[Telegram Anten-ka club id:-1002445567608 topic:5655 +1m Tue 2026-05-26 11:36 UTC] Grey Makarov (468688749): <media:document> [Replying to Anten-ka Ai Helper DOG id:45106] На роутере, не в 3x-ui. Если это Keenetic + XKeen, ищи в веб-морде: Приложения → XRay/XKeen → Конфигурация → 04_outbounds.json и рядом 05_routing.json. Или просто открой по SSH файл: /usb/etc/xray/configs/04_outbounds.json. Мне нужен скрин/текст, где видно tag, address, port, serverName, publicKey, shortId. ✅ [/Replying] <file name="05_routing---c405a4a1-57f7-4183-a3a7-7b866fed3160.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="1cb00551a3f13f69">>> Source: External --- { "routing": { "rules": [ { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "ip": ["92.242.164.225/32"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "network": "udp", "port": "135, 137, 138, 139" }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "domain": ["appcenter.ms"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "domain": [ "regexp:^([\\w\\-\\.]+\\.)ru$", "regexp:^([\\w\\-\\.]+\\.)su$", "regexp:^([\\w\\-\\.]+\\.)xn--p1ai$", "regexp:^([\\w\\-\\.]+\\.)xn--p1acf$", "regexp:^([\\w\\-\\.]+\\.)xn--80asehdb$", "regexp:^([\\w\\-\\.]+\\.)xn--c1avg$", "regexp:^([\\w\\-\\.]+\\.)xn--80aswg$", "regexp:^([\\w\\-\\.]+\\.)xn--80adxhks$", "regexp:^([\\w\\-\\.]+\\.)moscow$", "regexp:^([\\w\\-\\.]+\\.)xn--d1acj3b$", "ext:geosite_v2fly.dat:category-gov-ru", "ext:geosite_v2fly.dat:private", "ext:geosite_v2fly.dat:yandex", "ext:geosite_v2fly.dat:steam", "ext:geosite_v2fly.dat:vk" ] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "protocol": ["bittorrent"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "vless-reality", "type": "field" } ] } } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="1cb00551a3f13f69">>> </file> <file name="04_outbounds---2715ae6c-ec46-4f89-aa3e-ba6bb4a8369c.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="c293d18c8c6fac51">>> Source: External --- { "outbounds": [ { "tag": "vless-reality", "protocol": "vless", "settings": { "vnext": [ { "address": "92.242.164.225", "port": 443, "users": [ { "id": "fb18f0f4-0f16-45a7-93ed-bc72968e26c4", "flow": "xtls-rprx-vision", "encryption": "none", "level": 0 } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "glht0A6LbGl-tvR91tKbgPysVxjI3OT2pUh6VSYxp1Q", "fingerprint": "chrome", "serverName": "max.ru", "shortId": "dc", "spiderX": "/" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="c293d18c8c6fac51">>> </file>

ay 26 10:57:09 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: infra/conf: REALITY: Listening on non-443 ports may get your IP blocked by the GFW May 26 10:57:09 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: infra/conf: REALITY: Listening on non-443 ports may get your IP blocked by the GFW May 26 10:57:09 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: core: Xray 26.5.9 started May 26 10:57:15 pol58 x-ui[677485]: 2026/05/26 10:57:15 http: TLS handshake error from 92.242.164.225:32690: remote error: tls: unknown certificate May 26 10:57:15 pol58 x-ui[677485]: 2026/05/26 10:57:15 http: TLS handshake error from 92.242.164.225:32702: remote error: tls: unknown certificate May 26 10:57:16 pol58 /usr/local/x-ui/x-ui[677485]: INFO - Remove Inbound User bsq6s6lt due to expiration or traffic limit May 26 10:57:16 pol58 /usr/local/x-ui/x-ui[677485]: INFO - XRAY: infra/conf/serial: Reading config: &{Name:bin/config.json Format:json} May 26 10:57:16 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: infra/conf: REALITY: Listening on non-443 ports may get your IP blocked by the GFW May 26 10:57:16 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: infra/conf: REALITY: Listening on non-443 ports may get your IP blocked by the GFW May 26 10:57:16 pol58 /usr/local/x-ui/x-ui[677485]: WARNING - XRAY: core: Xray 26.5.9 started May 26 10:58:32 pol58 x-ui[677485]: 2026/05/26 10:58:32 http: TLS handshake error from 92.242.164.225:23452: remote error: tls: unknown certificate

[Telegram Anten-ka club id:-1002445567608 topic:5655 +1m Tue 2026-05-26 10:49 UTC] Grey Makarov (468688749): <media:document> [Replying to Anten-ka Ai Helper DOG id:45052] Это только routing для клиентского трафика, он тут норм. А ошибка у тебя в outbound’е каскада, нужен ещё файл с outbounds и правилом, куда смотрит vless-reality на втором VPS. Скидывай outbounds с первого VPS, там обычно и сидит косяк. ✅ [/Replying] <file name="04_outbounds---0ea80893-c4a9-41d1-a184-6b55d758ef56.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="f2ebc1c068c8b72d">>> Source: External --- { "outbounds": [ { "tag": "vless-reality", "protocol": "vless", "settings": { "vnext": [ { "address": "92.242.164.225", "port": 443, "users": [ { "id": "fb18f0f4-0f16-45a7-93ed-bc72968e26c4", "flow": "xtls-rprx-vision", "encryption": "none", "level": 0 } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "glht0A6LbGl-tvR91tKbgPysVxjI3OT2pUh6VSYxp1Q", "fingerprint": "chrome", "serverName": "max.ru", "shortId": "dc", "spiderX": "/" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="f2ebc1c068c8b72d">>> </file>

я добавил то что ты мне скидывал { "routing": { "rules": [ { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "ip": ["92.242.164.225/32"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "network": "udp", "port": "135, 137, 138, 139" }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "domain": ["appcenter.ms"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "domain": [ "regexp:^([\\w\\-\\.]+\\.)ru$", "regexp:^([\\w\\-\\.]+\\.)su$", "regexp:^([\\w\\-\\.]+\\.)xn--p1ai$", "regexp:^([\\w\\-\\.]+\\.)xn--p1acf$", "regexp:^([\\w\\-\\.]+\\.)xn--80asehdb$", "regexp:^([\\w\\-\\.]+\\.)xn--c1avg$", "regexp:^([\\w\\-\\.]+\\.)xn--80aswg$", "regexp:^([\\w\\-\\.]+\\.)xn--80adxhks$", "regexp:^([\\w\\-\\.]+\\.)moscow$", "regexp:^([\\w\\-\\.]+\\.)xn--d1acj3b$", "ext:geosite_v2fly.dat:category-gov-ru", "ext:geosite_v2fly.dat:private", "ext:geosite_v2fly.dat:yandex", "ext:geosite_v2fly.dat:steam", "ext:geosite_v2fly.dat:vk" ] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "protocol": ["bittorrent"] }, { "inboundTag": ["redirect", "tproxy"], "outboundTag": "vless-reality", "type": "field" } ] } }

goVLESS — это скрипт, который ставится на свежий VPS одной командой и управляется через Telegram-бота. Под капотом — 3X-UI + Xray с протоколом VLESS и маскировкой Reality (без домена) или TLS (со своим доменом). Полезен тем, кто хочет свой VPN без подписки и без чужих посредников, но не готов вручную настраивать xray.json — установка спрашивает 2-3 вопроса и через 5 минут выдаёт готовые QR-коды. Telegram-бот заменяет SSH: добавил клиента, посмотрел статистику, переключил Lite ↔ Pro — без открытия терминала. Бесшовное переключение режимов сохраняет UUID клиентов, так что подписные ссылки не ломаются. Установить: export GH_TOKEN="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" bash <(curl -sL -H "Authorization: Bearer $GH_TOKEN" https://raw.githubusercontent.com/anten-ka/goVLESS/main/bootstrap.sh) После установки управление скриптом командой: govless

@AntenkaAI_bot Подскажи, какой VPN-клиент лучше всего использовать на macOS (MacBook) и на iPhone для таких конфигов: VLESS + Reality + XHTTP (режимы packet-up / stream-up), плюс отдельный канал VLESS + XHTTP + TLS через Cloudflare CDN.

@AntenkaAI_bot Хочу попросить тебя оценить архитектуру моего каскада со стороны - насколько он правильно построен, что улучшить. Схема такая: устройство → Bridge (Россия, 3x-UI / Xray) → Exit (Нидерланды, 3x-UI / Xray) → интернет. Первое плечо, от устройства до Bridge: VLESS + TCP + Reality, flow xtls-rprx-vision, SNI крупного популярного сайта, uTLS firefox. Порт 443, плюс port-hopping: диапазон 20101-20200 заворачивается на 443 через iptables. Второе плечо, от Bridge до Exit: VLESS + XHTTP + Reality, SNI отдельного домена, режим stream-up (scStreamUpServerSecs 20-80, xmux maxConcurrency 16-32). Outbound на Bridge заведён прямой правкой SQLite, не через GUI. Общее по обоим плечам: sockopt с tcpUserTimeout=10000 и tcpKeepAlive, BBR, MTU 1380, на Exit стоит MSS-clamp 1280 (там eth0 с MTU 1380). Маршрутизация на Bridge: российский трафик (geosite ru, geoip ru) идёт напрямую (DIRECT), всё остальное - на Exit. Bittorrent и приватные адреса блокируются. DNS через DoH. Раз в 3 дня cron перезапускает x-ui - это воркэраунд против утечки памяти в XHTTP. Параллельно поднят запасной канал через Cloudflare CDN на отдельном домене (packet-up, Origin Cert). Вопросы: 1. Архитектурно схема выстроена правильно, или есть грубые ошибки? 2. Что бы ты изменил ради стабильности? 3. Reality на обоих плечах - это нормально, или на втором плече лучше что-то другое? Что думаешь? 4. Чего тут не хватает для отказоустойчивости?

Основное плечо bridge→exit это VLESS+XHTTP+Reality (не через CF, напрямую). Борюсь с периодическими фризами от ТСПУ (TCP-freeze: пакеты молчат после ~16KB без RST). Уже стоит sockopt tcpUserTimeout=10000, BBR, MTU 1380, MSS-clamp 1280. Какой режим XHTTP (packet-up/stream-up/stream-one) и какие параметры scMaxEachPostBytes, scStreamUpServerSecs, xmux maxConcurrency дают лучшую устойчивость к фризам на трансграничном плече?

{ "id": 2, "userId": 0, "up": 3460, "down": 34340, "total": 0, "allTime": 43224, "remark": "Wireguard", "enable": true, "expiryTime": 0, "trafficReset": "monthly", "lastTrafficResetTime": 0, "listen": "", "port": 31252, "protocol": "wireguard", "settings": "{\r\n \"mtu\": 1380,\r\n \"secretKey\": \"UAT0MHC5pfmjUgd7pXLHWrsdPXI8xihMictIwEAOglA=\",\r\n \"peers\": [\r\n {\r\n \"privateKey\": \"cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM=\",\r\n \"publicKey\": \"cMoiHYIJmKJmgkfmjAO8hcXXISyMujbcnEjJxoexU0Q=\",\r\n \"preSharedKey\": \"Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc=\",\r\n \"allowedIPs\": [\r\n \"0.0.0.0/0\"\r\n ],\r\n \"keepAlive\": 25\r\n }\r\n ],\r\n \"noKernelTun\": false\r\n}", "streamSettings": "", "tag": "inbound-31252", "sniffing": "{\r\n \"enabled\": true,\r\n \"destOverride\": [\r\n \"http\",\r\n \"tls\",\r\n \"quic\",\r\n \"fakedns\"\r\n ],\r\n \"metadataOnly\": false,\r\n \"routeOnly\": false\r\n}", "clientStats": [], "_cachedInbound": { "port": 31252, "listen": "", "_protocol": "wireguard", "settings": { "mtu": 1380, "secretKey": "UAT0MHC5pfmjUgd7pXLHWrsdPXI8xihMictIwEAOglA=", "pubKey": "6Cc/sZnVJjcVuzCdbAZ70oikntHUdjVocmCUgvRQBzA=", "peers": [ { "privateKey": "cI6U8+4lDIbHyItt7kGoRt19632vH8xXN2U739veInM=", "publicKey": "cMoiHYIJmKJmgkfmjAO8hcXXISyMujbcnEjJxoexU0Q=", "psk": "Y6G0d0eL8rT0aYN6FBZC9qW1Jv5uRjcev1bLD1i12Xc=", "allowedIPs": [ "0.0.0.0/0" ], "keepAlive": 25 } ], "noKernelTun": false }, "stream": { "network": "tcp", "security": "none", "externalProxy": [], "tls": { "sni": "", "minVersion": "1.2", "maxVersion": "1.3", "cipherSuites": "", "rejectUnknownSni": false, "disableSystemRoot": false, "enableSessionResumption": false, "certs": [ { "useFile": true, "certFile": "", "keyFile": "", "cert": "", "key": "", "oneTimeLoading": false, "usage": "encipherment", "buildChain": false } ], "alpn": [ "h2", "http/1.1" ], "echServerKeys": "", "settings": { "fingerprint": "chrome", "echConfigList": "" } }, "reality": { "show": false, "xver": 0, "target": "aws.amazon.com:443", "serverNames": "aws.amazon.com", "privateKey": "", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": "ed66c06bf5974cfb,fd,d3cf,9a70dc,663b0bde,769550bb4c549d,669388ed65,6b62a59f8925", "mldsa65Seed": "", "settings": { "publicKey": "", "fingerprint": "chrome", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcp": { "acceptProxyProtocol": false, "type": "none", "request": { "version": "1.1", "method": "GET", "path": [ "/" ], "headers": [] }, "response": { "version": "1.1", "status": "200", "reason": "OK", "headers": [] } }, "kcp": { "mtu": 1350, "tti": 20, "upCap": 5, "downCap": 20, "cwndMultiplier": 1, "maxSendingWindow": 2097152 }, "ws": { "acceptProxyProtocol": false, "path": "/", "host": "", "headers": [], "heartbeatPeriod": 0 }, "grpc": { "serviceName": "", "authority": "", "multiMode": false }, "httpupgrade": { "acceptProxyProtocol": false, "path": "/", "host": "", "headers": [] }, "xhttp": { "path": "/", "host": "","headers": [], "scMaxBufferedPosts": 30, "scMaxEachPostBytes": "1000000", "scStreamUpServerSecs": "20-80", "noSSEHeader": false, "xPaddingBytes": "100-1000", "mode": "auto", "xPaddingObfsMode": false, "xPaddingKey": "", "xPaddingHeader": "", "xPaddingPlacement": "", "xPaddingMethod": "", "uplinkHTTPMethod": "", "sessionPlacement": "", "sessionKey": "", "seqPlacement": "", "seqKey": "", "uplinkDataPlacement": "", "uplinkDataKey": "", "uplinkChunkSize": 0 }, "hysteria": { "version": 2, "auth": "", "udpIdleTimeout": 60 }, "finalmask": { "tcp": [], "udp": [] } }, "tag": "inbound-31252", "sniffing": { "enabled": true, "destOverride": [ "http", "tls", "quic", "fakedns" ], "metadataOnly": false, "routeOnly": false, "ipsExcluded": [], "domainsExcluded": [] }, "clientStats": [] } }

[Telegram Anten-ka club id:-1002445567608 topic:5655 +2h Wed 2026-05-13 15:33 UTC] Grey Makarov (468688749): ~ # INFO[2026-05-13T07:08:13.767142022Z] Load MMDB file: /opt/etc/mihomo/geoip.metadb WARN[2026-05-13T07:08:18.768609330Z] [TCP] dial PROXY (match Match/) 10.1.30.131:36964 --> 2.22.31.186:443 error: 92.242.164.225:443 connect error: context deadline exceeded WARN[2026-05-13T07:08:23.814161715Z] [TCP] dial PROXY (match Match/) 10.1.30.131:55642 --> 2.22.31.176:443 error: 92.242.164.225:443 connect error: context deadline exceeded не пошло еще раз конфиг [Replying to Anten-ka Ai Helper DOG id:40166] Вижу 2 косяка, главный, нет правила DIRECT для самого VPS, сейчас MATCH тащит всё в PROXY, можно словить петлю. Добавь выше MATCH: - IP-CIDR,92.242.164.225/32,DIRECT и, если есть домен сервера, ещё - DOMAIN,твой-домен,DIRECT. Второй момент, servername: max.ru должен точно совпадать с SNI из ключа, иначе Reality не поднимется. Если после этого не взлетит, скинь ещё dns: из полного конфига. ✅ [/Replying] <file name="config1---6ed843c2-0a92-4a91-a5bf-019df42910d2.txt" mime="text/plain"> <<<EXTERNAL_UNTRUSTED_CONTENT id="0a132803e78c673f">>> Source: External --- tproxy-port: 1181 redir-port: 1182 mode: rule allow-lan: true log-level: info ipv6: false proxies: - name: "1-pol58xkeen" type: vless server: 92.242.164.225 port: 443 uuid: секерет udp: true tls: true network: tcp servername: max.ru client-fingerprint: chrome flow: xtls-rprx-vision reality-opts: public-key: секрет short-id: dc spider-x: / proxy-groups: - name: PROXY type: select proxies: - "1-pol58xkeen" - DIRECT rules: - DOMAIN-KEYWORD,ozon,DIRECT - DOMAIN-SUFFIX,ozone.ru,DIRECT - DOMAIN-SUFFIX,ozonimg.ru,DIRECT - DOMAIN-SUFFIX,ozonstatic.ru,DIRECT - DOMAIN-SUFFIX,ozon.ru,DIRECT - DOMAIN-SUFFIX,2gis.ru,DIRECT - DOMAIN-SUFFIX,mexc.com,DIRECT - GEOIP,RU,DIRECT - GEOIP,KG,DIRECT - IP-CIDR,185.73.195.117/32,DIRECT - IP-CIDR,185.73.193.120/32,DIRECT - IP-CIDR,185.73.194.82/32,DIRECT - IP-CIDR,185.73.193.68/32,DIRECT - IP-CIDR,185.73.192.0/22,DIRECT - IP-CIDR,91.236.51.50/22,DIRECT - IP-CIDR,91.236.48.0/22,DIRECT - IP-CIDR,91.236.51.145/22,DIRECT - MATCH,PROXY <<<END_EXTERNAL_UNTRUSTED_CONTENT id="0a132803e78c673f">>> </file> <file name="03_inbounds---296776ca-c05d-4664-998e-3c11d76bd202.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="56708311527b318a">>> Source: External --- { "inbounds": [ { "tag": "redirect", "port": 61219, "protocol": "dokodemo-door", "settings": { "network": "tcp", "followRedirect": true }, "sniffing": { "enabled": true, "destOverride": ["http", "tls", "quic"] } }, { "tag": "tproxy", "port": 61219, "protocol": "dokodemo-door", "settings": { "network": "udp", "followRedirect": true }, "streamSettings": { "sockopt": { "tproxy": "tproxy" } }, "sniffing": { "enabled": true, "destOverride": ["http", "tls", "quic"] } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="56708311527b318a">>> </file> <file name="04_outbounds1---4b486b70-2e41-40ff-92bc-b9dd6f0c7173.txt" mime="text/plain"> <<<EXTERNAL_UNTRUSTED_CONTENT id="a9712c786cccd3b2">>> Source: External --- { "outbounds": [ { "tag": "vless-reality", "protocol": "vless", "settings": { "vnext": [ { "address": "92.242.164.225", "port": 443, "users": [ { "id": "секрет", "flow": "xtls-rprx-vision", "encryption": "none", "level": 0 } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "секрет", "fingerprint": "chrome", "serverName": "max.ru", "shortId": "dc", "spiderX": "/" } } }, { "tag": "direct", "protocol": "freedom" }, { "tag": "block", "protocol": "blackhole", "settings": { "response": { "type": "http" } } } ] } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="a9712c786cccd3b2">>> </file> <file name="05_routing---2e07d448-6b09-4d95-9acf-b1f5977db105.json" mime="application/json"> <<<EXTERNAL_UNTRUSTED_CONTENT id="45d2c902016e5453">>> Source: External --- // Настройка маршрутизации { "routing": { "rules": [ // Блокировка | Уязвимые UDP порты { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "network": "udp", "port": "135, 137, 138, 139" }, // Блокировка | Реклама и аналитика { "inboundTag": ["redirect", "tproxy"], "outboundTag": "block", "type": "field", "domain": [ "appcenter.ms" ] }, // Прямые подключение | Доменные имена { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "domain": [ "regexp:^([\\w\\-\\.]+\\.)ru$", // .ru "regexp:^([\\w\\-\\.]+\\.)su$", // .su "regexp:^([\\w\\-\\.]+\\.)xn--p1ai$", // .рф "regexp:^([\\w\\-\\.]+\\.)xn--p1acf$", // .рус "regexp:^([\\w\\-\\.]+\\.)xn--80asehdb$", // .онлайн "regexp:^([\\w\\-\\.]+\\.)xn--c1avg$", // .орг "regexp:^([\\w\\-\\.]+\\.)xn--80aswg$", // .сайт "regexp:^([\\w\\-\\.]+\\.)xn--80adxhks$", // .москва "regexp:^([\\w\\-\\.]+\\.)moscow$", // .moscow "regexp:^([\\w\\-\\.]+\\.)xn--d1acj3b$", // .дети "ext:geosite_v2fly.dat:category-gov-ru", "ext:geosite_v2fly.dat:private", "ext:geosite_v2fly.dat:yandex", "ext:geosite_v2fly.dat:steam", "ext:geosite_v2fly.dat:vk" ] }, // Прямое подключение | Торрент { "inboundTag": ["redirect", "tproxy"], "outboundTag": "direct", "type": "field", "protocol": ["bittorrent"] }, // VPS подключение { "inboundTag": ["redirect", "tproxy"], "outboundTag": "vless-reality", "type": "field" } ] } } <<<END_EXTERNAL_UNTRUSTED_CONTENT id="45d2c902016e5453">>> </file>

[Telegram Anten-ka club id:-1002445567608 topic:5655 +1m Wed 2026-05-13 07:06 UTC] Grey Makarov (468688749): это весь файл конфиг ключ заменил на слово секерет [Replying to Anten-ka Ai Helper DOG id:40159] Да, уже можно смотреть по делу. Сейчас нужны dns: и proxy-groups целиком, плюс правило, где у тебя задан DIRECT для IP/домена VPS, иначе петля легко остаётся. Ещё проверь, что MATCH указывает в реально существующую группу PROXY, а servername совпадает с SNI на сервере. Кидай эти куски, без секретов, и я быстро ткну в косяк. ✅ [/Replying] <file name="config1---2d52ce03-01ac-42dd-9b95-aeb9b8ce441c.txt" mime="text/plain"> <<<EXTERNAL_UNTRUSTED_CONTENT id="a3eb6fddbaabb19f">>> Source: External --- tproxy-port: 1181 redir-port: 1182 mode: rule allow-lan: true log-level: info ipv6: false proxies: - name: "1-pol58xkeen" type: vless server: 92.242.164.225 port: 443 uuid: секерет udp: true tls: true network: tcp servername: max.ru client-fingerprint: chrome flow: xtls-rprx-vision reality-opts: public-key: секрет short-id: dc spider-x: / proxy-groups: - name: PROXY type: select proxies: - "1-pol58xkeen" - DIRECT rules: - DOMAIN-KEYWORD,ozon,DIRECT - DOMAIN-SUFFIX,ozone.ru,DIRECT - DOMAIN-SUFFIX,ozonimg.ru,DIRECT - DOMAIN-SUFFIX,ozonstatic.ru,DIRECT - DOMAIN-SUFFIX,ozon.ru,DIRECT - DOMAIN-SUFFIX,2gis.ru,DIRECT - DOMAIN-SUFFIX,mexc.com,DIRECT - GEOIP,RU,DIRECT - GEOIP,KG,DIRECT - IP-CIDR,185.73.195.117/32,DIRECT - IP-CIDR,185.73.193.120/32,DIRECT - IP-CIDR,185.73.194.82/32,DIRECT - IP-CIDR,185.73.193.68/32,DIRECT - IP-CIDR,185.73.192.0/22,DIRECT - IP-CIDR,91.236.51.50/22,DIRECT - IP-CIDR,91.236.48.0/22,DIRECT - IP-CIDR,91.236.51.145/22,DIRECT - MATCH,PROXY <<<END_EXTERNAL_UNTRUSTED_CONTENT id="a3eb6fddbaabb19f">>> </file>

tproxy-port: 1181 redir-port: 1182 mode: rule allow-lan: true log-level: info ipv6: false proxies: - name: "№№" type: vless server: 92.242.164.225 port: 443 uuid: №№№ udp: true tls: true network: tcp servername: max.ru client-fingerprint: chrome flow: xtls-rprx-vision reality-opts: public-key: №№№ short-id: dc spider-x: / proxy-groups: - name: PROXY type: select proxies: - "1-pol58xkeen" - DIRECT rules: - DOMAIN-KEYWORD,ozon,DIRECT - DOMAIN-SUFFIX,ozone.ru,DIRECT - DOMAIN-SUFFIX,ozonimg.ru,DIRECT - DOMAIN-SUFFIX,ozonstatic.ru,DIRECT - DOMAIN-SUFFIX,ozon.ru,DIRECT - DOMAIN-SUFFIX,2gis.ru,DIRECT - DOMAIN-SUFFIX,mexc.com,DIRECT - GEOIP,RU,DIRECT - GEOIP,KG,DIRECT - IP-CIDR,185.73.195.117/32,DIRECT - IP-CIDR,185.73.193.120/32,DIRECT - IP-CIDR,185.73.194.82/32,DIRECT - IP-CIDR,185.73.193.68/32,DIRECT - IP-CIDR,185.73.192.0/22,DIRECT - IP-CIDR,91.236.51.50/22,DIRECT - IP-CIDR,91.236.48.0/22,DIRECT - IP-CIDR,91.236.51.145/22,DIRECT - MATCH,PROXY

{ "clients": [ { "id": "466253f7-4879-432e-a2e3-b12fcadca96c", "flow": "xtls-rprx-vision", "email": "tigr", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": "", "subId": "iriston", "comment": "", "reset": 0, "created_at": 1778525300000, "updated_at": 1778526008000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "-LQJcwkpxLqxGi9q9SME40lNN_XWh0w5BuSN-MxWYUw", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "c2f7240f43", "f2ff1a04", "0f3e", "0f81c6d9fc1255d9", "2038d663e938", "1c", "a80b0b", "c53460b6db0f06" ], "mldsa65Seed": "", "settings": { "publicKey": "HdLUUXvhmwr2gtTVuWAHg5xBrGRe-LFr8VYL-jfjLxA", "fingerprint": "chrome", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false } где тут ошибка?

{ "clients": [ { "id": "5df626b3-ebc5-42ad-88c9-c14f1120228e", "flow": "xtls-rprx-vision", "email": "основной", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "chwq1utjjzk9j7vh", "comment": "", "reset": 0, "created_at": 1778103915000, "updated_at": 1778496006000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "yandex.ru:443", "serverNames": [ "yandex.ru", "www.yandex.ru" ], "privateKey": "YIymReSbu5Ua_pql21TP47EbrHmnX7g-55nIl7NzlmA", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "62c4def9", "4c", "6ba649727a01ca", "aef92a43da", "b3fb", "c3ff43", "07aa59ae6d83379a", "1519c1682fdd" ], "mldsa65Seed": "", "settings": { "publicKey": "spRpjuM1dBaMkfndqJShOa7qkjMSc_HxFUbZGhr5Iho", "fingerprint": "firefox", "serverName": "yandex.ru", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

каскад не работает проверь и исправь пожалуйста { "api": { "tag": "api", "services": [ "HandlerService", "LoggerService", "StatsService" ] }, "inbounds": [ { "tag": "api", "listen": "127.0.0.1", "port": 62789, "protocol": "tunnel", "settings": { "address": "127.0.0.1" } } ], "log": { "access": "none", "dnsLog": false, "error": "", "loglevel": "warning", "maskAddress": "" }, "metrics": { "tag": "metrics_out", "listen": "127.0.0.1:11111" }, "outbounds": [ { "tag": "direct", "protocol": "freedom", "settings": { "domainStrategy": "AsIs" } }, { "tag": "blocked", "protocol": "blackhole", "settings": {} }, { "tag": "kaskad-evropa", "protocol": "vless", "settings": { "vnext": [ { "address": "78.17.28.57", "port": 443, "users": [ { "id": "5cd81200-765f-4ce0-a1d7-2379b6794730", "encryption": "none", "flow": "xtls-rprx-vision" } ] } ] }, "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "serverName": "google.com", "publicKey": "9R8JdJMuDYIA1WJ_DH1xh3u4GHlvEUKp_lKdxCj7-Rk", "shortId": "a6fbbc8a3023dc", "fingerprint": "firefox", "spiderX": "/" }, "tcpSettings": { "header": { "type": "none" } } } } ], "policy": { "levels": { "0": { "statsUserDownlink": true, "statsUserUplink": true } }, "system": { "statsInboundDownlink": true, "statsInboundUplink": true, "statsOutboundDownlink": false, "statsOutboundUplink": false } }, "routing": { "domainStrategy": "AsIs", "rules": [ { "type": "field", "inboundTag": [ "api" ], "outboundTag": "api" }, { "type": "field", "ip": [ "geoip:private" ], "outboundTag": "blocked" }, { "type": "field", "protocol": [ "bittorrent" ], "outboundTag": "blocked" }, { "type": "field", "network": "tcp,udp", "outboundTag": "kaskad-evropa" } ] }, "stats": {} } { "clients": [ { "id": "f3ab7bf2-525a-492e-9269-7f2fbf58fd4f", "flow": "xtls-rprx-vision", "email": "evropa", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "qvwml7ujz56prp71", "comment": "", "reset": 0, "created_at": 1778487808000, "updated_at": 1778493864000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "SLbkLIhHXq_KgmXBF5hgR7g7Q14DCpDw1TKFGDeGvkE", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "2e7f8574ec3c9b", "a384", "e2", "a748f9d80b", "643244", "170decda", "e2e3f278535d", "42a5b826e9547938" ], "mldsa65Seed": "", "settings": { "publicKey": "XZT5-owvGsjAQkNCu-QEIQCVC_DWiD1hhpZh3WZtC1c", "fingerprint": "chrome", "serverName": "www.google.com", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

{ "clients": [ { "id": "5df626b3-ebc5-42ad-88c9-c14f1120228e", "flow": "xtls-rprx-vision", "email": "основной", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "chwq1utjjzk9j7vh", "comment": "", "reset": 0, "created_at": 1778103915000, "updated_at": 1778496006000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "yandex.ru:443", "serverNames": [ "yandex.ru", "www.yandex.ru" ], "privateKey": "YIymReSbu5Ua_pql21TP47EbrHmnX7g-55nIl7NzlmA", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "62c4def9", "4c", "6ba649727a01ca", "aef92a43da", "b3fb", "c3ff43", "07aa59ae6d83379a", "1519c1682fdd" ], "mldsa65Seed": "", "settings": { "publicKey": "spRpjuM1dBaMkfndqJShOa7qkjMSc_HxFUbZGhr5Iho", "fingerprint": "firefox", "serverName": "yandex.ru", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

{ "api": { "tag": "api", "services": [ "HandlerService", "LoggerService", "StatsService" ] }, "inbounds": [ { "tag": "api", "listen": "127.0.0.1", "port": 62789, "protocol": "tunnel", "settings": { "address": "127.0.0.1" } } ], "log": { "access": "none", "dnsLog": false, "error": "", "loglevel": "warning", "maskAddress": "" }, "metrics": { "tag": "metrics_out", "listen": "127.0.0.1:11111" }, "outbounds": [ { "tag": "direct", "protocol": "freedom", "settings": { "domainStrategy": "AsIs", "redirect": "", "noises": [] } }, { "tag": "blocked", "protocol": "blackhole", "settings": {} }, { "protocol": "vless", "settings": { "address": "78.17.28.57", "port": 443, "id": "5cd81200-765f-4ce0-a1d7-2379b6794730", "flow": "xtls-rprx-vision", "encryption": "none", "testseed": [ 900, 500, 900, 256 ] }, "tag": "kaskad-evropa", "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "9R8JdJMuDYIA1WJ_DH1xh3u4GHlvEUKp_lKdxCj7-Rk", "fingerprint": "firefox", "serverName": "google.com", "shortId": "a6fbbc8a3023dc", "spiderX": "/", "mldsa65Verify": "" }, "tcpSettings": { "header": { "type": "none" } } } } ], "policy": { "levels": { "0": { "statsUserDownlink": true, "statsUserUplink": true } }, "system": { "statsInboundDownlink": true, "statsInboundUplink": true, "statsOutboundDownlink": false, "statsOutboundUplink": false } }, "routing": { "domainStrategy": "AsIs", "rules": [ { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" }, { "type": "field", "network": "TCP,UDP", "outboundTag": "kaskad-evropa" } ] }, "stats": {} }

{ "clients": [ { "id": "5df626b3-ebc5-42ad-88c9-c14f1120228e", "flow": "xtls-rprx-vision", "email": "основной", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "chwq1utjjzk9j7vh", "comment": "", "reset": 0, "created_at": 1778103915000, "updated_at": 1778496006000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "yandex.ru:443", "serverNames": [ "yandex.ru", "www.yandex.ru" ], "privateKey": "YIymReSbu5Ua_pql21TP47EbrHmnX7g-55nIl7NzlmA", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "62c4def9", "4c", "6ba649727a01ca", "aef92a43da", "b3fb", "c3ff43", "07aa59ae6d83379a", "1519c1682fdd" ], "mldsa65Seed": "", "settings": { "publicKey": "spRpjuM1dBaMkfndqJShOa7qkjMSc_HxFUbZGhr5Iho", "fingerprint": "firefox", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

я хочу настроить каскад к нему, проверь настройки { "api": { "tag": "api", "services": [ "HandlerService", "LoggerService", "StatsService" ] }, "inbounds": [ { "tag": "api", "listen": "127.0.0.1", "port": 62789, "protocol": "tunnel", "settings": { "address": "127.0.0.1" } } ], "log": { "access": "none", "dnsLog": false, "error": "", "loglevel": "warning", "maskAddress": "" }, "metrics": { "tag": "metrics_out", "listen": "127.0.0.1:11111" }, "outbounds": [ { "tag": "direct", "protocol": "freedom", "settings": { "domainStrategy": "AsIs", "redirect": "", "noises": [] } }, { "tag": "blocked", "protocol": "blackhole", "settings": {} }, { "protocol": "vless", "settings": { "address": "78.17.28.57", "port": 433, "id": "5cd81200-765f-4ce0-a1d7-2379b6794730", "flow": "xtls-rprx-vision", "encryption": "none", "testseed": [ 900, 500, 900, 256 ] }, "tag": "kaskad-evropa", "streamSettings": { "network": "tcp", "security": "reality", "realitySettings": { "publicKey": "9R8JdJMuDYIA1WJ_DH1xh3u4GHlvEUKp_lKdxCj7-Rk", "fingerprint": "firefox", "serverName": "google.com", "shortId": "a6fbbc8a3023dc", "spiderX": "/", "mldsa65Verify": "" }, "tcpSettings": { "header": { "type": "none" } } } } ], "policy": { "levels": { "0": { "statsUserDownlink": true, "statsUserUplink": true } }, "system": { "statsInboundDownlink": true, "statsInboundUplink": true, "statsOutboundDownlink": false, "statsOutboundUplink": false } }, "routing": { "domainStrategy": "AsIs", "rules": [ { "inboundTag": [ "api" ], "outboundTag": "api", "type": "field" }, { "ip": [ "geoip:private" ], "outboundTag": "blocked", "type": "field" }, { "outboundTag": "blocked", "protocol": [ "bittorrent" ], "type": "field" } ] }, "stats": {} }

проверь { "clients": [ { "id": "f3ab7bf2-525a-492e-9269-7f2fbf58fd4f", "flow": "", "email": "evropa", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "qvwml7ujz56prp71", "comment": "", "reset": 0, "created_at": 1778487808000, "updated_at": 1778492875000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "SLbkLIhHXq_KgmXBF5hgR7g7Q14DCpDw1TKFGDeGvkE", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "2e7f8574ec3c9b", "a384", "e2", "a748f9d80b", "643244", "170decda", "e2e3f278535d", "42a5b826e9547938" ], "mldsa65Seed": "", "settings": { "publicKey": "XZT5-owvGsjAQkNCu-QEIQCVC_DWiD1hhpZh3WZtC1c", "fingerprint": "chrome", "serverName": "www.google.com", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

{ "clients": [ { "id": "f3ab7bf2-525a-492e-9269-7f2fbf58fd4f", "flow": "xtls-rprx-vision", "email": "evropa", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "qvwml7ujz56prp71", "comment": "", "reset": 0, "created_at": 1778487808000, "updated_at": 1778491357000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "AMy50DNioKRSffXOgdaMXSsEFqowgfUdozcYpPN5Enw", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "2e7f8574ec3c9b", "a384", "e2", "a748f9d80b", "643244", "170decda", "e2e3f278535d", "42a5b826e9547938" ], "mldsa65Seed": "", "settings": { "publicKey": "HVZoSvE0gEFc0T_VyfQFYMkH5dKkmdz02Kjbpe9jLDg", "fingerprint": "chrome", "serverName": "www.google.com", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

{ "clients": [ { "id": "f3ab7bf2-525a-492e-9269-7f2fbf58fd4f", "flow": "xtls-rprx-vision", "email": "evropa", "limitIp": 0, "totalGB": 0, "expiryTime": 0, "enable": true, "tgId": 0, "subId": "qvwml7ujz56prp71", "comment": "", "reset": 0, "created_at": 1778487808000, "updated_at": 1778491042000 } ], "decryption": "none", "encryption": "none" } { "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "AMy50DNioKRSffXOgdaMXSsEFqowgfUdozcYpPN5Enw", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "2e7f8574ec3c9b", "a384", "e2", "a748f9d80b", "643244", "170decda", "e2e3f278535d", "42a5b826e9547938" ], "mldsa65Seed": "", "settings": { "publicKey": "HVZoSvE0gEFc0T_VyfQFYMkH5dKkmdz02Kjbpe9jLDg", "fingerprint": "chrome", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } } { "enabled": true, "destOverride": [ "http", "tls", "quic" ], "metadataOnly": false, "routeOnly": false }

{ "network": "tcp", "security": "reality", "externalProxy": [], "realitySettings": { "show": false, "xver": 0, "target": "www.google.com:443", "serverNames": [ "www.google.com", "google.com" ], "privateKey": "AMy50DNioKRSffXOgdaMXSsEFqowgfUdozcYpPN5Enw", "minClientVer": "", "maxClientVer": "", "maxTimediff": 0, "shortIds": [ "2e7f8574ec3c9b", "a384", "e2", "a748f9d80b", "643244", "170decda", "e2e3f278535d", "42a5b826e9547938" ], "mldsa65Seed": "", "settings": { "publicKey": "HVZoSvE0gEFc0T_VyfQFYMkH5dKkmdz02Kjbpe9jLDg", "fingerprint": "chrome", "serverName": "", "spiderX": "/", "mldsa65Verify": "" } }, "tcpSettings": { "acceptProxyProtocol": false, "header": { "type": "none" } } }

@AntenkaAI_bot, я переустановил ubuntu и панель 3x-ui. теперь выяснилось если я Srcurity - не "reality", а "none" то ютуб с телефона работает. А если Srcurity - "reality", то интернет вообще пропадает при коннекте [image]

vless://f2148a62-3596-414c-bc75-a640a2b66f7d@92.242.164.225:443?type=tcp&encryption=none&security=reality&pbk=glht0A6LbGl-tvR91tKbgPysVxjI3OT2pUh6VSYxp1Q&fp=chrome&sni=max.ru&sid=dc&spx=%2F&flow=xtls-rprx-vision#1-bsq6s6lt