https://pastein.ru/t/2Ug
Загрузка данных
===== SYSTEM =====
6.8.0-142-generic
PRETTY_NAME="Ubuntu 24.04.4 LTS"
18:26:04 up 24 days, 7:08, 1 user, load average: 0.06, 0.05, 0.03
1
total used free shared buff/cache available
Mem: 961 872 28 0 129 89
Swap: 1535 752 783
NAME TYPE SIZE USED PRIO
/swapfile file 512M 502.1M -2
/swapfile-vpnfix file 1024M 251.1M -3
/dev/root 8.5G 7.7G 773M 92% /
===== IP / ROUTE =====
lo UNKNOWN 127.0.0.1/8
ens3 UP 109.69.57.149/24
br-b60c35fe7ca2 UP 172.18.0.1/16
br-ea8f55553d69 UP 172.19.0.1/16
docker0 DOWN 172.17.0.1/16
default via 109.69.57.1 dev ens3 proto static
109.69.57.0/24 dev ens3 proto kernel scope link src 109.69.57.149
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
109.69.57.149
===== LISTENING PORTS =====
Netid State Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
udp UNCONN 0 0 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=565350,fd=16))
udp UNCONN 0 0 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=565350,fd=14))
udp UNCONN 0 0 *:443 *:* users:(("hysteria",pid=389,fd=4))
udp UNCONN 0 0 *:4567 *:* users:(("hysteria",pid=387,fd=4))
udp UNCONN 0 0 *:4568 *:* users:(("hysteria",pid=388,fd=4))
udp UNCONN 0 0 *:4569 *:* users:(("hysteria",pid=379,fd=4))
tcp LISTEN 0 4096 127.0.0.53%lo:53 0.0.0.0:* users:(("systemd-resolve",pid=565350,fd=15))
tcp LISTEN 0 4096 0.0.0.0:22 0.0.0.0:* users:(("sshd",pid=567464,fd=3),("systemd",pid=1,fd=72))
tcp LISTEN 0 4096 0.0.0.0:2053 0.0.0.0:* users:(("docker-proxy",pid=914,fd=8))
tcp LISTEN 0 4096 0.0.0.0:40000 0.0.0.0:* users:(("docker-proxy",pid=932,fd=8))
tcp LISTEN 0 5 0.0.0.0:8081 0.0.0.0:* users:(("python3",pid=399,fd=3))
tcp LISTEN 0 4096 127.0.0.1:9004 0.0.0.0:* users:(("hysteria",pid=379,fd=7))
tcp LISTEN 0 4096 127.0.0.1:9002 0.0.0.0:* users:(("hysteria",pid=387,fd=7))
tcp LISTEN 0 4096 127.0.0.1:9003 0.0.0.0:* users:(("hysteria",pid=388,fd=7))
tcp LISTEN 0 4096 127.0.0.1:9001 0.0.0.0:* users:(("hysteria",pid=389,fd=7))
tcp LISTEN 0 4096 127.0.0.54:53 0.0.0.0:* users:(("systemd-resolve",pid=565350,fd=17))
tcp LISTEN 0 4096 [::]:22 [::]:* users:(("sshd",pid=567464,fd=4),("systemd",pid=1,fd=75))
tcp LISTEN 0 4096 *:2055 *:* users:(("xray",pid=1395194,fd=7))
tcp LISTEN 0 4096 *:2054 *:* users:(("xray",pid=1395194,fd=4))
tcp LISTEN 0 4096 *:8080 *:* users:(("filebrowser",pid=385,fd=7))
tcp LISTEN 0 4096 *:443 *:* users:(("xray",pid=1399426,fd=4))
===== VPN/PROXY PROCESSES =====
379 root 2684 24-07:08:08 /usr/local/bin/hysteria server --config /etc/hysteria/config4.yaml
387 root 2616 24-07:08:08 /usr/local/bin/hysteria server --config /etc/hysteria/config2.yaml
388 root 2580 24-07:08:08 /usr/local/bin/hysteria server --config /etc/hysteria/config3.yaml
389 root 2644 24-07:08:08 /usr/local/bin/hysteria server --config /etc/hysteria/config.yaml
505 root 4944 24-07:08:05 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock
866 root 100 24-07:08:03 /usr/bin/xray -config /etc/xray/config.json
914 root 48 24-07:08:02 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 2053 -container-ip 172.18.0.2 -container-port 8443 -use-listen-fd
932 root 376 24-07:08:02 /usr/bin/docker-proxy -proto tcp -host-ip 0.0.0.0 -host-port 40000 -container-ip 172.19.0.2 -container-port 1080 -use-listen-fd
1395194 nobody 16 02:08:03 /usr/local/bin/xray run -config /usr/local/etc/xray/config.json
1399426 root 11244 26:22 /usr/bin/xray -config /etc/xray/config.json
===== SYSTEMD RUNNING (relevant) =====
cron.service loaded active running Regular background program processing daemon
docker.service loaded active running Docker Application Container Engine
hysteria-server-2.service loaded active running Hysteria 2 Server (Load Balancer)
hysteria-server-3.service loaded active running Hysteria 2 Server (3rd Load Balancer)
hysteria-server-4.service loaded active running Hysteria 2 Server (BBR Direct, Port 4569)
hysteria-server.service loaded active running Hysteria Server Service (config.yaml)
ssh.service loaded active running OpenBSD Secure Shell server
vpn-sub.service loaded active running VPN Subscription Server (single instance)
xray.service loaded active running Xray Service
===== DOCKER =====
xray-cf | teddysun/xray:25.12.8 |
warp-svc | caomingjun/warp | 0.0.0.0:40000->1080/tcp
reality-ezpz-engine-1 | teddysun/xray:25.12.8 | 0.0.0.0:2053->8443/tcp
===== XRAY/SING-BOX CONFIGS (summary, no secrets) =====
FILE /usr/local/etc/xray/config.json
in: vless port 2054 listen None net tcp sec reality ws None xhttp None clients 1
in: vless port 2055 listen None net tcp sec reality ws None xhttp None clients 1
out: freedom direct
===== X-UI DB (inbounds) =====
no x-ui db
===== SSHD =====
port 22
listenaddress [::]:22
listenaddress 0.0.0.0:22
permitrootlogin yes
pubkeyauthentication yes
passwordauthentication yes
local 127.0.0.1:22 OPEN
===== FIREWALL =====
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N DOCKER
-N DOCKER-BRIDGE
-N DOCKER-CT
-N DOCKER-FORWARD
-N DOCKER-INTERNAL
-N DOCKER-USER
-A FORWARD -j DOCKER-USER
-A FORWARD -j DOCKER-FORWARD
-A DOCKER -d 172.19.0.2/32 ! -i br-ea8f55553d69 -o br-ea8f55553d69 -p tcp -m tcp --dport 1080
-j ACCEPT
-A DOCKER -d 172.18.0.2/32 ! -i br-b60c35fe7ca2 -o br-b60c35fe7ca2 -p tcp -m tcp --dport 8443
-j ACCEPT
-A DOCKER ! -i br-b60c35fe7ca2 -o br-b60c35fe7ca2 -j DROP
-A DOCKER ! -i br-ea8f55553d69 -o br-ea8f55553d69 -j DROP
-A DOCKER ! -i docker0 -o docker0 -j DROP
-A DOCKER-BRIDGE -o br-b60c35fe7ca2 -j DOCKER
-A DOCKER-BRIDGE -o br-ea8f55553d69 -j DOCKER
-A DOCKER-BRIDGE -o docker0 -j DOCKER
-A DOCKER-CT -o br-b60c35fe7ca2 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o br-ea8f55553d69 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-CT -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A DOCKER-FORWARD -j DOCKER-CT
-A DOCKER-FORWARD -j DOCKER-INTERNAL
-A DOCKER-FORWARD -j DOCKER-BRIDGE
-A DOCKER-FORWARD -i br-b60c35fe7ca2 -j ACCEPT
-A DOCKER-FORWARD -i br-ea8f55553d69 -j ACCEPT
-A DOCKER-FORWARD -i docker0 -j ACCEPT
table ip nat {
chain DOCKER {
iifname != "br-b60c35fe7ca2" tcp dport 2053 counter packets 1927655 bytes 115827935 dnat to 172.18.0.2:8443
iifname != "br-ea8f55553d69" tcp dport 40000 counter packets 193 bytes 9252 dnat to 172.19.0.2:1080
}
chain PREROUTING {
type nat hook prerouting priority dstnat; policy accept;
fib daddr type local counter packets 5724627 bytes 393074740 jump DOCKER
}
chain OUTPUT {
type nat hook output priority dstnat; policy accept;
ip daddr != 127.0.0.0/8 fib daddr type local counter packets 1945 bytes 141148 jump DOCKER
}
chain POSTROUTING {
type nat hook postrouting priority srcnat; policy accept;
ip saddr 172.17.0.0/16 oifname != "docker0" counter packets 0 bytes 0 masquerade
ip saddr 172.19.0.0/16 oifname != "br-ea8f55553d69" counter packets 732 bytes
50094 masquerade
ip saddr 172.18.0.0/16 oifname != "br-b60c35fe7ca2" counter packets 3397586 bytes 476882825 masquerade
}
}
table ip filter {
chain DOCKER {
ip daddr 172.19.0.2 iifname != "br-ea8f55553d69" oifname "br-ea8f55553d69" tcp dport 1080 counter packets 193 bytes 9252 accept
ip daddr 172.18.0.2 iifname != "br-b60c35fe7ca2" oifname "br-b60c35fe7ca2" tcp dport 8443 counter packets 1927812 bytes 115843480 accept
iifname != "br-b60c35fe7ca2" oifname "br-b60c35fe7ca2" counter packets 0 bytes 0 drop
iifname != "br-ea8f55553d69" oifname "br-ea8f55553d69" counter packets 0 bytes 0 drop
iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
}
chain DOCKER-FORWARD {
counter packets 1080911690 bytes 1364253385772 jump DOCKER-CT
counter packets 503299235 bytes 669471756459 jump DOCKER-INTERNAL
counter packets 503299235 bytes 669471756459 jump DOCKER-BRIDGE
iifname "br-b60c35fe7ca2" counter packets 483786987 bytes 664308751909 accept
iifname "br-ea8f55553d69" counter packets 17584243 bytes 5047151818 accept
iifname "docker0" counter packets 0 bytes 0 accept
}
===== CERTS =====
no letsencrypt
===== KERNEL NET =====
net.ipv4.ip_forward = 1
net.ipv4.tcp_congestion_control = bbr
net.core.default_qdisc = fq
===== OUTBOUND CHECKS =====
www.cloudflare.com https:200 0.105634s
1.1.1.1 https:301 0.076722s
google.com https:301 0.073126s
2 packets transmitted, 2 received, 0% packet loss, time 1050ms
rtt min/avg/max/mdev = 0.859/0.870/0.882/0.011 ms
===== DONE =====
root@vm4071264:~#