1. Клиентом на телефоне является FoxRay и там нет отдельной настройки IPv6. Если это не так, скажи куда зайти. 2. показывает ip моего vps 3. ок 4. я снижал MTU, vless вообще завис и перестал открывать сайты

@AntenkaAI_bot Хочу попросить тебя оценить архитектуру моего каскада со стороны - насколько он правильно построен, что улучшить. Схема такая: устройство → Bridge (Россия, 3x-UI / Xray) → Exit (Нидерланды, 3x-UI / Xray) → интернет. Первое плечо, от устройства до Bridge: VLESS + TCP + Reality, flow xtls-rprx-vision, SNI крупного популярного сайта, uTLS firefox. Порт 443, плюс port-hopping: диапазон 20101-20200 заворачивается на 443 через iptables. Второе плечо, от Bridge до Exit: VLESS + XHTTP + Reality, SNI отдельного домена, режим stream-up (scStreamUpServerSecs 20-80, xmux maxConcurrency 16-32). Outbound на Bridge заведён прямой правкой SQLite, не через GUI. Общее по обоим плечам: sockopt с tcpUserTimeout=10000 и tcpKeepAlive, BBR, MTU 1380, на Exit стоит MSS-clamp 1280 (там eth0 с MTU 1380). Маршрутизация на Bridge: российский трафик (geosite ru, geoip ru) идёт напрямую (DIRECT), всё остальное - на Exit. Bittorrent и приватные адреса блокируются. DNS через DoH. Раз в 3 дня cron перезапускает x-ui - это воркэраунд против утечки памяти в XHTTP. Параллельно поднят запасной канал через Cloudflare CDN на отдельном домене (packet-up, Origin Cert). Вопросы: 1. Архитектурно схема выстроена правильно, или есть грубые ошибки? 2. Что бы ты изменил ради стабильности? 3. Reality на обоих плечах - это нормально, или на втором плече лучше что-то другое? Что думаешь? 4. Чего тут не хватает для отказоустойчивости?

Основное плечо bridge→exit это VLESS+XHTTP+Reality (не через CF, напрямую). Борюсь с периодическими фризами от ТСПУ (TCP-freeze: пакеты молчат после ~16KB без RST). Уже стоит sockopt tcpUserTimeout=10000, BBR, MTU 1380, MSS-clamp 1280. Какой режим XHTTP (packet-up/stream-up/stream-one) и какие параметры scMaxEachPostBytes, scStreamUpServerSecs, xmux maxConcurrency дают лучшую устойчивость к фризам на трансграничном плече?

@AntenkaAI_bot Каскад VLESS: bridge (РФ) → exit (NL), на exit второй канал через Cloudflare. Схема на exit: Cloudflare proxied :443 → ▎ Nginx :443 (Origin Cert, TLS) → proxy_pass на Xray 127.0.0.1:2053 (security=none) → VLESS+XHTTP mode=packet-up. Клиент - ▎ Shadowrocket на Mac. MTU на eth0 exit = 1380, уже стоит MSS-clamp 1280. 1. «При packet-up через Cloudflare запросы доходят до сервера (вижу в access.log Nginx статус 200), но страница в браузере не отрисовывается - ответ не доходит до клиента. Скачивание с самого сервера и с другого сервера работает на 3 МБ/с. Что ломает downlink именно на клиентском плече?» (это наша проблема дословно - смотрим, узнает ли он симптом) 2. «Какой MTU выставлять в профиле Shadowrocket для XHTTP+TLS через Cloudflare CDN? И вообще влияет ли MTU клиента на downlink, или это серверный MSS-clamp?» (проверяем нашу главную гипотезу) 3. «packet-up или stream-up/stream-one лучше работает через Cloudflare без gRPC, с Nginx proxy_pass? У меня stream-one через Nginx давал 000, grpc_pass - upstream rejected error 0. Это норма?» (сверяем нашу граблю - может, у него есть рабочий рецепт stream-one) 4. «Нужны ли специальные заголовки в Nginx для XHTTP downlink через CF - chunked_transfer_encoding, gzip off, X-Accel-Buffering? Cloudflare буферизует SSE-ответы?» (это прямо то, на что указывал наш ресёрч про SSE-буферизацию)

вот mtu на РФ, такой же на Польше eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq state UP mode DEFAULT group default qlen 1000

[Interface] PrivateKey = 4K9P8j36RUDxKkqCUwFUjMUK6leijy0xKK4z+IUtIGw= Address = 10.0.0.2/32 DNS = 1.1.1.1, 1.0.0.1 MTU = 1380 # wg0-1 [Peer] PublicKey = mPbqpallcbKff2ZRhVq6hqIMD3Auhl12TwTw5Qv1BAs= AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = 186.246.34.239:19846 PresharedKey = s/ULhxKw3JgdJnjX30QBP5xuvunFtblI5i7tB7s61tY= PersistentKeepalive = 25

[Interface] PrivateKey = OI3CoPCQlr5/VIhQ/cyWxNr3VpjuGKAItaq4M4eMsEw= Address = 10.0.0.0/0 DNS = 1.1.1.1, 1.0.0.1 MTU = 1380 # wg0-1 [Peer] PublicKey = hSu/2OLrtCCVx8MoJn3m1dWNzPNpZD8iNKALg3FBKFI= AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = 186.246.34.239:31711 PresharedKey = gwKHR5/9hcJdHxZ3Z3piJw3yf0O88yQSxZ88ToYJYow= PersistentKeepalive = 25

[Interface] PrivateKey = cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM= Address = 10.0.0.2/32 DNS = 1.1.1.1, 1.0.0.1 MTU = 1380 # Wireguard-1 [Peer] PublicKey = 6Cc/sZnVJjcVuzCdbAZ70oikntHUdjVocmCUgvRQBzA= AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = 186.246.34.239:31252 PresharedKey = Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc= PersistentKeepalive = 25

{ "id": 2, "userId": 0, "up": 3460, "down": 34340, "total": 0, "allTime": 43224, "remark": "Wireguard", "enable": true, "expiryTime": 0, "trafficReset": "monthly", "lastTrafficResetTime": 0, "listen": "", "port": 31252, "protocol": "wireguard", "settings": "{\r\n \"mtu\": 1380,\r\n \"secretKey\": \"UAT0MHC5pfmjUgd7pXLHWrsdPXI8xihMictIwEAOglA=\",\r\n \"peers\": [\r\n {\r\n \"privateKey\": \"cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM=\",\r\n \"publicKey\": \"cMoiHYIJmKJmgkfmjAO8hcXXISyMujbcnEjJxoexU0Q=\",\r\n \"preSharedKey\": \"Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc=\",\r\n \"allowedIPs\": [\r\n \"0.0.0.0/0\"\r\n ],\r\n \"keepAlive\": 25\r\n }\r\n ],\r\n \"noKernelTun\": false\r\n}", "streamSettings": "", "tag": "inbound-31252", "sniffing": "{\r\n \"enabled\": true,\r\n \"destOverride\": [\r\n \"http\",\r\n \"tls\",\r\n \"quic\",\r\n \"fakedns\"\r\n ],\r\n \"metadataOnly\": false,\r\n \"routeOnly\": false\r\n}", "clientStats": [], "_cachedInbound": { "port": 31252, "listen": "", "_protocol": "wireguard", "settings": { "mtu": 1380, "secretKey": "UAT0MHC5pfmjUgd7pXLHWrsdPXI8xihMictIwEAOglA=", "pubKey": "6Cc/sZnVJjcVuzCdbAZ70oikntHUdjVocmCUgvRQBzA=", "peers": [ { "privateKey": "cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM=", "publicKey": "cMoiHYIJmKJmgkfmjAO8hcXXISyMujbcnEjJxoexU0Q=", "psk": "Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc=", "allowedIPs": [ "0.0.0.0/0" ], "keepAlive": 25 } ], "noKernelTun": false }, "stream": { "network": "tcp", "security": "none", "externalProxy": [], "tls": { "sni": "", "minVersion": "1.2", "maxVersion": "1.3", "cipherSuites": "", "rejectUnknownSni": false, "disableSystemRoot": false, "enableSessionResumption": false, "certs": [ { "useFile": true, "certFile": "", "keyFile": "", "cert": "", "key": "", "oneTimeLoading": false, "usage": "encipherment", "buildChain": false } ], "alpn": [ "h2", "http/1.1" ], "echServerKeys": "", "settings": { "fingerprint": "chrome", "echConfigList": "" } }, "reality": { "show": false, "xver": 0, "target": "aws.amazon.com:443", "serverNames": "aws.amazon.com", "privateKey": "", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": "ed66c06bf5974cfb,fd,d3cf,9a70dc,663b0bde,769550bb4c549d,669388ed65,6b62a59f8925", "mldsa65Seed": "", "settings": { "publicKey": "", "fingerprint": "chrome", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcp": { "acceptProxyProtocol": false, "type": "none", "request": { "version": "1.1", "method": "GET", "path": [ "/" ], "headers": [] }, "response": { "version": "1.1", "status": "200", "reason": "OK", "headers": [] } }, "kcp": { "mtu": 1350, "tti": 20, "upCap": 5, "downCap": 20, "cwndMultiplier": 1, "maxSendingWindow": 2097152 }, "ws": { "acceptProxyProtocol": false, "path": "/", "host": "", "headers": [], "heartbeatPeriod": 0 }, "grpc": { "serviceName": "", "authority": "", "multiMode": false }, "httpupgrade": { "acceptProxyProtocol": false, "path": "/", "host": "", "headers": [] }, "xhttp": { "path": "/", "host": "","headers": [], "scMaxBufferedPosts": 30, "scMaxEachPostBytes": "1000000", "scStreamUpServerSecs": "20-80", "noSSEHeader": false, "xPaddingBytes": "100-1000", "mode": "auto", "xPaddingObfsMode": false, "xPaddingKey": "", "xPaddingHeader": "", "xPaddingPlacement": "", "xPaddingMethod": "", "uplinkHTTPMethod": "", "sessionPlacement": "", "sessionKey": "", "seqPlacement": "", "seqKey": "", "uplinkDataPlacement": "", "uplinkDataKey": "", "uplinkChunkSize": 0 }, "hysteria": { "version": 2, "auth": "", "udpIdleTimeout": 60 }, "finalmask": { "tcp": [], "udp": [] } }, "tag": "inbound-31252", "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic", "fakedns" ], "metadataOnly": false, "routeOnly": false, "ipsExcluded": [], "domainsExcluded": [] }, "clientStats": [] } }

[Interface] PrivateKey = cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM= Address = 0.0.0.0/0 DNS = 1.1.1.1, 1.0.0.1 MTU = 1380 # Wireguard-1 [Peer] PublicKey = 6Cc/sZnVJjcVuzCdbAZ70oikntHUdjVocmCUgvRQBzA= AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = 186.246.34.239:31252 PresharedKey = Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc= PersistentKeepalive = 25

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host noprefixroute valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000 link/ether bc:24:11:8f:9b:ec brd ff:ff:ff:ff:ff:ff altname enp0s18 inet 186.246.34.239/24 brd 186.246.34.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::be24:11ff:fe8f:9bec/64 scope link valid_lft forever preferred_lft forever

@AntenkaAI_bot после mtu не работает

@AntenkaAI_bot keepalive уже был установлен на 25. Опустил mtu до 1360. Но интернета все равно нет

@AntenkaAI_bot после смены MTU интернет заработал!! Спасибо!

@AntenkaAI_bot а где ставить mtu? Напиши путь

IPv6 не дает выключить, только link local Mtu тоже нет на маке

А в логах пишет чего? Mtu сколько стоит?

Как проверить MTU и подправить?

Mtu

MTU нет в 3x-ui

@AntenkaAI_bot вот ответ - root@myserver2026ru:~# ip -d link show 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 promiscuity 0 allmulti 0 minmtu 0 maxmtu 0 addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 tso_max_size 524280 tso_max_segs 65535 gro_max_size 65536 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 1000 link/ether 00:16:3c:83:e6:03 brd ff:ff:ff:ff:ff:ff promiscuity 0 allmulti 0 minmtu 68 maxmtu 65535 addrgenmode eui64 numtxqueues 1 numrxqueues 1 gso_max_size 65536 gso_max_segs 65535 tso_max_size 65536 tso_max_segs 65535 gro_max_size 65536 parentbus virtio parentdev virtio0 altname enp0s3 altname ens3

Апр 4 23:40:35 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:35 OpenVPN1 Exiting due to fatal error Апр 4 23:40:35 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:38 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:38 OpenVPN1 Exiting due to fatal error Апр 4 23:40:38 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:41 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:41 OpenVPN1 Exiting due to fatal error Апр 4 23:40:41 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:44 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:44 OpenVPN1 Exiting due to fatal error Апр 4 23:40:44 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:47 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:47 OpenVPN1 Exiting due to fatal error Апр 4 23:40:47 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:50 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:50 OpenVPN1 Exiting due to fatal error Апр 4 23:40:50 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:53 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:53 OpenVPN1 Exiting due to fatal error Апр 4 23:40:53 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:56 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:56 OpenVPN1 Exiting due to fatal error Апр 4 23:40:56 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:40:59 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:40:59 OpenVPN1 Exiting due to fatal error Апр 4 23:40:59 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:02 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:02 OpenVPN1 Exiting due to fatal error Апр 4 23:41:02 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:05 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:05 OpenVPN1 Exiting due to fatal error Апр 4 23:41:05 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:08 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:08 OpenVPN1 Exiting due to fatal error Апр 4 23:41:08 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:11 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:11 OpenVPN1 Exiting due to fatal error Апр 4 23:41:11 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:14 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:14 OpenVPN1 Exiting due to fatal error Апр 4 23:41:14 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:17 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:17 OpenVPN1 Exiting due to fatal error Апр 4 23:41:17 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:20 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:20 OpenVPN1 Exiting due to fatal error Апр 4 23:41:20 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:23 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:23 OpenVPN1 Exiting due to fatal error Апр 4 23:41:23 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:25 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 4 23:41:25 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": static MTU is 1500. Апр 4 23:41:25 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 4 23:41:25 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": enable automatic routes accept via tunnel. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface.

Апр 4 23:41:26 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 4 23:41:26 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:26 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:26 OpenVPN1 Exiting due to fatal error Апр 4 23:41:26 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:29 OpenVPN1 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 4 23:41:29 OpenVPN1 Exiting due to fatal error Апр 4 23:41:29 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:29 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration is invalid. Апр 4 23:41:29 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 4 23:41:29 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:30 ndm Network::Interface::Base: "OpenVPN1": interface is up. Апр 4 23:41:30 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:30 ndm Core::System::Configuration: configuration saved. Апр 4 23:41:31 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 4 23:49:36 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 4 23:49:36 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 4 23:49:36 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 4 23:49:36 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 4 23:49:36 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 4 23:49:36 ndm Network::Interface::Base: "OpenVPN1": static MTU is 1500. Апр 4 23:49:36 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 4 23:49:36 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 4 23:49:36 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 4 23:49:36 ndm Network::Interface::OpenVpn: "OpenVPN1": enable automatic routes accept via tunnel. Апр 4 23:49:36 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface. Апр 4 23:49:36 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 4 23:49:36 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:49:39 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 4 23:49:39 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:49:39 OpenVPN1 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 4 23:49:39 OpenVPN1 Exiting due to fatal error Апр 4 23:49:39 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:49:39 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration is invalid. Апр 4 23:49:40 ndm Network::Interface::Base: "OpenVPN1": interface is up. Апр 4 23:49:40 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:49:40 ndm Core::System::Configuration: configuration saved. Апр 4 23:49:41 ndm Core::Configurator: not found: "show/mws/member" [coala/rci].

Апр 4 23:41:17 OpenVPN1 Exiting due to fatal error Апр 4 23:41:17 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:20 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:20 OpenVPN1 Exiting due to fatal error Апр 4 23:41:20 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:23 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:23 OpenVPN1 Exiting due to fatal error Апр 4 23:41:23 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:25 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 4 23:41:25 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 4 23:41:25 ndm Network::Interface::Base: "OpenVPN1": static MTU is 1500. Апр 4 23:41:25 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 4 23:41:25 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": enable automatic routes accept via tunnel. Апр 4 23:41:26 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface. Апр 4 23:41:26 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 4 23:41:26 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:26 OpenVPN1 ERROR: Endtag </tls-auth> missing Апр 4 23:41:26 OpenVPN1 Exiting due to fatal error Апр 4 23:41:26 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:29 OpenVPN1 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 4 23:41:29 OpenVPN1 Exiting due to fatal error Апр 4 23:41:29 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 4 23:41:29 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration is invalid. Апр 4 23:41:29 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 4 23:41:29 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:30 ndm Network::Interface::Base: "OpenVPN1": interface is up. Апр 4 23:41:30 ndm Core::System::Configuration: saving (http/rci). Апр 4 23:41:30 ndm Core::System::Configuration: configuration saved. Апр 4 23:41:31 ndm Core::Configurator: not found: "show/mws/member" [coala/rci].

Апр 3 23:02:16 ndm Network::Interface::Ip: "OpenVPN1": order is 2. Апр 3 23:02:16 ndm Network::Interface::Ip: global priority recalculated. Апр 3 23:02:16 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 3 23:02:16 ndm Netfilter::Util::Conntrack: flushed 54 IPv4 connections. Апр 3 23:02:16 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 3 23:02:17 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 3 23:02:17 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface. Апр 3 23:02:17 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 3 23:02:17 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 3 23:02:17 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:02:17 ndm Http::Nginx: loaded SSL certificate for "d4e9166e9046bba156d11b92.netcraze.io". Апр 3 23:02:17 ndm Http::Nginx: loaded SSL certificate for "gggatujb.crazedns.ru". Апр 3 23:02:17 ndm Http::Nginx: activated proxy fgvsfibb.gggatujb.crazedns.ru to https://127.0.0.1:8080. Апр 3 23:02:17 ndm Http::Nginx: activated proxy juurg.gggatujb.crazedns.ru to https://127.0.0.1:443. Апр 3 23:02:17 ndm Core::Server: started Session /var/run/ndm.core.socket. Апр 3 23:02:18 ndm Core::Session: client disconnected. Апр 3 23:02:18 ndm Http::Manager: updated configuration. Апр 3 23:02:18 ndm Core::Server: started Session /var/run/ndm.core.socket. Апр 3 23:02:18 ndm Core::Session: client disconnected. Апр 3 23:02:21 ndm Core::System::Configuration: configuration saved. Апр 3 23:02:22 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 3 23:02:23 ndm Network::Interface::Base: "OpenVPN1": interface is up. Апр 3 23:02:23 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:02:26 OpenVPN1 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 3 23:02:26 OpenVPN1 Exiting due to fatal error Апр 3 23:02:26 ndm Service: "OpenVPN1": unexpectedly stopped. Апр 3 23:02:26 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration is invalid. Апр 3 23:02:27 ndm Core::System::Configuration: configuration saved. Апр 3 23:02:28 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 3 23:48:44 ndm Network::Interface::Base: "OpenVPN0": interface is down. Апр 3 23:48:44 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:48:48 ndm Core::System::Configuration: configuration saved. Апр 3 23:48:49 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 3 23:52:27 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 3 23:52:27 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 3 23:52:27 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 3 23:52:27 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 3 23:52:27 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 3 23:52:27 ndm Network::Interface::Base: "OpenVPN1": static MTU is 1500. Апр 3 23:52:27 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 3 23:52:27 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 3 23:52:27 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 3 23:52:27 ndm Network::Interface::OpenVpn: "OpenVPN1": disable automatic routes accept via tunnel. Апр 3 23:52:27 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface. Апр 3 23:52:27 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 3 23:52:27 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:52:30 OpenVPN1 OpenVPN 2.4.6 [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD] Апр 3 23:52:30 OpenVPN1 library versions: OpenSSL 1.1.1o 3 May 2022, LZO 2.10

Апр 3 23:52:39 OpenVPN1 OpenVPN ROUTE: failed to parse/resolve route for host/network: 3000::/4 Апр 3 23:52:39 OpenVPN1 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options Апр 3 23:52:39 OpenVPN1 OpenVPN ROUTE: failed to parse/resolve route for host/network: 2000::/4 Апр 3 23:52:39 OpenVPN1 OpenVPN ROUTE6: OpenVPN needs a gateway parameter for a --route-ipv6 option and no default was specified by either --route-ipv6-gateway or --ifconfig-ipv6 options Апр 3 23:52:39 OpenVPN1 OpenVPN ROUTE: failed to parse/resolve route for host/network: ::/3 Апр 3 23:52:39 OpenVPN1 TUN/TAP device tun0 opened Апр 3 23:52:39 OpenVPN1 TUN/TAP TX queue length set to 100 Апр 3 23:52:39 OpenVPN1 do_ifconfig, tt->did_ifconfig_ipv6_setup=0 Апр 3 23:52:39 ndm Network::Interface::Ip: "OpenVPN1": IP address is 10.8.0.10/32. Апр 3 23:52:39 ndm Network::Interface::OpenVpn: "OpenVPN1": TUN peer address is 10.8.0.9. Апр 3 23:52:39 ndm Network::Interface::OpenVpn: "OpenVPN1": added host route to peer 10.8.0.9 via 10.8.0.10. Апр 3 23:52:40 OpenVPN1 WARNING: OpenVPN was configured to add an IPv6 route over tun0. However, no IPv6 has been configured for this interface, therefore the route installation may fail or may not work as expected. Апр 3 23:52:40 OpenVPN1 GID set to nobody Апр 3 23:52:40 OpenVPN1 UID set to nobody Апр 3 23:52:40 OpenVPN1 Initialization Sequence Completed Апр 3 23:52:40 ndm Http::Nginx: loaded SSL certificate for "d4e9166e9046bba156d11b92.netcraze.io". Апр 3 23:52:40 ndm Http::Nginx: loaded SSL certificate for "gggatujb.crazedns.ru". Апр 3 23:52:40 ndm Http::Nginx: activated proxy fgvsfibb.gggatujb.crazedns.ru to https://127.0.0.1:8080. Апр 3 23:52:40 ndm Http::Nginx: activated proxy juurg.gggatujb.crazedns.ru to https://127.0.0.1:443. Апр 3 23:52:40 ndm Core::Server: started Session /var/run/ndm.core.socket. Апр 3 23:52:40 ndm Core::Session: client disconnected. Апр 3 23:52:40 ndm Http::Manager: updated configuration. Апр 3 23:52:40 ndm Core::Server: started Session /var/run/ndm.core.socket. Апр 3 23:52:40 ndm Core::Session: client disconnected. Апр 3 23:53:02 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 3 23:53:02 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 3 23:53:02 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 3 23:53:02 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 3 23:53:02 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 3 23:53:02 ndm Network::Interface::Base: "OpenVPN1": static MTU is 1500. Апр 3 23:53:02 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN1. Апр 3 23:53:02 ndm Network::Interface::Ip: "OpenVPN1": TCP-MSS adjustment enabled. Апр 3 23:53:03 ndm Network::Interface::OpenVpn: "OpenVPN1": configuration successfully saved. Апр 3 23:53:03 ndm Network::Interface::OpenVpn: "OpenVPN1": disable automatic routes accept via tunnel. Апр 3 23:53:03 ndm Network::Interface::OpenVpn: "OpenVPN1": set connection via any interface. Апр 3 23:53:03 ndm Network::Interface::Base: "OpenVPN1": schedule cleared. Апр 3 23:53:03 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:53:03 ndm Http::Nginx: loaded SSL certificate for "d4e9166e9046bba156d11b92.netcraze.io". Апр 3 23:53:03 ndm Http::Nginx: loaded SSL certificate for "gggatujb.crazedns.ru". Апр 3 23:53:03 ndm Http::Nginx: activated proxy fgvsfibb.gggatujb.crazedns.ru to https://127.0.0.1:8080. Апр 3 23:53:03 ndm Http::Nginx: activated proxy juurg.gggatujb.crazedns.ru to https://127.0.0.1:443. Апр 3 23:53:03 ndm Core::Server: started Session /var/run/ndm.core.socket. Апр 3 23:53:03 ndm Core::Session: client disconnected. Апр 3 23:53:03 ndm

Апр 3 19:41:33 wmond WifiMaster0/AccessPoint0: (MT7628) STA(ec:63:d7:af:f2:80) had been aged-out and disassociated (idle silence). Апр 3 22:53:20 wmond WifiMaster0/AccessPoint0: (MT7628) STA(a6:2c:30:2a:26:22) had associated successfully (FT mode). Апр 3 22:53:20 wmond WifiMaster0/AccessPoint0: (MT7628) STA(a6:2c:30:2a:26:22) set key done in WPA2/WPA2PSK. Апр 3 22:53:21 ndhcps DHCPREQUEST received (STATE_INIT) for 192.168.1.99 from a6:2c:30:2a:26:22. Апр 3 22:53:21 ndhcps sending ACK of 192.168.1.99 to a6:2c:30:2a:26:22. Апр 3 22:53:40 wmond WifiMaster0/AccessPoint0: (MT7628) STA(8a:29:b5:5e:7a:eb) had associated successfully (FT mode). Апр 3 22:53:40 wmond WifiMaster0/AccessPoint0: (MT7628) STA(8a:29:b5:5e:7a:eb) set key done in WPA2/WPA2PSK. Апр 3 22:53:40 ndhcps DHCPDISCOVER received from 8a:29:b5:5e:7a:eb. Апр 3 22:53:41 ndhcps making OFFER of 192.168.1.36 to 8a:29:b5:5e:7a:eb. Апр 3 22:53:41 ndm Netfilter::Util::Conntrack: flushed 61 IPv4 connections. Апр 3 22:53:42 ndhcps DHCPREQUEST received (STATE_SELECTING) for 192.168.1.36 from 8a:29:b5:5e:7a:eb. Апр 3 22:53:42 ndhcps sending ACK of 192.168.1.36 to 8a:29:b5:5e:7a:eb. Апр 3 22:59:26 wmond WifiMaster0/AccessPoint0: (MT7628) STA(3e:e8:ad:4d:98:43) had associated successfully (FT mode). Апр 3 22:59:26 wmond WifiMaster0/AccessPoint0: (MT7628) STA(3e:e8:ad:4d:98:43) set key done in WPA2/WPA2PSK. Апр 3 22:59:26 ndhcps DHCPREQUEST received (STATE_INIT) for 192.168.1.60 from 3e:e8:ad:4d:98:43. Апр 3 22:59:26 ndhcps sending ACK of 192.168.1.60 to 3e:e8:ad:4d:98:43. Апр 3 23:01:54 ndm Network::Interface::Supplicant: "OpenVPN0": authentication is unchanged. Апр 3 23:01:54 ndm Network::Interface::Base: "OpenVPN0": description saved. Апр 3 23:01:54 ndm Network::Interface::Base: "OpenVPN0": deleted all roles. Апр 3 23:01:54 ndm Network::Interface::Base: "OpenVPN0": assigned role "misc" for OpenVPN0. Апр 3 23:01:54 ndm Network::Interface::Ip: "OpenVPN0": IP address cleared. Апр 3 23:01:55 ndm Network::Interface::Base: "OpenVPN0": static MTU is 1500. Апр 3 23:01:55 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN0. Апр 3 23:01:55 ndm Network::Interface::Ip: "OpenVPN0": TCP-MSS adjustment enabled. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": configuration successfully saved. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": disable automatic routes accept via tunnel. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": set connection via any interface. Апр 3 23:01:55 ndm Network::Interface::Base: "OpenVPN0": schedule cleared. Апр 3 23:01:55 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:01:58 OpenVPN0 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 3 23:01:58 OpenVPN0 Exiting due to fatal error Апр 3 23:01:58 ndm Service: "OpenVPN0": unexpectedly stopped. Апр 3 23:01:58 ndm Network::Interface::OpenVpn: "OpenVPN0": configuration is invalid. Апр 3 23:01:59 ndm Core::System::Configuration: configuration saved. Апр 3 23:02:00 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": network MTU reset to default. Апр 3 23:02:16 ndm Network::Interface::Repository: "OpenVPN1" interface created. Апр 3 23:02:16 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1. Апр 3 23:02:16 ndm Network::Interface::Ip: "OpenVPN1": IP address cleared. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": static MTU reset to default.

Апр 3 23:01:54 ndm Network::Interface::Ip: "OpenVPN0": IP address cleared. Апр 3 23:01:55 ndm Network::Interface::Base: "OpenVPN0": static MTU is 1500. Апр 3 23:01:55 ndm Dns::InterfaceSpecific: static name server list cleared on OpenVPN0. Апр 3 23:01:55 ndm Network::Interface::Ip: "OpenVPN0": TCP-MSS adjustment enabled. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": configuration successfully saved. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": disable automatic routes accept via tunnel. Апр 3 23:01:55 ndm Network::Interface::OpenVpn: "OpenVPN0": set connection via any interface. Апр 3 23:01:55 ndm Network::Interface::Base: "OpenVPN0": schedule cleared. Апр 3 23:01:55 ndm Core::System::Configuration: saving (http/rci). Апр 3 23:01:58 OpenVPN0 Unrecognized option or missing or extra parameter(s) in configuration: (line 32): block-ipv6 (2.4.6) Апр 3 23:01:58 OpenVPN0 Exiting due to fatal error Апр 3 23:01:58 ndm Service: "OpenVPN0": unexpectedly stopped. Апр 3 23:01:58 ndm Network::Interface::OpenVpn: "OpenVPN0": configuration is invalid. Апр 3 23:01:59 ndm Core::System::Configuration: configuration saved. Апр 3 23:02:00 ndm Core::Configurator: not found: "show/mws/member" [coala/rci]. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": interface is down. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": network MTU reset to default. Апр 3 23:02:16 ndm Network::Interface::Repository: "OpenVPN1" interface created. Апр 3 23:02:16 ndm Network::Interface::Supplicant: "OpenVPN1": authentication is unchanged. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": description saved. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": deleted all roles. Апр 3 23:02:16 ndm Network::Interface::Base: "OpenVPN1": assigned role "misc" for OpenVPN1.

Можешь попробовать поменять значения MTU

@AntenkaAI_bot по первому пункту [Interface] PrivateKey = **************************** Address = 10.0.0.2/32 DNS = 1.1.1.1, 1.0.0.1 MTU = 1420 # VPN_RF_pC_WG-1 [Peer] PublicKey = ************************************ AllowedIPs = 0.0.0.0/0, ::/0 Endpoint = 18*.147.26.98:17202

Порт 41359 и MTU 1376

Стоит ли перенастраивать амнезию на более низкий порт до 10000 и уменьшать MTU

когда 3x-ui создает inbound она с потолка берет mtu или делает внутри тест

подробнее про расчет mtu и выбор оптимального значения

какой mtu поставить 1260

выглядит как фрагментация пакетов или проблема на связке IP VPS - CDN