the VPN service.

v2ray_on_client --> [   v2ray_docker       VPN_docker   ] --> VPN vendor.
                    |<-    composed docker on VPS     ->|

my problem

When my client uses the IPV4 address of VPS to access v2ray, it does not work. But by using the IPV6 address of VPS, my client succeed to access the VPN service.

In contrast, if I set v2ray in docker without VPN, both IPV4 and IPV6 addresses work.

+------+-------+-----------+
|      | v2ray | v2ray+VPN |
+------+-------+-----------+
| ipv4 |  work | not work  |
+------+-------+-----------+
| ipv6 | work  | work      |
+------+-------+-----------+

my workflow

I am using ExpressVPN, this docker image is https://github.com/polkaned/dockerfiles/tree/master/expressvpn. The VPN is not free, you may need to pay for that VPN to reproduce my problem. However, the VPN support refunding in 30 days, so don't worry!

I tried to use your image together with the official v2ray image.

My docker-compose.yml

services:
  expressvpn:
    image: polkaned/expressvpn
    environment:
      - ACTIVATION_CODE={MYCODE, YOU NEED TO BUY ONE TO REPRODUCE MY PROBLEM}
        #- SERVER={% LOCATION/ALIAS/COUNTRY %}
        #- PREFERRED_PROTOCOL={% protocol %}
        #- LIGHTWAY_CIPHER={% lightway-cipher %}
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun
    stdin_open: true
    tty: true
    command: /bin/bash
    privileged: true
    restart: unless-stopped
    ports:
      - "43966:8388"
    # ports of other containers that use the vpn (to access them locally)
 
  v2ray:
    image: v2fly/v2fly-core
    volumes:
      - ./v2ray_config.json:/etc/v2fly/config.json  # refer to https://github.com/v2fly/docker 
    command:
      run -c /etc/v2fly/config.json
    network_mode: service:expressvpn
    depends_on:
      - expressvpn

And FYI, I create a v2ray_config.json in the same directory, using the simplest setting provided in the v2ray website

{
  "inbounds": [{
    "port": 10086, // Port of the server. Must be the same as above.
    "protocol": "vmess",
    "settings": {
      "clients": [{ "id": "b831381d-6324-4d53-ad4f-8cda48b30811" }]
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  }]
}

And my client's v2ray setting is also simple:

{
  "inbounds": [{
    "port": 1080,  // Port of socks5 proxy. Point your browser to use this port.
    "listen": "127.0.0.1",
    "protocol": "socks",
    "settings": {
      "udp": true
    }
  }],
  "outbounds": [{
    "protocol": "vmess",
    "settings": {
      "vnext": [{
        "address": "server", // Address of your V2Ray server. May be IP or domain address.
        "port": 43966,  // Port of your V2Ray server.
        "users": [{ "id": "b831381d-6324-4d53-ad4f-8cda48b30811" }]
      }]
    }
  },{
    "protocol": "freedom",
    "tag": "direct",
    "settings": {}
  }],
  "routing": {
    "domainStrategy": "IPOnDemand",
    "rules": [{
      "type": "field",
      "ip": ["geoip:private"],
      "outboundTag": "direct"
    }]
  }
}

log file

In the docker in VPS, I get the the following error.txt. To be honest, this version is a setting that using websocket, and the actual port is 43869 which is slightly different from the setting I provided above. I think this difference may be not important.

2023/02/14 10:12:01 [Info] app/dns: DNS: created Local DOH client for https://dns.google/dns-query
2023/02/14 10:12:01 [Info] app/dns: DNS: created UDP client initialized for 8.8.8.8:53
2023/02/14 10:12:01 [Info] app/dns: DNS: created UDP client initialized for 1.1.1.1:53
2023/02/14 10:12:01 [Info] app/dns: DNS: created localhost client
2023/02/14 10:12:01 [Info] transport/internet/websocket: listening TCP(for WS) on 0.0.0.0:43969
2023/02/14 10:12:01 [Warning] V2Ray 5.2.1 started
2023/02/14 10:12:01 [Info] [2673995819] proxy/vmess/inbound: received request for tcp:beacons5.gvt3.com:443
2023/02/14 10:12:01 [Info] [2673995819] app/dispatcher: sniffed domain: beacons5.gvt3.com for tcp:beacons5.gvt3.com:443
2023/02/14 10:12:01 [Info] app/dns: DOHL//dns.google querying: beacons5.gvt3.com.
2023/02/14 10:12:01 [Info] [3699969993] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:01 [Info] [3699969993] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:01 [Info] app/dns: DOHL//dns.google querying: play.google.com.
2023/02/14 10:12:01 [Info] [1833264911] proxy/vmess/inbound: received request for tcp:www.google.com:443
2023/02/14 10:12:01 [Info] [1833264911] app/dispatcher: sniffed domain: www.google.com for tcp:www.google.com:443
2023/02/14 10:12:01 [Info] app/dns: DOHL//dns.google querying: www.google.com.
2023/02/14 10:12:01 [Info] [2273962140] proxy/vmess/inbound: received request for tcp:www.google.com:443
2023/02/14 10:12:01 [Info] [2273962140] app/dispatcher: sniffed domain: www.google.com for tcp:www.google.com:443
2023/02/14 10:12:01 [Info] app/dns: DOHL//dns.google querying: www.google.com.
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: play.google.com. TypeA -> [142.251.41.14] 269.897014ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: www.google.com. TypeA -> [142.250.81.228] 146.911504ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: play.google.com. TypeAAAA -> [[2607:f8b0:4006:824::200e]] 269.94522ms
2023/02/14 10:12:02 [Warning] [3699969993] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [3699969993] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [3699969993] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [3699969993] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: beacons5.gvt3.com. TypeA -> [142.250.64.99] 315.493026ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: beacons5.gvt3.com. TypeAAAA -> [[2607:f8b0:4006:807::2003]] 315.978332ms
2023/02/14 10:12:02 [Warning] [2673995819] app/dispatcher: default route for tcp:beacons5.gvt3.com:443
2023/02/14 10:12:02 [Info] [2673995819] proxy/freedom: opening connection to tcp:beacons5.gvt3.com:443
2023/02/14 10:12:02 [Info] [2673995819] proxy/freedom: dialing to tcp:142.250.64.99:443
2023/02/14 10:12:02 [Info] [2673995819] transport/internet/tcp: dialing TCP to tcp:142.250.64.99:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: www.google.com. TypeA -> [142.250.81.228] 191.916554ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: www.google.com. TypeAAAA -> [[2607:f8b0:4006:817::2004]] 191.928371ms
2023/02/14 10:12:02 [Warning] [2273962140] app/dispatcher: default route for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [2273962140] proxy/freedom: opening connection to tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [2273962140] proxy/freedom: dialing to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [2273962140] transport/internet/tcp: dialing TCP to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: www.google.com. TypeAAAA -> [[2607:f8b0:4006:817::2004]] 149.226142ms
2023/02/14 10:12:02 [Warning] [1833264911] app/dispatcher: default route for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [1833264911] proxy/freedom: opening connection to tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [1833264911] proxy/freedom: dialing to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [1833264911] transport/internet/tcp: dialing TCP to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [1953902384] proxy/vmess/inbound: received request for tcp:hub.docker.com:443
2023/02/14 10:12:02 [Info] [1953902384] app/dispatcher: sniffed domain: hub.docker.com for tcp:hub.docker.com:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: hub.docker.com.
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: hub.docker.com. TypeAAAA -> [[2600:1f18:2148:bc00:a66d:e75:e647:fefc] [2600:1f18:2148:bc01:6fba:f146:1387:f27d] [2600:1f18:2148:bc02:34e0:261c:e99e:cf7d]] 9.088834ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: hub.docker.com. TypeA -> [44.196.175.70 54.165.156.197 52.3.144.121] 9.693433ms
2023/02/14 10:12:02 [Warning] [1953902384] app/dispatcher: default route for tcp:hub.docker.com:443
2023/02/14 10:12:02 [Info] [1953902384] proxy/freedom: opening connection to tcp:hub.docker.com:443
2023/02/14 10:12:02 [Info] [1953902384] proxy/freedom: dialing to tcp:54.165.156.197:443
2023/02/14 10:12:02 [Info] [1953902384] transport/internet/tcp: dialing TCP to tcp:54.165.156.197:443
2023/02/14 10:12:02 [Info] [212013134] proxy/vmess/inbound: received request for tcp:v10.events.data.microsoft.com:443
2023/02/14 10:12:02 [Info] [1633886274] proxy/vmess/inbound: received request for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [212013134] app/dispatcher: sniffed domain: v10.events.data.microsoft.com for tcp:v10.events.data.microsoft.com:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: v10.events.data.microsoft.com.
2023/02/14 10:12:02 [Info] [1633886274] app/dispatcher: sniffed domain: www.google.com for tcp:www.google.com:443
2023/02/14 10:12:02 [Warning] [1633886274] app/dispatcher: default route for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [1633886274] proxy/freedom: opening connection to tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [1633886274] proxy/freedom: dialing to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [1633886274] transport/internet/tcp: dialing TCP to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [2418629037] proxy/vmess/inbound: received request for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [2418629037] app/dispatcher: sniffed domain: www.google.com for tcp:www.google.com:443
2023/02/14 10:12:02 [Warning] [2418629037] app/dispatcher: default route for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [2418629037] proxy/freedom: opening connection to tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [2418629037] proxy/freedom: dialing to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [2418629037] transport/internet/tcp: dialing TCP to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [3810505151] proxy/vmess/inbound: received request for tcp:gist.github.com:443
2023/02/14 10:12:02 [Info] [3810505151] app/dispatcher: sniffed domain: gist.github.com for tcp:gist.github.com:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: gist.github.com.
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: v10.events.data.microsoft.com. TypeAAAA -> [] 6.579496ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: v10.events.data.microsoft.com. TypeA -> [13.69.109.130] 6.597058ms
2023/02/14 10:12:02 [Warning] [212013134] app/dispatcher: default route for tcp:v10.events.data.microsoft.com:443
2023/02/14 10:12:02 [Info] [212013134] proxy/freedom: opening connection to tcp:v10.events.data.microsoft.com:443
2023/02/14 10:12:02 [Info] [212013134] proxy/freedom: dialing to tcp:13.69.109.130:443
2023/02/14 10:12:02 [Info] [212013134] transport/internet/tcp: dialing TCP to tcp:13.69.109.130:443
2023/02/14 10:12:02 [Info] [2644638537] proxy/vmess/inbound: received request for tcp:github.com:443
2023/02/14 10:12:02 [Info] [2644638537] app/dispatcher: sniffed domain: github.com for tcp:github.com:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: github.com.
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: github.com. TypeAAAA -> [] 2.54872ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: gist.github.com. TypeAAAA -> [] 8.175092ms
2023/02/14 10:12:02 [Info] [3418391497] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [3418391497] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:02 [Warning] [3418391497] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [3418391497] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [3418391497] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [3418391497] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: gist.github.com. TypeA -> [140.82.113.3] 12.271269ms
2023/02/14 10:12:02 [Warning] [3810505151] app/dispatcher: default route for tcp:gist.github.com:443
2023/02/14 10:12:02 [Info] [3810505151] proxy/freedom: opening connection to tcp:gist.github.com:443
2023/02/14 10:12:02 [Info] [3810505151] proxy/freedom: dialing to tcp:140.82.113.3:443
2023/02/14 10:12:02 [Info] [3810505151] transport/internet/tcp: dialing TCP to tcp:140.82.113.3:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: github.com. TypeA -> [140.82.114.3] 10.081051ms
2023/02/14 10:12:02 [Warning] [2644638537] app/dispatcher: default route for tcp:github.com:443
2023/02/14 10:12:02 [Info] [2644638537] proxy/freedom: opening connection to tcp:github.com:443
2023/02/14 10:12:02 [Info] [2644638537] proxy/freedom: dialing to tcp:140.82.114.3:443
2023/02/14 10:12:02 [Info] [2644638537] transport/internet/tcp: dialing TCP to tcp:140.82.114.3:443
2023/02/14 10:12:02 [Info] [950325900] proxy/vmess/inbound: received request for tcp:d.docs.live.net:443
2023/02/14 10:12:02 [Info] [950325900] app/dispatcher: sniffed domain: d.docs.live.net for tcp:d.docs.live.net:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: d.docs.live.net.
2023/02/14 10:12:02 [Info] [2282733515] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2282733515] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:02 [Warning] [2282733515] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2282733515] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2282733515] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [2282733515] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [4064922822] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [4064922822] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:02 [Warning] [4064922822] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [4064922822] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [4064922822] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [4064922822] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [206527083] proxy/vmess/inbound: received request for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [206527083] app/dispatcher: sniffed domain: www.google.com for tcp:www.google.com:443
2023/02/14 10:12:02 [Warning] [206527083] app/dispatcher: default route for tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [206527083] proxy/freedom: opening connection to tcp:www.google.com:443
2023/02/14 10:12:02 [Info] [206527083] proxy/freedom: dialing to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [206527083] transport/internet/tcp: dialing TCP to tcp:142.250.81.228:443
2023/02/14 10:12:02 [Info] [3235256576] proxy/vmess/inbound: received request for tcp:tbmsg.baidu.com:443
2023/02/14 10:12:02 [Info] [3235256576] app/dispatcher: sniffed domain: tbmsg.baidu.com for tcp:tbmsg.baidu.com:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google querying: tbmsg.baidu.com.
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: tbmsg.baidu.com. TypeAAAA -> [] 3.248877ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: tbmsg.baidu.com. TypeA -> [220.181.33.250 111.206.209.4] 3.310607ms
2023/02/14 10:12:02 [Warning] [3235256576] app/dispatcher: default route for tcp:tbmsg.baidu.com:443
2023/02/14 10:12:02 [Info] [3235256576] proxy/freedom: opening connection to tcp:tbmsg.baidu.com:443
2023/02/14 10:12:02 [Info] [3235256576] proxy/freedom: dialing to tcp:220.181.33.250:443
2023/02/14 10:12:02 [Info] [3235256576] transport/internet/tcp: dialing TCP to tcp:220.181.33.250:443
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: d.docs.live.net. TypeA -> [13.107.42.12] 55.096382ms
2023/02/14 10:12:02 [Info] app/dns: DOHL//dns.google got answer: d.docs.live.net. TypeAAAA -> [] 168.347632ms
2023/02/14 10:12:02 [Warning] [950325900] app/dispatcher: default route for tcp:d.docs.live.net:443
2023/02/14 10:12:02 [Info] [950325900] proxy/freedom: opening connection to tcp:d.docs.live.net:443
2023/02/14 10:12:02 [Info] [950325900] proxy/freedom: dialing to tcp:13.107.42.12:443
2023/02/14 10:12:02 [Info] [950325900] transport/internet/tcp: dialing TCP to tcp:13.107.42.12:443
2023/02/14 10:12:02 [Info] [1636259927] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [1636259927] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:02 [Warning] [1636259927] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [1636259927] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [1636259927] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [1636259927] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [2369278513] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2369278513] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:02 [Warning] [2369278513] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2369278513] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:02 [Info] [2369278513] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:02 [Info] [2369278513] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:03 [Info] [3336361274] proxy/vmess/inbound: received request for tcp:checkappexec.microsoft.com:443
2023/02/14 10:12:03 [Info] [3336361274] app/dispatcher: sniffed domain: checkappexec.microsoft.com for tcp:checkappexec.microsoft.com:443
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google querying: checkappexec.microsoft.com.
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: checkappexec.microsoft.com. TypeA -> [20.81.51.95] 11.661623ms
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: checkappexec.microsoft.com. TypeAAAA -> [] 16.372628ms
2023/02/14 10:12:03 [Warning] [3336361274] app/dispatcher: default route for tcp:checkappexec.microsoft.com:443
2023/02/14 10:12:03 [Info] [3336361274] proxy/freedom: opening connection to tcp:checkappexec.microsoft.com:443
2023/02/14 10:12:03 [Info] [3336361274] proxy/freedom: dialing to tcp:20.81.51.95:443
2023/02/14 10:12:03 [Info] [3336361274] transport/internet/tcp: dialing TCP to tcp:20.81.51.95:443
2023/02/14 10:12:03 [Info] [1043254767] proxy/vmess/inbound: received request for tcp:play.google.com:443
2023/02/14 10:12:03 [Info] [1043254767] app/dispatcher: sniffed domain: play.google.com for tcp:play.google.com:443
2023/02/14 10:12:03 [Warning] [1043254767] app/dispatcher: default route for tcp:play.google.com:443
2023/02/14 10:12:03 [Info] [1043254767] proxy/freedom: opening connection to tcp:play.google.com:443
2023/02/14 10:12:03 [Info] [1043254767] proxy/freedom: dialing to tcp:142.251.41.14:443
2023/02/14 10:12:03 [Info] [1043254767] transport/internet/tcp: dialing TCP to tcp:142.251.41.14:443
2023/02/14 10:12:03 [Info] [2278783851] proxy/vmess/inbound: received request for tcp:clients2.google.com:443
2023/02/14 10:12:03 [Info] [2278783851] app/dispatcher: sniffed domain: clients2.google.com for tcp:clients2.google.com:443
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google querying: clients2.google.com.
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: clients2.google.com. TypeAAAA -> [[2607:f8b0:4006:821::200e]] 10.689864ms
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: clients2.google.com. TypeA -> [142.251.40.174] 11.533529ms
2023/02/14 10:12:03 [Warning] [2278783851] app/dispatcher: default route for tcp:clients2.google.com:443
2023/02/14 10:12:03 [Info] [2278783851] proxy/freedom: opening connection to tcp:clients2.google.com:443
2023/02/14 10:12:03 [Info] [2278783851] proxy/freedom: dialing to tcp:142.251.40.174:443
2023/02/14 10:12:03 [Info] [2278783851] transport/internet/tcp: dialing TCP to tcp:142.251.40.174:443
2023/02/14 10:12:03 [Info] [1833264911] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:03 [Info] [1833264911] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:12:03 [Info] [3674106840] proxy/vmess/inbound: received request for tcp:capi.grammarly.com:443
2023/02/14 10:12:03 [Info] [3674106840] app/dispatcher: sniffed domain: capi.grammarly.com for tcp:capi.grammarly.com:443
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google querying: capi.grammarly.com.
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: capi.grammarly.com. TypeAAAA -> [] 2.998546ms
2023/02/14 10:12:03 [Info] app/dns: DOHL//dns.google got answer: capi.grammarly.com. TypeA -> [23.21.96.112 54.234.237.111 52.203.165.184 100.24.186.103 52.4.167.105 18.211.115.196 34.230.124.139 3.213.57.253] 19.169904ms
2023/02/14 10:12:03 [Warning] [3674106840] app/dispatcher: default route for tcp:capi.grammarly.com:443
2023/02/14 10:12:03 [Info] [3674106840] proxy/freedom: opening connection to tcp:capi.grammarly.com:443
2023/02/14 10:12:03 [Info] [3674106840] proxy/freedom: dialing to tcp:100.24.186.103:443
2023/02/14 10:12:03 [Info] [3674106840] transport/internet/tcp: dialing TCP to tcp:100.24.186.103:443
2023/02/14 10:12:03 [Info] [1633886274] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:03 [Info] [1633886274] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:03 [Info] [2418629037] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:03 [Info] [2418629037] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:03 [Info] [206527083] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:03 [Info] [206527083] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:03 [Info] [1636259927] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:03 [Info] [1636259927] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:04 [Info] [2369278513] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:04 [Info] [2369278513] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:04 [Info] [2282733515] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:04 [Info] [1043254767] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:04 [Info] [1043254767] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:12:04 [Info] [4064922822] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > context canceled
2023/02/14 10:12:04 [Info] [4064922822] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:12:04 [Info] [2282733515] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:14:33 [Info] [2673995819] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:34700->142.250.64.99:443: read: connection timed out
2023/02/14 10:14:33 [Info] [2673995819] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > proxy/vmess/inbound: failed to transfer request > read tcp 172.18.0.2:43969->202.189.3.253:23847: read: connection timed out
2023/02/14 10:14:33 [Info] [2673995819] app/proxyman/inbound: failed to close connection > transport/internet/websocket: failed to close connection > transport/internet/websocket: write tcp 172.18.0.2:43969->202.189.3.253:23847: write: broken pipe
2023/02/14 10:14:33 [Info] [3699969993] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:44032->142.251.41.14:443: read: connection timed out
2023/02/14 10:14:33 [Info] [2273962140] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:39296->142.250.81.228:443: read: connection timed out
2023/02/14 10:14:33 [Info] [3699969993] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:33 [Info] [2273962140] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:34 [Info] [1953902384] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:59056->54.165.156.197:443: read: connection timed out
2023/02/14 10:14:34 [Info] [3418391497] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:44048->142.251.41.14:443: read: connection timed out
2023/02/14 10:14:34 [Info] [2644638537] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:53920->140.82.114.3:443: read: connection timed out
2023/02/14 10:14:34 [Info] [1953902384] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:34 [Info] [3418391497] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:34 [Info] [2644638537] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:34 [Info] [212013134] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:55748->13.69.109.130:443: read: connection timed out
2023/02/14 10:14:34 [Info] [212013134] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe
2023/02/14 10:14:34 [Info] [3235256576] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > proxy/vmess/inbound: failed to transfer request > read tcp 172.18.0.2:43969->202.189.3.253:23865: read: connection timed out
2023/02/14 10:14:34 [Info] [3235256576] app/proxyman/inbound: failed to close connection > transport/internet/websocket: failed to close connection > transport/internet/websocket: write tcp 172.18.0.2:43969->202.189.3.253:23865: write: broken pipe
2023/02/14 10:14:34 [Info] [3235256576] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > context canceled
2023/02/14 10:14:34 [Info] [3336361274] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:55426->20.81.51.95:443: read: connection timed out
2023/02/14 10:14:34 [Info] [3810505151] app/proxyman/outbound: failed to process outbound traffic > proxy/freedom: connection ends > proxy/freedom: failed to process response > read tcp 172.18.0.2:49884->140.82.113.3:443: read: connection timed out
2023/02/14 10:14:34 [Info] [3810505151] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > proxy/vmess/inbound: failed to transfer request > read tcp 172.18.0.2:43969->202.189.3.253:41354: read: connection timed out
2023/02/14 10:14:34 [Info] [3810505151] app/proxyman/inbound: failed to close connection > transport/internet/websocket: failed to close connection > transport/internet/websocket: write tcp 172.18.0.2:43969->202.189.3.253:41354: write: broken pipe
2023/02/14 10:14:34 [Info] [3336361274] app/proxyman/inbound: connection ends > proxy/vmess/inbound: connection ends > io: read/write on closed pipe

[mydogshitgold]

What is your server's routing table? Can you ssh into the server when VPN is up?

[hellohawaii2]

Since I am running VPN in a docker, I can ssh to the server.
The routing table outside the docker is

default via 167.71.16.1 dev eth0 proto static
10.10.0.0/16 dev eth0 proto kernel scope link src 10.10.0.5
10.116.0.0/20 dev eth1 proto kernel scope link src 10.116.0.2
167.71.16.0/20 dev eth0 proto kernel scope link src 167.71.26.106
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-ca14ee6bef96 proto kernel scope link src 172.18.0.1 linkdown
172.19.0.0/16 dev br-8313ee4ae2f4 proto kernel scope link src 172.19.0.1 linkdown

I am not sure how to get the routing table inside the docker. I refer to this link on StackOverflow. I run docker exec -it docker_name /bin/sh, and then run ip route. The results of the container "v2ray" and the container "ExpressVPN" are identical:

0.0.0.0/1 via 100.64.100.5 dev tun0
default via 172.18.0.1 dev eth0
10.0.0.0/8 via 172.18.0.1 dev eth0
45.38.140.157 via 172.18.0.1 dev eth0
100.64.100.1 via 100.64.100.5 dev tun0
100.64.100.5 dev tun0 proto kernel scope link src 100.64.100.6
128.0.0.0/1 via 100.64.100.5 dev tun0
172.16.0.0/12 via 172.18.0.1 dev eth0
172.18.0.0/16 dev eth0 proto kernel scope link src 172.18.0.2
192.168.0.0/16 via 172.18.0.1 dev eth0

[hellohawaii2]

I finally find a workaround. However, I still wonder why my original method does not work.

Idea.

This is quite similar to this link, I install v2ray and VPN in docker as it did. However, that link used Dante in the docker to listen to a port, but I want to use v2ray instead.

Compared with my original method, this idea is like this:

v2ray_on_client --> v2ray_on_VPS --> [   v2ray_docker       VPN_docker   ] --> VPN vendor.
                                     |<-    composed docker on VPS     ->|

My setting:

v2ray_on_vps:

{
  "log": {
    "access": "/var/log/v2ray/access.log",
    "error": "/var/log/v2ray/error.log",
    "loglevel": "info"
  },
  "inbounds": [{
    "port": 33969, // 服务器监听端口，必须和上面的一样
    "protocol": "vmess",
    "settings": {
      "clients": [{ "id": "6abb8c0c-bd6f-4b9a-bc9d-836b06e5778a" }]
    }
  }],
  "outbounds":[{
    "protocol": "vmess",
    "settings": {
      "vnext": [
         {"address": "::1",
          "port": 43966,
          "users": [{
            "id": "6abb8c0c-bd6f-4b9a-bc9d-836b06e5778a",
            "alterId": 0
           }]
         }]
    },
    "tag": "express"
  }]
}

In fact I use add another inbound with different port, and routing that inbound to freedom. So the client can use the VPS withou VPN as a proxy by just changing the port number. I also add a websocket. However, I just provide this simplified version here.

My docker-compose.yml

services:
  expressvpn:
    image: polkaned/expressvpn
    container_name: expressvpn
    environment:
      - ACTIVATION_CODE=USE_CODE_TO_REPLACE_THIS
    cap_add:
      - NET_ADMIN
      - NET_RAW
    devices:
      - /dev/net/tun
    stdin_open: true
    tty: true
    command: /bin/bash
    privileged: true
    restart: unless-stopped
    ports:
      - "43966:43969"

  v2ray:
    image: v2fly/v2fly-core
    volumes:
      - ./v2ray_config.json:/etc/v2fly/config.json  # refer to https://github.com/v2fly/docker
      - ./log/:/var/log/v2ray/
    devices:
      - /dev/net/tun
    command:
      run -c /etc/v2fly/config.json
    privileged: true
    network_mode: container:expressvpn
    depends_on:
      - expressvpn

And the v2ray_config.json used for v2ray in the docker:

{
  "log": {
    "access": "/var/log/v2ray/access.log",
    "error": "/var/log/v2ray/error.log",
    "loglevel": "info"
  },
  "inbounds": [{
    "port": 43969, // 服务器监听端口，必须和上面的一样
    "protocol": "vmess",
    "settings": {
      "clients": [{ "id": "6abb8c0c-bd6f-4b9a-bc9d-836b06e5778a" }]
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  }]
}

PS: about using shadowsocks with VPN inside the docker

I also tried the shadowsocks setting:

services:
  expressvpn:
    container_name: expressvpn  # 这个可以不加
    image: polkaned/expressvpn
    environment:
      - ACTIVATION_CODE=MY__CODE
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun
    stdin_open: true
    tty: true
    command: /bin/bash
    privileged: true
    restart: unless-stopped
    ports:
      - "43966:8388"
    # ports of other containers that use the vpn (to access them locally)
 
  shadowsocks:
    image: shadowsocks/shadowsocks-libev
    environment:
            #- SERVER_ADDR=0.0.0.0
      - SERVER_ADDR_IPV6=::0
      - METHOD=chacha20-ietf-poly1305
      - PASSWORD=pas$word
    network_mode: service:expressvpn
    depends_on:
      - expressvpn

I tested this setting on a VPS of which the ipv4 address is banned by the GFW. It works fine under ipv6. I did not conduct further experiments since I do not have enough VPS with a useful ipv4 address.