1
0
mirror of https://github.com/XTLS/Xray-docs-next.git synced 2025-08-22 11:28:34 +00:00

Compare commits

...

4 Commits

Author SHA1 Message Date
dependabot[bot]
435fd40f91
Merge d7c00f04c6 into 848c3265ca 2025-08-14 14:00:03 -04:00
风扇滑翔翼
848c3265ca
fallback: Add localhost tip 2025-08-13 22:22:18 +08:00
dependabot[bot]
d7c00f04c6 Prettified Code! 2025-08-12 14:27:41 +00:00
风扇滑翔翼
21786dd48d
Outbound: Add sendThrough "origin" UDP tip 2025-08-12 19:33:50 +08:00
3 changed files with 8 additions and 6 deletions

View File

@ -78,7 +78,9 @@ Fallback 内设置的 `alpn` 是匹配实际协商出的 ALPN而 Inbound TLS
1. TCP格式为 `"addr:port"`,其中 addr 支持 IPv4、域名、IPv6若填写域名也将直接发起 TCP 连接(而不走内置的 DNS
2. Unix domain socket格式为绝对路径形如 `"/dev/shm/domain.socket"`,可在开头加 `@` 代表 [abstract](https://www.man7.org/linux/man-pages/man7/unix.7.html)`@@` 则代表带 padding 的 abstract。
若只填 port数字或字符串均可形如 `80`、`"80"`,通常指向一个明文 http 服务addr 会被补为 `"127.0.0.1"`)。
若只填 port数字或字符串均可形如 `80`、`"80"`,通常指向一个明文 http 服务addr 会被补为 `"localhost"`)。
v25.7.26 后才将只包含 port 的 dest 指向 localhost, 在此之前都是 127.0.0.1. 修改后实际目标很可能是 ::1 网上抄的部分模板的 webserver 可能也监听 ::1 的同时却只允许 127 进入或者应用 proxy protocol这可能会导致行为不同。
> `xver`: number

View File

@ -39,7 +39,9 @@
特殊值 `origin` 若使用该值将使用本机被连接的IP发出请求。
例如机器上存在一整段 IPv4 `11.4.5.0/24` 且监听 0.0.0.0(网卡上的全部IPv4与IPv6),若客户端通过 `11.4.5.14` 连接到本机,那么出站也会通过 `11.4.5.14` 发送对外请求;如果使用 `11.4.5.10` 连接到本机,那么出站就会通过 `11.4.5.10` 发送请求。 同样适用于机器上有整段/复数个 IPv6 的情况
例如机器上存在一整段 IPv4 `11.4.5.0/24` 且监听 0.0.0.0(网卡上的全部IPv4与IPv6),若客户端通过 `11.4.5.14` 连接到本机,那么出站也会通过 `11.4.5.14` 发送对外请求;如果使用 `11.4.5.10` 连接到本机,那么出站就会通过 `11.4.5.10` 发送请求。 同样适用于机器上有整段/复数个 IPv6 的情况。
和入站介绍的一样,因为 UDP 的无连接特性 Xray 无从得知这个请求进入核心的原目标IP(举个例子,在同一个 QUIC 连接里它甚至可能变动),所以这个功能无法生效。
> `protocol`: string

View File

@ -122,8 +122,7 @@ chmod +r ~/xray_cert/xray.key
In addition, when recording animated images, the script did not include a command to restart `Xray` because `Xray` plans to support the [Certificate Hot Update] function, which means that `Xray` will automatically identify certificate updates and reload certificates without manual restart. After the function is added, I will modify `config.json` appropriately
to enable this setting and delete the restart command in the script.
:::
4. Add [executable] permissions to this file
::: 4. Add [executable] permissions to this file
```
chmod +x ~/xray_cert/xray-cert-renew.sh
@ -177,8 +176,7 @@ First, you can refer to the [official VLESS configuration example](https://githu
::: warning
This location is not the standard log file location of `Xray`. It is placed here to avoid permission issues that cause trouble for new users. Once you are familiar with it, it is recommended to return to the default location: `/var/log/xray/access.log` and `/var/log/xray/error.log`.
:::
4. Because Xray is used by the nobody user by default, we need to allow other users to have "write" permissions (`*.log` means all files with the suffix `log`, and the efficiency advantage of the `CLI` interface gradually appears at this time)
::: 4. Because Xray is used by the nobody user by default, we need to allow other users to have "write" permissions (`*.log` means all files with the suffix `log`, and the efficiency advantage of the `CLI` interface gradually appears at this time)
```shell
chmod a+w ~/xray_log/*.log