Update grpc.md - #815
Closed
DanAlex121 wants to merge 1 commit into
Closed
Conversation
Member
|
Xray-core 内的 TLS 请求全都默认 Chrome 指纹了，HTTP UA 也改成默认 Chrome 的吧 XTLS/Xray-core#5658 |
Member
|
估计grpc流对cf占用略高所以他们喜欢封 最近 speed.cloudflare.com 也把golang的UA给ban了好像 |
Contributor
Author
因为官方文档不是说ws的alpn是1.1能被精准识别嘛，grpc只是性能不如XHTTP？ 而且RPRX也建议不用
mihomo又不支持XHTTP，所以过CDN的就打算换成gRPC |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Vless-gRPC-TLS无法过Cloudflare CDN，显示
403 Forbidden，例如net4people/bbs#429 (comment) 和XTLS/Xray-core#4996 (comment) 。这是因为Cloudflare 将 gRPC 视为 HTTP DDoS 攻击并屏蔽。并且Cloudflare会根据账号，托管域名等的不同进行“个性化”封锁，所以存在有些人提出过不了Cloudflare CDN 但是其他人无法复现的情况。一个可行的解决方案是设置 gRPC 的用户代理
user_agent为常用浏览器，比如Chrome的User-Agent。设置后马上就能解除封锁并且正常使用。具体的分析和测试详见我的comment XTLS/Xray-core#4996 (comment)
在现在的文档中确实有提到设置gRPC UA解除CDN封锁的相关信息
但是我觉得已经算是实锤了Cloudflare有可能会封锁Xray默认的gRPC UA(也就是Go的UA
grpc-go/1.36.0)，不是再“可能”。而且关键字不全，大部分人，包括我，一般使用Vless过CDN的话用的是Cloudflare。所以我在碰到这个问题的时候用关字“Cloudflare”搜索并没有搜到这个信息，从而走了弯路浪费了很多时间。所以我觉得可以添加这个tip，或许之前的“可能”相关的表述也需要修改。