Xray-core icon indicating copy to clipboard operation
Xray-core copied to clipboard
verified publisher icon XTLS

Bad wireguard inbound design

Open alexbarotur opened this issue 7 months ago • 15 comments

Integrity requirements

  • [x] I confirm that I have read the documentation, understand the meaning of all the configuration items I wrote, and did not pile up seemingly useful options or default values.
  • [x] I provided the complete config and logs, rather than just providing the truncated parts based on my own judgment.
  • [x] I searched issues and did not find any similar issues.
  • [x] The problem can be successfully reproduced in the latest Release

Description

Domain based routing not working. I already asked this question in the forum https://github.com/XTLS/Xray-core/discussions/4653

Hello. I installed and configured X-ray by x-ui. I have following scheme: router connected by wireguard (inbound named as inbound-26675) to local X-ray installed on raspberry pi. X-ray on that raspberry should route my ru-traffic to the direct outbound and all other traffic to remote x-ray installed on vps (named in config as is_vmess). This scheme worked for some time but has been broken a months ago after upgrading xray. Now all traffic included ru from wireguard (and from other inbounds I tested as in this config) routed to one destination (is_vmess) and ignore domain routing. I waited for a months by upgrading xray for a fix, but it still not working. May be you can help me what wrong with my config or so.

But no one replied with the solution, but several people confirmed this issue.

Reproduction Method

At the time of report, it was tested on version v2.6.0, but it remains event on master branch Steps:

  1. Load Config.
  2. Connect to inbound-13044 by wireguard from any client
  3. than go to any russian website, for example myip.ru.

Expected: it should be blocked (routed to blocked outbound) Actual: it successfully opens (routed to direct outbound)

Client config


I connect from the router, so no client config here

Server config

Minimal config where all Russian websites should be blocked


{
  "log": {
    "access": "./access.log",
    "dnsLog": false,
    "error": "./error.log",
    "loglevel": "debug",
    "maskAddress": ""
  },
  "routing": {
    "domainStrategy": "AsIs",
    "rules": [
      {
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api",
        "type": "field"
      },
      {
        "ip": [
          "geoip:private"
        ],
        "outboundTag": "blocked",
        "type": "field"
      },
      {
        "outboundTag": "blocked",
        "protocol": [
          "bittorrent"
        ],
        "type": "field"
      },
      {
        "type": "field",
        "domain": [
          "ext:geosite_RU.dat:ru-available-only-inside",
          "regexp:.*\\.ru$"
        ],
        "outboundTag": "blocked"
      }
    ]
  },
  "dns": null,
  "inbounds": [
    {
      "listen": "127.0.0.1",
      "port": 62789,
      "protocol": "dokodemo-door",
      "settings": {
        "address": "127.0.0.1"
      },
      "streamSettings": null,
      "tag": "api",
      "sniffing": null,
      "allocate": null
    },
    {
      "listen": null,
      "port": 13044,
      "protocol": "wireguard",
      "settings": {
        "mtu": 1420,
        "secretKey": "AElLMb4dCd0orkMpTFtFBi9AhRs6GA8cRI4oXW+RpEc=",
        "peers": [
          {
            "privateKey": "KHHU1TIKrRSN6x7odPybpSLnFmsHUkTn027C/PVFing=",
            "publicKey": "cr7yYVJkQomcLMhDpChfDqBTPYnimiN6bn0gMRnSOFc=",
            "allowedIPs": [
              "10.0.0.2/32"
            ],
            "keepAlive": 0
          }
        ],
        "noKernelTun": false
      },
      "streamSettings": null,
      "tag": "inbound-13044",
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic",
          "fakedns"
        ],
        "metadataOnly": false,
        "routeOnly": false
      },
      "allocate": {
        "strategy": "always",
        "refresh": 5,
        "concurrency": 3
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "AsIs",
        "noises": [],
        "redirect": ""
      },
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "settings": {},
      "tag": "blocked"
    }
  ],
  "transport": null,
  "policy": {
    "levels": {
      "0": {
        "statsUserDownlink": true,
        "statsUserUplink": true
      }
    },
    "system": {
      "statsInboundDownlink": true,
      "statsInboundUplink": true,
      "statsOutboundDownlink": false,
      "statsOutboundUplink": false
    }
  },
  "api": {
    "services": [
      "HandlerService",
      "LoggerService",
      "StatsService"
    ],
    "tag": "api"
  },
  "stats": {},
  "reverse": null,
  "fakedns": null,
  "observatory": null,
  "burstObservatory": null
}

Client log

Server log

access.log:


2025/05/25 16:20:47.004364 from 127.0.0.1:39946 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:20:50.912111 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:50.913360 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:50.913999 from tcp:0.0.0.0:0 accepted udp:74.125.131.104:443 [inbound-13044 >> direct]
2025/05/25 16:20:50.917668 from tcp:0.0.0.0:0 accepted udp:64.233.161.113:443 [inbound-13044 >> direct]
2025/05/25 16:20:50.922036 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:50.931525 from tcp:0.0.0.0:0 accepted udp:172.224.38.133:443 [inbound-13044 >> direct]
2025/05/25 16:20:50.942663 from tcp:0.0.0.0:0 accepted udp:108.177.14.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:50.985828 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:50.987183 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.000790 from tcp:0.0.0.0:0 accepted tcp:74.125.131.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.000854 from tcp:0.0.0.0:0 accepted tcp:74.125.131.157:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.000886 from tcp:0.0.0.0:0 accepted tcp:74.125.131.157:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.008508 from tcp:0.0.0.0:0 accepted tcp:74.125.131.154:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.009133 from tcp:0.0.0.0:0 accepted tcp:74.125.131.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.009222 from tcp:0.0.0.0:0 accepted udp:64.233.165.157:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.009245 from tcp:0.0.0.0:0 accepted tcp:74.125.131.155:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.152530 from tcp:0.0.0.0:0 accepted udp:64.233.161.95:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.152570 from tcp:0.0.0.0:0 accepted udp:173.194.221.157:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.153456 from tcp:0.0.0.0:0 accepted udp:64.233.164.132:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.153502 from tcp:0.0.0.0:0 accepted udp:173.194.221.94:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.153528 from tcp:0.0.0.0:0 accepted udp:64.233.164.97:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.157141 from tcp:0.0.0.0:0 accepted udp:64.233.165.154:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.161225 from tcp:0.0.0.0:0 accepted tcp:64.233.165.157:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.311818 from tcp:0.0.0.0:0 accepted udp:64.233.165.155:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.506461 from tcp:0.0.0.0:0 accepted udp:64.233.165.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.905255 from tcp:0.0.0.0:0 accepted udp:74.125.131.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.907618 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.907662 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.907693 from tcp:0.0.0.0:0 accepted udp:74.125.131.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.907719 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.912520 from tcp:0.0.0.0:0 accepted tcp:74.125.131.154:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.913773 from tcp:0.0.0.0:0 accepted tcp:74.125.131.155:443 [inbound-13044 >> direct]
2025/05/25 16:20:51.925666 from tcp:0.0.0.0:0 accepted tcp:17.57.146.138:5223 [inbound-13044 >> direct]
2025/05/25 16:20:51.953438 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.954518 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.954954 from tcp:0.0.0.0:0 accepted udp:1.1.1.1:53 [inbound-13044 >> direct]
2025/05/25 16:20:51.972710 from tcp:0.0.0.0:0 accepted tcp:1.1.1.1:443 [inbound-13044 >> direct]
2025/05/25 16:20:52.027453 from tcp:0.0.0.0:0 accepted tcp:1.1.1.1:853 [inbound-13044 >> direct]
2025/05/25 16:20:52.028645 from tcp:0.0.0.0:0 accepted tcp:1.1.1.1:443 [inbound-13044 >> direct]
2025/05/25 16:20:52.031251 from tcp:0.0.0.0:0 accepted tcp:1.1.1.1:853 [inbound-13044 >> direct]
2025/05/25 16:20:52.748553 from tcp:0.0.0.0:0 accepted tcp:1.1.1.1:853 [inbound-13044 >> direct]
2025/05/25 16:20:52.893518 from tcp:0.0.0.0:0 accepted tcp:142.250.150.108:993 [inbound-13044 >> direct]
2025/05/25 16:20:53.217340 from tcp:0.0.0.0:0 accepted tcp:64.233.165.154:443 [inbound-13044 >> direct]
2025/05/25 16:20:55.224642 from tcp:0.0.0.0:0 accepted tcp:64.233.165.155:443 [inbound-13044 >> direct]
2025/05/25 16:20:56.355239 from tcp:0.0.0.0:0 accepted tcp:213.180.193.234:443 [inbound-13044 >> direct]
2025/05/25 16:20:57.004000 from 127.0.0.1:37110 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:20:57.177084 from tcp:0.0.0.0:0 accepted tcp:178.62.9.171:443 [inbound-13044 >> direct]
2025/05/25 16:20:57.229862 from tcp:0.0.0.0:0 accepted tcp:64.233.165.156:443 [inbound-13044 >> direct]
2025/05/25 16:20:57.820871 from tcp:0.0.0.0:0 accepted udp:64.233.164.132:443 [inbound-13044 >> direct]
2025/05/25 16:21:01.579672 from tcp:0.0.0.0:0 accepted tcp:17.248.214.69:443 [inbound-13044 >> direct]
2025/05/25 16:21:01.612500 from tcp:0.0.0.0:0 accepted udp:17.248.214.69:443 [inbound-13044 >> direct]
2025/05/25 16:21:01.767257 from tcp:0.0.0.0:0 accepted tcp:17.248.214.69:443 [inbound-13044 >> direct]
2025/05/25 16:21:07.003944 from 127.0.0.1:45832 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:21:17.003869 from 127.0.0.1:53154 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:21:27.003842 from 127.0.0.1:33598 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:21:37.004212 from 127.0.0.1:43886 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:21:47.003934 from 127.0.0.1:54908 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:21:57.004833 from 127.0.0.1:36946 accepted tcp:127.0.0.1:0 [api -> api]
2025/05/25 16:22:07.003549 from 127.0.0.1:55916 accepted tcp:127.0.0.1:0 [api -> api]

error.log:


2025/05/25 16:20:43.082751 [Debug] app/log: Logger started
2025/05/25 16:20:43.083554 [Debug] app/router: MphDomainMatcher is enabled for 145 domain rule(s)
2025/05/25 16:20:43.083588 [Debug] app/stats: create new counter inbound>>>api>>>traffic>>>uplink
2025/05/25 16:20:43.083598 [Debug] app/stats: create new counter inbound>>>api>>>traffic>>>downlink
2025/05/25 16:20:43.083613 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:62789
2025/05/25 16:20:43.083758 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/05/25 16:20:43.084629 [Debug] Routine: decryption worker 1 - started
2025/05/25 16:20:43.084660 [Debug] Routine: encryption worker 2 - started
2025/05/25 16:20:43.084667 [Debug] UAPI: Updating private key
2025/05/25 16:20:43.084675 [Debug] Routine: handshake worker 1 - started
2025/05/25 16:20:43.084682 [Debug] Routine: encryption worker 1 - started
2025/05/25 16:20:43.084688 [Debug] Routine: handshake worker 3 - started
2025/05/25 16:20:43.084694 [Debug] Routine: decryption worker 2 - started
2025/05/25 16:20:43.084701 [Debug] Routine: handshake worker 2 - started
2025/05/25 16:20:43.084707 [Debug] Routine: encryption worker 3 - started
2025/05/25 16:20:43.084714 [Debug] Routine: decryption worker 3 - started
2025/05/25 16:20:43.084720 [Debug] Routine: decryption worker 4 - started
2025/05/25 16:20:43.084727 [Debug] Routine: encryption worker 4 - started
2025/05/25 16:20:43.084733 [Debug] Routine: handshake worker 4 - started
2025/05/25 16:20:43.084795 [Debug] Routine: TUN reader - started
2025/05/25 16:20:43.084811 [Debug] Routine: event worker - started
2025/05/25 16:20:43.084819 [Debug] Interface up requested
2025/05/25 16:20:43.085052 [Debug] UAPI: Updating listen port
2025/05/25 16:20:43.085094 [Debug] UDP bind has been updated
2025/05/25 16:20:43.085230 [Debug] Routine: receive incoming Open - started
2025/05/25 16:20:43.085248 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:43.418767 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:43.752212 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:44.085840 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:44.419272 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:44.752713 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:45.086108 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:45.419482 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:45.752873 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:46.086273 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:46.421107 [Debug] Failed to receive Open packet: channel closed
2025/05/25 16:20:46.421171 [Debug] Routine: receive incoming Open - stopped
2025/05/25 16:20:46.421179 [Debug] UDP bind has been updated
2025/05/25 16:20:46.421186 [Debug] peer(cr7y…SOFc) - UAPI: Created
2025/05/25 16:20:46.421193 [Debug] peer(cr7y…SOFc) - UAPI: Adding allowedip
2025/05/25 16:20:46.421199 [Debug] peer(cr7y…SOFc) - Starting
2025/05/25 16:20:46.421206 [Debug] Interface state was Down, requested Up, now Up
2025/05/25 16:20:46.421216 [Debug] app/stats: create new counter inbound>>>inbound-13044>>>traffic>>>uplink
2025/05/25 16:20:46.421223 [Debug] app/stats: create new counter inbound>>>inbound-13044>>>traffic>>>downlink
2025/05/25 16:20:46.421230 [Debug] Routine: receive incoming Open - started
2025/05/25 16:20:46.421236 [Debug] peer(cr7y…SOFc) - Routine: sequential sender - started
2025/05/25 16:20:46.421243 [Debug] peer(cr7y…SOFc) - Routine: sequential receiver - started
2025/05/25 16:20:46.421329 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:62789
2025/05/25 16:20:46.421484 [Info] transport/internet/udp: listening UDP on 0.0.0.0:13044
2025/05/25 16:20:46.422164 [Warning] core: Xray 25.5.16 started
2025/05/25 16:20:47.003690 [Debug] [1537329240] proxy/dokodemo: processing connection from: 127.0.0.1:39946
2025/05/25 16:20:47.003843 [Info] [1537329240] proxy/dokodemo: received request for 127.0.0.1:39946
2025/05/25 16:20:47.003943 [Info] [1537329240] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:20:50.902151 [Debug] peer(cr7y…SOFc) - Received handshake initiation
2025/05/25 16:20:50.902275 [Debug] peer(cr7y…SOFc) - Sending handshake response
2025/05/25 16:20:50.911836 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:50.911958 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:50.912426 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:48164, remote endpoint 1.1.1.1:53
2025/05/25 16:20:50.913150 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:50.913265 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:50.913311 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:40777, remote endpoint 1.1.1.1:53
2025/05/25 16:20:50.913897 [Info] app/dispatcher: default route for udp:74.125.131.104:443
2025/05/25 16:20:50.913964 [Debug] transport/internet: dialing to udp:74.125.131.104:443
2025/05/25 16:20:50.914324 [Info] proxy/freedom: connection opened to udp:74.125.131.104:443, local endpoint [::]:42370, remote endpoint 74.125.131.104:443
2025/05/25 16:20:50.917449 [Info] app/dispatcher: default route for udp:64.233.161.113:443
2025/05/25 16:20:50.917571 [Debug] transport/internet: dialing to udp:64.233.161.113:443
2025/05/25 16:20:50.917976 [Info] proxy/freedom: connection opened to udp:64.233.161.113:443, local endpoint [::]:53919, remote endpoint 64.233.161.113:443
2025/05/25 16:20:50.918913 [Debug] peer(cr7y…SOFc) - Receiving keepalive packet
2025/05/25 16:20:50.921846 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:50.922176 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:50.922249 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:44500, remote endpoint 1.1.1.1:53
2025/05/25 16:20:50.931368 [Info] app/dispatcher: default route for udp:172.224.38.133:443
2025/05/25 16:20:50.931485 [Debug] transport/internet: dialing to udp:172.224.38.133:443
2025/05/25 16:20:50.931858 [Info] proxy/freedom: connection opened to udp:172.224.38.133:443, local endpoint [::]:43163, remote endpoint 172.224.38.133:443
2025/05/25 16:20:50.942578 [Info] app/dispatcher: default route for udp:108.177.14.156:443
2025/05/25 16:20:50.942690 [Debug] transport/internet: dialing to udp:108.177.14.156:443
2025/05/25 16:20:50.943073 [Info] proxy/freedom: connection opened to udp:108.177.14.156:443, local endpoint [::]:34224, remote endpoint 108.177.14.156:443
2025/05/25 16:20:50.985573 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:50.986192 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:50.986833 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:50447, remote endpoint 1.1.1.1:53
2025/05/25 16:20:50.986887 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:50.987242 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:50.987284 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:37688, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.000345 [Info] app/dispatcher: default route for tcp:74.125.131.156:443
2025/05/25 16:20:51.000478 [Info] app/dispatcher: default route for tcp:74.125.131.157:443
2025/05/25 16:20:51.000515 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.156:443
2025/05/25 16:20:51.000542 [Debug] transport/internet: dialing to tcp:74.125.131.156:443
2025/05/25 16:20:51.000571 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.157:443
2025/05/25 16:20:51.000595 [Debug] transport/internet: dialing to tcp:74.125.131.157:443
2025/05/25 16:20:51.000623 [Info] app/dispatcher: default route for tcp:74.125.131.157:443
2025/05/25 16:20:51.000652 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.157:443
2025/05/25 16:20:51.000690 [Debug] transport/internet: dialing to tcp:74.125.131.157:443
2025/05/25 16:20:51.006690 [Error] proxy/wireguard: connection was refused
2025/05/25 16:20:51.006871 [Error] proxy/wireguard: connection was refused
2025/05/25 16:20:51.008457 [Info] app/dispatcher: default route for tcp:74.125.131.154:443
2025/05/25 16:20:51.008537 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.154:443
2025/05/25 16:20:51.008557 [Debug] transport/internet: dialing to tcp:74.125.131.154:443
2025/05/25 16:20:51.009278 [Error] proxy/wireguard: connection was refused
2025/05/25 16:20:51.009335 [Info] app/dispatcher: default route for tcp:74.125.131.156:443
2025/05/25 16:20:51.009358 [Info] app/dispatcher: default route for udp:64.233.165.157:443
2025/05/25 16:20:51.009384 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.156:443
2025/05/25 16:20:51.009404 [Debug] transport/internet: dialing to udp:64.233.165.157:443
2025/05/25 16:20:51.009420 [Debug] transport/internet: dialing to tcp:74.125.131.156:443
2025/05/25 16:20:51.009439 [Info] app/dispatcher: default route for tcp:74.125.131.155:443
2025/05/25 16:20:51.009476 [Info] proxy/freedom: connection opened to udp:64.233.165.157:443, local endpoint [::]:55594, remote endpoint 64.233.165.157:443
2025/05/25 16:20:51.009497 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.155:443
2025/05/25 16:20:51.009513 [Debug] transport/internet: dialing to tcp:74.125.131.155:443
2025/05/25 16:20:51.017023 [Info] proxy/freedom: connection opened to tcp:74.125.131.157:443, local endpoint 192.168.8.151:45600, remote endpoint 74.125.131.157:443
2025/05/25 16:20:51.017110 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.018537 [Info] proxy/freedom: connection opened to tcp:74.125.131.157:443, local endpoint 192.168.8.151:45604, remote endpoint 74.125.131.157:443
2025/05/25 16:20:51.018573 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.022436 [Info] proxy/freedom: connection opened to tcp:74.125.131.156:443, local endpoint 192.168.8.151:57848, remote endpoint 74.125.131.156:443
2025/05/25 16:20:51.022520 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.024243 [Info] proxy/freedom: connection opened to tcp:74.125.131.156:443, local endpoint 192.168.8.151:57862, remote endpoint 74.125.131.156:443
2025/05/25 16:20:51.024278 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.027653 [Info] proxy/freedom: connection opened to tcp:74.125.131.155:443, local endpoint 192.168.8.151:37610, remote endpoint 74.125.131.155:443
2025/05/25 16:20:51.027724 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.029695 [Info] proxy/freedom: connection opened to tcp:74.125.131.154:443, local endpoint 192.168.8.151:50270, remote endpoint 74.125.131.154:443
2025/05/25 16:20:51.029772 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.152295 [Info] app/dispatcher: default route for udp:64.233.161.95:443
2025/05/25 16:20:51.152402 [Debug] transport/internet: dialing to udp:64.233.161.95:443
2025/05/25 16:20:51.152443 [Info] proxy/freedom: connection opened to udp:64.233.161.95:443, local endpoint [::]:37379, remote endpoint 64.233.161.95:443
2025/05/25 16:20:51.152472 [Info] app/dispatcher: default route for udp:173.194.221.157:443
2025/05/25 16:20:51.152493 [Debug] transport/internet: dialing to udp:173.194.221.157:443
2025/05/25 16:20:51.152954 [Info] app/dispatcher: default route for udp:64.233.164.132:443
2025/05/25 16:20:51.153138 [Info] proxy/freedom: connection opened to udp:173.194.221.157:443, local endpoint [::]:59422, remote endpoint 173.194.221.157:443
2025/05/25 16:20:51.153176 [Debug] transport/internet: dialing to udp:64.233.164.132:443
2025/05/25 16:20:51.153209 [Info] proxy/freedom: connection opened to udp:64.233.164.132:443, local endpoint [::]:46319, remote endpoint 64.233.164.132:443
2025/05/25 16:20:51.153234 [Info] app/dispatcher: default route for udp:173.194.221.94:443
2025/05/25 16:20:51.153259 [Info] app/dispatcher: default route for udp:64.233.164.97:443
2025/05/25 16:20:51.153281 [Debug] transport/internet: dialing to udp:173.194.221.94:443
2025/05/25 16:20:51.153299 [Debug] transport/internet: dialing to udp:64.233.164.97:443
2025/05/25 16:20:51.153379 [Info] proxy/freedom: connection opened to udp:173.194.221.94:443, local endpoint [::]:59310, remote endpoint 173.194.221.94:443
2025/05/25 16:20:51.153415 [Info] proxy/freedom: connection opened to udp:64.233.164.97:443, local endpoint [::]:40672, remote endpoint 64.233.164.97:443
2025/05/25 16:20:51.156948 [Info] app/dispatcher: default route for udp:64.233.165.154:443
2025/05/25 16:20:51.157089 [Debug] transport/internet: dialing to udp:64.233.165.154:443
2025/05/25 16:20:51.157381 [Info] proxy/freedom: connection opened to udp:64.233.165.154:443, local endpoint [::]:54155, remote endpoint 64.233.165.154:443
2025/05/25 16:20:51.161139 [Info] app/dispatcher: default route for tcp:64.233.165.157:443
2025/05/25 16:20:51.161250 [Info] transport/internet/tcp: dialing TCP to tcp:64.233.165.157:443
2025/05/25 16:20:51.161277 [Debug] transport/internet: dialing to tcp:64.233.165.157:443
2025/05/25 16:20:51.175799 [Info] proxy/freedom: connection opened to tcp:64.233.165.157:443, local endpoint 192.168.8.151:35976, remote endpoint 64.233.165.157:443
2025/05/25 16:20:51.175909 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.311751 [Info] app/dispatcher: default route for udp:64.233.165.155:443
2025/05/25 16:20:51.311873 [Debug] transport/internet: dialing to udp:64.233.165.155:443
2025/05/25 16:20:51.312156 [Info] proxy/freedom: connection opened to udp:64.233.165.155:443, local endpoint [::]:36910, remote endpoint 64.233.165.155:443
2025/05/25 16:20:51.506386 [Info] app/dispatcher: default route for udp:64.233.165.156:443
2025/05/25 16:20:51.506486 [Debug] transport/internet: dialing to udp:64.233.165.156:443
2025/05/25 16:20:51.506821 [Info] proxy/freedom: connection opened to udp:64.233.165.156:443, local endpoint [::]:38299, remote endpoint 64.233.165.156:443
2025/05/25 16:20:51.905180 [Info] app/dispatcher: default route for udp:74.125.131.156:443
2025/05/25 16:20:51.905299 [Debug] transport/internet: dialing to udp:74.125.131.156:443
2025/05/25 16:20:51.905348 [Info] proxy/freedom: connection opened to udp:74.125.131.156:443, local endpoint [::]:34976, remote endpoint 74.125.131.156:443
2025/05/25 16:20:51.907059 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.907150 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.907184 [Info] app/dispatcher: default route for udp:74.125.131.156:443
2025/05/25 16:20:51.907210 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.907235 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.907258 [Debug] transport/internet: dialing to udp:74.125.131.156:443
2025/05/25 16:20:51.907302 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:45018, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.907379 [Info] proxy/freedom: connection opened to udp:74.125.131.156:443, local endpoint [::]:56729, remote endpoint 74.125.131.156:443
2025/05/25 16:20:51.907423 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:34858, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.907451 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.907475 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.907778 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:55243, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.912306 [Info] app/dispatcher: default route for tcp:74.125.131.154:443
2025/05/25 16:20:51.912424 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.154:443
2025/05/25 16:20:51.912452 [Debug] transport/internet: dialing to tcp:74.125.131.154:443
2025/05/25 16:20:51.913677 [Info] app/dispatcher: default route for tcp:74.125.131.155:443
2025/05/25 16:20:51.913782 [Info] transport/internet/tcp: dialing TCP to tcp:74.125.131.155:443
2025/05/25 16:20:51.913813 [Debug] transport/internet: dialing to tcp:74.125.131.155:443
2025/05/25 16:20:51.925562 [Info] app/dispatcher: default route for tcp:17.57.146.138:5223
2025/05/25 16:20:51.925674 [Info] transport/internet/tcp: dialing TCP to tcp:17.57.146.138:5223
2025/05/25 16:20:51.925748 [Debug] transport/internet: dialing to tcp:17.57.146.138:5223
2025/05/25 16:20:51.928941 [Info] proxy/freedom: connection opened to tcp:74.125.131.154:443, local endpoint 192.168.8.151:50272, remote endpoint 74.125.131.154:443
2025/05/25 16:20:51.929095 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.930352 [Info] proxy/freedom: connection opened to tcp:74.125.131.155:443, local endpoint 192.168.8.151:37612, remote endpoint 74.125.131.155:443
2025/05/25 16:20:51.930402 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.948514 [Info] proxy/freedom: connection opened to tcp:17.57.146.138:5223, local endpoint 192.168.8.151:34090, remote endpoint 17.57.146.138:5223
2025/05/25 16:20:51.948589 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:51.953250 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.953351 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.953685 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:52239, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.954328 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.954404 [Info] app/dispatcher: default route for udp:1.1.1.1:53
2025/05/25 16:20:51.954430 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.954453 [Debug] transport/internet: dialing to udp:1.1.1.1:53
2025/05/25 16:20:51.954614 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:57956, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.955031 [Info] proxy/freedom: connection opened to udp:1.1.1.1:53, local endpoint [::]:37940, remote endpoint 1.1.1.1:53
2025/05/25 16:20:51.972544 [Info] app/dispatcher: default route for tcp:1.1.1.1:443
2025/05/25 16:20:51.972668 [Info] transport/internet/tcp: dialing TCP to tcp:1.1.1.1:443
2025/05/25 16:20:51.972699 [Debug] transport/internet: dialing to tcp:1.1.1.1:443
2025/05/25 16:20:51.976454 [Info] proxy/freedom: connection opened to tcp:1.1.1.1:443, local endpoint 192.168.8.151:33356, remote endpoint 1.1.1.1:443
2025/05/25 16:20:51.976552 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:52.027548 [Info] proxy/wireguard: connection ends > proxy/wireguard: failed to transport all TCP request > read tcp 1.1.1.1:443: connection reset by peer
2025/05/25 16:20:52.027611 [Info] app/dispatcher: default route for tcp:1.1.1.1:853
2025/05/25 16:20:52.027642 [Info] transport/internet/tcp: dialing TCP to tcp:1.1.1.1:853
2025/05/25 16:20:52.027702 [Debug] transport/internet: dialing to tcp:1.1.1.1:853
2025/05/25 16:20:52.028773 [Info] app/dispatcher: default route for tcp:1.1.1.1:443
2025/05/25 16:20:52.028810 [Info] transport/internet/tcp: dialing TCP to tcp:1.1.1.1:443
2025/05/25 16:20:52.028835 [Debug] transport/internet: dialing to tcp:1.1.1.1:443
2025/05/25 16:20:52.030785 [Info] proxy/freedom: connection opened to tcp:1.1.1.1:853, local endpoint 192.168.8.151:57782, remote endpoint 1.1.1.1:853
2025/05/25 16:20:52.030897 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:52.031129 [Info] app/dispatcher: default route for tcp:1.1.1.1:853
2025/05/25 16:20:52.031191 [Info] transport/internet/tcp: dialing TCP to tcp:1.1.1.1:853
2025/05/25 16:20:52.031212 [Debug] transport/internet: dialing to tcp:1.1.1.1:853
2025/05/25 16:20:52.031761 [Info] proxy/freedom: connection opened to tcp:1.1.1.1:443, local endpoint 192.168.8.151:33362, remote endpoint 1.1.1.1:443
2025/05/25 16:20:52.031806 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:52.034815 [Info] proxy/freedom: connection opened to tcp:1.1.1.1:853, local endpoint 192.168.8.151:57786, remote endpoint 1.1.1.1:853
2025/05/25 16:20:52.034908 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:52.748328 [Info] app/dispatcher: default route for tcp:1.1.1.1:853
2025/05/25 16:20:52.748450 [Info] transport/internet/tcp: dialing TCP to tcp:1.1.1.1:853
2025/05/25 16:20:52.748479 [Debug] transport/internet: dialing to tcp:1.1.1.1:853
2025/05/25 16:20:52.751889 [Info] proxy/freedom: connection opened to tcp:1.1.1.1:853, local endpoint 192.168.8.151:57802, remote endpoint 1.1.1.1:853
2025/05/25 16:20:52.752017 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:52.893448 [Info] app/dispatcher: default route for tcp:142.250.150.108:993
2025/05/25 16:20:52.893567 [Info] transport/internet/tcp: dialing TCP to tcp:142.250.150.108:993
2025/05/25 16:20:52.893593 [Debug] transport/internet: dialing to tcp:142.250.150.108:993
2025/05/25 16:20:52.912467 [Info] proxy/freedom: connection opened to tcp:142.250.150.108:993, local endpoint 192.168.8.151:42048, remote endpoint 142.250.150.108:993
2025/05/25 16:20:52.912555 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:53.217188 [Info] app/dispatcher: default route for tcp:64.233.165.154:443
2025/05/25 16:20:53.217312 [Info] transport/internet/tcp: dialing TCP to tcp:64.233.165.154:443
2025/05/25 16:20:53.217344 [Debug] transport/internet: dialing to tcp:64.233.165.154:443
2025/05/25 16:20:53.239066 [Info] proxy/freedom: connection opened to tcp:64.233.165.154:443, local endpoint 192.168.8.151:50024, remote endpoint 64.233.165.154:443
2025/05/25 16:20:53.239130 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:55.224533 [Info] app/dispatcher: default route for tcp:64.233.165.155:443
2025/05/25 16:20:55.224664 [Info] transport/internet/tcp: dialing TCP to tcp:64.233.165.155:443
2025/05/25 16:20:55.224694 [Debug] transport/internet: dialing to tcp:64.233.165.155:443
2025/05/25 16:20:55.240547 [Info] proxy/freedom: connection opened to tcp:64.233.165.155:443, local endpoint 192.168.8.151:35790, remote endpoint 64.233.165.155:443
2025/05/25 16:20:55.240662 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:56.355163 [Info] app/dispatcher: default route for tcp:213.180.193.234:443
2025/05/25 16:20:56.355301 [Info] transport/internet/tcp: dialing TCP to tcp:213.180.193.234:443
2025/05/25 16:20:56.355334 [Debug] transport/internet: dialing to tcp:213.180.193.234:443
2025/05/25 16:20:56.361132 [Info] proxy/freedom: connection opened to tcp:213.180.193.234:443, local endpoint 192.168.8.151:43578, remote endpoint 213.180.193.234:443
2025/05/25 16:20:56.361237 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:57.003803 [Debug] [1442780719] proxy/dokodemo: processing connection from: 127.0.0.1:37110
2025/05/25 16:20:57.003941 [Info] [1442780719] proxy/dokodemo: received request for 127.0.0.1:37110
2025/05/25 16:20:57.003988 [Info] [1442780719] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:20:57.177009 [Info] app/dispatcher: default route for tcp:178.62.9.171:443
2025/05/25 16:20:57.177311 [Info] transport/internet/tcp: dialing TCP to tcp:178.62.9.171:443
2025/05/25 16:20:57.177343 [Debug] transport/internet: dialing to tcp:178.62.9.171:443
2025/05/25 16:20:57.229737 [Info] app/dispatcher: default route for tcp:64.233.165.156:443
2025/05/25 16:20:57.229845 [Info] transport/internet/tcp: dialing TCP to tcp:64.233.165.156:443
2025/05/25 16:20:57.229872 [Debug] transport/internet: dialing to tcp:64.233.165.156:443
2025/05/25 16:20:57.235186 [Info] proxy/freedom: connection opened to tcp:178.62.9.171:443, local endpoint 192.168.8.151:48854, remote endpoint 178.62.9.171:443
2025/05/25 16:20:57.235257 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:57.245384 [Info] proxy/freedom: connection opened to tcp:64.233.165.156:443, local endpoint 192.168.8.151:57300, remote endpoint 64.233.165.156:443
2025/05/25 16:20:57.245438 [Info] proxy: CopyRawConn readv
2025/05/25 16:20:57.820669 [Info] app/dispatcher: default route for udp:64.233.164.132:443
2025/05/25 16:20:57.820795 [Debug] transport/internet: dialing to udp:64.233.164.132:443
2025/05/25 16:20:57.821114 [Info] proxy/freedom: connection opened to udp:64.233.164.132:443, local endpoint [::]:45994, remote endpoint 64.233.164.132:443
2025/05/25 16:21:01.579592 [Info] app/dispatcher: default route for tcp:17.248.214.69:443
2025/05/25 16:21:01.579723 [Info] transport/internet/tcp: dialing TCP to tcp:17.248.214.69:443
2025/05/25 16:21:01.579754 [Debug] transport/internet: dialing to tcp:17.248.214.69:443
2025/05/25 16:21:01.602471 [Info] proxy/freedom: connection opened to tcp:17.248.214.69:443, local endpoint 192.168.8.151:58846, remote endpoint 17.248.214.69:443
2025/05/25 16:21:01.602614 [Info] proxy: CopyRawConn readv
2025/05/25 16:21:01.608149 [Info] proxy/wireguard: connection ends > proxy/wireguard: failed to transport all TCP request > read tcp 17.248.214.69:443: connection reset by peer
2025/05/25 16:21:01.612427 [Info] app/dispatcher: default route for udp:17.248.214.69:443
2025/05/25 16:21:01.612495 [Debug] transport/internet: dialing to udp:17.248.214.69:443
2025/05/25 16:21:01.612890 [Info] proxy/freedom: connection opened to udp:17.248.214.69:443, local endpoint [::]:54767, remote endpoint 17.248.214.69:443
2025/05/25 16:21:01.767160 [Info] app/dispatcher: default route for tcp:17.248.214.69:443
2025/05/25 16:21:01.767283 [Info] transport/internet/tcp: dialing TCP to tcp:17.248.214.69:443
2025/05/25 16:21:01.767314 [Debug] transport/internet: dialing to tcp:17.248.214.69:443
2025/05/25 16:21:01.790857 [Info] proxy/freedom: connection opened to tcp:17.248.214.69:443, local endpoint 192.168.8.151:58852, remote endpoint 17.248.214.69:443
2025/05/25 16:21:01.790938 [Info] proxy: CopyRawConn readv
2025/05/25 16:21:02.670996 [Debug] peer(cr7y…SOFc) - Receiving keepalive packet
2025/05/25 16:21:03.556937 [Debug] proxy/wireguard: connection ends > context canceled
2025/05/25 16:21:03.955118 [Debug] proxy/wireguard: connection ends > context canceled
2025/05/25 16:21:07.003760 [Debug] [409914051] proxy/dokodemo: processing connection from: 127.0.0.1:45832
2025/05/25 16:21:07.003895 [Info] [409914051] proxy/dokodemo: received request for 127.0.0.1:45832
2025/05/25 16:21:07.003942 [Info] [409914051] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:17.003721 [Debug] [1170620481] proxy/dokodemo: processing connection from: 127.0.0.1:53154
2025/05/25 16:21:17.003879 [Info] [1170620481] proxy/dokodemo: received request for 127.0.0.1:53154
2025/05/25 16:21:17.003935 [Info] [1170620481] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:17.008026 [Info] [1170620481] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport request > read tcp 127.0.0.1:62789->127.0.0.1:53154: read: connection reset by peer
2025/05/25 16:21:17.960806 [Debug] peer(cr7y…SOFc) - Retrying handshake because we stopped hearing back after 15 seconds
2025/05/25 16:21:17.960925 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:23.149645 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 2)
2025/05/25 16:21:23.149770 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:27.003682 [Debug] [833864453] proxy/dokodemo: processing connection from: 127.0.0.1:33598
2025/05/25 16:21:27.003821 [Info] [833864453] proxy/dokodemo: received request for 127.0.0.1:33598
2025/05/25 16:21:27.003875 [Info] [833864453] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:28.449856 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 3)
2025/05/25 16:21:28.449996 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:33.052387 [Debug] proxy/wireguard: connection ends > context canceled
2025/05/25 16:21:33.614390 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 4)
2025/05/25 16:21:33.614497 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:35.704329 [Debug] peer(cr7y…SOFc) - Retrying handshake because we stopped hearing back after 15 seconds
2025/05/25 16:21:37.003968 [Debug] [1645541048] proxy/dokodemo: processing connection from: 127.0.0.1:43886
2025/05/25 16:21:37.004100 [Info] [1645541048] proxy/dokodemo: received request for 127.0.0.1:43886
2025/05/25 16:21:37.004154 [Info] [1645541048] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:38.742935 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 2)
2025/05/25 16:21:38.743061 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:38.819118 [Debug] proxy/wireguard: connection ends > context canceled
2025/05/25 16:21:43.845183 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 3)
2025/05/25 16:21:43.845302 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:47.003707 [Debug] [2698277945] proxy/dokodemo: processing connection from: 127.0.0.1:54908
2025/05/25 16:21:47.003843 [Info] [2698277945] proxy/dokodemo: received request for 127.0.0.1:54908
2025/05/25 16:21:47.003885 [Info] [2698277945] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:48.909176 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 4)
2025/05/25 16:21:48.909303 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:53.307138 [Debug] peer(cr7y…SOFc) - Retrying handshake because we stopped hearing back after 15 seconds
2025/05/25 16:21:54.088138 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 2)
2025/05/25 16:21:54.088246 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:21:57.005189 [Debug] [4260653713] proxy/dokodemo: processing connection from: 127.0.0.1:36946
2025/05/25 16:21:57.005283 [Info] [4260653713] proxy/dokodemo: received request for 127.0.0.1:36946
2025/05/25 16:21:57.005335 [Info] [4260653713] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:21:59.400831 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 3)
2025/05/25 16:21:59.400956 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:22:04.693176 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 4)
2025/05/25 16:22:04.693310 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:22:07.003545 [Debug] [2239298237] proxy/dokodemo: processing connection from: 127.0.0.1:55916
2025/05/25 16:22:07.003686 [Info] [2239298237] proxy/dokodemo: received request for 127.0.0.1:55916
2025/05/25 16:22:07.003741 [Info] [2239298237] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/25 16:22:09.302627 [Debug] peer(cr7y…SOFc) - Retrying handshake because we stopped hearing back after 15 seconds
2025/05/25 16:22:09.873272 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 2)
2025/05/25 16:22:09.873376 [Debug] peer(cr7y…SOFc) - Sending handshake initiation
2025/05/25 16:22:15.056715 [Debug] peer(cr7y…SOFc) - Handshake did not complete after 5 seconds, retrying (try 3)
2025/05/25 16:22:15.057036 [Debug] peer(cr7y…SOFc) - Sending handshake initiation

alexbarotur avatar May 25 '25 09:05 alexbarotur

1 xray有wireguard客户端实现 请用它复现并完整模板 2 log还需要error log 3 如果旧版本没问题 请给出没问题的最后一个版本号

Fangliding avatar May 26 '25 06:05 Fangliding

close as no response

Fangliding avatar May 27 '25 05:05 Fangliding

  1. I can connect only from Streisand (as I see in your readme it uses xray core), so here is a config I got from the app: wireguard://192.168.8.151:21356?private_key=6D+hSrmJO4RiWEwSMTKzD5mJyEdV/hIywIhQAWfJUFU%3D&peer_public_key=oirp8taVBIs4qO2ETVtiyoGGM1B01YsBnQQZbSBG/m4%3D&mtu=1420&address=10.0.0.2/32
  2. Error log already attached to main message, but here is another one:

2025/05/27 06:56:06.817637 [Debug] app/log: Logger started
2025/05/27 06:56:06.818404 [Debug] app/router: MphDomainMatcher is enabled for 145 domain rule(s)
2025/05/27 06:56:06.818435 [Debug] app/stats: create new counter inbound>>>api>>>traffic>>>uplink
2025/05/27 06:56:06.818444 [Debug] app/stats: create new counter inbound>>>api>>>traffic>>>downlink
2025/05/27 06:56:06.818458 [Debug] app/proxyman/inbound: creating stream worker on 127.0.0.1:62789
2025/05/27 06:56:06.818559 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/05/27 06:56:06.819557 [Debug] UAPI: Updating private key
2025/05/27 06:56:06.819595 [Debug] Routine: decryption worker 1 - started
2025/05/27 06:56:06.819605 [Debug] Routine: encryption worker 4 - started
2025/05/27 06:56:06.819612 [Debug] Routine: encryption worker 1 - started
2025/05/27 06:56:06.819619 [Debug] Routine: encryption worker 3 - started
2025/05/27 06:56:06.819626 [Debug] Routine: handshake worker 4 - started
2025/05/27 06:56:06.819633 [Debug] Routine: decryption worker 3 - started
2025/05/27 06:56:06.819640 [Debug] Routine: handshake worker 2 - started
2025/05/27 06:56:06.819647 [Debug] Routine: handshake worker 3 - started
2025/05/27 06:56:06.819653 [Debug] Routine: handshake worker 1 - started
2025/05/27 06:56:06.819660 [Debug] Routine: decryption worker 4 - started
2025/05/27 06:56:06.819666 [Debug] Routine: decryption worker 2 - started
2025/05/27 06:56:06.819673 [Debug] Routine: encryption worker 2 - started
2025/05/27 06:56:06.819679 [Debug] Routine: event worker - started
2025/05/27 06:56:06.819686 [Debug] Interface up requested
2025/05/27 06:56:06.819692 [Debug] Routine: TUN reader - started
2025/05/27 06:56:06.819733 [Debug] UAPI: Updating listen port
2025/05/27 06:56:06.819816 [Debug] UDP bind has been updated
2025/05/27 06:56:06.819831 [Debug] Routine: receive incoming Open - started
2025/05/27 06:56:06.819862 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:07.153378 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:07.486756 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:07.820190 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:08.153615 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:08.487061 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:08.820427 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:09.153891 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:09.487286 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:09.820678 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:10.156468 [Debug] Failed to receive Open packet: channel closed
2025/05/27 06:56:10.156589 [Debug] Routine: receive incoming Open - stopped
2025/05/27 06:56:10.156598 [Debug] UDP bind has been updated
2025/05/27 06:56:10.156606 [Debug] peer(OVn9…U800) - UAPI: Created
2025/05/27 06:56:10.156614 [Debug] peer(OVn9…U800) - UAPI: Adding allowedip
2025/05/27 06:56:10.156622 [Debug] peer(OVn9…U800) - Starting
2025/05/27 06:56:10.156629 [Debug] Interface state was Down, requested Up, now Up
2025/05/27 06:56:10.156642 [Debug] app/stats: create new counter inbound>>>inbound-21356>>>traffic>>>uplink
2025/05/27 06:56:10.156662 [Debug] app/stats: create new counter inbound>>>inbound-21356>>>traffic>>>downlink
2025/05/27 06:56:10.156678 [Info] transport/internet/tcp: listening TCP on 127.0.0.1:62789
2025/05/27 06:56:10.156690 [Info] transport/internet/udp: listening UDP on 0.0.0.0:21356
2025/05/27 06:56:10.156701 [Warning] core: Xray 25.5.16 started
2025/05/27 06:56:10.156724 [Debug] peer(OVn9…U800) - Routine: sequential sender - started
2025/05/27 06:56:10.156889 [Debug] peer(OVn9…U800) - Routine: sequential receiver - started
2025/05/27 06:56:10.156904 [Debug] Routine: receive incoming Open - started
2025/05/27 06:56:13.003935 [Debug] [2422308336] proxy/dokodemo: processing connection from: 127.0.0.1:45606
2025/05/27 06:56:13.004103 [Info] [2422308336] proxy/dokodemo: received request for 127.0.0.1:45606
2025/05/27 06:56:13.004484 [Info] [2422308336] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:56:23.008257 [Debug] [639659416] proxy/dokodemo: processing connection from: 127.0.0.1:54552
2025/05/27 06:56:23.008641 [Info] [639659416] proxy/dokodemo: received request for 127.0.0.1:54552
2025/05/27 06:56:23.009413 [Info] [639659416] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:56:33.004347 [Debug] [396592840] proxy/dokodemo: processing connection from: 127.0.0.1:51504
2025/05/27 06:56:33.004511 [Info] [396592840] proxy/dokodemo: received request for 127.0.0.1:51504
2025/05/27 06:56:33.004555 [Info] [396592840] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:56:43.004037 [Debug] [611750172] proxy/dokodemo: processing connection from: 127.0.0.1:59108
2025/05/27 06:56:43.004208 [Info] [611750172] proxy/dokodemo: received request for 127.0.0.1:59108
2025/05/27 06:56:43.004267 [Info] [611750172] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:56:53.004028 [Debug] [3491175961] proxy/dokodemo: processing connection from: 127.0.0.1:51202
2025/05/27 06:56:53.004187 [Info] [3491175961] proxy/dokodemo: received request for 127.0.0.1:51202
2025/05/27 06:56:53.004378 [Info] [3491175961] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:56:53.009353 [Info] [3491175961] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport request > read tcp 127.0.0.1:62789->127.0.0.1:51202: read: connection reset by peer
2025/05/27 06:57:03.003330 [Debug] [3974820215] proxy/dokodemo: processing connection from: 127.0.0.1:40996
2025/05/27 06:57:03.003495 [Info] [3974820215] proxy/dokodemo: received request for 127.0.0.1:40996
2025/05/27 06:57:03.003812 [Info] [3974820215] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:57:13.003927 [Debug] [2287554678] proxy/dokodemo: processing connection from: 127.0.0.1:45590
2025/05/27 06:57:13.004075 [Info] [2287554678] proxy/dokodemo: received request for 127.0.0.1:45590
2025/05/27 06:57:13.004140 [Info] [2287554678] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:57:23.004443 [Debug] [655399737] proxy/dokodemo: processing connection from: 127.0.0.1:37580
2025/05/27 06:57:23.004604 [Info] [655399737] proxy/dokodemo: received request for 127.0.0.1:37580
2025/05/27 06:57:23.004659 [Info] [655399737] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:57:33.003905 [Debug] [1536329896] proxy/dokodemo: processing connection from: 127.0.0.1:41378
2025/05/27 06:57:33.004061 [Info] [1536329896] proxy/dokodemo: received request for 127.0.0.1:41378
2025/05/27 06:57:33.004120 [Info] [1536329896] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:57:43.003186 [Debug] [4025165203] proxy/dokodemo: processing connection from: 127.0.0.1:34882
2025/05/27 06:57:43.003336 [Info] [4025165203] proxy/dokodemo: received request for 127.0.0.1:34882
2025/05/27 06:57:43.003389 [Info] [4025165203] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:57:43.010959 [Info] [4025165203] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport request > read tcp 127.0.0.1:62789->127.0.0.1:34882: read: connection reset by peer
2025/05/27 06:57:53.003009 [Debug] [1859805676] proxy/dokodemo: processing connection from: 127.0.0.1:35454
2025/05/27 06:57:53.003165 [Info] [1859805676] proxy/dokodemo: received request for 127.0.0.1:35454
2025/05/27 06:57:53.003218 [Info] [1859805676] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:03.002942 [Debug] [1360951429] proxy/dokodemo: processing connection from: 127.0.0.1:47828
2025/05/27 06:58:03.003117 [Info] [1360951429] proxy/dokodemo: received request for 127.0.0.1:47828
2025/05/27 06:58:03.003174 [Info] [1360951429] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:13.003337 [Debug] [3858291555] proxy/dokodemo: processing connection from: 127.0.0.1:43190
2025/05/27 06:58:13.003542 [Info] [3858291555] proxy/dokodemo: received request for 127.0.0.1:43190
2025/05/27 06:58:13.003587 [Info] [3858291555] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:13.007117 [Info] [3858291555] app/proxyman/inbound: connection ends > proxy/dokodemo: connection ends > proxy/dokodemo: failed to transport request > read tcp 127.0.0.1:62789->127.0.0.1:43190: read: connection reset by peer
2025/05/27 06:58:23.003774 [Debug] [3892046716] proxy/dokodemo: processing connection from: 127.0.0.1:59884
2025/05/27 06:58:23.003916 [Info] [3892046716] proxy/dokodemo: received request for 127.0.0.1:59884
2025/05/27 06:58:23.004062 [Info] [3892046716] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:33.001732 [Debug] [789599188] proxy/dokodemo: processing connection from: 127.0.0.1:35668
2025/05/27 06:58:33.001820 [Info] [789599188] proxy/dokodemo: received request for 127.0.0.1:35668
2025/05/27 06:58:33.001837 [Info] [789599188] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:43.003968 [Debug] [1274805793] proxy/dokodemo: processing connection from: 127.0.0.1:49960
2025/05/27 06:58:43.004133 [Info] [1274805793] proxy/dokodemo: received request for 127.0.0.1:49960
2025/05/27 06:58:43.004189 [Info] [1274805793] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:58:53.004023 [Debug] [1144697905] proxy/dokodemo: processing connection from: 127.0.0.1:36120
2025/05/27 06:58:53.004178 [Info] [1144697905] proxy/dokodemo: received request for 127.0.0.1:36120
2025/05/27 06:58:53.004231 [Info] [1144697905] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:59:03.003547 [Debug] [1882400444] proxy/dokodemo: processing connection from: 127.0.0.1:48490
2025/05/27 06:59:03.003700 [Info] [1882400444] proxy/dokodemo: received request for 127.0.0.1:48490
2025/05/27 06:59:03.003928 [Info] [1882400444] app/dispatcher: taking detour [api] for [tcp:127.0.0.1:0]
2025/05/27 06:59:11.620711 [Debug] app/log: Logger closing
3. in v24.9.7 routing works, but has other stability connection troubles.

alexbarotur avatar May 27 '25 06:05 alexbarotur

@Fangliding can you reopen this issue please?

alexbarotur avatar May 28 '25 19:05 alexbarotur

1 I said very clear in template, only accept core config, not third party software 2 fine in 24.9.7 and break in 24.9.16?

Fangliding avatar May 28 '25 19:05 Fangliding

I found an root cause. It has been broken in this pr https://github.com/XTLS/Xray-core/pull/4030/files as said in this ticket https://github.com/XTLS/Xray-core/pull/4030#issuecomment-2495413930 Right now it works on 24.11.11 and don't work on 24.11.21

If uncomment on the main branch these lines that were commented in this pr, routing works fine.

command to reproduce: curl -x socks5h://127.0.0.1:1080 https://myip.ru Expected result: should be blocked, in access log: 2025/06/22 15:27:26.675652 from tcp:0.0.0.0:0 accepted tcp:178.62.9.171:443 [wg-in -> blocked] Actual result: Prints website data, in access log: 2025/06/22 15:17:57 from tcp:0.0.0.0:0 accepted tcp:178.62.9.171:443 [direct] client.json


{
  "log": {
    "access": "./access_client.log",
    "dnsLog": false,
    "error": "./error_client.log",
    "loglevel": "debug"
  },

"inbounds": [
{
"listen": "127.0.0.1",
"port": 1080,
"protocol": "socks",
"settings": { "udp": true },
"tag": "socks-in"
}
],


"outbounds": [
{
"protocol": "wireguard",
"tag": "wg-out",
"settings": {
"secretKey": "QCFEdZ2QyoXKc/l7rMz3kbbqZyWZPxKQnzFV+nofwEA=",
"address": ["10.66.66.2/32"],
"peers": [
{
"endpoint": "127.0.0.1:51820",
"publicKey": "NiSyAD+6o8RmHpn6AN7wJyEvCjkcIbCCyfKOd9xO0Sc=",
"allowedIPs": ["0.0.0.0/0", "::/0"]
}
],
"mtu": 1420
}
},
{ "protocol": "freedom", "tag": "direct" }
],


"routing": {
"rules": [
{ "type": "field", "inboundTag": ["socks-in"], "outboundTag": "wg-out" }
]
}
}
server.json 

{
  "log": {
    "access": "./access_server.log",
    "dnsLog": false,
    "error": "./error_server.log",
    "loglevel": "debug"
  },

"inbounds": [
{
"listen": "0.0.0.0",
"port": 51820,
"protocol": "wireguard",
"settings": {
"secretKey": "4AF+gnRwWeeoMaDQjKp74SRHJ/AaKj4CTJ5Ta3WiRHQ=",
"peers": [
{
"publicKey": "CLtRBt0mf6Z4fHWGWxMPFCfEjK0BSIQbseQx9I7op08=",
"allowedIPs": ["10.66.66.2/32"]
}
],
"mtu": 1420
},
"sniffing": {
"enabled": true,
"destOverride": ["http", "tls", "quic", "fakedns"],
"metadataOnly": false,
"routeOnly": false
},
"tag": "wg-in"
}
],
"routing": {
"domainStrategy": "AsIs",
"rules": [
{
"type": "field",
"domain": ["regexp:.*myip\.ru$"],
"outboundTag": "blocked"
}
]
},
"outbounds": [
{ "protocol": "freedom", "tag": "direct" },
{
"protocol": "blackhole",
"settings": {},
"tag": "blocked"
}
]
}
server access log 

2025/06/22 15:32:27.346636 from tcp:0.0.0.0:0 accepted tcp:178.62.9.171:443 [wg-in >> direct]

server error log


2025/06/22 15:32:08.622026 [Debug] app/log: Logger started
2025/06/22 15:32:08.622109 [Debug] app/router: MphDomainMatcher is enabled for 1 domain rule(s)
2025/06/22 15:32:08.622171 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/06/22 15:32:08.623022 [Debug] UAPI: Updating private key
2025/06/22 15:32:08.623036 [Debug] UAPI: Updating listen port
2025/06/22 15:32:08.623042 [Debug] Routine: encryption worker 7 - started
2025/06/22 15:32:08.623049 [Debug] Routine: decryption worker 4 - started
2025/06/22 15:32:08.623054 [Debug] Routine: handshake worker 4 - started
2025/06/22 15:32:08.623058 [Debug] Routine: encryption worker 4 - started
2025/06/22 15:32:08.623065 [Debug] Routine: decryption worker 1 - started
2025/06/22 15:32:08.623069 [Debug] Routine: handshake worker 1 - started
2025/06/22 15:32:08.623073 [Debug] Routine: encryption worker 5 - started
2025/06/22 15:32:08.623078 [Debug] Routine: encryption worker 2 - started
2025/06/22 15:32:08.623082 [Debug] Routine: encryption worker 1 - started
2025/06/22 15:32:08.623086 [Debug] Routine: decryption worker 5 - started
2025/06/22 15:32:08.623089 [Debug] Routine: decryption worker 2 - started
2025/06/22 15:32:08.623093 [Debug] Routine: decryption worker 13 - started
2025/06/22 15:32:08.623098 [Debug] Routine: handshake worker 5 - started
2025/06/22 15:32:08.623102 [Debug] Routine: handshake worker 2 - started
2025/06/22 15:32:08.623106 [Debug] Routine: encryption worker 6 - started
2025/06/22 15:32:08.623243 [Info] transport/internet/udp: listening UDP on 0.0.0.0:51820
2025/06/22 15:32:08.623283 [Warning] core: Xray 25.6.8 started
2025/06/22 15:32:27.345338 [Debug] peer(CLtR…op08) - Received handshake initiation
2025/06/22 15:32:27.345379 [Debug] peer(CLtR…op08) - Sending handshake response
2025/06/22 15:32:27.346545 [Info] app/dispatcher: default route for tcp:178.62.9.171:443
2025/06/22 15:32:27.346636 [Info] transport/internet/tcp: dialing TCP to tcp:178.62.9.171:443
2025/06/22 15:32:27.346703 [Debug] transport/internet: dialing to tcp:178.62.9.171:443
2025/06/22 15:32:27.352160 [Info] proxy/freedom: connection opened to tcp:178.62.9.171:443, local endpoint 192.168.7.203:57602, remote endpoint 178.62.9.171:443
2025/06/22 15:32:27.352200 [Info] proxy: CopyRawConn readv
2025/06/22 15:32:39.093856 [Debug] peer(CLtR…op08) - Sending keepalive packet
2025/06/22 15:35:27.349371 [Info] [224631706] app/proxyman/inbound: connection ends > EOF
@Fangliding please reopen this issue

alexbarotur avatar Jun 22 '25 12:06 alexbarotur

I can confirm, switching back to 24.11.11 from latest (25.6.8) resolves the issue with domain routing (for inbound wireguard)

@Fangliding I think you should reopen the issue as it's very essential

itsmepetrov avatar Jul 20 '25 19:07 itsmepetrov

@Fangliding my config and logs for both versions

config.json 
{
  "log": {
    "access": "/var/log/xray/access.log",
    "error": "/var/log/xray/error.log",
    "loglevel": "debug"
  },
  "inbounds": [
    {
      "tag": "wg-in",
      "port": 51820,
      "protocol": "wireguard",
      "settings": {
        "secretKey": "cJmkQWv7Q04SF1iqPu3fYd4T63Hw4K+A4WGGa+b0tH8=",
        "peers": [
          {
            "publicKey": "QlQfrMIt2WCsh6vU4bLNwNSb5ODQYfRP4LN+wS1WXls="
          }
        ],
        "mtu": 1280
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "shadowsocks",
      "tag": "shadowsocks-kz",
      "settings": {
        "servers": [
          {
            "address": "...",
            "port": 8443,
            "method": "chacha20-ietf-poly1305",
            "password": "..."
          }
        ]
      }
    },
    {
      "protocol": "freedom",
      "tag": "direct"
    },
    {
      "protocol": "blackhole",
      "tag": "block"
    }
  ],
  "routing": {
    "domainStrategy": "IPIfNonMatch",
    "domainMatcher": "hybrid",
    "rules": [
      {
        "type": "field",
        "inboundTag": ["wg-in"],
        "outboundTag": "block",
        "network": "udp",
        "port": "135,137,138,139"
      },
      {
        "type": "field",
        "inboundTag": ["wg-in"],
        "outboundTag": "shadowsocks-kz",
        "domain": [
          "domain:2ip.ru"
        ]
      },
      {
        "type": "field",
        "inboundTag": ["wg-in"],
        "outboundTag": "direct",
        "protocol": [
          "bittorrent"
        ]
      },
      {
        "type": "field",
        "inboundTag": ["wg-in"],
        "outboundTag": "direct",
        "network": "tcp,udp"
      }
    ]
  },
  "policy": {
    "levels": {
      "0": {
        "uplinkOnly": 0,
        "downlinkOnly": 0
      }
    }
  }
}
24.11.11 access.log 
2025/07/20 22:38:26 from tcp:0.0.0.0:0 accepted tcp:213.180.193.226:443 [wg-in -> direct]
2025/07/20 22:38:27 from tcp:0.0.0.0:0 accepted tcp:17.253.39.133:443 [wg-in -> direct]
2025/07/20 22:38:27 from tcp:0.0.0.0:0 accepted tcp:93.158.134.248:443 [wg-in -> direct]
2025/07/20 22:38:27 from tcp:0.0.0.0:0 accepted tcp:213.180.204.41:443 [wg-in -> direct]
2025/07/20 22:38:27 from tcp:0.0.0.0:0 accepted tcp:213.180.193.226:443 [wg-in -> direct]
2025/07/20 22:38:28 from tcp:0.0.0.0:0 accepted tcp:188.40.167.82:443 [wg-in -> shadowsocks-kz]
2025/07/20 22:38:28 from tcp:0.0.0.0:0 accepted tcp:104.21.16.1:443 [wg-in -> direct]
2025/07/20 22:38:31 from tcp:0.0.0.0:0 accepted tcp:17.57.146.135:5223 [wg-in -> direct]
2025/07/20 22:38:32 from tcp:0.0.0.0:0 accepted udp:255.255.255.255:10001 [wg-in -> direct]
24.11.11 error.log 
2025/07/20 22:38:20 [Debug] app/log: Logger started
2025/07/20 22:38:20 [Debug] app/router: MphDomainMatcher is enabled for 1 domain rule(s)
2025/07/20 22:38:20 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/07/20 22:38:20 [Debug] Routine: decryption worker 1 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 1 - started
2025/07/20 22:38:20 [Debug] Routine: decryption worker 2 - started
2025/07/20 22:38:20 [Debug] Routine: handshake worker 1 - started
2025/07/20 22:38:20 [Debug] Routine: handshake worker 2 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 3 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 2 - started
2025/07/20 22:38:20 [Debug] Routine: decryption worker 3 - started
2025/07/20 22:38:20 [Debug] UAPI: Updating private key
2025/07/20 22:38:20 [Debug] Routine: decryption worker 5 - started
2025/07/20 22:38:20 [Debug] Routine: handshake worker 3 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 4 - started
2025/07/20 22:38:20 [Debug] Routine: decryption worker 4 - started
2025/07/20 22:38:20 [Debug] Routine: handshake worker 4 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 5 - started
2025/07/20 22:38:20 [Debug] Routine: decryption worker 6 - started
2025/07/20 22:38:20 [Debug] Routine: handshake worker 5 - started
2025/07/20 22:38:20 [Debug] Routine: encryption worker 6 - started
2025/07/20 22:38:20 [Debug] Routine: TUN reader - started
2025/07/20 22:38:20 [Debug] UAPI: Updating listen port
2025/07/20 22:38:20 [Debug] Routine: handshake worker 6 - started
2025/07/20 22:38:20 [Debug] Routine: event worker - started
2025/07/20 22:38:20 [Debug] Interface up requested
2025/07/20 22:38:20 [Debug] peer(QlQf…WXls) - UAPI: Created
2025/07/20 22:38:20 [Debug] peer(QlQf…WXls) - UAPI: Adding allowedip
2025/07/20 22:38:20 [Debug] Interface state was Down, requested Up, now Up
2025/07/20 22:38:20 [Debug] peer(QlQf…WXls) - Routine: sequential sender - started
2025/07/20 22:38:20 [Debug] Routine: receive incoming Open - started
2025/07/20 22:38:20 [Info] transport/internet/udp: listening UDP on 0.0.0.0:51820
2025/07/20 22:38:20 [Warning] core: Xray 24.11.11 started
2025/07/20 22:38:23 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:23 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:23 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:38:26 [Info] app/dispatcher: sniffed domain: rosenberg.appmetrica.yandex.net
2025/07/20 22:38:26 [Info] app/dispatcher: taking detour [direct] for [tcp:rosenberg.appmetrica.yandex.net:443]
2025/07/20 22:38:26 [Info] transport/internet/tcp: dialing TCP to tcp:213.180.193.226:443
2025/07/20 22:38:26 [Debug] transport/internet: dialing to tcp:213.180.193.226:443
2025/07/20 22:38:26 [Info] proxy/freedom: connection opened to tcp:213.180.193.226:443, local endpoint 172.29.0.14:49230, remote endpoint 213.180.193.226:443
2025/07/20 22:38:26 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:27 [Info] app/dispatcher: sniffed domain: configuration.ls.apple.com
2025/07/20 22:38:27 [Info] app/dispatcher: taking detour [direct] for [tcp:configuration.ls.apple.com:443]
2025/07/20 22:38:27 [Info] transport/internet/tcp: dialing TCP to tcp:17.253.39.133:443
2025/07/20 22:38:27 [Debug] transport/internet: dialing to tcp:17.253.39.133:443
2025/07/20 22:38:27 [Info] proxy/freedom: connection opened to tcp:17.253.39.133:443, local endpoint 172.29.0.14:54110, remote endpoint 17.253.39.133:443
2025/07/20 22:38:27 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:27 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:38:27 [Info] app/dispatcher: sniffed domain: api.weather.yandex.ru
2025/07/20 22:38:27 [Info] app/dispatcher: taking detour [direct] for [tcp:api.weather.yandex.ru:443]
2025/07/20 22:38:27 [Info] transport/internet/tcp: dialing TCP to tcp:93.158.134.248:443
2025/07/20 22:38:27 [Debug] transport/internet: dialing to tcp:93.158.134.248:443
2025/07/20 22:38:27 [Info] proxy/freedom: connection opened to tcp:93.158.134.248:443, local endpoint 172.29.0.14:48882, remote endpoint 93.158.134.248:443
2025/07/20 22:38:27 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:27 [Info] app/dispatcher: sniffed domain: static-maps.yandex.ru
2025/07/20 22:38:27 [Info] app/dispatcher: taking detour [direct] for [tcp:static-maps.yandex.ru:443]
2025/07/20 22:38:27 [Info] transport/internet/tcp: dialing TCP to tcp:213.180.204.41:443
2025/07/20 22:38:27 [Debug] transport/internet: dialing to tcp:213.180.204.41:443
2025/07/20 22:38:27 [Info] proxy/freedom: connection opened to tcp:213.180.204.41:443, local endpoint 172.29.0.14:47562, remote endpoint 213.180.204.41:443
2025/07/20 22:38:27 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:27 [Info] app/dispatcher: sniffed domain: report.appmetrica.yandex.net
2025/07/20 22:38:27 [Info] app/dispatcher: taking detour [direct] for [tcp:report.appmetrica.yandex.net:443]
2025/07/20 22:38:27 [Info] transport/internet/tcp: dialing TCP to tcp:213.180.193.226:443
2025/07/20 22:38:27 [Debug] transport/internet: dialing to tcp:213.180.193.226:443
2025/07/20 22:38:27 [Info] proxy/freedom: connection opened to tcp:213.180.193.226:443, local endpoint 172.29.0.14:49242, remote endpoint 213.180.193.226:443
2025/07/20 22:38:27 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:28 [Info] app/dispatcher: sniffed domain: 2ip.ru
2025/07/20 22:38:28 [Info] app/dispatcher: taking detour [shadowsocks-kz] for [tcp:2ip.ru:443]
2025/07/20 22:38:28 [Info] transport/internet/tcp: dialing TCP to tcp:45.82.31.157:8443
2025/07/20 22:38:28 [Debug] transport/internet: dialing to tcp:45.82.31.157:8443
2025/07/20 22:38:28 [Info] proxy/shadowsocks: tunneling request to tcp:188.40.167.82:443 via TCP:45.82.31.157:8443
2025/07/20 22:38:28 [Info] app/dispatcher: sniffed domain: static.2ip.io
2025/07/20 22:38:28 [Info] app/dispatcher: taking detour [direct] for [tcp:static.2ip.io:443]
2025/07/20 22:38:28 [Info] transport/internet/tcp: dialing TCP to tcp:104.21.16.1:443
2025/07/20 22:38:28 [Debug] transport/internet: dialing to tcp:104.21.16.1:443
2025/07/20 22:38:28 [Info] proxy/freedom: connection opened to tcp:104.21.16.1:443, local endpoint 172.29.0.14:35564, remote endpoint 104.21.16.1:443
2025/07/20 22:38:28 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:31 [Info] app/dispatcher: sniffed domain: courier.push.apple.com
2025/07/20 22:38:31 [Info] app/dispatcher: taking detour [direct] for [tcp:courier.push.apple.com:5223]
2025/07/20 22:38:31 [Info] transport/internet/tcp: dialing TCP to tcp:17.57.146.135:5223
2025/07/20 22:38:31 [Debug] transport/internet: dialing to tcp:17.57.146.135:5223
2025/07/20 22:38:32 [Info] proxy/freedom: connection opened to tcp:17.57.146.135:5223, local endpoint 172.29.0.14:40814, remote endpoint 17.57.146.135:5223
2025/07/20 22:38:32 [Info] proxy: CopyRawConn readv
2025/07/20 22:38:32 [Info] app/dispatcher: taking detour [direct] for [udp:255.255.255.255:10001]
2025/07/20 22:38:32 [Debug] transport/internet: dialing to udp:255.255.255.255:10001
2025/07/20 22:38:32 [Info] proxy/freedom: connection opened to udp:255.255.255.255:10001, local endpoint [::]:50099, remote endpoint 255.255.255.255:10001
2025/07/20 22:38:36 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:38:36 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:38:36 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:38:37 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:38:39 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:39 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:39 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:38:44 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:44 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:44 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:38:49 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:49 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:49 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:38:54 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:54 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:54 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:38:59 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:38:59 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:38:59 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
25.6.8 access.log 
2025/07/20 22:42:29.766699 from tcp:0.0.0.0:0 accepted udp:173.194.221.147:443 [wg-in -> direct]
2025/07/20 22:42:29.766819 from tcp:0.0.0.0:0 accepted udp:142.250.74.138:443 [wg-in -> direct]
2025/07/20 22:42:29.894824 from tcp:0.0.0.0:0 accepted udp:142.250.74.42:443 [wg-in -> direct]
2025/07/20 22:42:33.798212 from tcp:0.0.0.0:0 accepted udp:255.255.255.255:10001 [wg-in -> direct]
2025/07/20 22:42:49.454063 from tcp:0.0.0.0:0 accepted udp:173.194.221.147:443 [wg-in -> direct]
2025/07/20 22:42:49.454115 from tcp:0.0.0.0:0 accepted udp:142.250.74.42:443 [wg-in -> direct]
2025/07/20 22:42:49.480659 from tcp:0.0.0.0:0 accepted tcp:213.180.193.226:443 [wg-in -> direct]
2025/07/20 22:42:52.056864 from tcp:0.0.0.0:0 accepted udp:173.194.221.106:443 [wg-in -> direct]
2025/07/20 22:42:52.773395 from tcp:0.0.0.0:0 accepted tcp:188.40.167.82:443 [wg-in -> direct]
2025/07/20 22:42:53.475084 from tcp:0.0.0.0:0 accepted tcp:104.21.80.1:443 [wg-in -> direct]
2025/07/20 22:42:53.659014 from tcp:0.0.0.0:0 accepted tcp:92.38.252.68:443 [wg-in -> direct]
2025/07/20 22:42:54.216500 from tcp:0.0.0.0:0 accepted tcp:92.38.252.74:443 [wg-in -> direct]
2025/07/20 22:42:54.797033 from tcp:0.0.0.0:0 accepted udp:255.255.255.255:10001 [wg-in -> direct]
2025/07/20 22:42:56.455120 from tcp:0.0.0.0:0 accepted tcp:17.57.146.135:5223 [wg-in -> direct]
25.6.8 error.log 
2025/07/20 22:42:24.215792 [Debug] app/log: Logger started
2025/07/20 22:42:24.215875 [Debug] app/router: MphDomainMatcher is enabled for 1 domain rule(s)
2025/07/20 22:42:24.215897 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/07/20 22:42:24.216392 [Debug] Routine: encryption worker 3 - started
2025/07/20 22:42:24.216407 [Debug] UAPI: Updating private key
2025/07/20 22:42:24.216413 [Debug] Routine: encryption worker 1 - started
2025/07/20 22:42:24.216418 [Debug] Routine: decryption worker 1 - started
2025/07/20 22:42:24.216445 [Debug] Routine: handshake worker 1 - started
2025/07/20 22:42:24.216449 [Debug] Routine: encryption worker 2 - started
2025/07/20 22:42:24.216452 [Debug] Routine: decryption worker 2 - started
2025/07/20 22:42:24.216460 [Debug] Routine: handshake worker 2 - started
2025/07/20 22:42:24.216464 [Debug] Routine: encryption worker 5 - started
2025/07/20 22:42:24.216468 [Debug] Routine: decryption worker 3 - started
2025/07/20 22:42:24.216476 [Debug] Routine: handshake worker 3 - started
2025/07/20 22:42:24.216480 [Debug] Routine: encryption worker 4 - started
2025/07/20 22:42:24.216483 [Debug] Routine: decryption worker 4 - started
2025/07/20 22:42:24.216489 [Debug] Routine: handshake worker 4 - started
2025/07/20 22:42:24.216660 [Debug] UAPI: Updating listen port
2025/07/20 22:42:24.216680 [Debug] Routine: TUN reader - started
2025/07/20 22:42:24.216687 [Debug] Routine: encryption worker 6 - started
2025/07/20 22:42:24.216691 [Debug] Routine: decryption worker 5 - started
2025/07/20 22:42:24.216695 [Debug] Routine: event worker - started
2025/07/20 22:42:24.216698 [Debug] Interface up requested
2025/07/20 22:42:24.216702 [Debug] Routine: handshake worker 5 - started
2025/07/20 22:42:24.216705 [Debug] Routine: handshake worker 6 - started
2025/07/20 22:42:24.216709 [Debug] Routine: decryption worker 6 - started
2025/07/20 22:42:24.216908 [Debug] peer(QlQf…WXls) - UAPI: Created
2025/07/20 22:42:24.216927 [Debug] peer(QlQf…WXls) - UAPI: Adding allowedip
2025/07/20 22:42:24.216930 [Debug] peer(QlQf…WXls) - UAPI: Adding allowedip
2025/07/20 22:42:24.216933 [Debug] peer(QlQf…WXls) - Starting
2025/07/20 22:42:24.216935 [Debug] peer(QlQf…WXls) - Routine: sequential receiver - started
2025/07/20 22:42:24.216938 [Debug] UDP bind has been updated
2025/07/20 22:42:24.216940 [Debug] Interface state was Down, requested Up, now Up
2025/07/20 22:42:24.216943 [Debug] peer(QlQf…WXls) - Routine: sequential sender - started
2025/07/20 22:42:24.216945 [Debug] Routine: receive incoming Open - started
2025/07/20 22:42:24.217107 [Info] transport/internet/udp: listening UDP on 0.0.0.0:51820
2025/07/20 22:42:24.217112 [Warning] core: Xray 25.6.8 started
2025/07/20 22:42:27.671047 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:42:27.671117 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:42:27.675696 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:42:29.766433 [Info] app/dispatcher: taking detour [direct] for [udp:173.194.221.147:443]
2025/07/20 22:42:29.766552 [Debug] transport/internet: dialing to udp:173.194.221.147:443
2025/07/20 22:42:29.766620 [Info] proxy/freedom: connection opened to udp:173.194.221.147:443, local endpoint [::]:58196, remote endpoint 173.194.221.147:443
2025/07/20 22:42:29.766705 [Info] app/dispatcher: taking detour [direct] for [udp:142.250.74.138:443]
2025/07/20 22:42:29.767091 [Debug] transport/internet: dialing to udp:142.250.74.138:443
2025/07/20 22:42:29.767204 [Info] proxy/freedom: connection opened to udp:142.250.74.138:443, local endpoint [::]:38471, remote endpoint 142.250.74.138:443
2025/07/20 22:42:29.894766 [Info] app/dispatcher: taking detour [direct] for [udp:142.250.74.42:443]
2025/07/20 22:42:29.894831 [Debug] transport/internet: dialing to udp:142.250.74.42:443
2025/07/20 22:42:29.894989 [Info] proxy/freedom: connection opened to udp:142.250.74.42:443, local endpoint [::]:45411, remote endpoint 142.250.74.42:443
2025/07/20 22:42:33.798162 [Info] app/dispatcher: taking detour [direct] for [udp:255.255.255.255:10001]
2025/07/20 22:42:33.798285 [Debug] transport/internet: dialing to udp:255.255.255.255:10001
2025/07/20 22:42:33.798449 [Info] proxy/freedom: connection opened to udp:255.255.255.255:10001, local endpoint [::]:38357, remote endpoint 255.255.255.255:10001
2025/07/20 22:42:39.898510 [Debug] app/log: Logger closing
2025/07/20 22:42:43.444368 [Debug] app/log: Logger started
2025/07/20 22:42:43.444400 [Debug] app/router: MphDomainMatcher is enabled for 1 domain rule(s)
2025/07/20 22:42:43.444404 [Warning] proxy/wireguard: Using gVisor TUN. WG inbound doesn't support kernel TUN yet.
2025/07/20 22:42:43.445082 [Debug] UAPI: Updating private key
2025/07/20 22:42:43.445102 [Debug] Routine: decryption worker 3 - started
2025/07/20 22:42:43.445110 [Debug] UAPI: Updating listen port
2025/07/20 22:42:43.445115 [Debug] Routine: encryption worker 2 - started
2025/07/20 22:42:43.445119 [Debug] Routine: decryption worker 2 - started
2025/07/20 22:42:43.445126 [Debug] Routine: handshake worker 2 - started
2025/07/20 22:42:43.445131 [Debug] Routine: encryption worker 3 - started
2025/07/20 22:42:43.445134 [Debug] Routine: decryption worker 5 - started
2025/07/20 22:42:43.445138 [Debug] Routine: encryption worker 1 - started
2025/07/20 22:42:43.445141 [Debug] Routine: decryption worker 4 - started
2025/07/20 22:42:43.445145 [Debug] Routine: handshake worker 3 - started
2025/07/20 22:42:43.445148 [Debug] Routine: encryption worker 4 - started
2025/07/20 22:42:43.445152 [Debug] Routine: handshake worker 4 - started
2025/07/20 22:42:43.445155 [Debug] Routine: decryption worker 1 - started
2025/07/20 22:42:43.445159 [Debug] Routine: decryption worker 6 - started
2025/07/20 22:42:43.445162 [Debug] Routine: encryption worker 5 - started
2025/07/20 22:42:43.445166 [Debug] Routine: TUN reader - started
2025/07/20 22:42:43.445170 [Debug] peer(QlQf…WXls) - Routine: sequential receiver - started
2025/07/20 22:42:43.445174 [Debug] Interface state was Down, requested Up, now Up
2025/07/20 22:42:43.445178 [Debug] peer(QlQf…WXls) - Routine: sequential sender - started
2025/07/20 22:42:43.445206 [Debug] Routine: receive incoming Open - started
2025/07/20 22:42:43.445274 [Info] transport/internet/udp: listening UDP on 0.0.0.0:51820
2025/07/20 22:42:43.445284 [Warning] core: Xray 25.6.8 started
2025/07/20 22:42:44.791795 [Debug] peer(QlQf…WXls) - Received handshake initiation
2025/07/20 22:42:44.791855 [Debug] peer(QlQf…WXls) - Sending handshake response
2025/07/20 22:42:44.796692 [Debug] peer(QlQf…WXls) - Receiving keepalive packet
2025/07/20 22:42:49.453499 [Error] proxy/wireguard: port is in use
2025/07/20 22:42:49.453638 [Info] app/dispatcher: taking detour [direct] for [udp:173.194.221.147:443]
2025/07/20 22:42:49.453668 [Info] app/dispatcher: taking detour [direct] for [udp:142.250.74.42:443]
2025/07/20 22:42:49.453679 [Error] proxy/wireguard: port is in use
2025/07/20 22:42:49.453690 [Debug] transport/internet: dialing to udp:142.250.74.42:443
2025/07/20 22:42:49.453701 [Debug] transport/internet: dialing to udp:173.194.221.147:443
2025/07/20 22:42:49.454024 [Info] proxy/freedom: connection opened to udp:142.250.74.42:443, local endpoint [::]:54552, remote endpoint 142.250.74.42:443
2025/07/20 22:42:49.454087 [Info] proxy/freedom: connection opened to udp:173.194.221.147:443, local endpoint [::]:58996, remote endpoint 173.194.221.147:443
2025/07/20 22:42:49.454105 [Error] proxy/wireguard: port is in use
2025/07/20 22:42:49.480624 [Info] app/dispatcher: taking detour [direct] for [tcp:213.180.193.226:443]
2025/07/20 22:42:49.480676 [Info] transport/internet/tcp: dialing TCP to tcp:213.180.193.226:443
2025/07/20 22:42:49.480685 [Debug] transport/internet: dialing to tcp:213.180.193.226:443
2025/07/20 22:42:49.481416 [Info] proxy/freedom: connection opened to tcp:213.180.193.226:443, local endpoint 172.29.0.14:37768, remote endpoint 213.180.193.226:443
2025/07/20 22:42:49.481438 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:52.056806 [Info] app/dispatcher: taking detour [direct] for [udp:173.194.221.106:443]
2025/07/20 22:42:52.056958 [Debug] transport/internet: dialing to udp:173.194.221.106:443
2025/07/20 22:42:52.056979 [Info] proxy/freedom: connection opened to udp:173.194.221.106:443, local endpoint [::]:34758, remote endpoint 173.194.221.106:443
2025/07/20 22:42:52.773323 [Info] app/dispatcher: taking detour [direct] for [tcp:188.40.167.82:443]
2025/07/20 22:42:52.773490 [Info] transport/internet/tcp: dialing TCP to tcp:188.40.167.82:443
2025/07/20 22:42:52.773502 [Debug] transport/internet: dialing to tcp:188.40.167.82:443
2025/07/20 22:42:52.774523 [Info] proxy/freedom: connection opened to tcp:188.40.167.82:443, local endpoint 172.29.0.14:56610, remote endpoint 188.40.167.82:443
2025/07/20 22:42:52.774538 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:53.475023 [Info] app/dispatcher: taking detour [direct] for [tcp:104.21.80.1:443]
2025/07/20 22:42:53.475071 [Info] transport/internet/tcp: dialing TCP to tcp:104.21.80.1:443
2025/07/20 22:42:53.475081 [Debug] transport/internet: dialing to tcp:104.21.80.1:443
2025/07/20 22:42:53.476266 [Info] proxy/freedom: connection opened to tcp:104.21.80.1:443, local endpoint 172.29.0.14:48242, remote endpoint 104.21.80.1:443
2025/07/20 22:42:53.476303 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:53.658942 [Info] app/dispatcher: taking detour [direct] for [tcp:92.38.252.68:443]
2025/07/20 22:42:53.658994 [Info] transport/internet/tcp: dialing TCP to tcp:92.38.252.68:443
2025/07/20 22:42:53.659005 [Debug] transport/internet: dialing to tcp:92.38.252.68:443
2025/07/20 22:42:53.660089 [Info] proxy/freedom: connection opened to tcp:92.38.252.68:443, local endpoint 172.29.0.14:39642, remote endpoint 92.38.252.68:443
2025/07/20 22:42:53.660100 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:54.216412 [Info] app/dispatcher: taking detour [direct] for [tcp:92.38.252.74:443]
2025/07/20 22:42:54.216474 [Info] transport/internet/tcp: dialing TCP to tcp:92.38.252.74:443
2025/07/20 22:42:54.216485 [Debug] transport/internet: dialing to tcp:92.38.252.74:443
2025/07/20 22:42:54.217551 [Info] proxy/freedom: connection opened to tcp:92.38.252.74:443, local endpoint 172.29.0.14:47350, remote endpoint 92.38.252.74:443
2025/07/20 22:42:54.217570 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:54.796938 [Info] app/dispatcher: taking detour [direct] for [udp:255.255.255.255:10001]
2025/07/20 22:42:54.797007 [Debug] transport/internet: dialing to udp:255.255.255.255:10001
2025/07/20 22:42:54.797218 [Info] proxy/freedom: connection opened to udp:255.255.255.255:10001, local endpoint [::]:49839, remote endpoint 255.255.255.255:10001
2025/07/20 22:42:56.455024 [Info] app/dispatcher: taking detour [direct] for [tcp:17.57.146.135:5223]
2025/07/20 22:42:56.455097 [Info] transport/internet/tcp: dialing TCP to tcp:17.57.146.135:5223
2025/07/20 22:42:56.455110 [Debug] transport/internet: dialing to tcp:17.57.146.135:5223
2025/07/20 22:42:56.490794 [Info] proxy/freedom: connection opened to tcp:17.57.146.135:5223, local endpoint 172.29.0.14:50282, remote endpoint 17.57.146.135:5223
2025/07/20 22:42:56.490871 [Info] proxy: CopyRawConn readv
2025/07/20 22:42:59.284026 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:43:03.864866 [Debug] proxy/wireguard: connection ends > context canceled
2025/07/20 22:43:15.237305 [Debug] proxy/wireguard: connection ends > context canceled

itsmepetrov avatar Jul 20 '25 19:07 itsmepetrov

这个 wireguard in 的实现问题挺大的 要不删了算了

Fangliding avatar Jul 20 '25 20:07 Fangliding

@Fangliding for me it's the easiest way to configure xray on Ubiquiti Unifi devices, they support wireguard out of the box and it works ok, it involves minimum change in OS (just installing xray) and I would like to continue using it this way.

do you think you can't fix the issue?

itsmepetrov avatar Jul 20 '25 21:07 itsmepetrov

@Fangliding I saw that some other people are also interested in this feature, like here https://github.com/MHSanaei/3x-ui/issues/3235, here https://github.com/XTLS/Xray-core/discussions/4449, and here https://github.com/XTLS/Xray-core/discussions/4653

since it used to work on previous releases and it was broken by relatively small changes perhaps it still makes sense to fix it rather than remove it completely)?

itsmepetrov avatar Jul 20 '25 21:07 itsmepetrov

把那几行注释掉是因为其他问题 改回去问题就会回来 办法不是没有但是这个入站写的是真的有点丑 还是设计问题

Fangliding avatar Jul 20 '25 23:07 Fangliding

@Fangliding thanks for the clarification. I understand that the current implementation of WireGuard inbound may not be ideal and has some underlying design issues.

Still, since the feature was working in earlier versions do you think the issue could still be fixed in some form in the near future?

Maybe it would make sense to reopen the issue, since the regression is confirmed, so it can be tracked, even if a proper fix takes time.

CC @RPRX @yuhan6665

itsmepetrov avatar Jul 21 '25 06:07 itsmepetrov

这个 wireguard in 的实现问题挺大的 要不删了算了

同意，我昨晚刚刚把所有vps的原本用xray启动的wireguard 接口全部删除，改为使用 wg-quick来启动了，因为通过 xray启动的wireguard不能自动修改系统默认dns，跟 systemd-resolved的配合有问题，导致在 我的一堆vps从 ubuntu 22.04升级到 24.04后，xray不能正常对客户端提供服务，改回用 wg-quick可以在 wgcf.conf里面自定义，就没有配合问题了。 ps咋22.04时代是没问题的，但是需要一个额外的应用 openresolv来配合， ubuntu 24.04的源里没有这个软件了！

harvey-git avatar Jul 29 '25 08:07 harvey-git

25.10.15, issue is still present. geosite routing works like 50% of all time

wildrun0 avatar Nov 03 '25 09:11 wildrun0