偷X25519MLKEM768域名失败，REALITY: processed invalid connection

[Tsukimeizi]

完整性要求

• 我保证阅读了文档，了解所有我编写的配置文件项的含义，而不是大量堆砌看似有用的选项或默认值。
• 我提供了完整的配置文件和日志，而不是出于自己的判断只给出截取的部分。
• 我搜索了 issues, 没有发现已提出的类似问题。
• 问题在 Release 最新的版本上可以成功复现

描述

版本：Xray 25.5.16 (Xray, Penetrates Everything.) 800b8b5 (go1.24.3 linux/amd64)
偷docs.misaka.io域名正常，但是偷blog.medium.com域名 (X25519MLKEM768)，使用xhttp和xtls-rprx-vision均失败。

重现方式

正常运行xray

客户端配置

{
  "log": {
    "loglevel": "debug"
  },
  "inbounds": [
    {
      "port": "1080",
      "protocol": "socks"
    }
  ],
  "outbounds": [
    {
      "tag": "proxy-out",
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "address": "xxxx",
            "port": 8002,
            "users": [
              {
                "flow": "xtls-rprx-vision",
                "id": "xxxx",
                "encryption": "none"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "raw",
        "security": "reality",
        "realitySettings": {
          "fingerprint": "chrome",
          "serverName": "blog.medium.com",
          "publicKey": "xxxx",
          "shortId": "xxxx"
        }
      }
    }
  ]
}

服务端配置

{
  "log": {
    "loglevel": "info"
  },
  "inbounds": [
    {
      "port": 8002,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "flow": "xtls-rprx-vision",
            "id": "xxxx"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "raw",
        "security": "reality",
        "realitySettings": {
          "target": "blog.medium.com:443",
          "serverNames": ["blog.medium.com"],
          "privateKey": "xxxx",
          "shortIds": ["xxxx"]
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom"
    }
  ]
}

客户端日志

2025/05/20 08:57:01.259228 [Info] [1899247828] transport/internet/tcp: dialing TCP to tcp:xxxx:8002
2025/05/20 08:57:01.260085 [Debug] [1899247828] transport/internet: dialing to tcp:xxxx:8002
2025/05/20 08:57:02.120170 [Info] [1899247828] app/proxyman/outbound: app/proxyman/outbound: failed to process outbound traffic > proxy/vless/outbound: failed to find an available destination > common/retry: [read tcp 192.168.31.90:55311->xxxx:8002: read: connection reset by peer read tcp 192.168.31.90:55312->xxxx:8002: read: connection reset by peer read tcp 192.168.31.90:55313->xxxx:8002: read: connection reset by peer read tcp 192.168.31.90:55314->xxxx:8002: read: connection reset by peer read tcp 192.168.31.90:55315->xxxx:8002: read: connection reset by peer] > common/retry: all retry attempts failed
2025/05/20 08:57:02.120494 [Info] [1899247828] app/proxyman/inbound: connection ends > proxy/socks: connection ends > proxy/socks: failed to transport all TCP response > io: read/write on closed pipe

服务端日志

2025/05/20 09:56:59.114561 [Info] infra/conf/serial: Reading config: &{Name:./test.json Format:json}
2025/05/20 09:56:59.114644 [Info] transport/internet/splithttp: listening TCP for XHTTP on 0.0.0.0:8001
2025/05/20 09:56:59.114707 [Info] transport/internet/tcp: listening TCP on 0.0.0.0:8002
2025/05/20 09:56:59.114740 [Warning] core: Xray 25.5.16 started
2025/05/20 09:56:59.999414 [Info] transport/internet/tcp: REALITY: processed invalid connection
2025/05/20 09:57:00.057377 [Info] transport/internet/tcp: REALITY: processed invalid connection
2025/05/20 09:57:00.322137 [Info] transport/internet/tcp: REALITY: processed invalid connection
2025/05/20 09:57:00.775568 [Info] transport/internet/tcp: REALITY: processed invalid connection
2025/05/20 09:57:01.435747 [Info] transport/internet/tcp: REALITY: processed invalid connection
2025/05/20 09:57:02.302305 [Info] transport/internet/tcp: REALITY: processed invalid connection

[Fangliding]

不是 伪装白名单域名的功能你拿个被墙的域名几个意思