вот что получил после введения команды: C:\Users\Grey>ssh -L 8443:127.0.0.1:7830 root@92.242.164.225 root@92.242.164.225's password: Welcome to Ubuntu 24.04 LTS (GNU/Linux 6.8.0-117-generic x86_64) * Documentation: https://help.ubuntu.com * Management: https://landscape.canonical.com * Support: https://ubuntu.com/pro System information as of Tue May 26 12:57:56 PM UTC 2026 System load: 0.02 Processes: 134 Usage of /: 23.6% of 39.29GB Users logged in: 1 Memory usage: 10% IPv4 address for eth0: 92.242.164.225 Swap usage: 0% * Strictly confined Kubernetes makes edge and IoT secure. Learn how MicroK8s just raised the bar for easy, resilient and secure K8s cluster deployment. https://ubuntu.com/engage/secure-kubernetes-at-the-edge Expanded Security Maintenance for Applications is not enabled. 297 updates can be applied immediately. 22 of these updates are standard security updates. To see these additional updates run: apt list --upgradable 1 additional security update can be applied with ESM Apps. Learn more about enabling ESM Apps service at https://ubuntu.com/esm Last login: Tue May 26 12:52:08 2026 from 92.242.164.225

[Telegram Anten-ka club id:-1002445567608 topic:5655 +1m Tue 2026-05-26 11:36 UTC] Grey Makarov (468688749): <media:document> [Replying to Anten-ka Ai Helper DOG id:45106] На роутере, не в 3x-ui. Если это Keenetic + XKeen, ищи в веб-морде: Приложения → XRay/XKeen → Конфигурация → 04_outbounds.json и рядом 05_routing.json. Или просто открой по SSH файл: /usb/etc/xray/configs/04_outbounds.json. Мне нужен скрин/текст, где видно tag, address, port, serverName, publicKey, shortId. ✅ [/Replying] <file name="05_routing---c405a4a1-57f7-4183-a3a7-7b866fed3160.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="1cb00551a3f13f69">>> Source: External --- { "routing": { "rules": [ { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "ip": ["92.242.164.225/32"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "network": "udp", "port": "135, 137, 138, 139" }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "domain": ["appcenter.ms"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "domain": [ "regexp:^([\\w\\-\\.]+\\.)ru$", "regexp:^([\\w\\-\\.]+\\.)su$", "regexp:^([\\w\\-\\.]+\\.)xn--p1ai$", "regexp:^([\\w\\-\\.]+\\.)xn--p1acf$", "regexp:^([\\w\\-\\.]+\\.)xn--80asehdb$", "regexp:^([\\w\\-\\.]+\\.)xn--c1avg$", "regexp:^([\\w\\-\\.]+\\.)xn--80aswg$", "regexp:^([\\w\\-\\.]+\\.)xn--80adxhks$", "regexp:^([\\w\\-\\.]+\\.)moscow$", "regexp:^([\\w\\-\\.]+\\.)xn--d1acj3b$", "ext:geosite_v2fly.dat:category-gov-ru", "ext:geosite_v2fly.dat:private", "ext:geosite_v2fly.dat:yandex", "ext:geosite_v2fly.dat:steam", "ext:geosite_v2fly.dat:vk" ] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "protocol": ["bittorrent"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "vless-reality", "type": "field" } ] } } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="1cb00551a3f13f69">>> </file> <file name="04_outbounds---2715ae6c-ec46-4f89-aa3e-ba6bb4a8369c.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="c293d18c8c6fac51">>> Source: External --- { "outbounds": [ { "tag": "vless-reality", "protocol": "vless", "settings": { "vnext": [ { "address": "92.242.164.225", "port": 443, "users": [ { "id": "fb18f0f4-0f16-45a7-93ed-bc72968e26c4", "flow": "xtls-rprx-vision", "encryption": "none", "level": 0 } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "glht0A6LbGl-tvR91tKbgPysVxjI3OT2pUh6VSYxp1Q", "fingerprint": "chrome", "serverName": "max.ru", "shortId": "dc", "spiderX": "/" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="c293d18c8c6fac51">>> </file>

[Telegram Anten-ka club id:-1002445567608 topic:5655 +1m Tue 2026-05-26 10:49 UTC] Grey Makarov (468688749): <media:document> [Replying to Anten-ka Ai Helper DOG id:45052] Это только routing для клиентского трафика, он тут норм. А ошибка у тебя в outbound’е каскада, нужен ещё файл с outbounds и правилом, куда смотрит vless-reality на втором VPS. Скидывай outbounds с первого VPS, там обычно и сидит косяк. ✅ [/Replying] <file name="04_outbounds---0ea80893-c4a9-41d1-a184-6b55d758ef56.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="f2ebc1c068c8b72d">>> Source: External --- { "outbounds": [ { "tag": "vless-reality", "protocol": "vless", "settings": { "vnext": [ { "address": "92.242.164.225", "port": 443, "users": [ { "id": "fb18f0f4-0f16-45a7-93ed-bc72968e26c4", "flow": "xtls-rprx-vision", "encryption": "none", "level": 0 } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "glht0A6LbGl-tvR91tKbgPysVxjI3OT2pUh6VSYxp1Q", "fingerprint": "chrome", "serverName": "max.ru", "shortId": "dc", "spiderX": "/" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="f2ebc1c068c8b72d">>> </file>

root@instzav:/etc/telemt# sudo tail -n 50 /var/log/nginx/access.log /var/log/nginx/error.log ==> /var/log/nginx/access.log <== 134.122.28.88 - - [24/May/2026:16:43:15 +0000] "GET /swagger.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:16 +0000] "GET /swagger/v1/swagger.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:17 +0000] "GET /v2/api-docs HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:18 +0000] "GET /v3/api-docs HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:19 +0000] "GET /api-docs/swagger.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:20 +0000] "GET /api/swagger.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:21 +0000] "GET /trace.axd HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:22 +0000] "GET /@vite/env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:23 +0000] "GET /.vscode/sftp.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:24 +0000] "OPTIONS / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:25 +0000] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 134.122.28.88 - - [24/May/2026:16:43:26 +0000] "GET /debug/default/view?panel=config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (l9scan/2.0.132323e29383e2532313e29383; +https://leakix.net)" 131.153.172.174 - - [24/May/2026:16:45:14 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.113.113.43 - - [24/May/2026:16:48:17 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0(WindowsNT6.0)AppleWebKit/537.36(KHTML,likeGecko)Chrome/31.0.1650.63Safari/537.36" 143.137.164.22 - - [24/May/2026:16:50:23 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 143.137.164.22 - - [24/May/2026:16:50:24 +0000] "GET http://npkiz.site/favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 143.137.164.22 - - [24/May/2026:16:50:25 +0000] "GET http://npkiz.site/favicon.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Mobile/15E148 Safari/604.1" 45.86.18.23 - - [24/May/2026:16:50:27 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 45.86.18.23 - - [24/May/2026:16:50:28 +0000] "GET http://npkiz.site/favicon.ico HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 45.86.18.23 - - [24/May/2026:16:50:28 +0000] "GET /favicon.png HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 170.246.54.219 - - [24/May/2026:16:50:29 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (iPad; CPU OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Mobile/15E148 Safari/604.1"