Xray(vision + reality) 启动之后会和 dest:443 建立很多 TCP 连接，请教一下原因？

[L33tW1z]

在 Xray 启动之后，没有任何客户端连接的情况下，Xray 和 dest:443 建立了 2000 多个连接。
dest 网站是参考这个手选的，满足 TLS 1.3、X25519、H2以及未套 Cloudflare CDN。代理使用一切正常，只是偶然发现在不使用的情况下，也会有流量。查看进程和网络连接后，发现 TCP 连接特别多。相同的配置在其他的 VPS 上 TCP 连接数是正常的。
请问有人遇到类似的情况，或者知道原因么？

服务端配置（点击展开）

{
  "log": null,
  "routing": {
    "rules": [
      {
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api",
        "type": "field"
      },
      {
        "ip": [
          "geoip:private"
        ],
        "outboundTag": "blocked",
        "type": "field"
      },
      {
        "outboundTag": "blocked",
        "protocol": [
          "bittorrent"
        ],
        "type": "field"
      }
    ]
  },
  "dns": null,
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 12345,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1"
      },
      "streamSettings": null,
      "tag": "api",
      "sniffing": null
    },
    {
      "listen": null,
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "",
            "email": "",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none",
        "fallbacks": []
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "dest_domain:443",
          "xver": 0,
          "serverNames": [
            "dest_domain"
          ],
          "privateKey": "",
          "publicKey": "",
          "minClient": "",
          "maxClient": "",
          "maxTimediff": 0,
          "shortIds": [
            "",
            "11"
          ]
        },
        "tcpSettings": {
          "header": {
            "type": "none"
          },
          "acceptProxyProtocol": false
        }
      },
      "tag": "inbound-443",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {}
    },
    {
      "protocol": "blackhole",
      "settings": {},
      "tag": "blocked"
    }
  ],
  "transport": null,
  "policy": {
    "levels": {
      "0": {
        "handshake": 10,
        "connIdle": 100,
        "uplinkOnly": 2,
        "downlinkOnly": 3,
        "statsUserUplink": true,
        "statsUserDownlink": true,
        "bufferSize": 10240
      }
    },
    "system": {
      "statsInboundDownlink": true,
      "statsInboundUplink": true
    }
  },
  "api": {
    "services": [
      "HandlerService",
      "LoggerService",
      "StatsService"
    ],
    "tag": "api"
  },
  "stats": {},
  "reverse": null,
  "fakeDns": null
}

// 查看TCP连接，大约有 2000 多个和 dest 的连接
❯ sudo ss -tnp | more
State    Recv-Q Send-Q    Local Address:Port    Peer Address:Port     Process
ESTAB    0      0          server_ip:34378      dest_domain_ip:443    users:(("xray-linux-amd6",pid=746231,fd=7849))
ESTAB    0      0          server_ip:32830      dest_domain_ip:443    users:(("xray-linux-amd6",pid=746231,fd=5771))
ESTAB    0      0          server_ip:41678      dest_domain_ip:443    users:(("xray-linux-amd6",pid=746231,fd=1833))
ESTAB    0      0          server_ip:58492      dest_domain_ip:443    users:(("xray-linux-amd6",pid=746231,fd=6863))
ESTAB    0      0          server_ip:37700      dest_domain_ip:443    users:(("xray-linux-amd6",pid=746231,fd=3111))
...

❯ sudo ss -tnp | grep 'dest_domain_ip' | wc -l
2818

[wyfang]

我也遇到了，就是TCP数量会一直增加。

ss -antp | grep ESTAB | awk '{print $6}' | cut -d, -f1 | sort | uniq -c | sort -rn | head -n 10
    385 users:(("xray-linux-amd6"
      2 users:(("sshd"
      1 users:(("nezha-agent"