请教：节点服务器升级caddy 1到caddy 2后，surge mac报handshake failed: 200 OK

sheayone

v2ray-core和clash可以正常连接，只有surge报错（升级caddy前surge连接也OK），log里未见相关错误日志，只在面板上有小红字显示handshake failed: 200 OK

surge中该节点的配置：
1 = vmess, mydomain.me, 443, username=xxxxx-xxxxx-xxxxx, tls=true, ws=true, ws-path=/ray, tfo=true

服务器端升级前后v2ray配置相同，只更新了caddy（1 -> 2），2的Caddyfile是参考的v2fly白话文社区：

Caddy v2 (recommended)

mydomain.me {
log {
output file /etc/caddy/caddy.log
}
tls {
protocols tls1.2 tls1.3
ciphers TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
curves x25519
}
@v2ray_websocket {
path /ray
header Connection Upgrade
header Upgrade websocket
}
reverse_proxy @v2ray_websocket localhost:10000
respond / "Hi" 200
}

sheayone

补充一下：
Mac: 10.15.5
Surge: 3.5.2 -> 3.5.3 (1088) 两个版本都不行

Log级别打开Verbose之后，有如下log：
2020-06-03 18:16:28.882584 <INFO> [SGDNSPacket] DNS Path: mydomain.me -> 33.33.33.33
2020-06-03 18:16:28.882603 <VERBOSE> [SGDNSClient] Receive DNS response, ID: 9
2020-06-03 18:16:28.882626 <INFO> [SGDNSClient] Recevied answer for mydomain.me (Type: 1, 3ms, from 223.5.5.5)
2020-06-03 18:16:28.882728 <VERBOSE> [SGDNSClient] completeLookup: mydomain.me
2020-06-03 18:16:28.882805 <VERBOSE> [SGDNSClient] DNS lookup complete: mydomain.me
2020-06-03 18:16:28.882887 <VERBOSE> [SGDNSClient] endContext: mydomain.me
2020-06-03 18:16:28.882907 <INFO> [SGDNSClient] Expired DNS refresh completed: mydomain.me, error: (null)
2020-06-03 18:16:28.882945 <VERBOSE> [SGDNSClient] closeSocketsForContext: SGDNSClientContext-10
2020-06-03 18:16:28.883030 <VERBOSE> [SGDNSUDPSocket-13] Dealloc
2020-06-03 18:16:28.883129 <VERBOSE> [SGFileDescriptor-59] Close file descriptor: 31
2020-06-03 18:16:29.035804 <VERBOSE> [SGSocket-20] checkConnectingJob: SGSocketConnectJob-35
2020-06-03 18:16:29.035944 <VERBOSE> [SGSocket-20] TCP handshake time: mydomain.me 33.33.33.33 156ms
2020-06-03 18:16:29.036012 <VERBOSE> [SGSocket-20] connectx() complete
2020-06-03 18:16:29.036195 <INFO> [SGVMessConnector-4] Connection established: 33.33.33.33:443
2020-06-03 18:16:29.036369 <VERBOSE> [SGVMessConnector-4] TLS wrapper: SGTLSWrapperOpenSSL-4
2020-06-03 18:16:29.036645 <VERBOSE> [SGTLSWrapperOpenSSL-4] Previos session key found: mydomain.me:443
2020-06-03 18:16:29.192450 <VERBOSE> [SGTLSWrapperOpenSSL-4] TLS version: TLSv1.3
2020-06-03 18:16:29.192583 <VERBOSE> [SGTLSWrapperOpenSSL-4] Cipher version: TLS_AES_128_GCM_SHA256
2020-06-03 18:16:29.192621 <VERBOSE> [SGTLSWrapperOpenSSL-4] TLS session reused: 1
2020-06-03 18:16:29.192654 <INFO> [SGVMessConnector-4] Connection did complete TLS handshake
2020-06-03 18:16:29.192688 <INFO> [SGVMessConnector-4] Underlying TCP/TLS connection established
2020-06-03 18:16:29.192768 <VERBOSE> [SGVMessConnector-4] Start _wsDriver
2020-06-03 18:16:29.192995 <VERBOSE> [SGVMessConnector-4] ignore SGSocketReservedWriteTagVMessWebSocketRequestHeader
2020-06-03 18:16:29.193076 <VERBOSE> [SGTLSWrapperOpenSSL-4] receiveTLSSession: mydomain.me:443
2020-06-03 18:16:29.348790 <VERBOSE> [SGVMessConnector-4] websocket drive didFailWithError: Error Domain=PSWebSocketErrorDomain Code=2 "Handshake failed: 200 OK" UserInfo={NSLocalizedFailureReason=200 OK, HTTPResponse=<CFHTTPMessageRef 0x7fc2e0c916e0(0x7fc2e0c916f0)> { parsed response, url = (null), status = 200 }, HTTPStatus=200, NSLocalizedDescription=Handshake failed: 200 OK}
2020-06-03 18:16:29.349083 <VERBOSE> [SGVMessConnector-4] disconnectWithError: Error Domain=PSWebSocketErrorDomain Code=2 "Handshake failed: 200 OK" UserInfo={NSLocalizedFailureReason=200 OK, HTTPResponse=<CFHTTPMessageRef 0x7fc2e0c916e0(0x7fc2e0c916f0)> { parsed response, url = (null), status = 200 }, HTTPStatus=200, NSLocalizedDescription=Handshake failed: 200 OK}
2020-06-03 18:16:29.349145 <VERBOSE> [SGVMessConnector-4] disconnectAfterWritingHoldRef
2020-06-03 18:16:29.349180 <VERBOSE> [SGTLSWrapperOpenSSL-4] disconnectAfterWritingHoldRef
2020-06-03 18:16:29.349218 <VERBOSE> [SGTLSWrapperOpenSSL-4] delay close
2020-06-03 18:16:29.349261 <INFO> [SGProxyTest-5] Test connector (1) did disconnnect with error: Handshake failed: 200 OK

tourcoder

遇到了同样的问题，请问这个问题你解决了吗？

c4710n

Caddy's request matcher is case-sensitive.

@v2ray_websocket {
  path /ray
  header Connection Upgrade
  header Upgrade websocket
}

Above block will only match header Connection: Upgrade. But, Surge For Mac is sending related header as Connection: upgrade.

If you add another request matcher for covering the case of Surge, it will work.

For example:

@v2ray_websocket {
  path /ray
  header Connection *Upgrade*
  header Upgrade websocket
}

@v2ray_websocket_lowcase {
  path /ray
  header Connection *upgrade*
  header Upgrade websocket
}

reverse_proxy @v2ray_websocket localhost:10000
reverse_proxy @v2ray_websocket_lowcase localhost:10000

washan

c4710n 感谢。弄了2个小时。