Need a little help in configuring Wireguard+Xray config on Mikrotik with XHTTP

[dcavni]

Hi,

So i was using this config file for connecting one Mikrotik to another using XRAY:
Server:

{
  "log": {
  "error": "/var/log/xray/error.log",
  "access": "/var/log/xray/access.log",
      "loglevel": "none"
  },
"dns": {
      "servers": [
          {
              "address": "https://1.1.1.1/dns-query",
              "skipFallback": true,
              "queryStrategy": "UseIPv4"
          }
      ]
  },
  "routing": {
      "rules": [
          {
              "ip": [
                  "1.1.1.1"
              ],
              "outboundTag": "direct"
          }

      ]
  },
"inbounds": [
      {
          "listen": "0.0.0.0",
          "port": 1080,
          "protocol": "socks",
          "settings": {
              "udp": true
          }
      },
  {
          "listen":"0.0.0.0",
          "port": 51822,
          "protocol":"dokodemo-door",
          "settings":{
              "address":"172.20.0.1",
              "port":51822,
              "network":"udp"
          }
      }
  ],
  "outbounds": [
      {
          "protocol": "vless",
          "settings": {
              "vnext": [
                  {
                      "address": "*.sn.mynetname.net",
                      "port": 443,
                      "users": [
                          {
                              "id": "hidden",
                              "encryption": "none",
                              "flow": ""
                          }
                      ]
                  }
              ]
          },
          "streamSettings": {
              "network": "h2",
              "security": "reality",
              "realitySettings": {
                  "show": false,
                  "fingerprint": "chrome",
                  "serverName": "www.microsoft.com",
                  "publicKey": "hidden",
                  "shortId": "hidden", 
                  "spiderX": ""
              }
          },
          "tag": "proxy"
      }
  ]
}

and client:

{
  "log": {
  "error": "/var/log/xray/error.log",
  "access": "/var/log/xray/access.log",
      "loglevel": "none"
  },
"dns": {
      "servers": [
          {
              "address": "https://1.1.1.1/dns-query",
              "skipFallback": true,
              "queryStrategy": "UseIPv4"
          }
      ]
  },
  "routing": {
      "rules": [
          {
              "ip": [
                  "1.1.1.1"
              ],
              "outboundTag": "direct"
          }

      ]
  },
"inbounds": [
      {
          "listen": "0.0.0.0",
          "port": 1080,
          "protocol": "socks",
          "settings": {
              "udp": true
          }
      },
  {
          "listen":"0.0.0.0",
          "port": 51822,
          "protocol":"dokodemo-door",
          "settings":{
              "address":"172.20.0.1",
              "port":51822,
              "network":"udp"
          }
      }
  ],
  "outbounds": [
      {
          "protocol": "vless",
          "settings": {
              "vnext": [
                  {
                      "address": "hidden",
                      "port": 443,
                      "users": [
                          {
                              "id": "hidden",
                              "encryption": "none",
                              "flow": ""
                          }
                      ]
                  }
              ]
          },
          "streamSettings": {
              "network": "h2",
              "security": "reality",
              "realitySettings": {
                  "show": false,
                  "fingerprint": "chrome",
                  "serverName": "www.microsoft.com",
                  "publicKey": "hidden",
                  "shortId": "hidden", 
                  "spiderX": ""
              }
          },
          "tag": "proxy"
      }
  ]
}

And with this i can connect with wireguard over XRAY and even put EOIP on top of it and everything works in older versions.

I would like now to move to XHTTP and newest XRAY version because of possible DPI problems, but whatever i do i simply don't manage to find a working configuration that wireguard would connect.

After two days and with the help of AI i managed to get to this, but Wireguard still doesn't go throough:

Server

{
  "log": {
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log",
    "loglevel": "none"
  },
  "routing": {
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private", "172.20.0.0/16"],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": ["1.1.1.1"],
        "outboundTag": "direct"
      }
    ]
  },
  "inbounds": [
    {
      "listen": "0.0.0.0",
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [
          {
            "id": "hidden",
            "flow": "xtls-rprx-vision"
          }
        ],
        "decryption": "none"
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "www.cloudflare.com:443",
          "xver": 0,
          "serverNames": ["www.cloudflare.com"],
          "privateKey": "hidden",
          "shortIds": ["hidden"],
          "fingerprint": "chrome"
        },
        "xhttpSettings": {
          "mode": "auto"
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "tag": "direct"
    }
  ]
}

Client

{
  "log": {
    "error": "/var/log/xray/error.log",
    "access": "/var/log/xray/access.log",
    "loglevel": "none"
  },
  "dns": {
    "servers": [
      {
        "address": "https://1.1.1.1/dns-query",
        "skipFallback": true,
        "queryStrategy": "UseIPv4"
      }
    ]
  },
  "routing": {
    "rules": [
      {
        "type": "field",
        "ip": ["geoip:private", "172.20.0.0/16"],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "ip": ["1.1.1.1"],
        "outboundTag": "direct"
      }
    ]
  },
  "inbounds": [
    {
      "listen": "0.0.0.0",
      "port": 1080,
      "protocol": "socks",
      "settings": {
        "udp": true
      }
    },
    {
      "listen": "0.0.0.0",
      "port": 51822,
      "protocol": "tunnel",
      "settings": {
        "address": "172.20.0.1",
        "port": 51822,
        "network": "udp"
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "address": "x.sn.mynetname.net",
            "port": 443,
            "users": [
              {
                "id": "hidden",
                "encryption": "none",
                "flow": "xtls-rprx-vision"
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "xhttp",
        "security": "reality",
        "realitySettings": {
          "show": false,
          "fingerprint": "chrome",
          "serverName": "www.cloudflare.com",
          "publicKey": "hidden",
          "shortId": "hidden"
        },
        "xhttpSettings": {
          "mode": "auto"
        }
      },
      "tag": "proxy"
    },
    {
      "protocol": "freedom",
      "tag": "direct"
    }
  ]
}

Any help would be much appriciated.

[dcavni]

Tried again today with latest version of Xray but i still don't manage to get Wireguard through. I get errors like this:

xray:latest: 2026/05/15 23:49:06.862470 from tcp:IP:5138 accepted udp:172.20.1.1:51822 [direct] xray:latest: 2026/05/15 23:49:06.862470 from tcp:IP:5138 accepted udp:172.20.1.1:51822 [direct]

xray:latest: 2026/05/15 23:49:06.862658 [Info] [3556422736] proxy/freedom: blocked target: udp:172.20.1.1:51822, blackholing connection for 34s

xray:latest: 2026/05/15 23:49:06.862865 [Info] [3556422736] common/mux: session 0 ends. > io: read/write on closed pipe

It works without problem on older version teddysun/xray:24.11.21