tun -> direct 无法正常代理 Wifi Calling 的请求
Open
Nobody has claimed this yet.
bug
- Dominant language
- Go
- Stars
- 38.1k
- Forks
- 4.6k
- Avg merge
- 19d 15h
- Merged PRs (30d)
- 1
Description
操作系统
Linux
系统版本
Ubuntu 24.04.3 LTS aarch64
安装类型
sing-box 原始命令行程序
如果您使用图形客户端程序，请提供该程序版本。
No response
版本
sing-box version 1.12.8
Environment: go1.25.1 linux/arm64
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_acme,with_clash_api,with_tailscale
Revision: 573c6179ab4fc1b9ecb8f049299bb1dfe8babc97
CGO: disabled
描述
sing-box 部署在局域网的 ubuntu server 做透明代理，inbound tun + outbound direct 时，iPhone 通过配置网关、DNS 使请求流经 sing-box 的服务，iPhone 的 Wifi Calling 无法成功建立链接（其他请求正常）。
iPhone 不配置网关、DNS，直连时，Wifi Calling 能够正常工作。
重现方式
sing-box 配置如下
{
"log": {
"level": "info",
"output": "/tmp/box.log",
"timestamp": true
},
"dns": {
"servers": [
{
"type": "https",
"tag": "dns_resolver",
"server": "223.5.5.5"
}
],
"strategy": "ipv4_only"
},
"ntp": {
"enabled": true,
"interval": "30m0s",
"server": "time.apple.com",
"server_port": 123
},
"inbounds": [
{
"type": "tun",
"tag": "tun-in",
"address": "172.18.0.1/30",
"auto_route": true,
"auto_redirect": true
}
],
"outbounds": [
{
"type": "direct",
"tag": "direct"
}
],
"route": {
"rules": [
{
"action": "sniff"
},
{
"type": "logical",
"mode": "or",
"rules": [
{
"protocol": "dns"
},
{
"port": 53
}
],
"action": "hijack-dns"
},
{
"ip_is_private": true,
"outbound": "direct"
}
],
"final": "direct",
"auto_detect_interface": true,
"default_domain_resolver": "dns_resolver"
},
"experimental": {
"cache_file": {
"enabled": true,
"store_rdrc": true
},
"clash_api": {
"external_controller": "0.0.0.0:9090",
"external_ui": "dashboard",
"external_ui_download_url": "https://github.com/metacubex/metacubexd/archive/gh-pages.zip"
}
}
}
尝试在 inbound.tun 加入 mut: 1400，或者在 outbound.direct 加入 udp_fragment: true 均无法解决问题。
尝试在 inbound.tun 加入 udp_fragment: true，会报错，执行 sing-box check -c /etc/sing-box/config.json 输出如下
FATAL[0000] decode config at /etc/sing-box/config.json: inbounds[0].udp_fragment: json: unknown field "udp_fragment"
但按照 tun 里 listen field 的文档 ，是可以加这个参数的。
日志
sing-box 日志如下
+0000 2025-09-14 03:35:56 INFO network: updated default interface enp0s1, index 2
+0000 2025-09-14 03:35:56 DEBUG dns: lookup domain time.apple.com
+0000 2025-09-14 03:35:56 DEBUG dns: exchanged time.apple.com NOERROR 67
+0000 2025-09-14 03:35:56 DEBUG dns: exchanged CNAME time.apple.com. 67 IN CNAME time.g.aaplimg.com.
+0000 2025-09-14 03:35:56 DEBUG dns: exchanged A time.g.aaplimg.com. 67 IN A 17.253.116.253
+0000 2025-09-14 03:35:56 DEBUG dns: exchanged A time.g.aaplimg.com. 67 IN A 17.253.84.123
+0000 2025-09-14 03:35:56 DEBUG dns: exchanged A time.g.aaplimg.com. 67 IN A 17.253.116.125
+0000 2025-09-14 03:35:56 DEBUG dns: lookup succeed for time.apple.com: 17.253.116.253 17.253.84.123 17.253.116.125
+0000 2025-09-14 03:35:56 INFO ntp: updated time: 2025-09-14 03:35:56 +0000
+0000 2025-09-14 03:35:56 TRACE inbound/tun[tun-in]: creating stack
+0000 2025-09-14 03:35:56 INFO inbound/tun[tun-in]: started at tun0
+0000 2025-09-14 03:35:56 INFO clash-api: restful api listening at [::]:9090
+0000 2025-09-14 03:35:56 INFO sing-box started (0.200s)
+0000 2025-09-14 03:36:01 INFO [3981423728 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:4500
+0000 2025-09-14 03:36:01 INFO [3981423728 0ms] inbound/tun[tun-in]: inbound packet connection to 208.54.34.3:4500
+0000 2025-09-14 03:36:01 DEBUG [3981423728 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:01 INFO [3981423728 0ms] outbound/direct[direct]: outbound packet connection
+0000 2025-09-14 03:36:02 INFO [877586400 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:53412
+0000 2025-09-14 03:36:02 INFO [877586400 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:02 INFO [3016157379 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:54509
+0000 2025-09-14 03:36:02 DEBUG [877586400 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:02 INFO [3016157379 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:02 DEBUG [877586400 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:02 DEBUG [3016157379 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:02 DEBUG [3016157379 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:02 DEBUG [3016157379 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:02 DEBUG [877586400 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:02 DEBUG [3016157379 0ms] dns: exchange captive.apple.com. IN HTTPS
+0000 2025-09-14 03:36:02 DEBUG [877586400 0ms] dns: exchange _dns.resolver.arpa. IN SVCB
+0000 2025-09-14 03:36:02 INFO [1450388394 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:62784
+0000 2025-09-14 03:36:02 INFO [1450388394 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:02 DEBUG [1450388394 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:02 DEBUG [1450388394 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:02 DEBUG [1450388394 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:02 DEBUG [1450388394 0ms] dns: exchange captive.apple.com. IN A
+0000 2025-09-14 03:36:02 DEBUG [3016157379 8ms] dns: exchanged captive.apple.com NOERROR 8
+0000 2025-09-14 03:36:02 INFO [3016157379 8ms] dns: exchanged CNAME captive.apple.com. 8 IN CNAME captive-cidr.origin-apple.com.akadns.net.
+0000 2025-09-14 03:36:02 INFO [3016157379 8ms] dns: exchanged CNAME captive-cidr.origin-apple.com.akadns.net. 8 IN CNAME captive-cdn.origin-apple.com.akadns.net.
+0000 2025-09-14 03:36:02 INFO [3016157379 8ms] dns: exchanged CNAME captive-cdn.origin-apple.com.akadns.net. 8 IN CNAME captive.g.aaplimg.com.
+0000 2025-09-14 03:36:02 INFO [3016157379 8ms] dns: exchanged CNAME captive.g.aaplimg.com. 8 IN CNAME captive.apple.com.edgekey.net.
+0000 2025-09-14 03:36:02 INFO [3016157379 8ms] dns: exchanged CNAME captive.apple.com.edgekey.net. 8 IN CNAME e7279.dsce9.akamaiedge.net.
+0000 2025-09-14 03:36:02 DEBUG [1450388394 8ms] dns: exchanged captive.apple.com NOERROR 8
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged CNAME captive.apple.com. 8 IN CNAME captive-cidr.origin-apple.com.akadns.net.
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged CNAME captive-cidr.origin-apple.com.akadns.net. 8 IN CNAME captive-cdn.origin-apple.com.akadns.net.
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged CNAME captive-cdn.origin-apple.com.akadns.net. 8 IN CNAME captive.g.aaplimg.com.
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged CNAME captive.g.aaplimg.com. 8 IN CNAME captive.apple.com.edgekey.net.
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged CNAME captive.apple.com.edgekey.net. 8 IN CNAME e7279.dsce9.akamaiedge.net.
+0000 2025-09-14 03:36:02 INFO [1450388394 8ms] dns: exchanged A e7279.dsce9.akamaiedge.net. 8 IN A 23.40.193.79
+0000 2025-09-14 03:36:02 DEBUG [877586400 8ms] dns: exchanged _dns.resolver.arpa NXDOMAIN 115
+0000 2025-09-14 03:36:02 INFO [877586400 8ms] dns: exchanged SOA arpa. 115 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025091301 1800 900 604800 86400
+0000 2025-09-14 03:36:03 INFO [4156806289 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:64505
+0000 2025-09-14 03:36:03 INFO [4156806289 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [4156806289 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [4156806289 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [4156806289 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [4156806289 0ms] dns: exchange www.google.com. IN A
+0000 2025-09-14 03:36:03 INFO [2106867643 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:60324
+0000 2025-09-14 03:36:03 INFO [2106867643 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [2106867643 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [2106867643 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [2106867643 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 INFO [471052896 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:65077
+0000 2025-09-14 03:36:03 DEBUG [2106867643 0ms] dns: exchange e7279.dsce9.akamaiedge.net. IN HTTPS
+0000 2025-09-14 03:36:03 INFO [471052896 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [471052896 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [471052896 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [471052896 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [471052896 0ms] dns: exchange _dns.resolver.arpa. IN SVCB
+0000 2025-09-14 03:36:03 INFO [3197056263 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:57729
+0000 2025-09-14 03:36:03 INFO [3197056263 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [3197056263 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3197056263 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [3197056263 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [4156806289 8ms] dns: exchanged www.google.com NOERROR 124
+0000 2025-09-14 03:36:03 INFO [4156806289 8ms] dns: exchanged A www.google.com. 124 IN A 31.13.94.49
+0000 2025-09-14 03:36:03 DEBUG [3197056263 0ms] dns: exchange fp-us-tmobile.rcs.telephony.goog. IN NAPTR
+0000 2025-09-14 03:36:03 INFO [3711328354 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:59842
+0000 2025-09-14 03:36:03 INFO [3711328354 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [3711328354 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3711328354 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [3711328354 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [3711328354 0ms] dns: exchange 50-courier.push.apple.com. IN A
+0000 2025-09-14 03:36:03 DEBUG [2106867643 7ms] dns: exchanged e7279.dsce9.akamaiedge.net NOERROR 349
+0000 2025-09-14 03:36:03 INFO [2106867643 7ms] dns: exchanged SOA dsce9.akamaiedge.net. 349 IN SOA n0dsce9.akamaiedge.net. hostmaster.akamai.com. 1757820711 1000 1000 1000 1800
+0000 2025-09-14 03:36:03 DEBUG [471052896 7ms] dns: exchanged _dns.resolver.arpa NXDOMAIN 115
+0000 2025-09-14 03:36:03 INFO [471052896 7ms] dns: exchanged SOA arpa. 115 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025091301 1800 900 604800 86400
+0000 2025-09-14 03:36:03 INFO [3584029270 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58399
+0000 2025-09-14 03:36:03 INFO [3584029270 0ms] inbound/tun[tun-in]: inbound connection to 23.40.193.79:80
+0000 2025-09-14 03:36:03 DEBUG [3584029270 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3197056263 7ms] dns: exchanged fp-us-tmobile.rcs.telephony.goog NOERROR 25
+0000 2025-09-14 03:36:03 INFO [3197056263 7ms] dns: exchanged NAPTR fp-us-tmobile.rcs.telephony.goog. 25 IN NAPTR 100 100 "s" "SIPS+D2T" "" _sips._tcp.fp-us-tmobile.rcs.telephony.goog.
+0000 2025-09-14 03:36:03 DEBUG [3711328354 8ms] dns: exchanged 50-courier.push.apple.com NOERROR 17
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged CNAME 50-courier.push.apple.com. 17 IN CNAME 50.courier-push-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged CNAME 50.courier-push-apple.com.akadns.net. 17 IN CNAME apac-asia-courier-4.push-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged A apac-asia-courier-4.push-apple.com.akadns.net. 17 IN A 17.57.145.154
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged A apac-asia-courier-4.push-apple.com.akadns.net. 17 IN A 17.57.145.149
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged A apac-asia-courier-4.push-apple.com.akadns.net. 17 IN A 17.57.145.150
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged A apac-asia-courier-4.push-apple.com.akadns.net. 17 IN A 17.57.145.153
+0000 2025-09-14 03:36:03 INFO [3711328354 8ms] dns: exchanged A apac-asia-courier-4.push-apple.com.akadns.net. 17 IN A 17.57.145.148
+0000 2025-09-14 03:36:03 DEBUG [3584029270 1ms] router: sniffed protocol: http, domain: captive.apple.com
+0000 2025-09-14 03:36:03 INFO [3584029270 1ms] outbound/direct[direct]: outbound connection to 23.40.193.79:80
+0000 2025-09-14 03:36:03 INFO [2408191485 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:53944
+0000 2025-09-14 03:36:03 INFO [2408191485 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [2408191485 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [2408191485 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [2408191485 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [2408191485 0ms] dns: exchange _sips._tcp.fp-us-tmobile.rcs.telephony.goog. IN SRV
+0000 2025-09-14 03:36:03 INFO [1614841492 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:55193
+0000 2025-09-14 03:36:03 INFO [1614841492 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [1614841492 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [1614841492 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [1614841492 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [1614841492 0ms] dns: exchange fp-us-tmobile.rcs.telephony.goog. IN A
+0000 2025-09-14 03:36:03 INFO [3009844133 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:59931
+0000 2025-09-14 03:36:03 INFO [3009844133 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [3009844133 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3009844133 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [3009844133 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [3009844133 0ms] dns: exchange ziap.zimperium.com. IN HTTPS
+0000 2025-09-14 03:36:03 INFO [2979497112 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:56622
+0000 2025-09-14 03:36:03 INFO [2979497112 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [2979497112 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [2979497112 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [2979497112 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [2979497112 0ms] dns: exchange ziap.zimperium.com. IN A
+0000 2025-09-14 03:36:03 INFO [934676769 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58400
+0000 2025-09-14 03:36:03 INFO [934676769 0ms] inbound/tun[tun-in]: inbound connection to 17.57.145.154:5223
+0000 2025-09-14 03:36:03 DEBUG [934676769 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [934676769 0ms] router: sniffed protocol: tls, domain: courier.push.apple.com
+0000 2025-09-14 03:36:03 INFO [934676769 0ms] outbound/direct[direct]: outbound connection to 17.57.145.154:5223
+0000 2025-09-14 03:36:03 DEBUG [2408191485 7ms] dns: exchanged _sips._tcp.fp-us-tmobile.rcs.telephony.goog NOERROR 237
+0000 2025-09-14 03:36:03 INFO [2408191485 7ms] dns: exchanged SRV _sips._tcp.fp-us-tmobile.rcs.telephony.goog. 237 IN SRV 20 0 5223 fp-us-tmobile.rcs.telephony.goog.
+0000 2025-09-14 03:36:03 INFO [2408191485 7ms] dns: exchanged SRV _sips._tcp.fp-us-tmobile.rcs.telephony.goog. 237 IN SRV 30 0 443 fp-us-tmobile.rcs.telephony.goog.
+0000 2025-09-14 03:36:03 DEBUG [1614841492 7ms] dns: exchanged fp-us-tmobile.rcs.telephony.goog NOERROR 145
+0000 2025-09-14 03:36:03 INFO [1614841492 7ms] dns: exchanged A fp-us-tmobile.rcs.telephony.goog. 145 IN A 216.239.36.131
+0000 2025-09-14 03:36:03 INFO [3288682243 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58401
+0000 2025-09-14 03:36:03 INFO [3288682243 0ms] inbound/tun[tun-in]: inbound connection to 216.239.36.131:5223
+0000 2025-09-14 03:36:03 DEBUG [3288682243 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3288682243 0ms] router: sniffed protocol: tls, domain: fp-us-tmobile.rcs.telephony.goog
+0000 2025-09-14 03:36:03 INFO [3288682243 0ms] outbound/direct[direct]: outbound connection to 216.239.36.131:5223
+0000 2025-09-14 03:36:03 INFO [2123809573 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:59764
+0000 2025-09-14 03:36:03 INFO [2123809573 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [2123809573 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [2123809573 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [2123809573 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [2123809573 0ms] dns: exchange gateway.icloud.com. IN A
+0000 2025-09-14 03:36:03 DEBUG [2123809573 7ms] dns: exchanged gateway.icloud.com NOERROR 31
+0000 2025-09-14 03:36:03 INFO [2123809573 7ms] dns: exchanged CNAME gateway.icloud.com. 31 IN CNAME gateway.fe2.apple-dns.net.
+0000 2025-09-14 03:36:03 INFO [2123809573 7ms] dns: exchanged A gateway.fe2.apple-dns.net. 31 IN A 17.248.216.68
+0000 2025-09-14 03:36:03 INFO [2123809573 7ms] dns: exchanged A gateway.fe2.apple-dns.net. 31 IN A 17.248.216.66
+0000 2025-09-14 03:36:03 INFO [2123809573 7ms] dns: exchanged A gateway.fe2.apple-dns.net. 31 IN A 17.248.216.69
+0000 2025-09-14 03:36:03 INFO [2123809573 7ms] dns: exchanged A gateway.fe2.apple-dns.net. 31 IN A 17.248.216.65
+0000 2025-09-14 03:36:03 INFO [2840676626 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:54809
+0000 2025-09-14 03:36:03 INFO [2840676626 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [2840676626 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [2840676626 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [2840676626 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [2840676626 0ms] dns: exchange gateway.fe2.apple-dns.net. IN HTTPS
+0000 2025-09-14 03:36:03 DEBUG [2840676626 7ms] dns: exchanged gateway.fe2.apple-dns.net NOERROR 253
+0000 2025-09-14 03:36:03 INFO [2840676626 7ms] dns: exchanged SOA fe2.apple-dns.net. 253 IN SOA ns-1396.awsdns-46.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400
+0000 2025-09-14 03:36:03 DEBUG [3009844133 68ms] dns: exchanged ziap.zimperium.com NOERROR 1
+0000 2025-09-14 03:36:03 INFO [3009844133 68ms] dns: exchanged SOA zimperium.com. 1 IN SOA a1-168.akam.net. support.zimperium.com. 2020016966 28800 7200 604800 3600
+0000 2025-09-14 03:36:03 DEBUG [2979497112 68ms] dns: exchanged ziap.zimperium.com NOERROR 1
+0000 2025-09-14 03:36:03 INFO [2979497112 68ms] dns: exchanged A ziap.zimperium.com. 1 IN A 129.80.92.168
+0000 2025-09-14 03:36:03 INFO [1588167351 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58402
+0000 2025-09-14 03:36:03 INFO [1588167351 0ms] inbound/tun[tun-in]: inbound connection to 17.248.216.68:443
+0000 2025-09-14 03:36:03 DEBUG [1588167351 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [1588167351 0ms] router: sniffed protocol: tls, domain: gateway.icloud.com
+0000 2025-09-14 03:36:03 INFO [1588167351 0ms] outbound/direct[direct]: outbound connection to 17.248.216.68:443
+0000 2025-09-14 03:36:03 DEBUG [3584029270 171ms] connection: connection upload finished
+0000 2025-09-14 03:36:03 INFO [595892799 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:54948
+0000 2025-09-14 03:36:03 INFO [595892799 0ms] inbound/tun[tun-in]: inbound connection to 129.80.92.168:443
+0000 2025-09-14 03:36:03 DEBUG [595892799 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [595892799 12ms] router: sniffed protocol: tls, domain: ziap.zimperium.com
+0000 2025-09-14 03:36:03 INFO [595892799 12ms] outbound/direct[direct]: outbound connection to 129.80.92.168:443
+0000 2025-09-14 03:36:03 DEBUG [3584029270 237ms] connection: connection download finished
+0000 2025-09-14 03:36:03 INFO [4110019273 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58403
+0000 2025-09-14 03:36:03 INFO [4110019273 0ms] inbound/tun[tun-in]: inbound connection to 17.248.216.68:443
+0000 2025-09-14 03:36:03 DEBUG [4110019273 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [4110019273 0ms] router: sniffed protocol: tls, domain: gateway.icloud.com
+0000 2025-09-14 03:36:03 INFO [4110019273 1ms] outbound/direct[direct]: outbound connection to 17.248.216.68:443
+0000 2025-09-14 03:36:03 INFO [3245272528 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:55373
+0000 2025-09-14 03:36:03 INFO [3245272528 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [3245272528 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [3245272528 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [3245272528 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [3245272528 0ms] dns: exchange sandbox.itunes.apple.com. IN A
+0000 2025-09-14 03:36:03 INFO [1104866245 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:49402
+0000 2025-09-14 03:36:03 INFO [1104866245 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [1104866245 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [1104866245 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [1104866245 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [1104866245 0ms] dns: exchange sandbox.itunes.apple.com. IN HTTPS
+0000 2025-09-14 03:36:03 DEBUG [3245272528 8ms] dns: exchanged sandbox.itunes.apple.com NOERROR 77
+0000 2025-09-14 03:36:03 INFO [3245272528 8ms] dns: exchanged CNAME sandbox.itunes.apple.com. 77 IN CNAME sandbox.itunes-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [3245272528 8ms] dns: exchanged CNAME sandbox.itunes-apple.com.akadns.net. 77 IN CNAME sandbox-origin.itunes-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [3245272528 8ms] dns: exchanged A sandbox-origin.itunes-apple.com.akadns.net. 77 IN A 17.156.129.37
+0000 2025-09-14 03:36:03 DEBUG [1104866245 8ms] dns: exchanged sandbox.itunes.apple.com NOERROR 76
+0000 2025-09-14 03:36:03 INFO [1104866245 8ms] dns: exchanged CNAME sandbox.itunes.apple.com. 76 IN CNAME sandbox.itunes-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [1104866245 8ms] dns: exchanged CNAME sandbox.itunes-apple.com.akadns.net. 76 IN CNAME sandbox-origin.itunes-apple.com.akadns.net.
+0000 2025-09-14 03:36:03 INFO [4085132168 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:52213
+0000 2025-09-14 03:36:03 INFO [4085132168 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:03 DEBUG [4085132168 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [4085132168 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:03 DEBUG [4085132168 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:03 DEBUG [4085132168 0ms] dns: exchange sandbox-origin.itunes-apple.com.akadns.net. IN HTTPS
+0000 2025-09-14 03:36:03 INFO [1605131112 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:63999
+0000 2025-09-14 03:36:03 INFO [1605131112 0ms] inbound/tun[tun-in]: inbound packet connection to 8.8.8.3:80
+0000 2025-09-14 03:36:03 DEBUG [1605131112 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 INFO [1605131112 0ms] outbound/direct[direct]: outbound packet connection
+0000 2025-09-14 03:36:03 INFO [761908262 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:60466
+0000 2025-09-14 03:36:03 INFO [761908262 0ms] inbound/tun[tun-in]: inbound packet connection to 8.8.8.2:80
+0000 2025-09-14 03:36:03 DEBUG [761908262 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 INFO [761908262 0ms] outbound/direct[direct]: outbound packet connection
+0000 2025-09-14 03:36:03 DEBUG [4085132168 7ms] dns: exchanged sandbox-origin.itunes-apple.com.akadns.net NOERROR 1
+0000 2025-09-14 03:36:03 INFO [4085132168 7ms] dns: exchanged SOA akadns.net. 1 IN SOA internal.akadns.net. hostmaster.akamai.com. 1741200000 90000 90000 90000 180
+0000 2025-09-14 03:36:03 INFO [26290638 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:54949
+0000 2025-09-14 03:36:03 INFO [26290638 0ms] inbound/tun[tun-in]: inbound connection to 129.80.92.168:443
+0000 2025-09-14 03:36:03 DEBUG [26290638 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [26290638 16ms] router: sniffed protocol: tls, domain: ziap.zimperium.com
+0000 2025-09-14 03:36:03 INFO [26290638 16ms] outbound/direct[direct]: outbound connection to 129.80.92.168:443
+0000 2025-09-14 03:36:03 INFO [864811918 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58404
+0000 2025-09-14 03:36:03 INFO [864811918 0ms] inbound/tun[tun-in]: inbound connection to 17.156.129.37:443
+0000 2025-09-14 03:36:03 DEBUG [864811918 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:03 DEBUG [864811918 0ms] router: sniffed protocol: tls, domain: sandbox.itunes.apple.com
+0000 2025-09-14 03:36:03 INFO [864811918 0ms] outbound/direct[direct]: outbound connection to 17.156.129.37:443
+0000 2025-09-14 03:36:04 TRACE [3288682243 1.35s] connection: connection upload closed
+0000 2025-09-14 03:36:04 DEBUG [3288682243 1.35s] connection: connection download finished
+0000 2025-09-14 03:36:04 INFO [1349259852 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:58807
+0000 2025-09-14 03:36:04 INFO [1349259852 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:04 DEBUG [1349259852 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 DEBUG [1349259852 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:04 DEBUG [1349259852 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:04 DEBUG [1349259852 0ms] dns: exchange dispatcher.is.autonavi.com. IN HTTPS
+0000 2025-09-14 03:36:04 INFO [3070642765 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:63320
+0000 2025-09-14 03:36:04 INFO [3070642765 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:04 DEBUG [3070642765 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 DEBUG [3070642765 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:04 DEBUG [3070642765 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:04 DEBUG [3070642765 0ms] dns: exchange dispatcher.is.autonavi.com. IN A
+0000 2025-09-14 03:36:04 DEBUG [3070642765 8ms] dns: exchanged dispatcher.is.autonavi.com NOERROR 31
+0000 2025-09-14 03:36:04 INFO [3070642765 8ms] dns: exchanged CNAME dispatcher.is.autonavi.com. 31 IN CNAME dispatcher.is.autonavi.com.gds.alibabadns.com.
+0000 2025-09-14 03:36:04 INFO [3070642765 8ms] dns: exchanged A dispatcher.is.autonavi.com.gds.alibabadns.com. 31 IN A 59.82.14.171
+0000 2025-09-14 03:36:04 DEBUG [1349259852 8ms] dns: exchanged dispatcher.is.autonavi.com NOERROR 127
+0000 2025-09-14 03:36:04 INFO [1349259852 8ms] dns: exchanged CNAME dispatcher.is.autonavi.com. 127 IN CNAME dispatcher.is.autonavi.com.gds.alibabadns.com.
+0000 2025-09-14 03:36:04 INFO [2524877289 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:53905
+0000 2025-09-14 03:36:04 INFO [2524877289 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:04 DEBUG [2524877289 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 DEBUG [2524877289 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:04 DEBUG [2524877289 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:04 DEBUG [2524877289 0ms] dns: exchange dispatcher.is.autonavi.com.gds.alibabadns.com. IN HTTPS
+0000 2025-09-14 03:36:04 DEBUG [2524877289 7ms] dns: exchanged dispatcher.is.autonavi.com.gds.alibabadns.com NOERROR 55
+0000 2025-09-14 03:36:04 INFO [2524877289 7ms] dns: exchanged SOA gds.alibabadns.com. 55 IN SOA gdsns1.alibabadns.com. none. 2018122017 1800 600 3600 360
+0000 2025-09-14 03:36:04 INFO [365499251 0ms] inbound/tun[tun-in]: inbound redirect connection from 192.168.10.23:58405
+0000 2025-09-14 03:36:04 INFO [365499251 0ms] inbound/tun[tun-in]: inbound connection to 59.82.14.171:443
+0000 2025-09-14 03:36:04 DEBUG [365499251 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 DEBUG [365499251 0ms] router: sniffed protocol: tls, domain: dispatcher.is.autonavi.com
+0000 2025-09-14 03:36:04 INFO [365499251 0ms] outbound/direct[direct]: outbound connection to 59.82.14.171:443
+0000 2025-09-14 03:36:04 INFO [3842968825 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:54921
+0000 2025-09-14 03:36:04 INFO [3842968825 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:04 DEBUG [3842968825 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 DEBUG [3842968825 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:04 DEBUG [3842968825 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:04 DEBUG [3842968825 0ms] dns: exchange ss.epdg.epc.mnc260.mcc310.pub.3gppnetwork.org. IN A
+0000 2025-09-14 03:36:04 DEBUG [3842968825 10ms] dns: exchanged ss.epdg.epc.mnc260.mcc310.pub.3gppnetwork.org NOERROR 5
+0000 2025-09-14 03:36:04 INFO [3842968825 10ms] dns: exchanged CNAME ss.epdg.epc.mnc260.mcc310.pub.3gppnetwork.org. 5 IN CNAME ss.epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org.
+0000 2025-09-14 03:36:04 INFO [3842968825 10ms] dns: exchanged A ss.epdg.epc.geo.mnc260.mcc310.pub.3gppnetwork.org. 5 IN A 208.54.5.195
+0000 2025-09-14 03:36:04 INFO [2760872118 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:500
+0000 2025-09-14 03:36:04 INFO [2760872118 0ms] inbound/tun[tun-in]: inbound packet connection to 208.54.5.195:500
+0000 2025-09-14 03:36:04 DEBUG [2760872118 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:04 INFO [2760872118 0ms] outbound/direct[direct]: outbound packet connection
+0000 2025-09-14 03:36:05 INFO [2037657046 0ms] inbound/tun[tun-in]: inbound packet connection from 192.168.10.23:61205
+0000 2025-09-14 03:36:05 INFO [2037657046 0ms] inbound/tun[tun-in]: inbound packet connection to 172.18.0.2:53
+0000 2025-09-14 03:36:05 DEBUG [2037657046 0ms] router: match[0] => sniff
+0000 2025-09-14 03:36:05 DEBUG [2037657046 0ms] router: sniffed packet protocol: dns
+0000 2025-09-14 03:36:05 DEBUG [2037657046 0ms] router: match[1] protocol=dns || port=53 => hijack-dns
+0000 2025-09-14 03:36:05 DEBUG [2037657046 0ms] dns: exchange p216-imap.mail.icloud.com.cn. IN A
+0000 2025-09-14 03:36:05 DEBUG [2037657046 8ms] dns: exchanged p216-imap.mail.icloud.com.cn NOERROR 112
+0000 2025-09-14 03:36:05 INFO [2037657046 8ms] dns: exchanged CNAME p216-imap.mail.icloud.com.cn. 112 IN CNAME imap.mail-aipo.apple-dns.cn.
+0000 2025-09-14 03:36:05 INFO [2037657046 8ms] dns: exchanged A imap.mail-aipo.apple-dns.cn. 112 IN A 112.19.242.77
后面试着在 sing-box 所在服务器执行 `tcpdump -ni any "host 192.168.10.23 and (udp port 500 or 4500)" -vv -c 30` 输出如下（192.168.10.23 是 iPhone 的 IP）
tcpdump: data link type LINUX_SLL2
tcpdump: listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
03:57:18.374679 enp0s1 In IP (tos 0x0, ttl 64, id 40795, offset 0, flags [none], proto UDP (17), length 112)
192.168.10.23.4500 > 208.54.39.35.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000005 cookie ec37243d3fdc16af->779a94a7f8e4e405: child_sa inf2[I]:
(v2e: len=48)
03:57:18.374821 tun0 Out IP (tos 0x0, ttl 63, id 40795, offset 0, flags [none], proto UDP (17), length 112)
192.168.10.23.4500 > 208.54.39.35.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000005 cookie ec37243d3fdc16af->779a94a7f8e4e405: child_sa inf2[I]:
(v2e: len=48)
03:57:18.536854 tun0 In IP (tos 0x0, ttl 64, id 25560, offset 0, flags [none], proto UDP (17), length 112)
208.54.39.35.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000005 cookie ec37243d3fdc16af->779a94a7f8e4e405: child_sa inf2[R]:
(v2e: len=48)
03:57:18.536889 enp0s1 Out IP (tos 0x0, ttl 63, id 25560, offset 0, flags [none], proto UDP (17), length 112)
208.54.39.35.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000005 cookie ec37243d3fdc16af->779a94a7f8e4e405: child_sa inf2[R]:
(v2e: len=48)
03:57:23.401660 enp0s1 In IP (tos 0x0, ttl 64, id 13974, offset 0, flags [none], proto UDP (17), length 452)
192.168.10.23.500 > 208.54.2.195.500: [udp sum ok] isakmp 2.0 msgid 00000000 cookie a5957c479156a570->0000000000000000: parent_sa ikev2_init[I]:
(sa: len=44
(p: #1 protoid=isakmp transform=4 len=44
(t: #1 type=encr id=aes (type=keylen value=0100))
(t: #2 type=integ id=#12 )
(t: #3 type=prf id=#5 )
(t: #4 type=dh id=modp2048 )))
(v2ke: len=256 group=modp2048)
(nonce: len=16 nonce=(501000bab6368f33005070a64a8f5074) )
(n: prot_id=#0 type=16388(nat_detection_source_ip))
(n: prot_id=#0 type=16389(nat_detection_destination_ip))
(n: prot_id=#0 type=16430(status))
03:57:23.401683 tun0 Out IP (tos 0x0, ttl 63, id 13974, offset 0, flags [none], proto UDP (17), length 452)
192.168.10.23.500 > 208.54.2.195.500: [udp sum ok] isakmp 2.0 msgid 00000000 cookie a5957c479156a570->0000000000000000: parent_sa ikev2_init[I]:
(sa: len=44
(p: #1 protoid=isakmp transform=4 len=44
(t: #1 type=encr id=aes (type=keylen value=0100))
(t: #2 type=integ id=#12 )
(t: #3 type=prf id=#5 )
(t: #4 type=dh id=modp2048 )))
(v2ke: len=256 group=modp2048)
(nonce: len=16 nonce=(501000bab6368f33005070a64a8f5074) )
(n: prot_id=#0 type=16388(nat_detection_source_ip))
(n: prot_id=#0 type=16389(nat_detection_destination_ip))
(n: prot_id=#0 type=16430(status))
03:57:23.568604 tun0 In IP (tos 0x0, ttl 64, id 9911, offset 0, flags [none], proto UDP (17), length 460)
208.54.2.195.500 > 192.168.10.23.500: [no cksum] isakmp 2.0 msgid 00000000 cookie a5957c479156a570->681dff91de530905: parent_sa ikev2_init[R]:
(sa: len=44
(p: #1 protoid=isakmp transform=4 len=44
(t: #1 type=encr id=aes (type=keylen value=0100))
(t: #2 type=integ id=#12 )
(t: #3 type=prf id=#5 )
(t: #4 type=dh id=modp2048 )))
(v2ke: len=256 group=modp2048)
(nonce: len=32 nonce=(aca21c050a9c8f53a0d467a881173ba3796069c79c4706f724322826c82fc65e) )
(n: prot_id=#0 type=16388(nat_detection_source_ip))
(n: prot_id=#0 type=16389(nat_detection_destination_ip))
03:57:23.568634 enp0s1 Out IP (tos 0x0, ttl 63, id 9911, offset 0, flags [none], proto UDP (17), length 460)
208.54.2.195.500 > 192.168.10.23.500: [no cksum] isakmp 2.0 msgid 00000000 cookie a5957c479156a570->681dff91de530905: parent_sa ikev2_init[R]:
(sa: len=44
(p: #1 protoid=isakmp transform=4 len=44
(t: #1 type=encr id=aes (type=keylen value=0100))
(t: #2 type=integ id=#12 )
(t: #3 type=prf id=#5 )
(t: #4 type=dh id=modp2048 )))
(v2ke: len=256 group=modp2048)
(nonce: len=32 nonce=(aca21c050a9c8f53a0d467a881173ba3796069c79c4706f724322826c82fc65e) )
(n: prot_id=#0 type=16388(nat_detection_source_ip))
(n: prot_id=#0 type=16389(nat_detection_destination_ip))
03:57:23.582186 enp0s1 In IP (tos 0x0, ttl 64, id 59356, offset 0, flags [none], proto UDP (17), length 384)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000001 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=320)
03:57:23.582231 tun0 Out IP (tos 0x0, ttl 63, id 59356, offset 0, flags [none], proto UDP (17), length 384)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000001 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=320)
03:57:23.798235 tun0 In IP (tos 0x0, ttl 64, id 56853, offset 0, flags [none], proto UDP (17), length 176)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000001 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=112)
03:57:23.798267 enp0s1 Out IP (tos 0x0, ttl 63, id 56853, offset 0, flags [none], proto UDP (17), length 176)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000001 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=112)
03:57:23.831243 enp0s1 In IP (tos 0x0, ttl 64, id 56148, offset 0, flags [none], proto UDP (17), length 512)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000002 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=448)
03:57:23.831275 tun0 Out IP (tos 0x0, ttl 63, id 56148, offset 0, flags [none], proto UDP (17), length 512)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000002 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=448)
03:57:24.203575 tun0 In IP (tos 0x0, ttl 64, id 36892, offset 0, flags [none], proto UDP (17), length 208)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000002 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=144)
03:57:24.203606 enp0s1 Out IP (tos 0x0, ttl 63, id 36892, offset 0, flags [none], proto UDP (17), length 208)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000002 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=144)
03:57:24.244396 enp0s1 In IP (tos 0x0, ttl 64, id 50471, offset 0, flags [none], proto UDP (17), length 144)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000003 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=80)
03:57:24.244451 tun0 Out IP (tos 0x0, ttl 63, id 50471, offset 0, flags [none], proto UDP (17), length 144)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000003 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=80)
03:57:24.648835 tun0 In IP (tos 0x0, ttl 64, id 43836, offset 0, flags [none], proto UDP (17), length 112)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000003 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=48)
03:57:24.648862 enp0s1 Out IP (tos 0x0, ttl 63, id 43836, offset 0, flags [none], proto UDP (17), length 112)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000003 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=48)
03:57:24.652894 enp0s1 In IP (tos 0x0, ttl 64, id 32294, offset 0, flags [none], proto UDP (17), length 144)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000004 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=80)
03:57:24.652916 tun0 Out IP (tos 0x0, ttl 63, id 32294, offset 0, flags [none], proto UDP (17), length 144)
192.168.10.23.4500 > 208.54.2.195.4500: [udp sum ok] NONESP-encap: isakmp 2.0 msgid 00000004 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[I]:
(v2e: len=80)
03:57:25.098702 tun0 In IP (tos 0x0, ttl 64, id 5067, offset 0, flags [none], proto UDP (17), length 432)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000004 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=368)
03:57:25.098734 enp0s1 Out IP (tos 0x0, ttl 63, id 5067, offset 0, flags [none], proto UDP (17), length 432)
208.54.2.195.4500 > 192.168.10.23.4500: [no cksum] NONESP-encap: isakmp 2.0 msgid 00000004 cookie a5957c479156a570->681dff91de530905: child_sa ikev2_auth[R]:
(v2e: len=368)
支持我们
- 我已经 赞助
完整性要求
- 我保证阅读了文档，了解所有我编写的配置文件项的含义，而不是大量堆砌看似有用的选项或默认值。
- 我保证提供了可以在本地重现该问题的服务器、客户端配置文件与流程，而不是一个脱敏的复杂客户端配置文件。
- 我保证提供了可用于重现我报告的错误的最简配置，而不是依赖远程服务器、TUN、图形界面客户端或者其他闭源软件。
- 我保证提供了完整的配置文件与日志，而不是出于对自身智力的自信而仅提供了部分认为有用的部分。
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the reported iPhone Wi-Fi Calling failure with the shown inbound.tun and outbound.direct configuration, focusing on the UDP/4500 traffic in the logs. Then inspect the inbound.tun listen-field validation and the documented udp_fragment option, using sing-box check to compare accepted configuration with the documentation. Done means the relevant configuration is accepted and Wi-Fi Calling works through the transparent proxy.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, linux
- Domain
- networking
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100