关于Nginx ws 反代的问题，两台机子一模一样的配置，但是有一台一直ws握手错误

[picklefan]

有没有大佬能分析一下问题出在哪，我配置和日志看了一晚上了也没找出问题，重启VPS也没用。出问题的是一台RackNerd的Debian10，正常运行的是搬瓦工的Debian11. Debian10 Xray的日志debug 给了777权限，但是只有error日志有记录启动core，access日志什么都没有。
两个VPS，一个Debian11-amd64，一个Debian10-amd64。先说说这两个环境：
环境1：

Debian11-amd64
Nginx-1.22.1
Xray-1.7.2

环境2：

Debian10-amd64
Nginx-1.23.1
Xray-1.7.2

客户端：

win11 + V2rayN 最新版(xray-core-1.7.2)

---

Nginx和Xray配置，两台机子除了域名、证书不一样，其他的一模一样，Debian10的配置就是我从Debian11复制过去的。

Nginx主要配置：

stream {
	map $ssl_preread_server_name $name {
		cocacolayes.ga cdc;
		
	}
	upstream cdc{
		server 127.0.0.1:8964;
	}
	
	server {
		listen 443        reuseport;
		listen [::]:443   reuseport;
		proxy_pass        $name;
		ssl_preread       on;
 	        proxy_protocol    on; 		
}

http{
  log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for" '
                      '$proxy_protocol_addr:$proxy_protocol_port';

	access_log /var/log/nginx/access.log;
	error_log /var/log/nginx/error.log debug ;
	
	log_format scripts '$document_root$fastcgi_script_name > $request';
}

server {
    listen 127.0.0.1:8964  ssl http2 proxy_protocol;
    server_name cocacolayes.ga;
   
    ssl_protocols       TLSv1.2 TLSv1.3;
    ssl_ciphers         TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA:RSA-PSK-AES256-GCM-SHA384:DHE-PSK-AES256-GCM-SHA384:RSA-PSK-CHACHA20-POLY1305:DHE-PSK-CHACHA20-POLY1305:ECDHE-PSK-CHACHA20-POLY1305:AES256-GCM-SHA384:PSK-AES256-GCM-SHA384:PSK-CHACHA20-POLY1305:RSA-PSK-AES128-GCM-SHA256:DHE-PSK-AES128-GCM-SHA256:AES128-GCM-SHA256:PSK-AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:ECDHE-PSK-AES256-CBC-SHA384:ECDHE-PSK-AES256-CBC-SHA:SRP-RSA-AES-256-CBC-SHA:SRP-AES-256-CBC-SHA:RSA-PSK-AES256-CBC-SHA384:DHE-PSK-AES256-CBC-SHA384:RSA-PSK-AES256-CBC-SHA:DHE-PSK-AES256-CBC-SHA:AES256-SHA:PSK-AES256-CBC-SHA384:PSK-AES256-CBC-SHA:ECDHE-PSK-AES128-CBC-SHA256:ECDHE-PSK-AES128-CBC-SHA:SRP-RSA-AES-128-CBC-SHA:SRP-AES-128-CBC-SHA:RSA-PSK-AES128-CBC-SHA256:DHE-PSK-AES128-CBC-SHA256:RSA-PSK-AES128-CBC-SHA:DHE-PSK-AES128-CBC-SHA:AES128-SHA:PSK-AES128-CBC-SHA256:PSK-AES128-CBC-SHA;
    ssl_prefer_server_ciphers on;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 1d;
    ssl_session_tickets off;
    ssl_certificate /web/cert/cocacolayes.ga/cert.pem;
    ssl_certificate_key /web/cert/cocacolayes.ga/key.pem ;
    
    index               index.html;
    root                /web/cocacolayes.ga/;
    add_header          Strict-Transport-Security "max-age=63072000" always;
   
    set_real_ip_from    127.0.0.1;
    real_ip_header      proxy_protocol;
    access_log          /var/log/nginx/cocacolayes.ga.access.log main;
    error_log           /var/log/nginx/cocacolayes.ga.error.log debug;

    location /pepsino { 
       if ($http_upgrade != "websocket") { # WebSocket协商失败时返回404
       return 404;
    }
      proxy_pass http://127.0.0.1:8899;    
      proxy_redirect off;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_protocol_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

      
    }
  
}

---

Xray配置：

{
    "log": {
        "loglevel": "debug",
        "error":"/web/logs/xray/error.log",
        "access":"/web/logs/xray/access.log"
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "127.0.0.1",
            "port": 8899, // 端口
            "protocol": "vless",
            "sniffing": {
                "enabled": true,
                "destOverride": ["http", "tls"]
            },
            "settings": {
                "clients": [
                    {
                        "id": "dd3c8213-0701-4241-8342-175f65d31f7b", // 用户ID
                        "level": 0,
                        "email": "u0",
                        "alterId": 0
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "ws",
                "security": "none",
                "wsSettings": {
                    "acceptProxyProtocol": true, // 提醒：若你用 Nginx/Caddy 等反代 WS，需要删掉这行
                    "path": "/pepsino" // 必须换成自定义的 PATH，需要和上面的一致
                }
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct",
            "settings":{}
        },
        {
            "protocol": "blackhole",
            "tag": "block",
            "settings":{}
        }
    ]
}

---

下面是日志。

服务端Xray 不运行 时，客户端V2rayN日志。重点是“502 Bad Gateway”。

初始化配置
启动服务(1/29/2023 5:06:53 AM)...
Xray 1.7.2 (Xray, Penetrates Everything.) Custom (go1.19.4 windows/amd64)
A unified platform for anti-censorship.
2023/01/29 05:06:53 [Info] infra/conf/serial: Reading config: stdin:
2023/01/29 05:06:53 [Debug] app/log: Logger started
2023/01/29 05:06:53 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:10911
2023/01/29 05:06:53 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:10911
2023/01/29 05:06:53 [Warning] core: Xray 1.7.2 started
2023/01/29 05:06:54 [Info] [3468148524] proxy/http: request to Method [GET] Host [cachefly.cachefly.net] with URL [http://cachefly.cachefly.net/10mb.test]
2023/01/29 05:06:54 [Info] [3468148524] app/dispatcher: taking detour [proxy10911] for [tcp:cachefly.cachefly.net:80]
2023/01/29 05:06:54 127.0.0.1:4421 accepted http://cachefly.cachefly.net/10mb.test [http10911 -> proxy10911]
2023/01/29 05:06:54 [Info] [3468148524] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:06:54 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:06:55 [Info] [3468148524] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:06:55 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:06:55 [Info] [3468148524] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:06:55 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:06:58 [Info] [3468148524] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:06:58 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:06:59 [Info] [3468148524] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:06:59 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:07:01 [Warning] [3468148524] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://cocacolayes.ga/pepsino): 502 Bad Gateway > websocket: bad handshake] > common/retry: all retry attempts failed
2023/01/29 05:07:01 [Warning] [3468148524] proxy/http: failed to read response from cachefly.cachefly.net > io: read/write on closed pipe
2023/01/29 05:07:01 [Info] [3468148524] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > EOF

---

服务端Xray 运行 ，客户端V2rayN 日志。这时候是”400 Bad Request“。

初始化配置
启动服务(1/29/2023 5:14:43 AM)...
Xray 1.7.2 (Xray, Penetrates Everything.) Custom (go1.19.4 windows/amd64)
A unified platform for anti-censorship.
2023/01/29 05:14:43 [Info] infra/conf/serial: Reading config: stdin:
2023/01/29 05:14:43 [Debug] app/log: Logger started
2023/01/29 05:14:43 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:10911
2023/01/29 05:14:43 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:10911
2023/01/29 05:14:43 [Warning] core: Xray 1.7.2 started
2023/01/29 05:14:44 [Info] [1218346946] proxy/http: request to Method [GET] Host [cachefly.cachefly.net] with URL [http://cachefly.cachefly.net/10mb.test]
2023/01/29 05:14:44 [Info] [1218346946] app/dispatcher: taking detour [proxy10911] for [tcp:cachefly.cachefly.net:80]
2023/01/29 05:14:44 127.0.0.1:12579 accepted http://cachefly.cachefly.net/10mb.test [http10911 -> proxy10911]
2023/01/29 05:14:44 [Info] [1218346946] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:14:44 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:14:45 [Info] [1218346946] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:14:45 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:14:46 [Info] [1218346946] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:14:46 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:14:48 [Info] [1218346946] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:14:48 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:14:49 [Info] [1218346946] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:14:49 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:14:50 [Warning] [1218346946] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://cocacolayes.ga/pepsino): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2023/01/29 05:14:50 [Warning] [1218346946] proxy/http: failed to read response from cachefly.cachefly.net > io: read/write on closed pipe
2023/01/29 05:14:50 [Info] [1218346946] app/proxyman/inbound: connection ends > proxy/http: failed to read http request > EOF
2023/01/29 05:21:53 [Info] [3128751203] proxy/socks: TCP Connect request to tcp:mtalk.google.com:5228
2023/01/29 05:21:53 [Info] [3128751203] app/dispatcher: sniffed domain: mtalk.google.com
2023/01/29 05:21:53 [Info] [3128751203] app/dispatcher: taking detour [proxy] for [tcp:mtalk.google.com:5228]
2023/01/29 05:21:53 [Info] [3128751203] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:53 tcp:127.0.0.1:12788 accepted tcp:mtalk.google.com:5228 [socks -> proxy]
2023/01/29 05:21:53 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:21:54 [Info] [3128751203] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:54 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:21:55 [Info] [3128751203] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:55 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:21:56 [Info] [3128751203] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:56 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:21:57 [Info] [3128751203] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:57 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:21:59 [Warning] [3128751203] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://cocacolayes.ga/pepsino): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2023/01/29 05:21:59 [Info] [3128751203] app/proxyman/inbound: connection ends > proxy/socks: connection ends > proxy/socks: failed to transport all TCP response > io: read/write on closed pipe
2023/01/29 05:21:59 [Info] [910378516] proxy/socks: TCP Connect request to tcp:mtalk.google.com:5228
2023/01/29 05:21:59 [Info] [910378516] app/dispatcher: sniffed domain: mtalk.google.com
2023/01/29 05:21:59 tcp:127.0.0.1:12800 accepted tcp:mtalk.google.com:5228 [socks -> proxy]
2023/01/29 05:21:59 [Info] [910378516] app/dispatcher: taking detour [proxy] for [tcp:mtalk.google.com:5228]
2023/01/29 05:21:59 [Info] [910378516] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:21:59 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:22:00 [Info] [910378516] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:22:00 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:22:01 [Info] [910378516] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:22:01 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:22:02 [Info] [910378516] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:22:02 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:22:03 [Info] [910378516] transport/internet/websocket: creating connection to tcp:cocacolayes.ga:443
2023/01/29 05:22:03 [Debug] transport/internet: dialing to tcp:cocacolayes.ga:443
2023/01/29 05:22:05 [Warning] [910378516] app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [transport/internet/websocket: failed to dial WebSocket > transport/internet/websocket: failed to dial to (wss://cocacolayes.ga/pepsino): 400 Bad Request > websocket: bad handshake] > common/retry: all retry attempts failed
2023/01/29 05:22:05 [Info] [910378516] app/proxyman/inbound: connection ends > proxy/socks: connection ends > proxy/socks: failed to transport all TCP response > io: read/write on closed pipe

---

下面是三个Nginx的日志。

/var/log/nginx/cocacolayes.ga.access.log （400、502 分别对应服务器端Xray的开启和关闭状态，正常情况下应该是101 Reverse proxying）

110.96.24.193 - - [29/Jan/2023:07:51:20 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19479
110.96.24.193 - - [29/Jan/2023:07:51:21 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19483
110.96.24.193 - - [29/Jan/2023:07:51:21 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19486
110.96.24.193 - - [29/Jan/2023:07:51:22 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19490
110.96.24.193 - - [29/Jan/2023:07:51:23 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19491
110.96.24.193 - - [29/Jan/2023:07:51:24 -0500] "GET /pepsino HTTP/1.1" 400 25 "-" "Go-http-client/1.1" "-" 110.96.24.193:19499
110.96.24.193 - - [29/Jan/2023:07:56:25 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:20662
110.96.24.193 - - [29/Jan/2023:07:56:25 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:20674
110.96.24.193 - - [29/Jan/2023:07:56:26 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:20677
110.96.24.193 - - [29/Jan/2023:07:56:27 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:20679
110.96.24.193 - - [29/Jan/2023:07:56:28 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:20684
110.96.24.193 - - [29/Jan/2023:08:01:26 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:17740
110.96.24.193 - - [29/Jan/2023:08:01:26 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:17741
110.96.24.193 - - [29/Jan/2023:08:01:27 -0500] "GET /pepsino HTTP/1.1" 502 157 "-" "Go-http-client/1.1" "-" 110.96.24.193:17742

---

/var/log/nginx/cocacolayes.ga.error.log

2023/01/29 07:51:18 [info] 5656#5656: *237 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:20 [info] 5656#5656: *241 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:21 [info] 5656#5656: *245 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:22 [info] 5656#5656: *249 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:22 [info] 5656#5656: *253 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:23 [info] 5656#5656: *257 client 127.0.0.1 closed keepalive connection
2023/01/29 07:51:24 [info] 5656#5656: *261 client 127.0.0.1 closed keepalive connection
2023/01/29 07:56:25 [error] 5656#5656: *266 connect() failed (111: Connection refused) while connecting to upstream, client: 110.96.24.193, server: cocacolayes.ga, request: "GET /pepsino HTTP/1.1", upstream: "http://127.0.0.1:8899/pepsino", host: "cocacolayes.ga"
2023/01/29 07:56:25 [info] 5656#5656: *266 client 127.0.0.1 closed keepalive connection
2023/01/29 07:56:25 [error] 5656#5656: *270 connect() failed (111: Connection refused) while connecting to upstream, client: 110.96.24.193, server: cocacolayes.ga, request: "GET /pepsino HTTP/1.1", upstream: "http://127.0.0.1:8899/pepsino", host: "cocacolayes.ga"
2023/01/29 07:56:25 [info] 5656#5656: *270 client 127.0.0.1 closed keepalive connection
2023/01/29 07:56:26 [error] 5656#5656: *274 connect() failed (111: Connection refused) while connecting to upstream, client: 110.96.24.193, server: cocacolayes.ga, request: "GET /pepsino HTTP/1.1", upstream: "http://127.0.0.1:8899/pepsino", host: "cocacolayes.ga"
2023/01/29 07:56:26 [info] 5656#5656: *274 client 127.0.0.1 closed keepalive connection
2023/01/29 07:56:27 [error] 5656#5656: *278 connect() failed (111: Connection refused) while connecting to upstream, client: 110.96.24.193, server: cocacolayes.ga, request: "GET /pepsino HTTP/1.1", upstream: "http://127.0.0.1:8899/pepsino", host: "cocacolayes.ga"
2023/01/29 07:56:27 [info] 5656#5656: *278 client 127.0.0.1 closed keepalive connection
2023/01/29 07:56:28 [error] 5656#5656: *282 connect() failed (111: Connection refused) while connecting to upstream, client: 110.96.24.193, server: cocacolayes.ga, request: "GET /pepsino HTTP/1.1", upstream: "http://127.0.0.1:8899/pepsino", host: "cocacolayes.ga"
2023/01/29 07:56:28 [info] 5656#5656: *282 client 127.0.0.1 closed keepalive connection

/var/log/nginx/error.log

2023/01/29 07:56:27 [info] 5656#5656: *276 client disconnected, bytes from/to client:324/3850, bytes from/to upstream:3850/651
2023/01/29 07:56:28 [info] 5656#5656: *280 client 110.96.24.193:20684 connected to 0.0.0.0:443
2023/01/29 07:56:28 [info] 5656#5656: *280 proxy 127.0.0.1:45462 connected to 127.0.0.1:8964
2023/01/29 07:56:28 [info] 5656#5656: *280 client disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651
2023/01/29 07:59:35 [info] 5656#5656: *284 client 23.90.160.114:34164 connected to 0.0.0.0:443
2023/01/29 07:59:35 [error] 5656#5656: *284 no host in upstream "", client: 23.90.160.114, server: 0.0.0.0:443, bytes from/to client:0/0, bytes from/to upstream:0/0
2023/01/29 07:59:59 [info] 5656#5656: *285 client 92.115.179.12 closed keepalive connection
2023/01/29 08:01:25 [info] 5656#5656: *286 client 110.96.24.193:17740 connected to 0.0.0.0:443
2023/01/29 08:01:25 [info] 5656#5656: *286 proxy 127.0.0.1:36010 connected to 127.0.0.1:8964
2023/01/29 08:01:26 [info] 5656#5656: *286 client disconnected, bytes from/to client:324/3852, bytes from/to upstream:3852/651
2023/01/29 08:01:26 [info] 5656#5656: *290 client 110.96.24.193:17741 connected to 0.0.0.0:443
2023/01/29 08:01:26 [info] 5656#5656: *290 proxy 127.0.0.1:36014 connected to 127.0.0.1:8964
2023/01/29 08:01:26 [info] 5656#5656: *290 upstream disconnected, bytes from/to client:324/3852, bytes from/to upstream:3852/651
2023/01/29 08:01:27 [info] 5656#5656: *294 client 110.96.24.193:17742 connected to 0.0.0.0:443
2023/01/29 08:01:27 [info] 5656#5656: *294 proxy 127.0.0.1:36030 connected to 127.0.0.1:8964
2023/01/29 08:01:27 [info] 5656#5656: *294 client disconnected, bytes from/to client:324/3852, bytes from/to upstream:3852/651
2023/01/29 08:01:28 [info] 5656#5656: *298 client 110.96.24.193:17746 connected to 0.0.0.0:443
2023/01/29 08:01:28 [info] 5656#5656: *298 proxy 127.0.0.1:36032 connected to 127.0.0.1:8964
2023/01/29 08:01:28 [info] 5656#5656: *298 upstream disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651
2023/01/29 08:01:29 [info] 5656#5656: *302 client 110.96.24.193:17748 connected to 0.0.0.0:443
2023/01/29 08:01:29 [info] 5656#5656: *302 proxy 127.0.0.1:36044 connected to 127.0.0.1:8964
2023/01/29 08:01:29 [info] 5656#5656: *302 client disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651
2023/01/29 08:01:31 [info] 5656#5656: *306 client 110.96.24.193:17756 connected to 0.0.0.0:443
2023/01/29 08:01:31 [info] 5656#5656: *306 proxy 127.0.0.1:36050 connected to 127.0.0.1:8964
2023/01/29 08:01:31 [info] 5656#5656: *306 upstream disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651
2023/01/29 08:01:32 [info] 5656#5656: *310 client 110.96.24.193:17757 connected to 0.0.0.0:443
2023/01/29 08:01:32 [info] 5656#5656: *310 proxy 127.0.0.1:36064 connected to 127.0.0.1:8964
2023/01/29 08:01:32 [info] 5656#5656: *310 client disconnected, bytes from/to client:324/3850, bytes from/to upstream:3850/651
2023/01/29 08:01:32 [info] 5656#5656: *314 client 110.96.24.193:17758 connected to 0.0.0.0:443
2023/01/29 08:01:32 [info] 5656#5656: *314 proxy 127.0.0.1:36076 connected to 127.0.0.1:8964
2023/01/29 08:01:33 [info] 5656#5656: *314 upstream disconnected, bytes from/to client:324/3852, bytes from/to upstream:3852/651
2023/01/29 08:01:34 [info] 5656#5656: *318 client 110.96.24.193:17761 connected to 0.0.0.0:443
2023/01/29 08:01:34 [info] 5656#5656: *318 proxy 127.0.0.1:50296 connected to 127.0.0.1:8964
2023/01/29 08:01:34 [info] 5656#5656: *318 client disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651
2023/01/29 08:01:35 [info] 5656#5656: *322 client 110.96.24.193:17767 connected to 0.0.0.0:443
2023/01/29 08:01:35 [info] 5656#5656: *322 proxy 127.0.0.1:50304 connected to 127.0.0.1:8964
2023/01/29 08:01:35 [info] 5656#5656: *322 upstream disconnected, bytes from/to client:324/3851, bytes from/to upstream:3851/651

---

[picklefan]

找到问题了，要把“wsSettings”里的"acceptProxyProtocol"删掉。果然不是我能搞懂的。我还以为一直是true, 刚刚看了看老配置居然是false，可能是测试的时候改proxy_protocol时顺手把xray也改了.........