粗略性能测试: gRPC / TUIC / Hysteria2 / XTLS / 隧道套娃 #2925

qwerr0 · 2024-01-10T13:43:53Z

qwerr0
Jan 10, 2024

假设在 XTLS Reality 隧道里跑 gRPC(关闭TLS和Reality流控), 是否存在 TLS in TLS 问题?

qwerr0 · 2024-01-11T17:47:43Z

qwerr0
Jan 11, 2024
Author

在个人电脑上简单测试了一下性能, 有一些新的发现
SS(AES) + gRPC(无加密)
带宽: 7.92G

SS(CHACHA20) + gRPC(无加密)
带宽: 6.54G

SS(Plain) + gRPC(无加密)
带宽: 9.31G

VLESS(无加密) + gRPC(无加密)
带宽: 9.38G

VLESS(Reality) + gRPC(无加密)
带宽: 5.18G

gRPC(无加密)
带宽: 10.4G

gRPC(Reality)
带宽: 7G

VLESS(Reality) + gRPC(Reality)
带宽: 7.37G

VLESS(Reality)
带宽: 23.9G

VLESS(无加密)
带宽: 24.4G

3 replies

qwerr0 Jan 11, 2024
Author

带宽不是20G以上时CPU占用大概在40%~60%, gRPC 跑在隧道上时, 使用 Reality 性能比不加密还强

qwerr0 Jan 11, 2024
Author

测试使用 iperf3 -P 24 -R, gRPC 开启了 tcpMptcp, tcpNoDelay, multiMode, tcpFastOpen(日志警告说不支持)

qwerr0 Jan 11, 2024
Author

带宽跑得越高, 内存占用就越高, 带宽不到20GB时内存占用大概都是250MB左右

qwerr0 · 2024-01-11T20:01:56Z

qwerr0
Jan 11, 2024
Author

为了更贴合实际情况一些使用如下配置测试(数据看个大概):
代理服务端信息:
广州移动 Platinum 8124M 2C2G
中转限速 800Mbps 单线程限速 500Mbps
Xray 最新版

代理客户端信息:
红米AX6 ARM64 4核x1.2G 实际最大内存400M (IP转发开启且不能关闭)
Clash Meta Alpha 分支手动编译最新版使用TProxy方式代理

测速客户端信息:
个人电脑性能较好
使用 iperf3 -P 4 -R 对中转进行测速

测试使用的协议约定:
VLESS 指 VLESS + TCP + 无任何加密和流控
gRPC 指 VLESS + gRPC + 无任何加密和流控
VLESS Reality 指 VLESS + TCP + Reality (VLESS-TCP-XTLS-Vision-REALITY)
gRPC Reality 指 VLESS + gRPC + Reality (VLESS-gRPC-REALITY)
Trojan 未测

(测速客户端 iperf3 <-> 代理客户端 <-> 中转) <=> (中转 iperf3)

按照如下格式列出数据:
协议名称
测速平均速率路由器的CPU大概占用

VLESS Reality (单线程测速 -P 1)
510Mbps 40%

VLESS Reality
744Mbps 85%

VLESS
680Mbps 65%
(不清楚为什么裸奔反而跑不满测试了两次也是这样)

gRPC Reality
340Mbps 65%
(内存占用很高当梯子跑SpeedTest多线程测速会OOM导致掉速)

gRPC
388Mbps 70%

SS-CHA
662Mbps 85%

SS-AES
729Mbps 75%

VLESS Reality + VLESS Reality
665Mbps 80%

VLESS Reality + VLESS
696Mbps 85%

gRPC Reality + gRPC Reality
240Mbps 80%

gRPC Reality + VLESS
269Mbps 75%

gRPC Reality + VLESS Reality
246Mbps 75%

gRPC + VLESS Reality
400Mbps 85%

gRPC + VLESS
400Mbps 80%

gRPC + SS(AES)
400Mbps 85%

gRPC + SS(ChaCha)
400Mbps 85%

2 replies

qwerr0 Jan 11, 2024
Author

Clash 测试使用的关键配置:

tunnels:
  - tcp,127.0.0.1:1000,中转地址:1000,隧道
  - tcp,127.0.0.1:1001,中转地址:1001,隧道
  - tcp,127.0.0.1:1002,中转地址:1002,隧道
  - tcp,127.0.0.1:1003,中转地址:1003,隧道
  - tcp,127.0.0.1:1004,中转地址:1004,隧道
  - tcp,127.0.0.1:1005,中转地址:1005,隧道
  - tcp,127.0.0.1:1006,中转地址:1006,隧道

proxies:
  - { name: 'vless-reality', type: vless, server: 中转地址, port: 1000, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: tcp, servername: d1.awsstatic.com, udp: true, tls: true, flow: xtls-rprx-vision, reality-opts: { public-key: 公钥, short-id: 114514 }, client-fingerprint: chrome }
  - { name: 'vless', type: vless, server: 中转地址, port: 1001, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: tcp, udp: true, tls: false }
  - { name: 'grpc-reality', type: vless, server: 中转地址, port: 1002, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: grpc, servername: d1.awsstatic.com, udp: true, tls: true, grpc-opts: { grpc-service-name: g }, reality-opts: { public-key: 公钥, short-id: 114514 }, client-fingerprint: chrome }
  - { name: 'grpc', type: vless, server: 中转地址, port: 1003, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: grpc, udp: true, tls: false, grpc-opts: { grpc-service-name: g } }
  - { name: 'ss-cha', type: ss, server: 中转地址, port: 1004, cipher: chacha20-ietf-poly1305, password: 密码, udp: true }
  - { name: 'ss-aes', type: ss, server: 中转地址, port: 1005, cipher: aes-128-gcm, password: 密码, udp: true }
  - { name: 'tun-vless-reality', type: vless, server: 127.0.0.1, port: 1000, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: tcp, servername: d1.awsstatic.com, udp: true, tls: true, flow: xtls-rprx-vision, reality-opts: { public-key: 公钥, short-id: 114514 }, client-fingerprint: chrome }
  - { name: 'tun-vless', type: vless, server: 127.0.0.1, port: 1001, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: tcp, udp: true, tls: false }
  - { name: 'tun-grpc-reality', type: vless, server: 127.0.0.1, port: 1002, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: grpc, servername: d1.awsstatic.com, udp: true, tls: true, grpc-opts: { grpc-service-name: g }, reality-opts: { public-key: 公钥, short-id: 114514 }, client-fingerprint: chrome }
  - { name: 'tun-grpc', type: vless, server: 127.0.0.1, port: 1003, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, network: grpc, udp: true, tls: false, grpc-opts: { grpc-service-name: g } }
  - { name: 'tun-ss-cha', type: ss, server: 127.0.0.1, port: 1004, cipher: chacha20-ietf-poly1305, password: 密码, udp: true }
  - { name: 'tun-ss-aes', type: ss, server: 127.0.0.1, port: 1005, cipher: aes-128-gcm, password: 密码, udp: true }
  - { name: 'trojan-grpc', type: trojan, server: 中转地址, port: 1006, network: grpc, udp: true, password: 密码, tls: true, sni: d1.awsstatic.com, skip-cert-verify: true, grpc-opts: { grpc-service-name: g } }
  - { name: 'tun-trojan-grpc', type: trojan, server: 127.0.0.1, port: 1006, network: grpc, udp: true, password: 密码, tls: true, sni: d1.awsstatic.com, skip-cert-verify: true, grpc-opts: { grpc-service-name: g } }

proxy-groups:
  - name: 代理
    type: select
    proxies: [vless-reality, vless, grpc-reality, grpc, ss-cha, ss-aes, trojan-grpc, tun-vless-reality, tun-vless, tun-grpc-reality, tun-grpc, tun-ss-cha, tun-ss-aes, tun-trojan-grpc]

  - name: 隧道
    type: select
    proxies: [vless-reality, vless, grpc-reality, grpc, ss-cha, ss-aes, trojan-grpc]

qwerr0 Jan 11, 2024
Author

Xray 服务端使用的配置:

{ "log": { "loglevel": "debug" }, "inbounds": [ { "tag": "vless-reality", "port": 1000, "protocol": "vless", "settings": { "clients": [ { "id": "1ed783f9-b479-47dc-86de-277b28fa2b7e", "email": "TEST", "flow": "xtls-rprx-vision" } ], "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "show": true, "privateKey": "私钥", "serverNames": [ "d1.awsstatic.com" ], "shortIds": [ "114514" ], "dest": "d1.awsstatic.com:443", "minClientVer": "" }, "sockopt": { "tcpFastOpen": true, "tcpNoDelay": true, "tcpMptcp": true } } }, { "tag": "vless", "port": 1001, "protocol": "vless", "settings": { "clients": [ { "id": "1ed783f9-b479-47dc-86de-277b28fa2b7e", "email": "TEST", "flow": "" } ], "decryption": "none" }, "streamSettings": { "network": "tcp", "security": "none", "sockopt": { "tcpFastOpen": true, "tcpNoDelay": true, "tcpMptcp": true } } }, { "tag": "grpc-reality", "port": 1002, "protocol": "vless", "settings": { "clients": [ { "id": "1ed783f9-b479-47dc-86de-277b28fa2b7e", "email": "TEST", "flow": "" } ], "decryption": "none" }, "streamSettings": { "network": "grpc", "security": "reality", "realitySettings": { "show": true, "privateKey": "私钥", "serverNames": [ "d1.awsstatic.com" ], "shortIds": [ "114514" ], "dest": "d1.awsstatic.com:443", "minClientVer": "" }, "grpcSettings": { "serviceName": "g" }, "sockopt": { "tcpFastOpen": true, "tcpNoDelay": true, "tcpMptcp": true } } }, { "tag": "grpc", "port": 1003, "protocol": "vless", "settings": { "clients": [ { "id": "1ed783f9-b479-47dc-86de-277b28fa2b7e", "email": "TEST", "flow": "" } ], "decryption": "none" }, "streamSettings": { "network": "grpc", "security": "none", "grpcSettings": { "serviceName": "g" }, "sockopt": { "tcpFastOpen": true, "tcpNoDelay": true, "tcpMptcp": true } } }, { "tag": "ss-cha", "port": 1004, "protocol": "shadowsocks", "settings": { "method": "chacha20-ietf-poly1305", "password": "密码" } }, { "tag": "ss-aes", "port": 1005, "protocol": "shadowsocks", "settings": { "method": "aes-128-gcm", "password": "密码" } }, { "tag": "trojan-grpc", "port": 1006, "protocol": "trojan", "settings": { "clients": [ { "password": "密码", "email": "test" } ] }, "streamSettings": { "network": "grpc", "security": "tls", "tlsSettings": { "serverName": "d1.awsstatic.com", "allowInsecure": true, "minVersion": "1.2" }, "grpcSettings": { "serviceName": "g" }, "sockopt": { "tcpFastOpen": true, "tcpNoDelay": true, "tcpMptcp": true } } } ], "outbounds": [ { "protocol": "freedom", "streamSettings": { "sockopt": { "mark": 2 } } } ] }

qwerr0 · 2024-01-11T22:10:32Z

qwerr0
Jan 11, 2024
Author

顺便测试一下基于UDP的多路复用
和上面是同样的环境, 服务端使用 sing-box
注: 直接用 iperf3 测UDP可以跑满千兆

Clash Meta 下 TUIC 和 Hysteria2 的速率:
TUIC
230Mbps 80%

Hysteria2
200Mbps 70%
(多跑几次内存不足触发OOM)

Hysteria2-CC
最高100Mbps -
(跑几秒就直接OOM)

看起来能多路复用的协议基本都需要耗费更多的性能和内存, 不太适合在低性能设备上使用

1 reply

qwerr0 Jan 11, 2024
Author

Clash 测试使用的关键配置:

proxies:
  - { name: 'TUIC', type: tuic, server: 中转地址, port: 65002, uuid: 1ed783f9-b479-47dc-86de-277b28fa2b7e, password: 密码, disable-sni: true, reduce-rtt: false, udp-relay-mode: native, skip-cert-verify: true }
  - { name: 'Hysteria2', type: hysteria2, server: 中转地址, port: 64002, password: 密码, skip-cert-verify: true }
  - { name: 'Hysteria2-CC', type: hysteria2, server: 中转地址, port: 64002, password: 密码, skip-cert-verify: true, up: "800 Mbps", down: "800 Mbps" }

sing-box 服务端使用的配置:

{ "inbounds": [ { "type": "tuic", "listen": "::", "listen_port": 65002, "users": [ { "uuid": "1ed783f9-b479-47dc-86de-277b28fa2b7e", "password": "密码" } ], "congestion_control": "bbr", "zero_rtt_handshake": false, "tls": { "enabled": true, "alpn": ["h3"], "certificate_path": "/etc/xray/cert/server.cer", "key_path": "/etc/xray/cert/server.key" } }, { "type": "hysteria2", "listen": "::", "listen_port": 64002, "up_mbps": 800, "down_mbps": 800, "ignore_client_bandwidth": false, "users": [ { "password": "密码" } ], "tls": { "enabled": true, "alpn": ["h3"], "certificate_path": "/etc/xray/cert/server.cer", "key_path": "/etc/xray/cert/server.key" } } ], "outbounds": [ { "type": "direct" } ] }

qwerr0 · 2024-01-11T22:39:57Z

qwerr0
Jan 11, 2024
Author

简单测试一下部分协议的日常使用性能
客户端 <-> (协议名字)中转(VLESS Reality) <-> 落地
VLESS Reality: 油管速度比较稳定, 最高到 360, 000Kbps 而且很容易跑到这个速率, 拖动进度条速度很快会恢复
gRPC + VLESS Reality: 油管速率上升比较慢, 最高可以到 300, 000Kbps, 拖动进度条掉速度很快
TUIC: 油管速率比 Reality 还稳定一点点, 最高到 400, 000Kbps, 一般跑在 330, 000Kbps, 拖动进度条速率甚至不会掉下 200, 000Kbps
Hysteria2: 油管速率稳定性相比 TUIC 略差, 最高到 370, 000Kbps, 一般跑在 350, 000Kbps, 拖动进度条容易掉下 200, 000Kbps, 恢复较快
Hysteria2-CC: 表现和Hysteria2类似, 但是更不稳定一些

0 replies

qwerr0 · 2024-01-11T23:20:52Z

qwerr0
Jan 11, 2024
Author

综合考虑后, 我推荐的配置:
如果有中转和落地:
中转 <-> 落地: 使用 VLESS Reality 或 gRPC Reality + MPTCP (这些情况推荐: 线路高峰时期丢包率低, 单线程能跑到很高 / 落地RTT延迟很高)
客户端 <-> 中转: 日常使用 TUIC, 下载测速时使用 VLESS Reality, 也可以尝试 gRPC Reality(需要吃掉更多内存, CPU性能也有一定要求, 同时推荐配置一个负载均衡避免单线程限速的问题)

如果有机场和落地:
把机场作为隧道(一般是SS协议自带一层加密), 配置 Clash 的故障转移, 体验一个SSH连接挂着两天都不掉的稳定, 和不需要握手的超低 HTTP RTT 延迟, 直接使用 gRPC, 似乎在 Clash Meta 里配置 Tunnel 的负载均衡有点麻烦, 那么多线程就有可能会跑不满

0 replies

liyunlong5 · 2025-01-25T10:47:12Z

liyunlong5
Jan 25, 2025

好贴啊，刚看到，附上一个我自己一些别的简单结论

1.meta安卓客户端使用mrs（rule-set）和geodata方案相比，相同规则内存占用小80-100M

2.SS-LIBEV还能用，轻量级流量还是稳的（适合特殊低流量用途）

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

粗略性能测试: gRPC / TUIC / Hysteria2 / XTLS / 隧道套娃 #2925

{{title}}

Replies: 6 comments 6 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

Select a reply

粗略性能测试: gRPC / TUIC / Hysteria2 / XTLS / 隧道套娃 #2925

qwerr0 Jan 10, 2024

Replies: 6 comments · 6 replies

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

qwerr0 Jan 11, 2024 Author

liyunlong5 Jan 25, 2025

qwerr0
Jan 10, 2024

Replies: 6 comments 6 replies

qwerr0
Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0
Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0
Jan 11, 2024
Author

qwerr0 Jan 11, 2024
Author

qwerr0
Jan 11, 2024
Author

qwerr0
Jan 11, 2024
Author

liyunlong5
Jan 25, 2025