Xray-core nginx反代vmess websocket时 nginx出现错误 32: Broken pipe 和 104: Connection reset by peer

/var/log/nginx/error.log

[error] 2491#2491: *686 send() failed (32: Broken pipe) while proxying upgraded connection, client: 3.3.3.3, server: domain.com, request: "GET /path HTTP/1.1", upstream: "http://unix:/dev/shm/vws.sock:/path", host: "domain.com" [error] 4112#4112: *345 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: 3.3.3.3, server: domain.com, request: "GET /path HTTP/1.1", upstream: "http://unix:/dev/shm/vws.sock:/path", host: "domain.com

/etc/nginx/nginx.conf

user  root;
worker_processes  auto;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    keepalive_timeout  65;

    #gzip  on;

    include /etc/nginx/conf.d/*.conf;
}

/etc/nginx/conf.d/vmess.conf

 server {
        listen 80;
        #listen [::]:80;
        server_name domain.com;

        location = /path { 
            if ($http_upgrade != "websocket") { 
                return 404;
            }
            proxy_redirect off;
            proxy_pass http://unix:/dev/shm/vws.sock;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location = / {
	    return 403;
        }
}

xray服务端

{
  "listen":"/dev/shm/vws.sock,0777",
  "protocol":"vmess",
  "settings":{
    "clients":[
      {
        "id":"uuid",
        "email":"email"
      }
    ]
  },
  "streamSettings":{
    "network":"ws",
    "security":"none",
    "wsSettings":{
      "path":"/path"
    }
  },
  "sniffing":{
    "enabled":false
  }
}

Sep 02 '22 13:09 GeorgeRudd

服务端配置见模板 https://github.com/XTLS/Xray-examples/blob/e01c18039c5b663b89aeab4395bec71b4f19461f/VLESS-WSS-Nginx/server.json#L7

权限0666 你填0777哪看到这填法的？猜是这原因

Sep 02 '22 13:09 chika0801

我的模板 https://github.com/chika0801/Xray-examples/tree/main/VMess-WebSocket-TLS

Sep 02 '22 13:09 chika0801

改了没用

Sep 03 '22 13:09 GeorgeRudd

改了没用

那你试试 https://github.com/XTLS/Xray-examples/tree/main/VLESS-WSS-Nginx

Sep 03 '22 13:09 chika0801

检查 id

Sep 05 '22 10:09 xqzr

检查 id

是uuid吗 cat /proc/sys/kernel/random/uuid 换了一个新的了还是不行上网是可以正常上的错误提示还在

Sep 05 '22 11:09 GeorgeRudd

监听127.0.0.1也有同样错误 *109 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: ip, server: domain.com, request: "GET /path HTTP/1.1", upstream: "http://127.0.0.1:1234/path", host: "domain.com"

Sep 07 '22 10:09 GeorgeRudd

Listening to 127.0.0.1 also has the same error *109 recv() failed (104: Connection reset by peer) while proxying upgraded connection, client: ip, server: domain.com, request: "GET /path HTTP/1.1", upstream: " http://127.0.0.1:1234/path ", host: "domain.com"

I had same problem.