震惊！移动把我阿里云服务器屏蔽了？

手机突然访问不了自己的网站了，让ai分析了下：

<FAIL_SOURCE_IP>

Problem Mobile Network

|

| ① TCP SYN

v

<PUBLIC_SERVER>

|

| ② SYN / ACK

v

Client

|

| ③ ACK

v

<PUBLIC_SERVER>```
TCP_HANDSHAKE = PASS ✅
# 说明公网 443 可达，TCP 三次握手正常
# 不是“端口没开 / 服务器完全不可达”

``============================================================``
Client
|
| ④ TLS ClientHello
| SNI = <REDACTED_DOMAIN>
v
<PUBLIC_SERVER>
|
| ⑤ TLS ServerHello
| + 后续 TLS 数据
v
Client

TLS_CLIENTHELLO_REACHED_SERVER = YES ✅
TLS_SERVERHELLO_LEFT_SERVER = YES ✅

# Server 已正常收到 ClientHello
# 并正常返回 ServerHello / TLS 数据
# 说明服务端 TLS 并未主动拒绝连接

``============================================================``
随后出现异常：

[ Middle Path / Carrier ]
|
| ⑥ TCP RST
| src = <FAIL_SOURCE_IP>
v
<PUBLIC_SERVER>

RST_SEEN_AT_SERVER = YES
RST_DIRECTION = SOURCE_SIDE -> SERVER
RST_GENERATED_BY_SERVER = NO ❌

# RST 虽然使用客户端源 IP，
# 但包指纹与前面的正常客户端流量明显不同：

TTL != normal client packets
IP_ID != normal client packets
TCP_WINDOW!= normal client packets

# 因此更符合：
# middle-path / carrier-side RST injection

``============================================================``
TLS 连接被提前终止
|
X
|
HTTP Request
尚未真正产生
|
v

NGINX_ACCESS_LOG = NONE
NGINX_ERROR_LOG = NONE

# 所以 nginx 看不到 HTTP 请求是正常的
# 故障发生在 HTTP 层之前

```============================================================

对照实验：

External Host

-> <PUBLIC_SERVER> ✅ PASS

Other Mobile Network

-> <PUBLIC_SERVER> ✅ PASS

Problem Mobile Network

-> <PUBLIC_SERVER> ❌ RESET

PC via Problem Mobile Hotspot

-> <PUBLIC_SERVER> ❌ RESET

============================================================

SERVER SIDE:

DNS = PASS ✅

TCP = PASS ✅

TLS = PASS ✅

NGINX = PASS ✅

FRP = PASS ✅

BACKEND = PASS ✅

FAILURE_BOUNDARY =

SOURCE NETWORK / MIDDLE NETWORK PATH

ROOT_CAUSE_DIRECTION =

MIDDLE_PATH_RESET_INJECTION

核心证据：

ClientHello -> Server ✅

ServerHello -> Client ✅

Server initiated RST ❌

Source-side / middle-path RST ✅

HTTP reached nginx ❌

换一个电信的卡就能正常访问，移动把我阿里云服务器屏蔽了？

^-^