---

#!/bin/bash
export LC_ALL=C
s(){ echo; echo "===== $1 ====="; }
D=mainnet.assaxaq.online

s "DNS (system / 1.1.1.1 / 8.8.8.8)"
echo "A  sys: $(getent ahostsv4 $D | awk '{print $1}' | sort -u | tr '\n' ' ')"
echo "AAAA sys: $(getent ahostsv6 $D | awk '{print $1}' | sort -u | tr '\n' ' ')"
echo "A  @1.1.1.1: $(dig @1.1.1.1 +short A $D | tr '\n' ' ')"
echo "AAAA @1.1.1.1: $(dig @1.1.1.1 +short AAAA $D | tr '\n' ' ')"
echo "A  @8.8.8.8: $(dig @8.8.8.8 +short A $D | tr '\n' ' ')"

s "HTTPS IPv4 vs IPv6 (from server)"
curl -sk -4 -m8 -o /dev/null -w "v4 %{http_code} %{remote_ip}\n" https://$D/ || echo "v4 TIMEOUT"
curl -sk -6 -m8 -o /dev/null -w "v6 %{http_code} %{remote_ip}\n" https://$D/ || echo "v6 TIMEOUT"

s "WS HANDSHAKE VIA CF (expect 101)"
curl -sk -4 -m8 --http1.1 -i https://$D/6b948f62c0a3d5e5 \
  -H "Connection: Upgrade" -H "Upgrade: websocket" \
  -H "Sec-WebSocket-Version: 13" -H "Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==" | head -3

s "XRAY"
systemctl is-active xray-cf
ss -tlnp | grep -E ':(443|8443) '

s "ACCESS LOG (last 30)"
tail -30 /var/log/xray-cf-access.log 2>&1

s "ERROR LOG (last 20)"
tail -20 /var/log/xray-cf-error.log 2>&1