mirror of
https://github.com/cbeuw/Cloak.git
synced 2026-04-26 21:15:55 +03:00
[GH-ISSUE #126] Cant get CDN mode working #104
Labels
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/Cloak#104
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @aboka2k on GitHub (Aug 26, 2020).
Original GitHub issue: https://github.com/cbeuw/Cloak/issues/126
hi, im using SS with Cloak plugin on a Ubuntu 20.04 LTS vps. I install them using HirbodBehnam's v2 script and its working great in Direct mode. But just cant make it work with CDN/Cloudfront.
I follow the guide on your wiki on creating the Cloudfront, and on Windows client( SS 4.1.1. and Cloak 2.2.2 plugin), change 'Server IP' point to the CDN's domain name(xxxxxx.cloudfront.net) and do the same for Cloak's plugin Servername. And lastly add 'Transport=CDN;' to the 'Plugin Options'
Did i miss or do something wrong, or there is more settings on the server side? as there will be no internet and many 'errors'(on client side) logging:
Thank you,
@cbeuw commented on GitHub (Sep 1, 2020):
Have you tried putting
"Transport": "cdn"in Cloak client's configuration JSON file? Cloak currently only reads the path to Cloak config json file from Plugin Options field set in Shadowsocks, it doesn't accept other arguments@aboka2k commented on GitHub (Sep 1, 2020):
hi, do you mean we create a JSON file and put the file path in the SS's 'Plugin Options' field? if yes, could you give the command to point to the file and also the JSON file? but if thats not the case, what will you suggest? use another client for Windows/Android?
Thank you,
@cbeuw commented on GitHub (Sep 1, 2020):
Hi,
There should be a config JSON file already and you can edit/append
Transportoption in the file. Was the Plugin Options field empty when you were running it on direct mode? Plugin Options field should have been the path to the config JSON file whenever you run Cloak in plugin mode. Or did you start Cloak separately in standalone mode?An example ckclient.json can be found here: https://github.com/cbeuw/Cloak/blob/master/example_config/ckclient.json. This can be put anywhere. But you need to edit
UIDandPublicKey, which should have been filled by the JSON config created by the script@aboka2k commented on GitHub (Sep 1, 2020):
hi, i download the Cloak exe and put inside the SS folder; then add the below value to SS Plugin Options:
UID=xxxxxxxxxxxxxxxxxxxxxxx\=\=;PublicKey=xxxxxxxxxxxxxxxxxx\=;ServerName=bing.com;BrowserSig=chrome;NumConn=4;ProxyMethod=shadowsocks;EncryptionMethod=plain;StreamTimeout=300I notice there are 2 JSON file inside the folder, but both seems to belong to SS:
gui-config.json
statistics-config.json
Should i add the ckclient.json to the folder and delete all the value in Plugin Options now, and change it to 'Path=%foldername%'. Please advice. Thank you.
@cbeuw commented on GitHub (Sep 1, 2020):
Sorry I forgot that the Plugin Options can be config arguments in semicolon separated form. What you did in the beginning should be correct. Are there any logs on Cloak server side?
@aboka2k commented on GitHub (Sep 1, 2020):
hi, it is ok. can u tell me how to check for the logs on the server side? as i hv no idea where to look for them. thanks.
@HirbodBehnam commented on GitHub (Sep 1, 2020):
Because you have installed it with my script it is
systemctl status cloak-server@aboka2k commented on GitHub (Sep 1, 2020):
hi running that will show its status, but we do need its log right? Thanks
`root@v2ray:~# systemctl status cloak-server
● cloak-server.service - Cloak Server Service
Loaded: loaded (/etc/systemd/system/cloak-server.service; enabled; vendor >
Active: active (running) since Tue 2020-09-01 23:00:42 +08; 24min ago
Main PID: 722 (ck-server)
Tasks: 3 (limit: 1062)
Memory: 7.9M
CGroup: /system.slice/cloak-server.service
└─722 /usr/bin/ck-server -c ckserver.json
Sep 01 23:00:42 v2ray systemd[1]: Started Cloak Server Service.
Sep 01 23:00:42 v2ray ck-server[722]: time="2020-09-01T23:00:42+08:00" level=in>
Sep 01 23:00:42 v2ray ck-server[722]: time="2020-09-01T23:00:42+08:00" level=in>
lines 1-12/12 (END)...skipping...
● cloak-server.service - Cloak Server Service
Loaded: loaded (/etc/systemd/system/cloak-server.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2020-09-01 23:00:42 +08; 24min ago
Main PID: 722 (ck-server)
Tasks: 3 (limit: 1062)
Memory: 7.9M
CGroup: /system.slice/cloak-server.service
└─722 /usr/bin/ck-server -c ckserver.json
Sep 01 23:00:42 v2ray systemd[1]: Started Cloak Server Service.
Sep 01 23:00:42 v2ray ck-server[722]: time="2020-09-01T23:00:42+08:00" level=info msg="Starting standalone mode"
Sep 01 23:00:42 v2ray ck-server[722]: time="2020-09-01T23:00:42+08:00" level=info msg="Listening on :443"
`
@cbeuw commented on GitHub (Sep 1, 2020):
You may need to add ":80" in
BindAddrin the config json file for Cloak server (so it's something like"BindAddr": [":443", ":80"]). I'm not sure where the script puts that file but I thing it's under/etc/cloak@HirbodBehnam commented on GitHub (Sep 1, 2020):
Yes, the config file is at
/etc/cloak/ckserver.json@aboka2k commented on GitHub (Sep 1, 2020):
hi, hv added the port 80 to it, and reboot, but same no internet. its best if we could find its log so we could see if its connected, and if yes, where it stuck at or something like that. anyway here is my setup again just in case i miss something-
Transport=CDN;UID=xxxxxxxxxxxxxxx==;PublicKey=xxxxxxxxxxxxx=;ServerName=xxxxxxxxx.cloudfront.net;BrowserSig=chrome;NumConn=4;ProxyMethod=shadowsocks;EncryptionMethod=plain;StreamTimeout=300
Here is the ckserver.json on the server side:
Have tried changing the 'RedirAddr' to the Cloudfront domain, but same not working. Please advice, thanks.
@aboka2k commented on GitHub (Sep 1, 2020):
shadowsocks - config.json
@cbeuw commented on GitHub (Sep 1, 2020):
What happens when you visit your xxxx.cloudfront.net address in a browser? Does it show the same thing as if you are visiting 204.79.197.200 in RedirAddr? If yes then your server should be set up correctly and the issue is with the client
@HirbodBehnam commented on GitHub (Sep 1, 2020):
@aboka2k Before you do so, please add
:443to the end of RedirAddr in your server and restart the service (usesystemctl restart cloak-server)@aboka2k commented on GitHub (Sep 1, 2020):
hi, i hv add 443("RedirAddr": "204.79.197.200:443") and reboot the server. below is the results:
when not connect using SS and browse to 204.79.197.200
when not connect to SS and browse to xxxxx.cloudfront.net
The request could not be satisfied
.
.
when connected to SS and browse to 204.79.197.200 and xxxxx.cloudfront.net
Privoxy encountered an error while processing your request:
Could not load template file no-server-data or one of its included components.
Please contact your proxy administrator.
If you are the proxy administrator, please put the required file(s)in the (confdir)/templates directory. The location of the (confdir) directory is specified in the main Privoxy config file. (It's typically the Privoxy install directory).
when connected to SS and browse to google
@aboka2k commented on GitHub (Sep 1, 2020):
the RedirAddr will work if i put my server IP with https(https://xx.xx.xx.xx) and it will be forward to 204.79.197.200 and show this:
it seems like cloudfront not pointing to the server? as xxxxx.cloudfront.net by right should show the same 'error'. i follow everything in the wiki(the rest not mention is default)-
Origin Domain Name - mydomain.com and point to vps
Origin SSL Protocols: TLSv1.2 only
Origin Protocol Policy: HTTP Only
HTTP Port: 443
Viewer Protocol Policy: HTTP and HTTPS
SSL Certificate: Default
Supported HTTP Versions: HTTP/2, HTTP/1.1, HTTP/1.0
Thank you,
@cbeuw commented on GitHub (Sep 1, 2020):
OK i think i know why: Cloudfront doesn't like sending HTTP requests over 443 anymore, so you need to change
HTTP Portin Origin setting to 80.I'll update the wiki to reflect this
@aboka2k commented on GitHub (Sep 1, 2020):
i hv change the HTTP port to 80 in Cloudfront and try access the vps using the domainname on chrome. but it gets -
@aboka2k commented on GitHub (Sep 1, 2020):
my domain: orca.gq
cloudfront domain: d35q91vx742fcp.cloudfront.net
@aboka2k commented on GitHub (Sep 1, 2020):
@aboka2k commented on GitHub (Sep 1, 2020):
its very late now and hvto work tomorrow. will try to think of some solutions and if still no other clue, will try to contact AWS tomorrow evening. as it seems that CF cant connect to the vps now. will post here if got any updates. thank you.
@aboka2k commented on GitHub (Sep 2, 2020):
hi, hv post to AWS community forum and waiting for a reply.
This is what chrome shows when browse to https://orca.gq. Any chance this is why CF wont show this page bcoz of the cert issue?
Thanks,
@aboka2k commented on GitHub (Sep 3, 2020):
already 2 days but still no one reply on their forum. try to contact support but we need to pay them monthly fees?? bummer. hvto pay for support when we are buying their service.....
@notsure2 commented on GitHub (Dec 11, 2020):
There is a bug in Cloak / oversight. In case your shadowsocks client is passing cloak the remote addr as IP instead of the original domain, Cloak sets the wrong Http Host header causing the CDN mode to fail. (This issue happens on shadowsocks-android). A new config key is required to explicitly control the Http Host field regardless of what is set as remote address. This also allows domain fronting to work. I will make a pull request.
@aboka2k commented on GitHub (Dec 11, 2020):
@notsure2 this is great news! though it will jus not work, thank you very much. although im not using it now, but other members will surely gain alot from this.
p/s- read ur msg again, you mention this happens on android, but i think it happens on my windows 7 machine too beside android. but if could make android works, then its a big success already
@notsure2 commented on GitHub (Dec 11, 2020):
https://github.com/cbeuw/Cloak/pull/143