Skip to content

Block/Blackhole outbound: Better blocking UDP#6057

Merged
RPRX merged 3 commits into
mainfrom
blackhole
May 2, 2026
Merged

Block/Blackhole outbound: Better blocking UDP#6057
RPRX merged 3 commits into
mainfrom
blackhole

Conversation

@Fangliding
Copy link
Copy Markdown
Member

@Fangliding Fangliding commented May 1, 2026

fix #6052

@RPRX
Copy link
Copy Markdown
Member

RPRX commented May 1, 2026

确实有这种问题,这样的话我得检查下另一个 PR 是不是对 UDP 一开始就关了,不然客户端疯狂发包

@RPRX
Copy link
Copy Markdown
Member

RPRX commented May 1, 2026

看了下 dial 那里 block 有判断 if dialDest.Network == net.Network_TCP,那对于 UDP 的应该全是 drop https://github.com/XTLS/Xray-core/pull/6027/changes#diff-d9ceb59d627b1c426e2f1cb9c5ab3d8e457e50370639a01ff4f9180bed900d08

@Meo597
Copy link
Copy Markdown
Collaborator

Meo597 commented May 2, 2026

怕 UDP 狂发包,dial 时没敢掐
刻意放到底下做的,避免被拖垮

@RPRX
Copy link
Copy Markdown
Member

RPRX commented May 2, 2026

根据 #6058 (comment) 的讨论改成 30-90s 随机吧,Block/Blackhole 出站先不加选项了

@RPRX RPRX changed the title Better UDP blackhole Block/Blackhole outbound: Better blocking UDP May 2, 2026
@RPRX RPRX merged commit 8381a5a into main May 2, 2026
78 checks passed
@Meo597 Meo597 deleted the blackhole branch May 2, 2026 15:29
@Fangliding
Copy link
Copy Markdown
Member Author

为啥这也要随机 udp不是走mux过来的吗

@RPRX
Copy link
Copy Markdown
Member

RPRX commented May 2, 2026

不一定,比如 VLESS/VMess 无 flow 时的 UDP/53/443、Trojan UoT 等,总之随机一下比较好

@Fangliding 话说有空的话开个 PR 把 Cone 那个环境变量和相关代码删掉吧,TUN 入站就没实现非 Cone,WG 好像也是

@RPRX
Copy link
Copy Markdown
Member

RPRX commented May 2, 2026

@Fangliding 以及像 b279076 的情况,test 需要加个 fmt check

还有 Browser Dialer 文档 写的 ed 还是 2048 而不是 2560 #3152 ,不过它是引用原文所以 emmm,算了毕竟不久后要大改

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

无法阻断quic协议

3 participants