震惊！移动把我阿里云服务器屏蔽了？

手机突然访问不了自己的网站了，让ai分析了下：

<FAIL_SOURCE_IP>

Problem Mobile Network

|

| ① TCP SYN

v

<PUBLIC_SERVER>

|

| ② SYN / ACK

v

Client

|

| ③ ACK

v

<PUBLIC_SERVER>

           TCP_HANDSHAKE = PASS ✅

    # 说明公网 443 可达，TCP 三次握手正常

    # 不是“端口没开 / 服务器完全不可达”



    

  

============================================================

                 Client

                    |

                    | ④ TLS ClientHello

                    |    SNI = <REDACTED_DOMAIN>

                    v

            <PUBLIC_SERVER>

                    |

                    | ⑤ TLS ServerHello

                    |    + 后续 TLS 数据

                    v

                 Client



      TLS_CLIENTHELLO_REACHED_SERVER = YES ✅

      TLS_SERVERHELLO_LEFT_SERVER     = YES ✅



    # Server 已正常收到 ClientHello

    # 并正常返回 ServerHello / TLS 数据

    # 说明服务端 TLS 并未主动拒绝连接



    

  

============================================================

          随后出现异常：



        [ Middle Path / Carrier ]

                    |

                    | ⑥ TCP RST

                    | src = <FAIL_SOURCE_IP>

                    v

            <PUBLIC_SERVER>



      RST_SEEN_AT_SERVER       = YES

      RST_DIRECTION            = SOURCE_SIDE -> SERVER

      RST_GENERATED_BY_SERVER  = NO ❌



    # RST 虽然使用客户端源 IP，

    # 但包指纹与前面的正常客户端流量明显不同：



    TTL       != normal client packets

    IP_ID     != normal client packets

    TCP_WINDOW!= normal client packets



    # 因此更符合：

    # middle-path / carrier-side RST injection



    

  

============================================================

            TLS 连接被提前终止

                    |

                    X

                    |

              HTTP Request

              尚未真正产生

                    |

                    v



      NGINX_ACCESS_LOG = NONE

      NGINX_ERROR_LOG  = NONE



    # 所以 nginx 看不到 HTTP 请求是正常的

    # 故障发生在 HTTP 层之前



    

  

============================================================

对照实验：

External Host

-> <PUBLIC_SERVER> ✅ PASS

Other Mobile Network

-> <PUBLIC_SERVER> ✅ PASS

Problem Mobile Network

-> <PUBLIC_SERVER> ❌ RESET

PC via Problem Mobile Hotspot

-> <PUBLIC_SERVER> ❌ RESET

============================================================

SERVER SIDE:

DNS = PASS ✅

TCP = PASS ✅

TLS = PASS ✅

NGINX = PASS ✅

FRP = PASS ✅

BACKEND = PASS ✅

FAILURE_BOUNDARY =

SOURCE NETWORK / MIDDLE NETWORK PATH

ROOT_CAUSE_DIRECTION =

MIDDLE_PATH_RESET_INJECTION

核心证据：

ClientHello -> Server ✅

ServerHello -> Client ✅

Server initiated RST ❌

Source-side / middle-path RST ✅

HTTP reached nginx ❌

换一个电信的卡就能正常访问，移动把我阿里云服务器屏蔽了？

^-^