日志中大量出现connection reset by peer

[Selflocking]

time="May 23 06:00:44" level=warning msg="handleConn: %!w(<nil>): read tcp 199.59.149.239:80->192.168.1.206:37564: read: connection reset by peer"
time="May 23 06:00:44" level=warning msg="handleConn: %!w(<nil>): read tcp 157.240.3.50:80->192.168.1.206:46484: read: connection reset by peer"
time="May 23 06:00:44" level=warning msg="handleConn: %!w(<nil>): read tcp 199.96.58.177:80->192.168.1.206:45730: read: connection reset by peer"
time="May 23 06:00:44" level=warning msg="handleConn: %!w(<nil>): read tcp 39.109.122.128:80->192.168.1.206:40460: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.68.74:80->192.168.1.206:42630: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.176.10:80->192.168.1.206:50476: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.69.170:80->192.168.1.206:53210: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.217.138:80->192.168.1.206:33294: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.72.234:80->192.168.1.206:37518: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.251.33.74:80->192.168.1.206:50612: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.68.42:80->192.168.1.206:52480: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.217.106:80->192.168.1.206:40168: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.72.138:80->192.168.1.206:48632: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.189.10:80->192.168.1.206:33198: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.217.74:80->192.168.1.206:60334: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.188.234:80->192.168.1.206:57130: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.72.170:80->192.168.1.206:46304: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 172.217.14.74:80->192.168.1.206:54560: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.251.40.42:80->192.168.1.206:36214: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 172.217.12.138:80->192.168.1.206:53128: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 142.250.68.10:80->192.168.1.206:35074: read: connection reset by peer"
time="May 23 06:01:09" level=warning msg="handleConn: %!w(<nil>): read tcp 172.217.14.202:80->192.168.1.206:41744: read: connection reset by peer"

google play更新会失败，不知道两者是否有关联性。

节点

trojan

DNS

SmartDNS

Router

pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
pname(smartdns) && l4proto(udp) && dport(53) -> must_direct
# tailscale
pname(tailscaled) -> must_direct
# 国内，内网直连
dip(geoip:private) -> direct(must)
dip(geoip:cn) -> direct
domain(geosite:cn) -> direct

# https://github.com/daeuniverse/dae/discussions/298  Apple 设备未收到 Apple 推送通知
dip(17.0.0.0/8) -> direct

# 内网
domain(lan) -> must_direct
dip(192.168.0.0/24) -> direct
dip(192.168.1.1/32) -> direct

# ipv6 走直连，代理不支持
ipversion(6) -> direct

# CN DNS 不走代理
dip(223.5.5.5/32) -> direct
dip(223.6.6.6/32) -> direct
dip(119.29.29.29/32) -> direct
dip(119.28.28.28/32) -> direct

# GW DNS 走代理
dip(8.8.8.8/32) -> hk
dip(8.8.4.4/32) -> hk
dip(1.1.1.1/32) -> hk
dip(1.0.0.1/32) -> hk

# diy
domain(bing.com) -> must_direct
domain(www.bing.com) -> must_direct
domain(cn.bing.com) -> must_direct
domain(raw.githubusercontent.com) -> hk

# google 走us节点
# dip(geoip:google) -> us
# domain(regex: '\.goo.*\..*') -> us
# dip(geoip:google) && ipversion(6) -> block
# domain(regex: '\.goo.*\..*') && ipversion(6) -> block

# openai 走us
domain(regex: 'openai\..*') -> us
domain(regex: 'chatgpt\..*') -> us
domain(regex: 'openai\..*') && ipversion(6) -> block
domain(regex: 'chatgpt\..*') && ipversion(6) -> block

fallback: hk