增加稳定版arm支持

修复稳定版面板显示屏蔽协议状态不一致问题
2026-09-28 15:46:38 +08:00 · 2025-11-25 09:43:32 +08:00 · 2025-11-25 09:21:36 +08:00 · 2025-11-25 09:18:40 +08:00
171 changed files with 11680 additions and 18755 deletions
@@ -1,68 +0,0 @@
-name: CI Build Check
-
-on:
-  push:
-    branches: ['**']
-  pull_request:
-    branches: ['**']
-
-jobs:
-  frontend:
-    name: Build Frontend
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: vite-frontend
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v4
-        with:
-          node-version: '20.19.0'
-
-      - name: Install dependencies
-        run: npm install --legacy-peer-deps
-
-      - name: Build
-        run: npm run build
-
-  backend:
-    name: Build Backend
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: springboot-backend
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Java 21
-        uses: actions/setup-java@v4
-        with:
-          java-version: '21'
-          distribution: 'temurin'
-          cache: 'maven'
-
-      - name: Build with Maven
-        run: mvn clean package -DskipTests
-
-  agent:
-    name: Build Agent
-    runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: go-gost
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Setup Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: '1.23'
-          cache-dependency-path: go-gost/go.sum
-
-      - name: Download dependencies
-        run: go mod download
-
-      - name: Build
-        run: go build -v .
@@ -1,71 +1,55 @@
-name: Build and Push Images
+name: Build and Push Images Based on Version

+# 在这里定义统一版本号
 env:
-  VERSION: "2.0.7-beta"  # 分支推送时使用的默认版本
-  REGISTRY: ghcr.io
+  VERSION: "1.4.3"

 on:
  push:
-    tags:
-      - '[0-9]*'  # 匹配 2.0.8, 2.0.8-beta 等格式
+    branches:
+      - main
+      - beta

 jobs:
  check-version:
    name: Check Version and Decide Build
    runs-on: ubuntu-latest
    outputs:
-      version: ${{ steps.version.outputs.version }}
-      should_build: ${{ steps.version.outputs.should_build }}
-      should_build_gost: ${{ steps.version.outputs.should_build_gost }}
-      is_tag: ${{ steps.version.outputs.is_tag }}
-      image_owner: ${{ steps.version.outputs.image_owner }}
+      version: ${{ env.VERSION }}
+      should_build: ${{ steps.check-tag.outputs.should_build }}
+      should_build_gost: ${{ steps.check-tag.outputs.should_build_gost }}
+      tag_exists: ${{ steps.check-tag.outputs.tag_exists }}
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3
        with:
          fetch-depth: 0

-      - name: Determine version and build strategy
-        id: version
+      - name: Display version
        run: |
-          # 镜像 owner 需要小写
-          IMAGE_OWNER=$(echo "${{ github.repository_owner }}" | tr '[:upper:]' '[:lower:]')
-          echo "image_owner=$IMAGE_OWNER" >> $GITHUB_OUTPUT
+          echo "Current version: ${{ env.VERSION }}"

-          if [[ "${{ github.ref_type }}" == "tag" ]]; then
-            # Tag 触发：直接使用 tag 名作为版本，全量构建
-            VERSION="${{ github.ref_name }}"
-            echo "🏷️ Tag trigger detected: $VERSION"
-            echo "version=$VERSION" >> $GITHUB_OUTPUT
-            echo "is_tag=true" >> $GITHUB_OUTPUT
-            echo "should_build=true" >> $GITHUB_OUTPUT
-            echo "should_build_gost=true" >> $GITHUB_OUTPUT
-          else
-            # 分支触发：使用 env.VERSION，检查是否需要构建
-            VERSION="${{ env.VERSION }}"
-            echo "🌿 Branch trigger detected, using version: $VERSION"
-            echo "version=$VERSION" >> $GITHUB_OUTPUT
-            echo "is_tag=false" >> $GITHUB_OUTPUT
-
-            # 检查 tag 是否已存在
-            if git rev-parse "$VERSION" >/dev/null 2>&1; then
-              echo "Tag $VERSION already exists"
-              echo "should_build=false" >> $GITHUB_OUTPUT
-
-              # 检查 go-gost 目录是否有变化
-              TAG_COMMIT=$(git rev-list -n 1 "$VERSION")
-              if git diff --quiet --ignore-all-space --ignore-blank-lines $TAG_COMMIT HEAD -- go-gost/ 2>/dev/null; then
-                echo "✅ GOST files unchanged since tag"
-                echo "should_build_gost=false" >> $GITHUB_OUTPUT
-              else
-                echo "🔄 Detected changes in go-gost directory"
-                git diff --stat $TAG_COMMIT HEAD -- go-gost/ || true
-                echo "should_build_gost=true" >> $GITHUB_OUTPUT
-              fi
+      - name: Check if tag exists and detect changes
+        id: check-tag
+        run: |
+          if git rev-parse "${{ env.VERSION }}" >/dev/null 2>&1; then
+            echo "Tag ${{ env.VERSION }} already exists"
+            echo "tag_exists=true" >> $GITHUB_OUTPUT
+            echo "should_build=false" >> $GITHUB_OUTPUT
+            
+            # 检查从tag到现在，go-gost目录下的文件是否有变化
+            TAG_COMMIT=$(git rev-list -n 1 "${{ env.VERSION }}")
+            if git diff --quiet $TAG_COMMIT HEAD -- go-gost/; then
+              echo "✅ GOST files unchanged since tag"
+              echo "should_build_gost=false" >> $GITHUB_OUTPUT
            else
-              echo "Tag $VERSION does not exist, will build all components"
-              echo "should_build=true" >> $GITHUB_OUTPUT
+              echo "🔄 GOST files changed since tag, will rebuild GOST binary"
              echo "should_build_gost=true" >> $GITHUB_OUTPUT
            fi
+          else
+            echo "Tag ${{ env.VERSION }} does not exist, will build all components"
+            echo "should_build=true" >> $GITHUB_OUTPUT
+            echo "should_build_gost=true" >> $GITHUB_OUTPUT
+            echo "tag_exists=false" >> $GITHUB_OUTPUT
          fi

  build-gost:
@@ -74,42 +58,48 @@ jobs:
    if: needs.check-version.outputs.should_build_gost == 'true'
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3

      - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v4
        with:
-          go-version: '1.23'
+          go-version: '1.21'

      - name: Cache Go modules
-        uses: actions/cache@v4
+        uses: actions/cache@v3
        with:
          path: |
            ~/.cache/go-build
            ~/go/pkg/mod
-          key: ${{ runner.os }}-go-${{ hashFiles('go-gost/go.sum') }}
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-

      - name: Install UPX
        run: |
-          wget -q https://github.com/upx/upx/releases/download/v4.2.1/upx-4.2.1-amd64_linux.tar.xz
+          wget https://github.com/upx/upx/releases/download/v4.2.1/upx-4.2.1-amd64_linux.tar.xz
          tar -xf upx-4.2.1-amd64_linux.tar.xz
          sudo mv upx-4.2.1-amd64_linux/upx /usr/local/bin/
          rm -rf upx-4.2.1-amd64_linux*

      - name: Build GOST binary (AMD64)
        working-directory: ./go-gost
-        run: CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w -X main.version=${{ needs.check-version.outputs.version }}" -o gost-amd64
+        run: |
+          CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o gost-amd64

      - name: Build GOST binary (ARM64)
        working-directory: ./go-gost
-        run: CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags="-s -w -X main.version=${{ needs.check-version.outputs.version }}" -o gost-arm64
+        run: |
+          CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -ldflags="-s -w" -o gost-arm64

-      - name: Compress with UPX
+      - name: Compress with UPX (AMD64)
        working-directory: ./go-gost
        run: |
          upx --best --lzma gost-amd64
+
+      - name: Compress with UPX (ARM64)
+        working-directory: ./go-gost
+        run: |
          upx --best --lzma gost-arm64

      - name: Upload GOST AMD64 artifact
@@ -129,40 +119,31 @@ jobs:
    needs: check-version
    if: needs.check-version.outputs.should_build == 'true'
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v2

-      - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+      - name: Log in to DockerHub
+        uses: docker/login-action@v2
        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Prepare build args
-        run: |
-          VERSION="${{ needs.check-version.outputs.version }}"
-          {
-            echo "VITE_GITHUB_REPO=https://github.com/${{ github.repository }}"
-            echo "VITE_APP_VERSION=$VERSION"
-          } > ./vite-frontend/.env.production
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}

      - name: Build and push Vite Docker images
        run: |
          VERSION="${{ needs.check-version.outputs.version }}"
-          OWNER="${{ needs.check-version.outputs.image_owner }}"
-
          docker buildx build \
            --platform linux/amd64,linux/arm64 \
            --push \
-            -t ${{ env.REGISTRY }}/${OWNER}/vite-frontend:latest \
-            -t ${{ env.REGISTRY }}/${OWNER}/vite-frontend:${VERSION} \
+            -t bqlpfy/vite-frontend:latest \
+            -t bqlpfy/vite-frontend:${VERSION} \
            ./vite-frontend

  build-java:
@@ -170,20 +151,17 @@ jobs:
    needs: check-version
    if: needs.check-version.outputs.should_build == 'true'
    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3

      - name: Set up JDK and Maven
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v3
        with:
          java-version: 21
          distribution: 'temurin'

      - name: Cache Maven dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v3
        with:
          path: ~/.m2
          key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
@@ -194,36 +172,33 @@ jobs:
        run: mvn clean package -DskipTests

      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v2

-      - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+      - name: Log in to DockerHub
+        uses: docker/login-action@v2
        with:
-          registry: ${{ env.REGISTRY }}
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: ${{ secrets.DOCKER_HUB_USERNAME }}
+          password: ${{ secrets.DOCKER_HUB_TOKEN }}

      - name: Build and push Java Docker images
        run: |
          VERSION="${{ needs.check-version.outputs.version }}"
-          OWNER="${{ needs.check-version.outputs.image_owner }}"
-
          docker buildx build \
            --platform linux/amd64,linux/arm64 \
            --push \
-            -t ${{ env.REGISTRY }}/${OWNER}/springboot-backend:latest \
-            -t ${{ env.REGISTRY }}/${OWNER}/springboot-backend:${VERSION} \
+            -t bqlpfy/springboot-backend:latest \
+            -t bqlpfy/springboot-backend:${VERSION} \
            ./springboot-backend

  create-release:
-    name: Create Release (Tag Only)
+    name: Create Release and Tag
    needs: [check-version, build-gost, build-vite, build-java]
-    if: needs.check-version.outputs.is_tag == 'true'
+    if: needs.check-version.outputs.should_build == 'true'
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3

      - name: Download GOST AMD64 binary
        uses: actions/download-artifact@v4
@@ -237,106 +212,60 @@ jobs:
          name: gost-binary-arm64
          path: ./artifacts/arm64

-      - name: Prepare release files
+      - name: Rename binaries
        run: |
-          VERSION="${{ needs.check-version.outputs.version }}"
-          OWNER="${{ needs.check-version.outputs.image_owner }}"
-          REPO="${{ github.repository }}"
-
-          # 移动二进制文件
          mv ./artifacts/amd64/gost-amd64 ./artifacts/gost-amd64
          mv ./artifacts/arm64/gost-arm64 ./artifacts/gost-arm64

-          # 复制并修改 docker-compose 文件
-          cp docker-compose-v4.yml ./artifacts/docker-compose-v4.yml
-          cp docker-compose-v6.yml ./artifacts/docker-compose-v6.yml
-
-          # 替换镜像地址为 GHCR
-          sed -i "s|bqlpfy/springboot-backend:[^[:space:]]*|${{ env.REGISTRY }}/${OWNER}/springboot-backend:${VERSION}|g" ./artifacts/docker-compose-v4.yml
-          sed -i "s|bqlpfy/vite-frontend:[^[:space:]]*|${{ env.REGISTRY }}/${OWNER}/vite-frontend:${VERSION}|g" ./artifacts/docker-compose-v4.yml
-          sed -i "s|bqlpfy/springboot-backend:[^[:space:]]*|${{ env.REGISTRY }}/${OWNER}/springboot-backend:${VERSION}|g" ./artifacts/docker-compose-v6.yml
-          sed -i "s|bqlpfy/vite-frontend:[^[:space:]]*|${{ env.REGISTRY }}/${OWNER}/vite-frontend:${VERSION}|g" ./artifacts/docker-compose-v6.yml
-
-          # 复制并修改安装脚本
-          cp install.sh ./artifacts/install.sh
-          cp panel_install.sh ./artifacts/panel_install.sh
-
-          # 替换仓库地址和版本号
-          sed -i "s|bqlpfy/flux-panel|${REPO}|g" ./artifacts/install.sh
-          sed -i "s|bqlpfy/flux-panel|${REPO}|g" ./artifacts/panel_install.sh
-          sed -i "s|2.0.7-beta|${VERSION}|g" ./artifacts/install.sh
-          sed -i "s|2.0.7-beta|${VERSION}|g" ./artifacts/panel_install.sh
-
      - name: Create Release
        env:
          GH_TOKEN: ${{ github.token }}
        run: |
          VERSION="${{ needs.check-version.outputs.version }}"
-          OWNER="${{ needs.check-version.outputs.image_owner }}"
-
+          
+          # 创建并推送 tag
+          git tag "${VERSION}" ${{ github.sha }}
+          git push origin "${VERSION}"
+          
          # 获取 commit 信息
          COMMIT_MSG=$(git log -1 --pretty=format:"%s")
          COMMIT_AUTHOR=$(git log -1 --pretty=format:"%an")
          COMMIT_DATE=$(git log -1 --pretty=format:"%ai")
-
+          
          # 创建 release
          gh release create "${VERSION}" \
            --title "Release ${VERSION}" \
-            --notes "## 📝 Release Information
-
-          - **Version**: ${VERSION}
-          - **Commit**: [\`${GITHUB_SHA:0:7}\`](https://github.com/${{ github.repository }}/commit/${{ github.sha }})
+            --notes "## 📝 Commit Information
+          - **Message**: ${COMMIT_MSG}
          - **Author**: ${COMMIT_AUTHOR}
          - **Date**: ${COMMIT_DATE}
-          - **Message**: ${COMMIT_MSG}
-
-          ## 📦 Docker Images
-
-          \`\`\`bash
-          # Backend
-          docker pull ${{ env.REGISTRY }}/${OWNER}/springboot-backend:${VERSION}
-
-          # Frontend
-          docker pull ${{ env.REGISTRY }}/${OWNER}/vite-frontend:${VERSION}
-          \`\`\`
-
-          ## 🚀 Quick Install
-
-          **Panel:**
-          \`\`\`bash
-          curl -L https://github.com/${{ github.repository }}/releases/download/${VERSION}/panel_install.sh -o panel_install.sh && chmod +x panel_install.sh && ./panel_install.sh
-          \`\`\`
-
-          **Node:**
-          \`\`\`bash
-          curl -L https://github.com/${{ github.repository }}/releases/download/${VERSION}/install.sh -o install.sh && chmod +x install.sh && ./install.sh
-          \`\`\`" \
+          - **Commit**: [\`${GITHUB_SHA:0:7}\`](https://github.com/${{ github.repository }}/commit/${{ github.sha }})" \
            --repo ${{ github.repository }}
-
+          
          # 上传所有文件到 release
          echo "📤 上传 GOST 二进制文件..."
          gh release upload "${VERSION}" ./artifacts/gost-amd64 --clobber
          gh release upload "${VERSION}" ./artifacts/gost-arm64 --clobber
-
+          
          echo "📤 上传安装脚本..."
-          gh release upload "${VERSION}" ./artifacts/install.sh --clobber
-          gh release upload "${VERSION}" ./artifacts/panel_install.sh --clobber
-
+          gh release upload "${VERSION}" ./install.sh --clobber
+          gh release upload "${VERSION}" ./panel_install.sh --clobber
+          
          echo "📤 上传 Docker Compose 配置文件..."
-          gh release upload "${VERSION}" ./artifacts/docker-compose-v4.yml --clobber
-          gh release upload "${VERSION}" ./artifacts/docker-compose-v6.yml --clobber
-
-          echo "✅ Release ${VERSION} 创建完成"
+          gh release upload "${VERSION}" ./docker-compose-v4.yml --clobber
+          gh release upload "${VERSION}" ./docker-compose-v6.yml --clobber
+          
+          echo "✅ 所有文件已上传到 Release ${VERSION}"

  update-release-gost:
    name: Update GOST Binaries in Release
    needs: [check-version, build-gost]
-    if: needs.check-version.outputs.is_tag == 'false' && needs.check-version.outputs.should_build == 'false' && needs.check-version.outputs.should_build_gost == 'true'
+    if: needs.check-version.outputs.should_build == 'false' && needs.check-version.outputs.should_build_gost == 'true'
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v3

      - name: Download GOST AMD64 binary
        uses: actions/download-artifact@v4
@@ -360,10 +289,42 @@ jobs:
          GH_TOKEN: ${{ github.token }}
        run: |
          VERSION="${{ needs.check-version.outputs.version }}"
-
+          
          echo "🔄 更新 Release ${VERSION} 中的 GOST 二进制文件..."
-
+          
          gh release upload "${VERSION}" ./artifacts/gost-amd64 --clobber
          gh release upload "${VERSION}" ./artifacts/gost-arm64 --clobber
+          
+          echo "✅ GOST 二进制文件更新完成！"
+          echo "ℹ️ Docker 镜像未重新构建"

-          echo "✅ GOST 二进制文件更新完成"
+  update-release-files:
+    name: Update Release Files Only
+    needs: check-version
+    if: needs.check-version.outputs.tag_exists == 'true' && needs.check-version.outputs.should_build == 'false' && needs.check-version.outputs.should_build_gost == 'false'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Update Release Files
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          VERSION="${{ needs.check-version.outputs.version }}"
+          
+          echo "📤 更新 Release ${VERSION} 中的脚本和配置文件..."
+          
+          # 上传安装脚本（覆盖）
+          echo "📤 更新安装脚本..."
+          gh release upload "${VERSION}" ./install.sh --clobber
+          gh release upload "${VERSION}" ./panel_install.sh --clobber
+          
+          # 上传 Docker Compose 配置文件（覆盖）
+          echo "📤 更新 Docker Compose 配置文件..."
+          gh release upload "${VERSION}" ./docker-compose-v4.yml --clobber
+          gh release upload "${VERSION}" ./docker-compose-v6.yml --clobber
+          
+          echo "✅ 文件更新完成！Release ${VERSION} 中的脚本和配置已更新"
+          echo "ℹ️ Docker 镜像和 GOST 二进制未重新构建"
@@ -256,5 +256,4 @@ gitee/
 *.cert
 doraemon.jks
 device.id
-commit.sh
-sql/
+commit.sh
@@ -1,71 +0,0 @@
-# Plan: 搭建开发环境
-
-## 目标
-为 Flux Panel 项目安装所有缺失的开发依赖，使 3 个子项目都能本地开发和构建。
-
-## 当前状态
-
-### ✅ 已安装
-| 工具 | 版本 | 用途 |
-|------|------|------|
-| Node.js | v20.19.2 | vite-frontend |
-| npm | 9.2.0 | vite-frontend |
-| Go | 1.24.4 | go-gost |
-| Docker | 29.1.4 | 容器化部署 |
-
-### ❌ 缺失
-| 工具 | 需求版本 | 用途 |
-|------|----------|------|
-| Java | 21 | springboot-backend |
-| Maven | 3.x | 构建后端 |
-| Docker Compose | v2 | 容器编排 |
-
---
-
-## 执行任务
-
-### Task 1: 安装 Java 21
-```bash
-apt-get update && apt-get install -y openjdk-21-jdk
-```
-**验证**: `java -version` 应显示 openjdk 21
-
-### Task 2: 安装 Maven
-```bash
-apt-get install -y maven
-```
-**验证**: `mvn -v` 应显示 Maven 3.x
-
-### Task 3: 安装 Docker Compose Plugin
-```bash
-apt-get install -y docker-compose-plugin
-```
-**验证**: `docker compose version` 应显示版本号
-
-### Task 4: 安装前端依赖
-```bash
-cd /root/flux-panel/vite-frontend && npm install
-```
-**验证**: `node_modules/` 目录存在
-
-### Task 5: 验证后端可构建
-```bash
-cd /root/flux-panel/springboot-backend && mvn clean compile -q
-```
-**验证**: 编译成功无错误
-
-### Task 6: 验证 Go 模块
-```bash
-cd /root/flux-panel/go-gost && go mod download
-```
-**验证**: 依赖下载成功
-
---
-
-## 完成标准
- [ ] `java -version` → openjdk 21
- [ ] `mvn -v` → Maven 3.x
- [ ] `docker compose version` → v2.x
- [ ] 前端: `npm run dev` 可启动
- [ ] 后端: `mvn compile` 成功
- [ ] Go: `go build .` 成功
@@ -1,66 +0,0 @@
-# PROJECT KNOWLEDGE BASE
-
-**Generated:** Mon Feb 02 2026
-**Commit:** 7ca01ab
-**Branch:** beta
-
-## OVERVIEW
-Flux Panel is a traffic forwarding management system built on a forked GOST v3 stack. It ships as Dockerized Spring Boot (admin API) + Vite/React UI + Go forwarding agent, with optional mobile WebView wrappers.
-
-## STRUCTURE
-```
-./
-├── go-gost/               # Go forwarding agent (forked gost + local x/)
-│   └── x/                 # Local fork of github.com/go-gost/x (replace => ./x)
-├── springboot-backend/    # Java/Spring Boot admin API (SQLite/MyBatis)
-├── vite-frontend/         # React/Vite dashboard (HeroUI + Tailwind)
-├── android-app/           # Android WebView wrapper (optional)
-├── ios-app/               # iOS WebView wrapper (optional)
-├── docker-compose-v4.yml  # Panel deploy (IPv4-only bridge)
-├── docker-compose-v6.yml  # Panel deploy (IPv6-enabled bridge)
-├── panel_install.sh       # Panel installer/upgrader (downloads compose)
-├── install.sh             # Node installer/upgrader (downloads gost binary)
-└── .github/workflows/     # CI: build/push images + release artifacts
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| **Deploy (Docker)** | `docker-compose-v4.yml` | Env: `JWT_SECRET`, `BACKEND_PORT`, `FRONTEND_PORT` |
-| **Deploy (IPv6)** | `docker-compose-v6.yml` | Same as v4 + IPv6-enabled bridge |
-| **Panel install** | `panel_install.sh` | Picks v4/v6, generates `JWT_SECRET`, downloads compose |
-| **Node install** | `install.sh` | Installs `/etc/flux_agent/flux_agent` + writes `config.json`/`gost.json` + systemd `flux_agent.service` |
-| **Admin API entry** | `springboot-backend/src/main/java/com/admin/AdminApplication.java` | Spring Boot app |
-| **Admin API routes** | `springboot-backend/src/main/java/com/admin/controller/` | Mostly `/api/v1/*` controllers |
-| **Admin auth** | `springboot-backend/src/main/java/com/admin/common/interceptor/JwtInterceptor.java` | Checks `Authorization` header |
-| **Web UI routing** | `vite-frontend/src/App.tsx` | React Router v6 + ProtectedRoute/H5 layouts |
-| **Web UI API client** | `vite-frontend/src/api/network.ts` | Axios `baseURL` + `Authorization` header |
-| **Go agent entry** | `go-gost/main.go` | Reads panel `config.json` + starts gost services |
-| **Go x fork** | `go-gost/x/` | Handlers/listeners/dialers + management API |
-
-## CONVENTIONS
- `Authorization` header carries the raw JWT token (no `Bearer` prefix) between `vite-frontend/` and `springboot-backend/`.
- `go-gost/` uses `replace github.com/go-gost/x => ./x` and `go-gost/x/` is also its own Go module.
-
-## ANTI-PATTERNS (THIS PROJECT)
- Do not edit generated protobuf output: `go-gost/x/internal/util/grpc/proto/*.pb.go`, `go-gost/x/internal/util/grpc/proto/*_grpc.pb.go`.
-
-## COMMANDS
-```bash
-# Panel (Docker)
-docker compose -f docker-compose-v4.yml up -d
-docker compose -f docker-compose-v6.yml up -d
-
-# Release-based install scripts
-./panel_install.sh
-./install.sh
-
-# Local dev (per subproject)
-(cd springboot-backend && mvn clean package)
-(cd vite-frontend && npm run dev)
-(cd go-gost && go run .)
-```
-
-## NOTES
- LSP servers are not installed in this environment (gopls/jdtls/typescript-language-server); rely on grep-based navigation.
- `vite-frontend/vite.config.ts` sets `minify: false` and disables treeshake; expect larger bundles.
@@ -1,5 +1,23 @@
 # flux-panel转发面板 哆啦A梦转发面板

+# 赞助商
+<p align="center">
+  <a href="https://vps.town" style="margin: 0 20px; text-align:center;">
+    <img src="./doc/vpstown.png" width="300">
+  </a>
+
+  <a href="https://whmcs.as211392.com" style="margin: 0 20px; text-align:center;">
+    <img src="./doc/as211392.png" width="300">
+  </a>
+</p>
+
+
+
+
+使用1.x版本的请使用上面给出的脚本，不要使用最新的，最新的默认2.x
+嫌弃麻烦或者想稳定的我不推荐你升级到2.x版本 目前还在beta阶段，很多问题。
+
+
 本项目基于 [go-gost/gost](https://github.com/go-gost/gost) 和 [go-gost/x](https://github.com/go-gost/x) 两个开源库，实现了转发面板。
 ---
 ## 特性
@@ -16,13 +34,24 @@
 ---
 ### Docker Compose部署
 #### 快速部署
-面板端：
+面板端(稳定版)：
 ```bash
-curl -L https://raw.githubusercontent.com/Sagit-chu/flux-panel/main/panel_install.sh -o panel_install.sh && chmod +x panel_install.sh && ./panel_install.sh
+curl -L https://raw.githubusercontent.com/bqlpfy/flux-panel/refs/heads/main/panel_install.sh -o panel_install.sh && chmod +x panel_install.sh && ./panel_install.sh
 ```
-节点端：
+节点端(稳定版)：
 ```bash
-curl -L https://raw.githubusercontent.com/Sagit-chu/flux-panel/main/install.sh -o install.sh && chmod +x install.sh && ./install.sh
+curl -L https://raw.githubusercontent.com/bqlpfy/flux-panel/refs/heads/main/install.sh -o install.sh && chmod +x install.sh && ./install.sh
+
+```
+
+面板端(开发版)：
+```bash
+curl -L https://raw.githubusercontent.com/bqlpfy/flux-panel/refs/heads/beta/panel_install.sh -o panel_install.sh && chmod +x panel_install.sh && ./panel_install.sh
+```
+节点端(开发版)：
+```bash
+curl -L https://raw.githubusercontent.com/bqlpfy/flux-panel/refs/heads/beta/install.sh -o install.sh && chmod +x install.sh && ./install.sh
+
 ```

 #### 默认管理员账号
@@ -55,14 +84,16 @@ curl -L https://raw.githubusercontent.com/Sagit-chu/flux-panel/main/install.sh -
 作者对因使用本项目所造成的任何直接或间接损失概不负责，亦不提供任何形式的担保、承诺或技术支持。  


-请务必在合法、合规、安全的前提下使用本项目。
+请务必在合法、合规、安全的前提下使用本项目。  

 ---
 ## ⭐ 喝杯咖啡！（USDT）

 | 网络       | 地址                                                                 |
 |------------|----------------------------------------------------------------------|
-| BNB(BEP20) | `0xa608708fdc6279a2433fd4b82f0b72b8cbe97ed5`                          |
-| TRC20      | `TM8VYdU3s3gSX5PC8swjAJrAzZFCHKqG2k`                                  |
-| Aptos      | `0x49427bfcba1006a346447430689b2307ac156316bb34850d1d3029ff9d118da5`  |
-| polygon    |  `0xa608708fdc6279a2433fd4b82f0b72b8cbe97ed5`    |
+| BNB(BEP20) | `0x755492c03728851bbf855daa28a1e089f9aca4d1`                          |
+| TRC20      | `TYh2L3xxXpuJhAcBWnt3yiiADiCSJLgUm7`                                  |
+| Aptos      | `0xf2f9fb14749457748506a8281628d556e8540d1eb586d202cd8b02b99d369ef8`  |
+
+[![Star History Chart](https://api.star-history.com/svg?repos=bqlpfy/flux-panel&type=Date)](https://www.star-history.com/#bqlpfy/flux-panel&Date)
+
@@ -1,14 +1,39 @@
 services:
+  mysql:
+    image: mysql:5.7
+    container_name: gost-mysql
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${DB_PASSWORD}
+      MYSQL_DATABASE: ${DB_NAME}
+      MYSQL_USER: ${DB_USER}
+      MYSQL_PASSWORD: ${DB_PASSWORD}
+      TZ: Asia/Shanghai
+    volumes:
+      - mysql_data:/var/lib/mysql
+      - ./gost.sql:/docker-entrypoint-initdb.d/init.sql:ro
+    command: >
+      --default-authentication-plugin=mysql_native_password
+      --character-set-server=utf8mb4
+      --collation-server=utf8mb4_unicode_ci
+      --max_connections=1000
+      --innodb_buffer_pool_size=256M
+    networks:
+      - gost-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      timeout: 10s
+      retries: 10
+
  backend:
-    image: ghcr.io/sagit-chu/springboot-backend:${FLUX_VERSION:-latest}
+    image: bqlpfy/springboot-backend:1.4.3
    container_name: springboot-backend
    restart: unless-stopped
-    logging:
-      driver: json-file
-      options:
-        max-size: "20m"
    environment:
-      DB_PATH: /app/data/gost.db
+      DB_HOST: mysql
+      DB_NAME: ${DB_NAME}
+      DB_USER: ${DB_USER}
+      DB_PASSWORD: ${DB_PASSWORD}
      JWT_SECRET: ${JWT_SECRET}
      LOG_DIR: /app/logs
      JAVA_OPTS: "-Xms256m -Xmx512m -Dfile.encoding=UTF-8 -Duser.timezone=Asia/Shanghai"
@@ -16,26 +41,22 @@ services:
      - "${BACKEND_PORT}:6365"
    volumes:
      - backend_logs:/app/logs
-      - sqlite_data:/app/data
+    depends_on:
+      mysql:
+        condition: service_healthy
    networks:
      - gost-network
-    stop_grace_period: 30s
-    stop_signal: SIGTERM
    healthcheck:
      test: ["CMD", "sh", "-c", "wget --no-verbose --tries=1 --spider http://localhost:6365/flow/test || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
-      start_period: 60s
+      start_period: 90s

  frontend:
-    image: ghcr.io/sagit-chu/vite-frontend:${FLUX_VERSION:-latest}
+    image: bqlpfy/vite-frontend:1.4.3
    container_name: vite-frontend
    restart: unless-stopped
-    logging:
-      driver: json-file
-      options:
-        max-size: "20m"
    ports:
      - "${FRONTEND_PORT}:80"
    depends_on:
@@ -46,8 +67,8 @@ services:


 volumes:
-  sqlite_data:
-    name: sqlite_data
+  mysql_data:
+    name: mysql_data
    driver: local
  backend_logs:
    name: backend_logs
@@ -60,4 +81,4 @@ networks:
    driver: bridge
    ipam:
      config:
-        - subnet: 172.20.0.0/16 
+        - subnet: 172.20.0.0/16 
@@ -1,14 +1,39 @@
 services:
+  mysql:
+    image: mysql:5.7
+    container_name: gost-mysql
+    restart: unless-stopped
+    environment:
+      MYSQL_ROOT_PASSWORD: ${DB_PASSWORD}
+      MYSQL_DATABASE: ${DB_NAME}
+      MYSQL_USER: ${DB_USER}
+      MYSQL_PASSWORD: ${DB_PASSWORD}
+      TZ: Asia/Shanghai
+    volumes:
+      - mysql_data:/var/lib/mysql
+      - ./gost.sql:/docker-entrypoint-initdb.d/init.sql:ro
+    command: >
+      --default-authentication-plugin=mysql_native_password
+      --character-set-server=utf8mb4
+      --collation-server=utf8mb4_unicode_ci
+      --max_connections=1000
+      --innodb_buffer_pool_size=256M
+    networks:
+      - gost-network
+    healthcheck:
+      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
+      timeout: 10s
+      retries: 10
+
  backend:
-    image: ghcr.io/sagit-chu/springboot-backend:${FLUX_VERSION:-latest}
+    image: bqlpfy/springboot-backend:1.4.3
    container_name: springboot-backend
    restart: unless-stopped
-    logging:
-      driver: json-file
-      options:
-        max-size: "20m"
    environment:
-      DB_PATH: /app/data/gost.db
+      DB_HOST: mysql
+      DB_NAME: ${DB_NAME}
+      DB_USER: ${DB_USER}
+      DB_PASSWORD: ${DB_PASSWORD}
      JWT_SECRET: ${JWT_SECRET}
      LOG_DIR: /app/logs
      JAVA_OPTS: "-Xms256m -Xmx512m -Dfile.encoding=UTF-8 -Duser.timezone=Asia/Shanghai"
@@ -16,26 +41,22 @@ services:
      - "${BACKEND_PORT}:6365"
    volumes:
      - backend_logs:/app/logs
-      - sqlite_data:/app/data
+    depends_on:
+      mysql:
+        condition: service_healthy
    networks:
      - gost-network
-    stop_grace_period: 30s
-    stop_signal: SIGTERM
    healthcheck:
      test: ["CMD", "sh", "-c", "wget --no-verbose --tries=1 --spider http://localhost:6365/flow/test || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
-      start_period: 60s
+      start_period: 90s

  frontend:
-    image: ghcr.io/sagit-chu/vite-frontend:${FLUX_VERSION:-latest}
+    image: bqlpfy/vite-frontend:1.4.3
    container_name: vite-frontend
    restart: unless-stopped
-    logging:
-      driver: json-file
-      options:
-        max-size: "20m"
    ports:
      - "${FRONTEND_PORT}:80"
    depends_on:
@@ -46,8 +67,8 @@ services:


 volumes:
-  sqlite_data:
-    name: sqlite_data
+  mysql_data:
+    name: mysql_data
    driver: local
  backend_logs:
    name: backend_logs
@@ -62,4 +83,4 @@ networks:
    ipam:
      config:
        - subnet: 172.20.0.0/16 
-        - subnet: fd00:dead:beef::/48
+        - subnet: fd00:dead:beef::/48
@@ -1,37 +0,0 @@
-# GO-GOST SERVICE KNOWLEDGE BASE
-
-**Generated:** Mon Feb 02 2026
-
-## OVERVIEW
-Forwarding agent built on GOST v3 with a local fork of `github.com/go-gost/x` under `x/`.
-**Stack:** Go 1.23, github.com/go-gost/core v0.3.1, local `go-gost/x` module.
-
-## STRUCTURE
-```
-go-gost/
-├── main.go           # Entry; reads panel config.json; starts svc.Run(program)
-├── config.go         # Panel config.json loader (addr/secret + ports)
-├── program.go        # GOST runtime: parse config, run/reload services
-├── x/                # Local fork of github.com/go-gost/x (has its own go.mod)
-└── go.mod            # replace github.com/go-gost/x => ./x
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Panel integration config | `go-gost/config.go` | Expects `config.json` in cwd by default |
-| Service lifecycle/reload | `go-gost/program.go` | Parses config; handles SIGHUP reload |
-| WebSocket reporting | `go-gost/main.go` | Starts reporter + sets HTTP report URL |
-| Protocol behaviors | `go-gost/x/` | Handlers/listeners/dialers live here |
-
-## CONVENTIONS
- Two configs exist: panel integration uses `config.json`; forwarding services use GOST config (defaults to `gost.{json,yaml}` via viper search paths).
- `go-gost/x/` is the primary extension surface; avoid editing vendored deps.
-
-## COMMANDS
-```bash
-cd go-gost
-go run .
-go test ./...
-go build .
-```
@@ -119,7 +119,7 @@ func main() {
 	log := xlogger.NewLogger()
 	logger.SetDefault(log)

-	wsReporter := socket.StartWebSocketReporterWithConfig(config.Addr, config.Secret, config.Http, config.Tls, config.Socks, version)
+	wsReporter := socket.StartWebSocketReporterWithConfig(config.Addr, config.Secret, config.Http, config.Tls, config.Socks, "1.2.4")
 	defer wsReporter.Stop()
 	service.SetHTTPReportURL(config.Addr, config.Secret)

@@ -1,5 +1,5 @@
 package main

 var (
-	version = "dev"
+	version = "3.1.0"
 )
@@ -1,42 +0,0 @@
-# GO-GOST/X KNOWLEDGE BASE
-
-## OVERVIEW
-Local fork of `github.com/go-gost/x` used by `go-gost/` via `replace github.com/go-gost/x => ./x`. Most protocol/runtime behavior changes happen here.
-
-## STRUCTURE
-```
-go-gost/x/
-├── api/        # Gin management API + embedded swagger docs
-├── config/     # Config model + parsing/load/reload
-├── connector/  # Outbound connect implementations
-├── dialer/     # Outbound dialers (tcp/tls/ws/quic/...) 
-├── handler/    # Protocol handlers (socks/http/tunnel/relay/...)
-├── listener/   # Inbound listeners (tcp/udp/tun/tap/redirect/...)
-├── limiter/    # Traffic/rate/conn limiters
-├── registry/   # Registries for services/handlers/listeners/etc
-├── service/    # Service wrappers + reporting hooks
-├── socket/     # WebSocket reporter / panel integration
-└── internal/   # Shared internals (grpc proto, net utils, sniffing, tls, ...)
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Management API routes/auth | `go-gost/x/api/api.go` | `/docs`, `/config/*`; BasicAuth + interceptor |
-| Service config parsing | `go-gost/x/config/parsing/` | Converts config to running services |
-| Add a handler | `go-gost/x/handler/` | Per-protocol subdirs |
-| Add a listener/dialer | `go-gost/x/listener/`, `go-gost/x/dialer/` | Transport variants |
-| Panel reporting | `go-gost/x/socket/` | WebSocket + HTTP report URL hooks |
-
-## CONVENTIONS
- `go-gost/x/` is a standalone Go module (`go-gost/x/go.mod`); run go tooling from this dir when debugging module resolution.
- Generated gRPC/proto code lives under `go-gost/x/internal/util/grpc/proto/`.
-
-## ANTI-PATTERNS
- Do not edit generated files in `go-gost/x/internal/util/grpc/proto/` (`*.pb.go`, `*_grpc.pb.go`).
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -1,23 +0,0 @@
-# GO-GOST/X API KNOWLEDGE BASE
-
-## OVERVIEW
-Gin-based management API for reading/writing config and controlling services at runtime.
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Route registration | `go-gost/x/api/api.go` | `Register(*gin.Engine, *Options)` |
-| Auth gating | `go-gost/x/api/middleware.go` | Drops non-BasicAuth requests; optional auther check |
-| Service CRUD + pause/resume | `go-gost/x/api/config_service.go` | Uses registry + `config.OnUpdate(...)` |
-| Swagger spec | `go-gost/x/api/swagger.yaml` | Served at `/docs` via embedded FS |
-
-## CONVENTIONS
- CORS is `AllowAllOrigins: true` (see `go-gost/x/api/api.go`).
- Requests without a valid Basic `Authorization` header are silently dropped (connection hijack + close) by `GlobalInterceptor()`.
- Many operations mutate the in-memory config via `config.OnUpdate(...)` after starting/stopping services.
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -1,23 +0,0 @@
-# GO-GOST/X CONFIG KNOWLEDGE BASE
-
-## OVERVIEW
-Config model + parsing/loading pipeline for the `go-gost/x` runtime. This is the bridge between `gost.json`/`gost.yaml` and in-memory registries/services.
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Config structs + global state | `go-gost/x/config/config.go` | `Global()`, `Set()`, `OnUpdate()` |
-| Default config file search | `go-gost/x/config/config.go` | Viper `SetConfigName("gost")` + paths `/etc/gost/`, `$HOME/.gost/`, `.` |
-| Registry wiring | `go-gost/x/config/loader/loader.go` | Parses config sections and registers into registries |
-| Metadata keys | `go-gost/x/config/parsing/parse.go` | `MDKey*` constants used by parsers |
-| Config parser behavior | `go-gost/x/config/parsing/parser/parser.go` | CLI/env overrides; loads `gost.*` when empty |
-
-## CONVENTIONS
- Default config file is named `gost` (e.g. `gost.json`) and is discovered via viper search paths.
- Runtime config mutations should go through `config.OnUpdate(...)` so changes are applied under the global mutex.
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -109,23 +109,3 @@ func LoggerFromContext(ctx context.Context) logger.Logger {
 	v, _ := ctx.Value(keyLogger).(logger.Logger)
 	return v
 }
-
-// excludeNodesKey saves the list of node addresses to exclude during selection.
-// This is used for failover retry logic - when a node fails, it gets added to
-// the exclude list so the next Select() call will skip it.
-type excludeNodesKey struct{}
-
-var (
-	keyExcludeNodes = &excludeNodesKey{}
-)
-
-// ContextWithExcludeNodes returns a context with the list of node addresses to exclude.
-func ContextWithExcludeNodes(ctx context.Context, nodes []string) context.Context {
-	return context.WithValue(ctx, keyExcludeNodes, nodes)
-}
-
-// ExcludeNodesFromContext returns the list of node addresses to exclude from selection.
-func ExcludeNodesFromContext(ctx context.Context) []string {
-	v, _ := ctx.Value(keyExcludeNodes).([]string)
-	return v
-}
@@ -1,35 +0,0 @@
-# GO-GOST/X DIALERS KNOWLEDGE BASE
-
-## OVERVIEW
-Outbound dialers (client-side connection establishment) used by connectors/handlers.
-
-## STRUCTURE
-```
-go-gost/x/dialer/
-├── direct/   # Baseline dialer
-├── tcp/
-├── udp/
-├── tls/
-├── ws/
-├── quic/
-├── http2/
-├── http3/
-├── ssh/
-├── wg/       # WireGuard dialer
-└── ...
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Pick a dialer | `go-gost/x/dialer/` | One subdir per transport |
-| TCP baseline | `go-gost/x/dialer/tcp/dialer.go` | Reference implementation |
-
-## CONVENTIONS
- Dialer implementations typically live in `dialer.go` with a paired `metadata.go` (e.g. `go-gost/x/dialer/tcp/`).
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -1,32 +0,0 @@
-# GO-GOST/X HANDLERS KNOWLEDGE BASE
-
-## OVERVIEW
-Protocol handlers (server-side request handling) used by services defined in the GOST config.
-
-## STRUCTURE
-```
-go-gost/x/handler/
-├── http/     # handler.go + metadata.go (+ udp.go)
-├── socks/    # SOCKS variants
-├── tunnel/   # Tunnel forwarding
-├── relay/    # Relay forwarding
-├── redirect/ # TCP/UDP redirect handlers
-├── router/   # Routing/association entrypoints
-└── ...
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Find a protocol handler | `go-gost/x/handler/` | Subdir per protocol (`http`, `socks`, `tunnel`, ...) |
-| HTTP specifics | `go-gost/x/handler/http/handler.go` | Implements HTTP proxy behavior |
-| SOCKS specifics | `go-gost/x/handler/socks/` | v4/v5 implementations |
-
-## CONVENTIONS
- Handler implementations typically live in `handler.go` with a paired `metadata.go` (e.g. `go-gost/x/handler/http/`).
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -176,98 +176,51 @@ func (h *forwardHandler) Handle(ctx context.Context, conn net.Conn, opts ...hand
 		}
 	}

-	// Determine max retry attempts
-	maxRetries := h.md.maxRetries
-	if maxRetries <= 0 {
-		// Default: try all available nodes
-		if nl, ok := h.hop.(hop.NodeList); ok {
-			maxRetries = len(nl.Nodes())
-		}
-		if maxRetries <= 0 {
-			maxRetries = 1
+	target := &chain.Node{}
+	if h.hop != nil {
+		target = h.hop.Select(ctx,
+			hop.ProtocolSelectOption(proto),
+		)
+	}
+	if target == nil {
+		err := errors.New("node not available")
+		return err
+	}
+
+	addr := target.Addr
+	if opts := target.Options(); opts != nil {
+		switch opts.Network {
+		case "unix":
+			network = opts.Network
+		default:
+			if _, _, err := net.SplitHostPort(addr); err != nil {
+				addr += ":0"
+			}
 		}
 	}

-	var triedNodes []string
-	var lastErr error
-	var cc net.Conn
+	ro.Network = network
+	ro.Host = addr

-	h.options.Logger.Debugf("[handler.retry] starting retry loop: maxRetries=%d", maxRetries)
-
-	for attempt := 0; attempt < maxRetries; attempt++ {
-		// Select a target node, excluding previously tried nodes
-		selectCtx := ctxvalue.ContextWithExcludeNodes(ctx, triedNodes)
-		var target *chain.Node
-		if h.hop != nil {
-			target = h.hop.Select(selectCtx,
-				hop.ProtocolSelectOption(proto),
-			)
-		}
-		if target == nil {
-			h.options.Logger.Debugf("[handler.retry] attempt=%d target=nil, triedNodes=%v", attempt, triedNodes)
-			if lastErr != nil {
-				return lastErr
-			}
-			return errors.New("node not available")
-		}
-
-		h.options.Logger.Debugf("[handler.retry] attempt=%d selected node=%s addr=%s", attempt, target.Name, target.Addr)
-
-		// Track this node as tried
-		triedNodes = append(triedNodes, target.Addr)
-
-		addr := target.Addr
-		if opts := target.Options(); opts != nil {
-			switch opts.Network {
-			case "unix":
-				network = opts.Network
-			default:
-				if _, _, err := net.SplitHostPort(addr); err != nil {
-					addr += ":0"
-				}
-			}
-		}
-
-		ro.Network = network
-		ro.Host = addr
-
-		var buf bytes.Buffer
-		cc, err = h.options.Router.Dial(ctxvalue.ContextWithBuffer(ctx, &buf), network, addr)
-		ro.Route = buf.String()
-		if err != nil {
-			// Mark node as failed for future selections
-			if marker := target.Marker(); marker != nil {
-				marker.Mark()
-				h.options.Logger.Debugf("[handler.retry] attempt=%d dial failed, marked node=%s count=%d err=%v",
-					attempt, target.Addr, marker.Count(), err)
-			}
-			lastErr = err
-			// Try next node
-			continue
-		}
-
-		// Success - reset marker and proceed
+	var buf bytes.Buffer
+	cc, err := h.options.Router.Dial(ctxvalue.ContextWithBuffer(ctx, &buf), network, addr)
+	ro.Route = buf.String()
+	if err != nil {
+		// TODO: the router itself may be failed due to the failed node in the router,
+		// the dead marker may be a wrong operation.
 		if marker := target.Marker(); marker != nil {
-			marker.Reset()
+			marker.Mark()
 		}
-		defer cc.Close()
-
-		if err := xnet.Transport(conn, cc); err != nil {
-			if marker := target.Marker(); marker != nil {
-				marker.Mark()
-				h.options.Logger.Debugf("[handler.transport] transport failed, marked node=%s count=%d err=%v",
-					target.Addr, marker.Count(), err)
-			}
-			return err
-		}
-		return nil
+		return err
 	}
-
-	// All retries exhausted
-	if lastErr != nil {
-		return lastErr
+	if marker := target.Marker(); marker != nil {
+		marker.Reset()
 	}
-	return errors.New("all nodes failed")
+	defer cc.Close()
+
+	xnet.Transport(conn, cc)
+
+	return nil
 }

 func (h *forwardHandler) checkRateLimit(addr net.Addr) bool {
@@ -25,12 +25,6 @@ type metadata struct {
 	privateKey  crypto.PrivateKey
 	alpn        string
 	mitmBypass  bypass.Bypass
-
-	// maxRetries specifies the maximum number of failover retry attempts.
-	// When a target node fails, the handler will try the next available node.
-	// 0 means use the total number of available nodes (try all nodes once).
-	// Default: 0 (try all available nodes)
-	maxRetries int
 }

 func (h *forwardHandler) parseMetadata(md mdata.Metadata) (err error) {
@@ -62,8 +56,5 @@ func (h *forwardHandler) parseMetadata(md mdata.Metadata) (err error) {
 	h.md.alpn = mdutil.GetString(md, "mitm.alpn")
 	h.md.mitmBypass = registry.BypassRegistry().Get(mdutil.GetString(md, "mitm.bypass"))

-	// maxRetries: 0 means try all available nodes (default behavior)
-	h.md.maxRetries = mdutil.GetInt(md, "maxRetries", "retry.max")
-
 	return
 }
@@ -204,101 +204,68 @@ func (h *forwardHandler) Handle(ctx context.Context, conn net.Conn, opts ...hand
 		}
 	}

-	// Determine max retry attempts
-	maxRetries := h.md.maxRetries
-	if maxRetries <= 0 {
-		// Default: try all available nodes
-		if nl, ok := h.hop.(hop.NodeList); ok {
-			maxRetries = len(nl.Nodes())
+	var target *chain.Node
+	if host != "" {
+		target = &chain.Node{
+			Addr: host,
 		}
-		if maxRetries <= 0 {
-			maxRetries = 1
+	}
+	if h.hop != nil {
+		target = h.hop.Select(ctx,
+			hop.ProtocolSelectOption(proto),
+		)
+	}
+	if target == nil {
+		err := errors.New("node not available")
+		log.Error(err)
+		return err
+	}
+
+	if opts := target.Options(); opts != nil {
+		switch opts.Network {
+		case "unix":
+			network = opts.Network
+		default:
 		}
 	}

-	var triedNodes []string
-	var lastErr error
-	var cc net.Conn
+	ro.Network = network
+	ro.Host = target.Addr

-	for attempt := 0; attempt < maxRetries; attempt++ {
-		// Select a target node, excluding previously tried nodes
-		selectCtx := ctxvalue.ContextWithExcludeNodes(ctx, triedNodes)
-		var target *chain.Node
-		if host != "" {
-			target = chain.NewNode("", host)
-		}
-		if h.hop != nil {
-			target = h.hop.Select(selectCtx,
-				hop.ProtocolSelectOption(proto),
-			)
-		}
-		if target == nil {
-			if lastErr != nil {
-				return lastErr
-			}
-			err := errors.New("node not available")
-			log.Error(err)
-			return err
-		}
+	log = log.WithFields(map[string]any{
+		"node": target.Name,
+		"dst":  fmt.Sprintf("%s/%s", target.Addr, network),
+	})

-		// Track this node as tried
-		triedNodes = append(triedNodes, target.Addr)
+	log.Debugf("%s >> %s", conn.RemoteAddr(), target.Addr)

-		if opts := target.Options(); opts != nil {
-			switch opts.Network {
-			case "unix":
-				network = opts.Network
-			default:
-			}
-		}
-
-		ro.Network = network
-		ro.Host = target.Addr
-
-		targetLog := log.WithFields(map[string]any{
-			"node": target.Name,
-			"dst":  fmt.Sprintf("%s/%s", target.Addr, network),
-		})
-
-		targetLog.Debugf("%s >> %s", conn.RemoteAddr(), target.Addr)
-
-		var buf bytes.Buffer
-		cc, err = h.options.Router.Dial(ctxvalue.ContextWithBuffer(ctx, &buf), network, target.Addr)
-		ro.Route = buf.String()
-		if err != nil {
-			targetLog.Error(err)
-			// Mark node as failed for future selections
-			if marker := target.Marker(); marker != nil {
-				marker.Mark()
-			}
-			lastErr = err
-			// Try next node
-			continue
-		}
-
-		// Success - reset marker and proceed
+	var buf bytes.Buffer
+	cc, err := h.options.Router.Dial(ctxvalue.ContextWithBuffer(ctx, &buf), network, target.Addr)
+	ro.Route = buf.String()
+	if err != nil {
+		log.Error(err)
+		// TODO: the router itself may be failed due to the failed node in the router,
+		// the dead marker may be a wrong operation.
 		if marker := target.Marker(); marker != nil {
-			marker.Reset()
+			marker.Mark()
 		}
-		defer cc.Close()
-
-		cc = proxyproto.WrapClientConn(h.md.proxyProtocol, conn.RemoteAddr(), convertAddr(conn.LocalAddr()), cc)
-
-		t := time.Now()
-		targetLog.Infof("%s <-> %s", conn.RemoteAddr(), target.Addr)
-		xnet.Transport(conn, cc)
-		targetLog.WithFields(map[string]any{
-			"duration": time.Since(t),
-		}).Infof("%s >-< %s", conn.RemoteAddr(), target.Addr)
-
-		return nil
+		return err
+	}
+	defer cc.Close()
+	if marker := target.Marker(); marker != nil {
+		marker.Reset()
 	}

-	// All retries exhausted
-	if lastErr != nil {
-		return lastErr
-	}
-	return errors.New("all nodes failed")
+	cc = proxyproto.WrapClientConn(h.md.proxyProtocol, conn.RemoteAddr(), convertAddr(conn.LocalAddr()), cc)
+
+	t := time.Now()
+	log.Infof("%s <-> %s", conn.RemoteAddr(), target.Addr)
+	xnet.Transport(conn, cc)
+	log.WithFields(map[string]any{
+		"duration": time.Since(t),
+	}).Infof("%s >-< %s", conn.RemoteAddr(), target.Addr)
+
+	return nil
 }

 func (h *forwardHandler) checkRateLimit(addr net.Addr) bool {
@@ -26,12 +26,6 @@ type metadata struct {
 	privateKey  crypto.PrivateKey
 	alpn        string
 	mitmBypass  bypass.Bypass
-
-	// maxRetries specifies the maximum number of failover retry attempts.
-	// When a target node fails, the handler will try the next available node.
-	// 0 means use the total number of available nodes (try all nodes once).
-	// Default: 0 (try all available nodes)
-	maxRetries int
 }

 func (h *forwardHandler) parseMetadata(md mdata.Metadata) (err error) {
@@ -63,9 +57,5 @@ func (h *forwardHandler) parseMetadata(md mdata.Metadata) (err error) {
 	}
 	h.md.alpn = mdutil.GetString(md, "mitm.alpn")
 	h.md.mitmBypass = registry.BypassRegistry().Get(mdutil.GetString(md, "mitm.bypass"))
-
-	// maxRetries: 0 means try all available nodes (default behavior)
-	h.md.maxRetries = mdutil.GetInt(md, "maxRetries", "retry.max")
-
 	return
 }
@@ -18,7 +18,6 @@ import (
 	"github.com/go-gost/core/selector"
 	"github.com/go-gost/x/config"
 	node_parser "github.com/go-gost/x/config/parsing/node"
-	ctxvalue "github.com/go-gost/x/ctx"
 	"github.com/go-gost/x/internal/loader"
 )

@@ -142,28 +141,11 @@ func (p *chainHop) Select(ctx context.Context, opts ...hop.SelectOption) *chain.
 		return nil
 	}

-	// Get list of nodes to exclude (for failover retry)
-	excludeNodes := ctxvalue.ExcludeNodesFromContext(ctx)
-	excludeSet := make(map[string]bool)
-	for _, addr := range excludeNodes {
-		excludeSet[addr] = true
-	}
-
-	// Debug logging for failover analysis
-	log.Debugf("[hop.Select] excludeNodes=%v, totalNodes=%d", excludeNodes, len(p.Nodes()))
-
 	var nodes []*chain.Node
 	for _, node := range p.Nodes() {
 		if node == nil {
 			continue
 		}
-
-		// Skip nodes in the exclude list (failover retry)
-		if excludeSet[node.Addr] || excludeSet[node.Name] {
-			log.Debugf("node %s(%s) excluded for failover retry", node.Name, node.Addr)
-			continue
-		}
-
 		// node level bypass
 		if node.Options().Bypass != nil &&
 			node.Options().Bypass.Contains(ctx, options.Network, options.Addr, bypass.WithHostOpton(options.Host)) {
@@ -195,6 +177,9 @@ func (p *chainHop) Select(ctx context.Context, opts ...hop.SelectOption) *chain.
 	if len(nodes) == 0 {
 		return nil
 	}
+	if len(nodes) == 1 {
+		return nodes[0]
+	}

 	sort.Slice(nodes, func(i, j int) bool {
 		return nodes[i].Options().Priority > nodes[j].Options().Priority
@@ -204,25 +189,9 @@ func (p *chainHop) Select(ctx context.Context, opts ...hop.SelectOption) *chain.
 		return nodes[0]
 	}

-	// Use selector with FailFilter for proper failover.
-	// FailFilter will exclude recently-failed nodes, allowing traffic to
-	// be routed to healthy alternatives.
-	// Note: FailFilter has a safety guard (len <= 1 returns as-is) to ensure
-	// the last remaining node is never permanently blocked.
 	if s := p.options.selector; s != nil {
-		log.Debugf("[hop.Select] calling selector.Select with %d nodes", len(nodes))
-		if node := s.Select(ctx, nodes...); node != nil {
-			log.Debugf("[hop.Select] selected node=%s addr=%s", node.Name, node.Addr)
-			return node
-		}
-		// All nodes filtered out by FailFilter - all are marked as failed.
-		// Return nil to signal "no healthy nodes available" to the caller.
-		// The handler's retry loop will handle this appropriately.
-		log.Debugf("all %d nodes filtered out by FailFilter, no healthy nodes available", len(nodes))
-		return nil
+		return s.Select(ctx, nodes...)
 	}
-
-	// Fallback: return first node if no selector configured
 	return nodes[0]
 }

@@ -247,98 +247,64 @@ func (h *Sniffer) dial(ctx context.Context, conn net.Conn, req *http.Request, ho
 		}
 	}

-	// Determine max retry attempts
-	maxRetries := 1
-	if nl, ok := ho.Hop.(hop.NodeList); ok {
-		maxRetries = len(nl.Nodes())
+	node = &chain.Node{
+		Addr: host,
 	}
-	if maxRetries <= 0 {
-		maxRetries = 1
+	if ho.Hop != nil {
+		node = ho.Hop.Select(ctx,
+			hop.ClientIPSelectOption(net.ParseIP(ro.ClientIP)),
+			hop.ProtocolSelectOption(sniffing.ProtoHTTP),
+			hop.HostSelectOption(host),
+			hop.MethodSelectOption(req.Method),
+			hop.PathSelectOption(req.URL.Path),
+			hop.QuerySelectOption(req.URL.Query()),
+			hop.HeaderSelectOption(req.Header),
+		)
+	}
+	if node == nil {
+		ho.Log.Warnf("node for %s not found", host)
+		res.StatusCode = http.StatusBadGateway
+		ro.HTTP.StatusCode = res.StatusCode
+		res.Write(conn)
+		return nil, nil, errors.New("node not available")
 	}

-	var triedNodes []string
-	var lastErr error
+	ro.Host = node.Addr
+	ho.Log = ho.Log.WithFields(map[string]any{
+		"node": node.Name,
+		"dst":  node.Addr,
+	})
+	ho.Log.Debugf("find node for host %s -> %s(%s)", host, node.Name, node.Addr)

-	for attempt := 0; attempt < maxRetries; attempt++ {
-		// Select a node, excluding previously tried nodes
-		selectCtx := ctxvalue.ContextWithExcludeNodes(ctx, triedNodes)
-
-		node = chain.NewNode("", host)
-		if ho.Hop != nil {
-			node = ho.Hop.Select(selectCtx,
-				hop.ClientIPSelectOption(net.ParseIP(ro.ClientIP)),
-				hop.ProtocolSelectOption(sniffing.ProtoHTTP),
-				hop.HostSelectOption(host),
-				hop.MethodSelectOption(req.Method),
-				hop.PathSelectOption(req.URL.Path),
-				hop.QuerySelectOption(req.URL.Query()),
-				hop.HeaderSelectOption(req.Header),
-			)
-		}
-		if node == nil {
-			if lastErr != nil {
-				ho.Log.Warnf("node for %s not found after retries", host)
-				res.StatusCode = http.StatusBadGateway
-				ro.HTTP.StatusCode = res.StatusCode
-				res.Write(conn)
-				return nil, nil, lastErr
-			}
-			ho.Log.Warnf("node for %s not found", host)
-			res.StatusCode = http.StatusBadGateway
-			ro.HTTP.StatusCode = res.StatusCode
-			res.Write(conn)
-			return nil, nil, errors.New("node not available")
-		}
-
-		// Track this node as tried
-		triedNodes = append(triedNodes, node.Addr)
-
-		ro.Host = node.Addr
-		ho.Log = ho.Log.WithFields(map[string]any{
-			"node": node.Name,
-			"dst":  node.Addr,
-		})
-		ho.Log.Debugf("find node for host %s -> %s(%s)", host, node.Name, node.Addr)
-
-		cc, err = dial(ctx, "tcp", node.Addr)
-		if err != nil {
-			// Mark node as failed for future selections
-			if marker := node.Marker(); marker != nil {
-				marker.Mark()
-			}
-			ho.Log.Warnf("connect to node %s(%s) failed: %v, trying next node", node.Name, node.Addr, err)
-			lastErr = err
-			continue
-		}
-
-		// Success - reset marker
+	cc, err = dial(ctx, "tcp", node.Addr)
+	if err != nil {
+		// TODO: the router itself may be failed due to the failed node in the router,
+		// the dead marker may be a wrong operation.
 		if marker := node.Marker(); marker != nil {
-			marker.Reset()
+			marker.Mark()
 		}
-
-		if tlsSettings := node.Options().TLS; tlsSettings != nil {
-			cfg := &tls.Config{
-				ServerName:         tlsSettings.ServerName,
-				InsecureSkipVerify: !tlsSettings.Secure,
-			}
-			tls_util.SetTLSOptions(cfg, &config.TLSOptions{
-				MinVersion:   tlsSettings.Options.MinVersion,
-				MaxVersion:   tlsSettings.Options.MaxVersion,
-				CipherSuites: tlsSettings.Options.CipherSuites,
-				ALPN:         tlsSettings.Options.ALPN,
-			})
-			cc = tls.Client(cc, cfg)
-		}
-		return node, cc, nil
+		ho.Log.Warnf("connect to node %s(%s) failed: %v", node.Name, node.Addr, err)
+		res.Write(conn)
+		return
+	}
+	if marker := node.Marker(); marker != nil {
+		marker.Reset()
 	}

-	// All retries exhausted
-	ho.Log.Warnf("all nodes failed for host %s", host)
-	res.Write(conn)
-	if lastErr != nil {
-		return nil, nil, lastErr
+	if tlsSettings := node.Options().TLS; tlsSettings != nil {
+		cfg := &tls.Config{
+			ServerName:         tlsSettings.ServerName,
+			InsecureSkipVerify: !tlsSettings.Secure,
+		}
+		tls_util.SetTLSOptions(cfg, &config.TLSOptions{
+			MinVersion:   tlsSettings.Options.MinVersion,
+			MaxVersion:   tlsSettings.Options.MaxVersion,
+			CipherSuites: tlsSettings.Options.CipherSuites,
+			ALPN:         tlsSettings.Options.ALPN,
+		})
+		cc = tls.Client(cc, cfg)
 	}
-	return nil, nil, errors.New("all nodes failed")
+	return
 }

 func (h *Sniffer) serveH2(ctx context.Context, conn net.Conn, ho *HandleOptions) error {
@@ -881,105 +847,74 @@ func (h *Sniffer) dialTLS(ctx context.Context, host string, ho *HandleOptions) (
 		return
 	}

+	if host != "" {
+		node = &chain.Node{
+			Addr: host,
+		}
+	}
+
 	ro := ho.RecorderObject
-
-	// Determine max retry attempts
-	maxRetries := 1
-	if nl, ok := ho.Hop.(hop.NodeList); ok {
-		maxRetries = len(nl.Nodes())
+	if ho.Hop != nil {
+		node = ho.Hop.Select(ctx,
+			hop.ClientIPSelectOption(net.ParseIP(ro.ClientIP)),
+			hop.HostSelectOption(host),
+			hop.ProtocolSelectOption(sniffing.ProtoTLS),
+		)
 	}
-	if maxRetries <= 0 {
-		maxRetries = 1
+	if node == nil {
+		err = errors.New("node not available")
+		return
 	}

-	var triedNodes []string
-	var lastErr error
-
-	for attempt := 0; attempt < maxRetries; attempt++ {
-		// Select a node, excluding previously tried nodes
-		selectCtx := ctxvalue.ContextWithExcludeNodes(ctx, triedNodes)
-
-		node = nil
-		if host != "" {
-			node = chain.NewNode("", host)
-		}
-		if ho.Hop != nil {
-			node = ho.Hop.Select(selectCtx,
-				hop.ClientIPSelectOption(net.ParseIP(ro.ClientIP)),
-				hop.HostSelectOption(host),
-				hop.ProtocolSelectOption(sniffing.ProtoTLS),
-			)
-		}
-		if node == nil {
-			if lastErr != nil {
-				ho.Log.Warnf("node for %s not found after retries", host)
-				return nil, nil, lastErr
-			}
-			ho.Log.Warnf("node for %s not found", host)
-			return nil, nil, errors.New("node not available")
-		}
-
-		// Track this node as tried
-		triedNodes = append(triedNodes, node.Addr)
-
-		addr := node.Addr
-		if opts := node.Options(); opts != nil {
-			switch opts.Network {
-			case "unix":
-				ro.Network = opts.Network
-			default:
-				if _, _, err := net.SplitHostPort(addr); err != nil {
-					addr += ":443"
-				}
+	addr := node.Addr
+	if opts := node.Options(); opts != nil {
+		switch opts.Network {
+		case "unix":
+			ro.Network = opts.Network
+		default:
+			if _, _, err := net.SplitHostPort(addr); err != nil {
+				addr += ":443"
 			}
 		}
-		ro.Host = addr
+	}
+	ro.Host = addr

-		ho.Log = ho.Log.WithFields(map[string]any{
-			"host": host,
-			"node": node.Name,
-			"dst":  fmt.Sprintf("%s/%s", addr, ro.Network),
-		})
-		ho.Log.Debugf("find node for host %s -> %s(%s)", host, node.Name, addr)
+	ho.Log = ho.Log.WithFields(map[string]any{
+		"host": host,
+		"node": node.Name,
+		"dst":  fmt.Sprintf("%s/%s", addr, ro.Network),
+	})
+	ho.Log.Debugf("find node for host %s -> %s(%s)", host, node.Name, addr)

-		cc, err = dial(ctx, ro.Network, addr)
-		if err != nil {
-			// Mark node as failed for future selections
-			if marker := node.Marker(); marker != nil {
-				marker.Mark()
-			}
-			ho.Log.Warnf("connect to node %s(%s) failed: %v, trying next node", node.Name, node.Addr, err)
-			lastErr = err
-			continue
-		}
-
-		// Success - reset marker
+	cc, err = dial(ctx, ro.Network, addr)
+	if err != nil {
+		// TODO: the router itself may be failed due to the failed node in the router,
+		// the dead marker may be a wrong operation.
 		if marker := node.Marker(); marker != nil {
-			marker.Reset()
+			marker.Mark()
 		}
-
-		if tlsSettings := node.Options().TLS; tlsSettings != nil {
-			cfg := &tls.Config{
-				ServerName:         tlsSettings.ServerName,
-				InsecureSkipVerify: !tlsSettings.Secure,
-			}
-			tls_util.SetTLSOptions(cfg, &config.TLSOptions{
-				MinVersion:   tlsSettings.Options.MinVersion,
-				MaxVersion:   tlsSettings.Options.MaxVersion,
-				CipherSuites: tlsSettings.Options.CipherSuites,
-				ALPN:         tlsSettings.Options.ALPN,
-			})
-			cc = tls.Client(cc, cfg)
-		}
-		return node, cc, nil
+		ho.Log.Warnf("connect to node %s(%s) failed: %v", node.Name, node.Addr, err)
+		return
 	}

-	// All retries exhausted
-	ho.Log.Warnf("all nodes failed for host %s", host)
-	if lastErr != nil {
-		return nil, nil, lastErr
+	if marker := node.Marker(); marker != nil {
+		marker.Reset()
 	}
-	return nil, nil, errors.New("all nodes failed")
+
+	if tlsSettings := node.Options().TLS; tlsSettings != nil {
+		cfg := &tls.Config{
+			ServerName:         tlsSettings.ServerName,
+			InsecureSkipVerify: !tlsSettings.Secure,
+		}
+		tls_util.SetTLSOptions(cfg, &config.TLSOptions{
+			MinVersion:   tlsSettings.Options.MinVersion,
+			MaxVersion:   tlsSettings.Options.MaxVersion,
+			CipherSuites: tlsSettings.Options.CipherSuites,
+			ALPN:         tlsSettings.Options.ALPN,
+		})
+		cc = tls.Client(cc, cfg)
+	}
+	return
 }

 func (h *Sniffer) terminateTLS(ctx context.Context, conn, cc net.Conn, clientHello *dissector.ClientHelloInfo, ho *HandleOptions) error {
@@ -1,35 +0,0 @@
-# GO-GOST/X LISTENERS KNOWLEDGE BASE
-
-## OVERVIEW
-Inbound listeners (transport-level accept loops) used by services defined in the GOST config.
-
-## STRUCTURE
-```
-go-gost/x/listener/
-├── tcp/      # listener.go + metadata.go
-├── udp/
-├── tls/
-├── ws/
-├── quic/
-├── redirect/ # tcp/ + udp/
-├── tun/      # TUN device listener
-├── tap/      # TAP device listener
-└── ...
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Listener registry | `go-gost/x/listener/` | One subdir per transport |
-| TCP baseline | `go-gost/x/listener/tcp/listener.go` | Reference for other transports |
-| Redirect listeners | `go-gost/x/listener/redirect/` | Per-protocol accept + redirect |
-| TUN/TAP | `go-gost/x/listener/tun/`, `go-gost/x/listener/tap/` | Virtual interface listeners |
-
-## CONVENTIONS
- Listener implementations typically live in `listener.go` with a paired `metadata.go` (e.g. `go-gost/x/listener/tcp/`).
-
-## COMMANDS
-```bash
-cd go-gost/x
-go test ./...
-```
@@ -1,29 +0,0 @@
-# GO-GOST REGISTRY KNOWLEDGE BASE
-
-**Generated:** Wed Feb 04 2026
-
-## OVERVIEW
-Central registration point for all pluggable GOST components (handlers, listeners, dialers, etc.).
-Allows the configuration system to resolve string types (e.g., "socks5") to actual Go implementations.
-
-## STRUCTURE
-One file per component type, exporting a standard Registry interface.
-```
-go-gost/x/registry/
-├── handler.go    # RegisterHandler(name, newFunc)
-├── listener.go   # RegisterListener(name, newFunc)
-├── dialer.go     # RegisterDialer(name, newFunc)
-└── ...           # Same pattern for auth, bypass, admission
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| Register a new component | `go-gost/x/registry/{type}.go` | Use `Register{Type}(name, creator)` |
-| Component lookup | `go-gost/x/registry/{type}.go` | `Get{Type}(name)` returns the creator function |
-| Default registrations | `go-gost/x/` (init functions) | Most components register themselves in their package `init()` |
-
-## CONVENTIONS
- Thread-safe maps used for storage.
- Names are case-sensitive (usually lowercase).
- Components must be registered *before* the configuration parser runs (usually done via `import _ "..."` in `main.go`).
@@ -2,13 +2,11 @@ package selector

 import (
 	"context"
-	"fmt"
 	"time"

-	"github.com/go-gost/core/chain"
 	"github.com/go-gost/core/metadata"
-	"github.com/go-gost/core/selector"
 	mdutil "github.com/go-gost/x/metadata/util"
+	"github.com/go-gost/core/selector"
 )

 type failFilter[T any] struct {
@@ -26,8 +24,6 @@ func FailFilter[T any](maxFails int, timeout time.Duration) selector.Filter[T] {
 }

 // Filter filters dead objects.
-// For single-node case, skip filtering to ensure availability (matches upstream).
-// For multi-node case, filter out failed nodes to enable failover.
 func (f *failFilter[T]) Filter(ctx context.Context, vs ...T) []T {
 	if len(vs) <= 1 {
 		return vs
@@ -55,21 +51,8 @@ func (f *failFilter[T]) Filter(ctx context.Context, vs ...T) []T {

 		if mi, _ := any(v).(selector.Markable); mi != nil {
 			if marker := mi.Marker(); marker != nil {
-				count := marker.Count()
-				timeSince := time.Since(marker.Time())
-				passed := count < int64(maxFails) || timeSince >= failTimeout
-
-				// Debug logging for failover analysis
-				nodeName := "unknown"
-				nodeAddr := "unknown"
-				if node, ok := any(v).(*chain.Node); ok {
-					nodeName = node.Name
-					nodeAddr = node.Addr
-				}
-				fmt.Printf("[FailFilter] node=%s addr=%s count=%d maxFails=%d timeSince=%v failTimeout=%v passed=%v\n",
-					nodeName, nodeAddr, count, maxFails, timeSince, failTimeout, passed)
-
-				if passed {
+				if marker.Count() < int64(maxFails) ||
+					time.Since(marker.Time()) >= failTimeout {
 					l = append(l, v)
 				}
 				continue
@@ -1,206 +0,0 @@
-package service
-
-import (
-	"context"
-	"fmt"
-	"sync"
-	"time"
-)
-
-// GlobalTrafficManager 全局流量管理器（所有服务共享）
-type GlobalTrafficManager struct {
-	mu            sync.RWMutex
-	serviceTraffic map[string]*ServiceTraffic // key: 服务名, value: 流量数据
-	ctx           context.Context
-	cancel        context.CancelFunc
-	reportTicker  *time.Ticker
-}
-
-// ServiceTraffic 单个服务的流量累积
-type ServiceTraffic struct {
-	mu          sync.Mutex
-	ServiceName string
-	UpBytes     int64 // 上行流量（累积）
-	DownBytes   int64 // 下行流量（累积）
-}
-
-var (
-	globalManager     *GlobalTrafficManager
-	globalManagerOnce sync.Once
-)
-
-// GetGlobalTrafficManager 获取全局流量管理器单例
-func GetGlobalTrafficManager() *GlobalTrafficManager {
-	globalManagerOnce.Do(func() {
-		ctx, cancel := context.WithCancel(context.Background())
-		globalManager = &GlobalTrafficManager{
-			serviceTraffic: make(map[string]*ServiceTraffic),
-			ctx:            ctx,
-			cancel:         cancel,
-			reportTicker:   time.NewTicker(5 * time.Second),
-		}
-		// 启动定时上报协程
-		go globalManager.startReporting()
-	})
-	return globalManager
-}
-
-// AddTraffic 添加流量到指定服务（由各服务调用）
-func (m *GlobalTrafficManager) AddTraffic(serviceName string, upBytes, downBytes int64) {
-	if upBytes == 0 && downBytes == 0 {
-		return
-	}
-
-	m.mu.Lock()
-	defer m.mu.Unlock()
-
-	// 获取或创建服务流量记录
-	traffic, exists := m.serviceTraffic[serviceName]
-	if !exists {
-		traffic = &ServiceTraffic{
-			ServiceName: serviceName,
-		}
-		m.serviceTraffic[serviceName] = traffic
-	}
-
-	// 累加流量
-	traffic.mu.Lock()
-	traffic.UpBytes += upBytes
-	traffic.DownBytes += downBytes
-	traffic.mu.Unlock()
-}
-
-// startReporting 启动定时上报协程（每5秒执行一次）
-func (m *GlobalTrafficManager) startReporting() {
-
-	for {
-		select {
-		case <-m.reportTicker.C:
-			m.collectAndReport()
-
-		case <-m.ctx.Done():
-			fmt.Printf("⏹️ 全局流量上报器已停止\n")
-			return
-		}
-	}
-}
-
-// collectAndReport 收集所有服务流量并合并上报
-func (m *GlobalTrafficManager) collectAndReport() {
-	m.mu.Lock()
-	
-	// 如果没有流量，直接返回
-	if len(m.serviceTraffic) == 0 {
-		m.mu.Unlock()
-		return
-	}
-
-	// 复制当前所有流量数据（避免长时间持锁）
-	trafficSnapshot := make(map[string]*ServiceTraffic)
-	reportData := make(map[string]struct {
-		up   int64
-		down int64
-	})
-
-	for name, traffic := range m.serviceTraffic {
-		traffic.mu.Lock()
-		if traffic.UpBytes > 0 || traffic.DownBytes > 0 {
-			trafficSnapshot[name] = traffic
-			reportData[name] = struct {
-				up   int64
-				down int64
-			}{
-				up:   traffic.UpBytes,
-				down: traffic.DownBytes,
-			}
-		}
-		traffic.mu.Unlock()
-	}
-	m.mu.Unlock()
-
-	// 如果没有需要上报的流量，返回
-	if len(reportData) == 0 {
-		return
-	}
-
-	// 构建上报数据数组（保持每个服务独立）
-	reportItems := make([]TrafficReportItem, 0, len(reportData))
-	var totalUp, totalDown int64
-	
-	for serviceName, data := range reportData {
-		reportItems = append(reportItems, TrafficReportItem{
-			N: serviceName, // 保持服务名不变
-			U: data.up,
-			D: data.down,
-		})
-		totalUp += data.up
-		totalDown += data.down
-	}
-
-	// 批量发送上报请求（一次HTTP请求包含所有服务）
-	success, err := sendBatchTrafficReport(m.ctx, reportItems)
-	if err != nil {
-		fmt.Printf("❌ 全局流量上报失败: %v (总流量: ↑%d ↓%d, %d个服务)\n", err, totalUp, totalDown, len(reportItems))
-		return
-	}
-
-	if !success {
-		fmt.Printf("⚠️ 全局流量上报未成功 (总流量: ↑%d ↓%d, %d个服务)\n", totalUp, totalDown, len(reportItems))
-		return
-	}
-
-	// 上报成功，清空已上报的流量
-	m.clearReportedTraffic(reportData)
-}
-
-// clearReportedTraffic 清空已成功上报的流量
-func (m *GlobalTrafficManager) clearReportedTraffic(reportedData map[string]struct {
-	up   int64
-	down int64
-}) {
-	m.mu.Lock()
-	defer m.mu.Unlock()
-
-	for serviceName, reported := range reportedData {
-		if traffic, exists := m.serviceTraffic[serviceName]; exists {
-			traffic.mu.Lock()
-			// 减去已上报的流量
-			traffic.UpBytes -= reported.up
-			traffic.DownBytes -= reported.down
-
-			// 如果流量归零，从map中删除该服务记录（避免内存泄漏）
-			if traffic.UpBytes <= 0 && traffic.DownBytes <= 0 {
-				traffic.mu.Unlock()
-				delete(m.serviceTraffic, serviceName)
-			} else {
-				traffic.mu.Unlock()
-			}
-		}
-	}
-}
-
-// Stop 停止全局流量管理器
-func (m *GlobalTrafficManager) Stop() {
-	if m.reportTicker != nil {
-		m.reportTicker.Stop()
-	}
-	if m.cancel != nil {
-		m.cancel()
-	}
-	fmt.Printf("🛑 全局流量管理器已停止\n")
-}
-
-// GetServiceTraffic 获取指定服务的当前流量（用于调试）
-func (m *GlobalTrafficManager) GetServiceTraffic(serviceName string) (upBytes, downBytes int64) {
-	m.mu.RLock()
-	defer m.mu.RUnlock()
-
-	if traffic, exists := m.serviceTraffic[serviceName]; exists {
-		traffic.mu.Lock()
-		upBytes = traffic.UpBytes
-		downBytes = traffic.DownBytes
-		traffic.mu.Unlock()
-	}
-	return
-}
-
@@ -403,15 +403,19 @@ func (s *defaultService) observeStats(ctx context.Context) {
 						TotalErrs:    st.Get(stats.KindTotalErrs),
 					},
 				}
-				
-				// 将流量累积到全局管理器，而不是立即上报
 				if outputBytes > 0 || inputBytes > 0 {
-					globalManager := GetGlobalTrafficManager()
-					globalManager.AddTraffic(s.name, int64(outputBytes), int64(inputBytes))
-					
-					// 立即重置流量计数（因为已经记录到全局管理器中）
-					if xstats, ok := st.(*xstats.Stats); ok {
-						xstats.ResetTraffic(st.Get(stats.KindInputBytes)-inputBytes, st.Get(stats.KindOutputBytes)-outputBytes)
+					reportItems := TrafficReportItem{
+						N: s.name,
+						U: int64(outputBytes),
+						D: int64(inputBytes),
+					}
+					success, err := sendTrafficReport(ctx, reportItems)
+					if err != nil {
+						fmt.Printf("发送流量报告失败: %v", err)
+					} else if success {
+						if xstats, ok := st.(*xstats.Stats); ok {
+							xstats.ResetTraffic(st.Get(stats.KindInputBytes)-inputBytes, st.Get(stats.KindOutputBytes)-outputBytes)
+						}
 					}
 				}

@@ -41,8 +41,8 @@ func SetHTTPReportURL(addr string, secret string) {
 	}
 }

-// sendBatchTrafficReport 批量发送多个服务的流量报告到HTTP接口
-func sendBatchTrafficReport(ctx context.Context, reportItems []TrafficReportItem) (bool, error) {
+// sendTrafficReport 发送流量报告到HTTP接口
+func sendTrafficReport(ctx context.Context, reportItems TrafficReportItem) (bool, error) {
 	jsonData, err := json.Marshal(reportItems)
 	if err != nil {
 		return false, fmt.Errorf("序列化报告数据失败: %v", err)
@@ -112,7 +112,6 @@ func sendBatchTrafficReport(ctx context.Context, reportItems []TrafficReportItem
 	}
 }

-
 // sendConfigReport 发送配置报告到HTTP接口
 func sendConfigReport(ctx context.Context) (bool, error) {
 	if configReportURL == "" {
@@ -2,17 +2,11 @@ package socket

 import (
 	"os"
-	"sync"

 	"github.com/go-gost/x/config"
 )

-// configMutex 保护配置文件的并发写入
-var configMutex sync.Mutex
-
 func saveConfig() {
-	configMutex.Lock()
-	defer configMutex.Unlock()

 	file := "gost.json"

@@ -466,13 +466,7 @@ func (w *WebSocketReporter) handleReceivedMessage(messageType int, message []byt
 			}

 			if cmdMsg.Type != "call" {
-				// TcpPing 诊断命令异步执行，避免阻塞其他命令
-				// 其他状态变更命令保持同步，确保顺序执行
-				if cmdMsg.Type == "TcpPing" {
-					go w.routeCommand(cmdMsg)
-				} else {
-					w.routeCommand(cmdMsg)
-				}
+				w.routeCommand(cmdMsg)
 			}
 		} else {
 			// 处理普通消息
@@ -483,13 +477,7 @@ func (w *WebSocketReporter) handleReceivedMessage(messageType int, message []byt
 				return
 			}
 			if cmdMsg.Type != "call" {
-				// TcpPing 诊断命令异步执行，避免阻塞其他命令
-				// 其他状态变更命令保持同步，确保顺序执行
-				if cmdMsg.Type == "TcpPing" {
-					go w.routeCommand(cmdMsg)
-				} else {
-					w.routeCommand(cmdMsg)
-				}
+				w.routeCommand(cmdMsg)
 			}
 		}

@@ -509,7 +497,6 @@ func (w *WebSocketReporter) routeCommand(cmd CommandMessage) {
 	fmt.Println("🔔 收到命令: ", string(jsonBytes))
 	var err error
 	var response CommandResponse
-	var needSaveConfig bool // 标记是否需要保存配置（只有状态变更命令才需要）

 	// 传递 requestId
 	response.RequestId = cmd.RequestId
@@ -519,81 +506,65 @@ func (w *WebSocketReporter) routeCommand(cmd CommandMessage) {
 	case "AddService":
 		err = w.handleAddService(cmd.Data)
 		response.Type = "AddServiceResponse"
-		needSaveConfig = true
 	case "UpdateService":
 		err = w.handleUpdateService(cmd.Data)
 		response.Type = "UpdateServiceResponse"
-		needSaveConfig = true
 	case "DeleteService":
 		err = w.handleDeleteService(cmd.Data)
 		response.Type = "DeleteServiceResponse"
-		needSaveConfig = true
 	case "PauseService":
 		err = w.handlePauseService(cmd.Data)
 		response.Type = "PauseServiceResponse"
-		needSaveConfig = true
 	case "ResumeService":
 		err = w.handleResumeService(cmd.Data)
 		response.Type = "ResumeServiceResponse"
-		needSaveConfig = true

 	// Chain 相关命令
 	case "AddChains":
 		err = w.handleAddChain(cmd.Data)
 		response.Type = "AddChainsResponse"
-		needSaveConfig = true
 	case "UpdateChains":
 		err = w.handleUpdateChain(cmd.Data)
 		response.Type = "UpdateChainsResponse"
-		needSaveConfig = true
 	case "DeleteChains":
 		err = w.handleDeleteChain(cmd.Data)
 		response.Type = "DeleteChainsResponse"
-		needSaveConfig = true

 	// Limiter 相关命令
 	case "AddLimiters":
 		err = w.handleAddLimiter(cmd.Data)
 		response.Type = "AddLimitersResponse"
-		needSaveConfig = true
 	case "UpdateLimiters":
 		err = w.handleUpdateLimiter(cmd.Data)
 		response.Type = "UpdateLimitersResponse"
-		needSaveConfig = true
 	case "DeleteLimiters":
 		err = w.handleDeleteLimiter(cmd.Data)
 		response.Type = "DeleteLimitersResponse"
-		needSaveConfig = true

-	// TCP Ping 诊断命令（只读，不需要保存配置）
+	// TCP Ping 诊断命令
 	case "TcpPing":
 		var tcpPingResult TcpPingResponse
 		tcpPingResult, err = w.handleTcpPing(cmd.Data)
 		response.Type = "TcpPingResponse"
 		response.Data = tcpPingResult
-		// needSaveConfig = false (默认值)

 	// Protocol blocking switches
 	case "SetProtocol":
 		err = w.handleSetProtocol(cmd.Data)
 		response.Type = "SetProtocolResponse"
-		needSaveConfig = true

 	default:
 		err = fmt.Errorf("未知命令类型: %s", cmd.Type)
 		response.Type = "UnknownCommandResponse"
 	}

-	// 只有状态变更命令才保存配置
-	if needSaveConfig {
-		saveConfig()
-	}
-
 	// 发送响应
 	if err != nil {
+		saveConfig()
 		response.Success = false
 		response.Message = err.Error()
 	} else {
+		saveConfig()
 		response.Success = true
 		response.Message = "OK"
 	}
@@ -0,0 +1,306 @@
+-- phpMyAdmin SQL Dump
+-- version 5.2.0
+-- https://www.phpmyadmin.net/
+--
+-- 主机： localhost
+-- 生成日期： 2025-08-14 21:52:52
+-- 服务器版本： 5.7.40-log
+-- PHP 版本： 7.4.33
+
+SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
+START TRANSACTION;
+SET time_zone = "+00:00";
+
+
+/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
+/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
+/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
+/*!40101 SET NAMES utf8mb4 */;
+
+--
+-- 数据库： `gost`
+--
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `forward`
+--
+
+CREATE TABLE `forward` (
+  `id` int(10) NOT NULL,
+  `user_id` int(10) NOT NULL,
+  `user_name` varchar(100) NOT NULL,
+  `name` varchar(100) NOT NULL,
+  `tunnel_id` int(10) NOT NULL,
+  `in_port` int(10) NOT NULL,
+  `out_port` int(10) DEFAULT NULL,
+  `remote_addr` longtext NOT NULL,
+  `strategy` varchar(100) NOT NULL DEFAULT 'fifo',
+  `interface_name` varchar(200) DEFAULT NULL,
+  `in_flow` bigint(20) NOT NULL DEFAULT '0',
+  `out_flow` bigint(20) NOT NULL DEFAULT '0',
+  `created_time` bigint(20) NOT NULL,
+  `updated_time` bigint(20) NOT NULL,
+  `status` int(10) NOT NULL,
+  `inx` int(10) NOT NULL DEFAULT '0'
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `node`
+--
+
+CREATE TABLE `node` (
+  `id` int(10) NOT NULL,
+  `name` varchar(100) NOT NULL,
+  `secret` varchar(100) NOT NULL,
+  `ip` longtext,
+  `server_ip` varchar(100) NOT NULL,
+  `port_sta` int(10) NOT NULL,
+  `port_end` int(10) NOT NULL,
+  `version` varchar(100) DEFAULT NULL,
+  `http` int(10) NOT NULL DEFAULT '0',
+  `tls` int(10) NOT NULL DEFAULT '0',
+  `socks` int(10) NOT NULL DEFAULT '0',
+  `created_time` bigint(20) NOT NULL,
+  `updated_time` bigint(20) DEFAULT NULL,
+  `status` int(10) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `speed_limit`
+--
+
+CREATE TABLE `speed_limit` (
+  `id` int(10) NOT NULL,
+  `name` varchar(100) NOT NULL,
+  `speed` int(10) NOT NULL,
+  `tunnel_id` int(10) NOT NULL,
+  `tunnel_name` varchar(100) NOT NULL,
+  `created_time` bigint(20) NOT NULL,
+  `updated_time` bigint(20) DEFAULT NULL,
+  `status` int(10) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `statistics_flow`
+--
+
+CREATE TABLE `statistics_flow` (
+  `id` int(10) NOT NULL,
+  `user_id` int(10) NOT NULL,
+  `flow` bigint(20) NOT NULL,
+  `total_flow` bigint(20) NOT NULL,
+  `time` varchar(100) NOT NULL,
+  `created_time` bigint(20) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `tunnel`
+--
+
+CREATE TABLE `tunnel` (
+  `id` int(10) NOT NULL,
+  `name` varchar(100) NOT NULL,
+  `traffic_ratio` decimal(10,1) NOT NULL DEFAULT '1.0',
+  `in_node_id` int(10) NOT NULL,
+  `in_ip` varchar(100) NOT NULL,
+  `out_node_id` int(10) NOT NULL,
+  `out_ip` varchar(100) NOT NULL,
+  `type` int(10) NOT NULL,
+  `protocol` varchar(10) NOT NULL DEFAULT 'tls',
+  `flow` int(10) NOT NULL,
+  `tcp_listen_addr` varchar(100) NOT NULL DEFAULT '[::]',
+  `udp_listen_addr` varchar(100) NOT NULL DEFAULT '[::]',
+  `interface_name` varchar(200) DEFAULT NULL,
+  `created_time` bigint(20) NOT NULL,
+  `updated_time` bigint(20) NOT NULL,
+  `status` int(10) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `user`
+--
+
+CREATE TABLE `user` (
+  `id` int(10) NOT NULL,
+  `user` varchar(100) NOT NULL,
+  `pwd` varchar(100) NOT NULL,
+  `role_id` int(10) NOT NULL,
+  `exp_time` bigint(20) NOT NULL,
+  `flow` bigint(20) NOT NULL,
+  `in_flow` bigint(20) NOT NULL DEFAULT '0',
+  `out_flow` bigint(20) NOT NULL DEFAULT '0',
+  `flow_reset_time` bigint(20) NOT NULL,
+  `num` int(10) NOT NULL,
+  `created_time` bigint(20) NOT NULL,
+  `updated_time` bigint(20) DEFAULT NULL,
+  `status` int(10) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+--
+-- 转存表中的数据 `user`
+--
+
+INSERT INTO `user` (`id`, `user`, `pwd`, `role_id`, `exp_time`, `flow`, `in_flow`, `out_flow`, `flow_reset_time`, `num`, `created_time`, `updated_time`, `status`) VALUES
+(1, 'admin_user', '3c85cdebade1c51cf64ca9f3c09d182d', 0, 2727251700000, 99999, 0, 0, 1, 99999, 1748914865000, 1754011744252, 1);
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `user_tunnel`
+--
+
+CREATE TABLE `user_tunnel` (
+  `id` int(10) NOT NULL,
+  `user_id` int(10) NOT NULL,
+  `tunnel_id` int(10) NOT NULL,
+  `speed_id` int(10) DEFAULT NULL,
+  `num` int(10) NOT NULL,
+  `flow` bigint(20) NOT NULL,
+  `in_flow` bigint(20) NOT NULL DEFAULT '0',
+  `out_flow` bigint(20) NOT NULL DEFAULT '0',
+  `flow_reset_time` bigint(20) NOT NULL,
+  `exp_time` bigint(20) NOT NULL,
+  `status` int(10) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- --------------------------------------------------------
+
+--
+-- 表的结构 `vite_config`
+--
+
+CREATE TABLE `vite_config` (
+  `id` int(10) NOT NULL,
+  `name` varchar(200) NOT NULL,
+  `value` varchar(200) NOT NULL,
+  `time` bigint(20) NOT NULL
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+--
+-- 转存表中的数据 `vite_config`
+--
+
+INSERT INTO `vite_config` (`id`, `name`, `value`, `time`) VALUES
+(1, 'app_name', 'flux', 1755147963000);
+
+--
+-- 转储表的索引
+--
+
+--
+-- 表的索引 `forward`
+--
+ALTER TABLE `forward`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `node`
+--
+ALTER TABLE `node`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `speed_limit`
+--
+ALTER TABLE `speed_limit`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `statistics_flow`
+--
+ALTER TABLE `statistics_flow`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `tunnel`
+--
+ALTER TABLE `tunnel`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `user`
+--
+ALTER TABLE `user`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `user_tunnel`
+--
+ALTER TABLE `user_tunnel`
+  ADD PRIMARY KEY (`id`);
+
+--
+-- 表的索引 `vite_config`
+--
+ALTER TABLE `vite_config`
+  ADD PRIMARY KEY (`id`),
+  ADD UNIQUE KEY `name` (`name`);
+
+--
+-- 在导出的表使用AUTO_INCREMENT
+--
+
+--
+-- 使用表AUTO_INCREMENT `forward`
+--
+ALTER TABLE `forward`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `node`
+--
+ALTER TABLE `node`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `speed_limit`
+--
+ALTER TABLE `speed_limit`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `statistics_flow`
+--
+ALTER TABLE `statistics_flow`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `tunnel`
+--
+ALTER TABLE `tunnel`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `user`
+--
+ALTER TABLE `user`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `user_tunnel`
+--
+ALTER TABLE `user_tunnel`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+
+--
+-- 使用表AUTO_INCREMENT `vite_config`
+--
+ALTER TABLE `vite_config`
+  MODIFY `id` int(10) NOT NULL AUTO_INCREMENT, AUTO_INCREMENT=1;
+COMMIT;
+
+/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
+/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
+/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
@@ -1,108 +1,12 @@
 #!/bin/bash
-
-# GitHub repo used for release downloads
-REPO="Sagit-chu/flux-panel"
-
-# 获取系统架构
-get_architecture() {
-    ARCH=$(uname -m)
-    case $ARCH in
-        x86_64)
-            echo "amd64"
-            ;;
-        aarch64|arm64)
-            echo "arm64"
-            ;;
-        *)
-            echo "amd64"  # 默认使用 amd64
-            ;;
-    esac
-}
-
-# 安装目录
-INSTALL_DIR="/etc/flux_agent"
-
-# 识别国家（用于镜像加速）
+# 下载地址
+DOWNLOAD_URL="https://github.com/bqlpfy/flux-panel/releases/download/1.4.3/gost"
+INSTALL_DIR="/etc/gost"
 COUNTRY=$(curl -s https://ipinfo.io/country)
-
-maybe_proxy_url() {
-  local url="$1"
-  if [ "$COUNTRY" = "CN" ]; then
-    echo "https://ghfast.top/${url}"
-  else
-    echo "$url"
-  fi
-}
-
-resolve_latest_release_tag() {
-  local effective_url tag api_tag latest_url api_url
-
-  latest_url="https://github.com/${REPO}/releases/latest"
-  api_url="https://api.github.com/repos/${REPO}/releases/latest"
-
-  # 方式1：跟随重定向，取最终 URL 的最后一段作为 tag
-  effective_url=$(curl -fsSL -o /dev/null -w '%{url_effective}' -L "$latest_url" 2>/dev/null || true)
-  tag="${effective_url##*/}"
-  if [[ -n "$tag" && "$tag" != "latest" ]]; then
-    echo "$tag"
-    return 0
-  fi
-
-  # CN 环境下可尝试通过镜像访问（不影响非 CN）
-  if [ "$COUNTRY" = "CN" ]; then
-    effective_url=$(curl -fsSL -o /dev/null -w '%{url_effective}' -L "$(maybe_proxy_url "$latest_url")" 2>/dev/null || true)
-    tag="${effective_url##*/}"
-    if [[ -n "$tag" && "$tag" != "latest" ]]; then
-      echo "$tag"
-      return 0
-    fi
-  fi
-
-  # 方式2：GitHub API（无需 jq）
-  api_tag=$(curl -fsSL "$api_url" 2>/dev/null | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/' || true)
-  if [[ -n "$api_tag" ]]; then
-    echo "$api_tag"
-    return 0
-  fi
-
-  if [ "$COUNTRY" = "CN" ]; then
-    api_tag=$(curl -fsSL "$(maybe_proxy_url "$api_url")" 2>/dev/null | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/' || true)
-    if [[ -n "$api_tag" ]]; then
-      echo "$api_tag"
-      return 0
-    fi
-  fi
-
-  return 1
-}
-
-resolve_version() {
-  if [[ -n "${VERSION:-}" ]]; then
-    echo "$VERSION"
-    return 0
-  fi
-  if [[ -n "${FLUX_VERSION:-}" ]]; then
-    echo "$FLUX_VERSION"
-    return 0
-  fi
-
-  if resolve_latest_release_tag; then
-    return 0
-  fi
-
-  echo "❌ 无法获取最新版本号。你可以手动指定版本，例如：VERSION=<版本号> ./install.sh" >&2
-  return 1
-}
-
-# 构建下载地址
-build_download_url() {
-    local ARCH=$(get_architecture)
-    echo "https://github.com/${REPO}/releases/download/${RESOLVED_VERSION}/gost-${ARCH}"
-}
-
-# 解析版本并构建下载地址
-RESOLVED_VERSION=$(resolve_version) || exit 1
-DOWNLOAD_URL=$(maybe_proxy_url "$(build_download_url)")
+if [ "$COUNTRY" = "CN" ]; then
+    # 拼接 URL
+    DOWNLOAD_URL="https://ghfast.top/${DOWNLOAD_URL}"
+fi



@@ -227,8 +131,8 @@ while getopts "a:s:" opt; do
 done

 # 安装功能
-install_flux_agent() {
-  echo "🚀 开始安装 flux_agent..."
+install_gost() {
+  echo "🚀 开始安装 GOST..."
  get_config_params

    # 检查并安装 tcpkill
@@ -238,27 +142,27 @@ install_flux_agent() {
  mkdir -p "$INSTALL_DIR"

  # 停止并禁用已有服务
-  if systemctl list-units --full -all | grep -Fq "flux_agent.service"; then
-    echo "🔍 检测到已存在的flux_agent服务"
-    systemctl stop flux_agent 2>/dev/null && echo "🛑 停止服务"
-    systemctl disable flux_agent 2>/dev/null && echo "🚫 禁用自启"
+  if systemctl list-units --full -all | grep -Fq "gost.service"; then
+    echo "🔍 检测到已存在的gost服务"
+    systemctl stop gost 2>/dev/null && echo "🛑 停止服务"
+    systemctl disable gost 2>/dev/null && echo "🚫 禁用自启"
  fi

  # 删除旧文件
-  [[ -f "$INSTALL_DIR/flux_agent" ]] && echo "🧹 删除旧文件 flux_agent" && rm -f "$INSTALL_DIR/flux_agent"
+  [[ -f "$INSTALL_DIR/gost" ]] && echo "🧹 删除旧文件 gost" && rm -f "$INSTALL_DIR/gost"

-  # 下载 flux_agent
-  echo "⬇️ 下载 flux_agent 中..."
-  curl -L "$DOWNLOAD_URL" -o "$INSTALL_DIR/flux_agent"
-  if [[ ! -f "$INSTALL_DIR/flux_agent" || ! -s "$INSTALL_DIR/flux_agent" ]]; then
+  # 下载 gost
+  echo "⬇️ 下载 gost 中..."
+  curl -L "$DOWNLOAD_URL" -o "$INSTALL_DIR/gost"
+  if [[ ! -f "$INSTALL_DIR/gost" || ! -s "$INSTALL_DIR/gost" ]]; then
    echo "❌ 下载失败，请检查网络或下载链接。"
    exit 1
  fi
-  chmod +x "$INSTALL_DIR/flux_agent"
+  chmod +x "$INSTALL_DIR/gost"
  echo "✅ 下载完成"

  # 打印版本
-  echo "🔎 flux_agent 版本：$($INSTALL_DIR/flux_agent -V)"
+  echo "🔎 gost 版本：$($INSTALL_DIR/gost -V)"

  # 写入 config.json (安装时总是创建新的)
  CONFIG_FILE="$INSTALL_DIR/config.json"
@@ -285,18 +189,16 @@ EOF
  chmod 600 "$INSTALL_DIR"/*.json

  # 创建 systemd 服务
-  SERVICE_FILE="/etc/systemd/system/flux_agent.service"
+  SERVICE_FILE="/etc/systemd/system/gost.service"
  cat > "$SERVICE_FILE" <<EOF
 [Unit]
-Description=Flux_agent Proxy Service
+Description=Gost Proxy Service
 After=network.target

 [Service]
 WorkingDirectory=$INSTALL_DIR
-ExecStart=$INSTALL_DIR/flux_agent
+ExecStart=$INSTALL_DIR/gost
 Restart=on-failure
-StandardOutput=null
-StandardError=null

 [Install]
 WantedBy=multi-user.target
@@ -304,27 +206,27 @@ EOF

  # 启动服务
  systemctl daemon-reload
-  systemctl enable flux_agent
-  systemctl start flux_agent
+  systemctl enable gost
+  systemctl start gost

  # 检查状态
  echo "🔄 检查服务状态..."
-  if systemctl is-active --quiet flux_agent; then
-    echo "✅ 安装完成，flux_agent服务已启动并设置为开机启动。"
+  if systemctl is-active --quiet gost; then
+    echo "✅ 安装完成，gost服务已启动并设置为开机启动。"
    echo "📁 配置目录: $INSTALL_DIR"
-    echo "🔧 服务状态: $(systemctl is-active flux_agent)"
+    echo "🔧 服务状态: $(systemctl is-active gost)"
  else
-    echo "❌ flux_agent服务启动失败，请执行以下命令查看状态："
-    echo "systemctl status flux_agent --no-pager"
+    echo "❌ gost服务启动失败，请执行以下命令查看日志："
+    echo "journalctl -u gost -f"
  fi
 }

 # 更新功能
-update_flux_agent() {
-  echo "🔄 开始更新 flux_agent..."
+update_gost() {
+  echo "🔄 开始更新 GOST..."
  
  if [[ ! -d "$INSTALL_DIR" ]]; then
-    echo "❌ flux_agent 未安装，请先选择安装。"
+    echo "❌ GOST 未安装，请先选择安装。"
    return 1
  fi
  
@@ -335,52 +237,52 @@ update_flux_agent() {
  
  # 先下载新版本
  echo "⬇️ 下载最新版本..."
-  curl -L "$DOWNLOAD_URL" -o "$INSTALL_DIR/flux_agent.new"
-  if [[ ! -f "$INSTALL_DIR/flux_agent.new" || ! -s "$INSTALL_DIR/flux_agent.new" ]]; then
+  curl -L "$DOWNLOAD_URL" -o "$INSTALL_DIR/gost.new"
+  if [[ ! -f "$INSTALL_DIR/gost.new" || ! -s "$INSTALL_DIR/gost.new" ]]; then
    echo "❌ 下载失败。"
    return 1
  fi

  # 停止服务
-  if systemctl list-units --full -all | grep -Fq "flux_agent.service"; then
-    echo "🛑 停止 flux_agent 服务..."
-    systemctl stop flux_agent
+  if systemctl list-units --full -all | grep -Fq "gost.service"; then
+    echo "🛑 停止 gost 服务..."
+    systemctl stop gost
  fi

  # 替换文件
-  mv "$INSTALL_DIR/flux_agent.new" "$INSTALL_DIR/flux_agent"
-  chmod +x "$INSTALL_DIR/flux_agent"
+  mv "$INSTALL_DIR/gost.new" "$INSTALL_DIR/gost"
+  chmod +x "$INSTALL_DIR/gost"
  
  # 打印版本
-  echo "🔎 新版本：$($INSTALL_DIR/flux_agent -V)"
+  echo "🔎 新版本：$($INSTALL_DIR/gost -V)"

  # 重启服务
  echo "🔄 重启服务..."
-  systemctl start flux_agent
+  systemctl start gost
  
  echo "✅ 更新完成，服务已重新启动。"
 }

 # 卸载功能
-uninstall_flux_agent() {
-  echo "🗑️ 开始卸载 flux_agent..."
+uninstall_gost() {
+  echo "🗑️ 开始卸载 GOST..."
  
-  read -p "确认卸载 flux_agent 吗？此操作将删除所有相关文件 (y/N): " confirm
+  read -p "确认卸载 GOST 吗？此操作将删除所有相关文件 (y/N): " confirm
  if [[ "$confirm" != "y" && "$confirm" != "Y" ]]; then
    echo "❌ 取消卸载"
    return 0
  fi

  # 停止并禁用服务
-  if systemctl list-units --full -all | grep -Fq "flux_agent.service"; then
+  if systemctl list-units --full -all | grep -Fq "gost.service"; then
    echo "🛑 停止并禁用服务..."
-    systemctl stop flux_agent 2>/dev/null
-    systemctl disable flux_agent 2>/dev/null
+    systemctl stop gost 2>/dev/null
+    systemctl disable gost 2>/dev/null
  fi

  # 删除服务文件
-  if [[ -f "/etc/systemd/system/flux_agent.service" ]]; then
-    rm -f "/etc/systemd/system/flux_agent.service"
+  if [[ -f "/etc/systemd/system/gost.service" ]]; then
+    rm -f "/etc/systemd/system/gost.service"
    echo "🧹 删除服务文件"
  fi

@@ -400,7 +302,7 @@ uninstall_flux_agent() {
 main() {
  # 如果提供了命令行参数，直接执行安装
  if [[ -n "$SERVER_ADDR" && -n "$SECRET" ]]; then
-    install_flux_agent
+    install_gost
    delete_self
    exit 0
  fi
@@ -408,31 +310,36 @@ main() {
  # 显示交互式菜单
  while true; do
    show_menu
-    read -p "请输入选项 (1-4): " choice
+    read -p "请输入选项 (1-5): " choice
    
    case $choice in
      1)
-        install_flux_agent
+        install_gost
        delete_self
        exit 0
        ;;
      2)
-        update_flux_agent
+        update_gost
        delete_self
        exit 0
        ;;
      3)
-        uninstall_flux_agent
+        uninstall_gost
        delete_self
        exit 0
        ;;
      4)
+        block_protocol
+        delete_self
+        exit 0
+        ;;
+      5)
        echo "👋 退出脚本"
        delete_self
        exit 0
        ;;
      *)
-        echo "❌ 无效选项，请输入 1-4"
+        echo "❌ 无效选项，请输入 1-5"
        echo ""
        ;;
    esac
@@ -440,4 +347,4 @@ main() {
 }

 # 执行主函数
-main
+main
@@ -7,87 +7,18 @@ export LC_ALL=C



-# GitHub repo used for release downloads
-REPO="Sagit-chu/flux-panel"
+# 全局下载地址配置
+DOCKER_COMPOSEV4_URL="https://github.com/bqlpfy/flux-panel/releases/download/1.4.3/docker-compose-v4.yml"
+DOCKER_COMPOSEV6_URL="https://github.com/bqlpfy/flux-panel/releases/download/1.4.3/docker-compose-v6.yml"
+GOST_SQL_URL="https://github.com/bqlpfy/flux-panel/releases/download/1.4.3/gost.sql"

 COUNTRY=$(curl -s https://ipinfo.io/country)
-
-maybe_proxy_url() {
-  local url="$1"
-  if [ "$COUNTRY" = "CN" ]; then
-    echo "https://ghfast.top/${url}"
-  else
-    echo "$url"
-  fi
-}
-
-resolve_latest_release_tag() {
-  local effective_url tag api_tag latest_url api_url
-
-  latest_url="https://github.com/${REPO}/releases/latest"
-  api_url="https://api.github.com/repos/${REPO}/releases/latest"
-
-  effective_url=$(curl -fsSL -o /dev/null -w '%{url_effective}' -L "$latest_url" 2>/dev/null || true)
-  tag="${effective_url##*/}"
-  if [[ -n "$tag" && "$tag" != "latest" ]]; then
-    echo "$tag"
-    return 0
-  fi
-
-  if [ "$COUNTRY" = "CN" ]; then
-    effective_url=$(curl -fsSL -o /dev/null -w '%{url_effective}' -L "$(maybe_proxy_url "$latest_url")" 2>/dev/null || true)
-    tag="${effective_url##*/}"
-    if [[ -n "$tag" && "$tag" != "latest" ]]; then
-      echo "$tag"
-      return 0
-    fi
-  fi
-
-  api_tag=$(curl -fsSL "$api_url" 2>/dev/null | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/' || true)
-  if [[ -n "$api_tag" ]]; then
-    echo "$api_tag"
-    return 0
-  fi
-
-  if [ "$COUNTRY" = "CN" ]; then
-    api_tag=$(curl -fsSL "$(maybe_proxy_url "$api_url")" 2>/dev/null | grep -m1 '"tag_name"' | sed -E 's/.*"tag_name"[[:space:]]*:[[:space:]]*"([^"]+)".*/\1/' || true)
-    if [[ -n "$api_tag" ]]; then
-      echo "$api_tag"
-      return 0
-    fi
-  fi
-
-  return 1
-}
-
-resolve_version() {
-  if [[ -n "${VERSION:-}" ]]; then
-    echo "$VERSION"
-    return 0
-  fi
-  if [[ -n "${FLUX_VERSION:-}" ]]; then
-    echo "$FLUX_VERSION"
-    return 0
-  fi
-
-  if resolve_latest_release_tag; then
-    return 0
-  fi
-
-  echo "❌ 无法获取最新版本号。你可以手动指定版本，例如：VERSION=<版本号> ./panel_install.sh" >&2
-  return 1
-}
-
-# 根据版本号设置 compose 下载地址
-set_compose_urls_by_version() {
-  local version="$1"
-  DOCKER_COMPOSEV4_URL=$(maybe_proxy_url "https://github.com/${REPO}/releases/download/${version}/docker-compose-v4.yml")
-  DOCKER_COMPOSEV6_URL=$(maybe_proxy_url "https://github.com/${REPO}/releases/download/${version}/docker-compose-v6.yml")
-}
-
-# 全局下载地址配置（默认获取最新版本；也可用 VERSION=... 覆盖）
-RESOLVED_VERSION=$(resolve_version) || exit 1
-set_compose_urls_by_version "$RESOLVED_VERSION"
+if [ "$COUNTRY" = "CN" ]; then
+    # 拼接 URL
+    DOCKER_COMPOSEV4_URL="https://ghfast.top/${DOCKER_COMPOSEV4_URL}"
+    DOCKER_COMPOSEV6_URL="https://ghfast.top/${DOCKER_COMPOSEV6_URL}"
+    GOST_SQL_URL="https://ghfast.top/${GOST_SQL_URL}"
+fi



@@ -218,7 +149,8 @@ show_menu() {
  echo "1. 安装面板"
  echo "2. 更新面板"
  echo "3. 卸载面板"
-  echo "4. 退出"
+  echo "4. 导出备份"
+  echo "5. 退出"
  echo "==============================================="
 }

@@ -226,27 +158,6 @@ generate_random() {
  LC_ALL=C tr -dc 'A-Za-z0-9' </dev/urandom | head -c16
 }

-upsert_env_var() {
-  local file="$1"
-  local key="$2"
-  local value="$3"
-  local tmp_file
-
-  tmp_file=$(mktemp)
-  if [ -f "$file" ]; then
-    awk -v k="$key" -v v="$value" '
-      BEGIN { found=0 }
-      $0 ~ ("^" k "=") { print k "=" v; found=1; next }
-      { print }
-      END { if (!found) print k "=" v }
-    ' "$file" > "$tmp_file"
-  else
-    printf '%s=%s\n' "$key" "$value" > "$tmp_file"
-  fi
-
-  mv "$tmp_file" "$file"
-}
-
 # 删除脚本自身
 delete_self() {
  echo ""
@@ -262,13 +173,17 @@ delete_self() {
 get_config_params() {
  echo "🔧 请输入配置参数："

+
+
  read -p "前端端口（默认 6366）: " FRONTEND_PORT
  FRONTEND_PORT=${FRONTEND_PORT:-6366}

  read -p "后端端口（默认 6365）: " BACKEND_PORT
  BACKEND_PORT=${BACKEND_PORT:-6365}

-  # 生成JWT密钥
+  DB_NAME=$(generate_random)
+  DB_USER=$(generate_random)
+  DB_PASSWORD=$(generate_random)
  JWT_SECRET=$(generate_random)
 }

@@ -282,6 +197,14 @@ install_panel() {
  DOCKER_COMPOSE_URL=$(get_docker_compose_url)
  echo "📡 选择配置文件：$(basename "$DOCKER_COMPOSE_URL")"
  curl -L -o docker-compose.yml "$DOCKER_COMPOSE_URL"
+
+  # 检查 gost.sql 是否已存在
+  if [[ -f "gost.sql" ]]; then
+    echo "⏭️ 跳过下载: gost.sql (使用当前位置的文件)"
+  else
+    echo "📡 下载数据库初始化文件..."
+    curl -L -o gost.sql "$GOST_SQL_URL"
+  fi
  echo "✅ 文件准备完成"

  # 自动检测并配置 IPv6 支持
@@ -291,10 +214,12 @@ install_panel() {
  fi

  cat > .env <<EOF
+DB_NAME=$DB_NAME
+DB_USER=$DB_USER
+DB_PASSWORD=$DB_PASSWORD
 JWT_SECRET=$JWT_SECRET
 FRONTEND_PORT=$FRONTEND_PORT
 BACKEND_PORT=$BACKEND_PORT
-FLUX_VERSION=$RESOLVED_VERSION
 EOF

  echo "🚀 启动 docker 服务..."
@@ -315,15 +240,6 @@ update_panel() {
  echo "🔄 开始更新面板..."
  check_docker

-  echo "🔍 获取最新版本号..."
-  LATEST_VERSION=$(resolve_latest_release_tag) || {
-    echo "❌ 无法获取最新版本号，更新终止"
-    return 1
-  }
-  echo "🆕 最新版本：$LATEST_VERSION"
-  set_compose_urls_by_version "$LATEST_VERSION"
-  upsert_env_var ".env" "FLUX_VERSION" "$LATEST_VERSION"
-
  echo "🔽 下载最新配置文件..."
  DOCKER_COMPOSE_URL=$(get_docker_compose_url)
  echo "📡 选择配置文件：$(basename "$DOCKER_COMPOSE_URL")"
@@ -336,15 +252,7 @@ update_panel() {
    configure_docker_ipv6
  fi

-  # 先发送 SIGTERM 信号，让应用优雅关闭
-  docker stop -t 30 springboot-backend 2>/dev/null || true
-  docker stop -t 10 vite-frontend 2>/dev/null || true
-  
-  # 等待 WAL 文件同步
-  echo "⏳ 等待数据同步..."
-  sleep 5
-  
-  # 然后再完全停止
+  echo "🛑 停止当前服务..."
  $DOCKER_CMD down

  echo "⬇️ 拉取最新镜像..."
@@ -387,9 +295,755 @@ update_panel() {
    sleep 1
  done

+  # 检查数据库容器健康状态
+  echo "🔍 检查数据库服务状态..."
+  for i in {1..60}; do
+    if docker ps --format "{{.Names}}" | grep -q "^gost-mysql$"; then
+      DB_HEALTH=$(docker inspect -f '{{.State.Health.Status}}' gost-mysql 2>/dev/null || echo "unknown")
+      if [[ "$DB_HEALTH" == "healthy" ]]; then
+        echo "✅ 数据库服务健康检查通过"
+        break
+      elif [[ "$DB_HEALTH" == "starting" ]]; then
+        # 继续等待
+        :
+      elif [[ "$DB_HEALTH" == "unhealthy" ]]; then
+        echo "⚠️ 数据库健康状态：$DB_HEALTH"
+      fi
+    else
+      echo "⚠️ 数据库容器未找到或未运行"
+      DB_HEALTH="not_running"
+    fi
+    if [ $i -eq 60 ]; then
+      echo "❌ 数据库服务启动超时（60秒）"
+      echo "🔍 当前状态：$(docker inspect -f '{{.State.Health.Status}}' gost-mysql 2>/dev/null || echo '容器不存在')"
+      echo "🛑 更新终止"
+      return 1
+    fi
+    # 每10秒显示一次进度
+    if [ $((i % 10)) -eq 1 ]; then
+      echo "⏳ 等待数据库服务启动... ($i/60) 状态：${DB_HEALTH:-unknown}"
+    fi
+    sleep 1
+  done
+
+  # 从容器环境变量获取数据库信息
+  echo "🔍 获取数据库配置信息..."
+
+  # 等待一下让服务完全就绪
+  echo "⏳ 等待服务完全就绪..."
+  sleep 5
+
+  # 先检查后端容器是否在运行
+  if ! docker ps --format "{{.Names}}" | grep -q "^springboot-backend$"; then
+    echo "❌ 后端容器未运行，无法获取数据库配置"
+    echo "🔍 当前运行的容器："
+    docker ps --format "table {{.Names}}\t{{.Status}}"
+    echo "🛑 更新终止"
+    return 1
+  fi
+
+  DB_INFO=$(docker exec springboot-backend env | grep "^DB_" 2>/dev/null || echo "")
+
+  if [[ -n "$DB_INFO" ]]; then
+    DB_NAME=$(echo "$DB_INFO" | grep "^DB_NAME=" | cut -d'=' -f2)
+    DB_PASSWORD=$(echo "$DB_INFO" | grep "^DB_PASSWORD=" | cut -d'=' -f2)
+    DB_USER=$(echo "$DB_INFO" | grep "^DB_USER=" | cut -d'=' -f2)
+    DB_HOST=$(echo "$DB_INFO" | grep "^DB_HOST=" | cut -d'=' -f2)
+
+    echo "📋 数据库配置："
+    echo "   数据库名: $DB_NAME"
+    echo "   用户名: $DB_USER"
+    echo "   主机: $DB_HOST"
+  else
+    echo "❌ 无法获取数据库配置信息"
+    echo "🔍 尝试诊断问题："
+    echo "   容器状态: $(docker inspect -f '{{.State.Status}}' springboot-backend 2>/dev/null || echo '容器不存在')"
+    echo "   健康状态: $(docker inspect -f '{{.State.Health.Status}}' springboot-backend 2>/dev/null || echo '无健康检查')"
+
+    # 尝试从 .env 文件读取配置
+    if [[ -f ".env" ]]; then
+      echo "🔄 尝试从 .env 文件读取配置..."
+      DB_NAME=$(grep "^DB_NAME=" .env | cut -d'=' -f2 2>/dev/null)
+      DB_PASSWORD=$(grep "^DB_PASSWORD=" .env | cut -d'=' -f2 2>/dev/null)
+      DB_USER=$(grep "^DB_USER=" .env | cut -d'=' -f2 2>/dev/null)
+
+      if [[ -n "$DB_NAME" && -n "$DB_PASSWORD" && -n "$DB_USER" ]]; then
+        echo "✅ 从 .env 文件成功读取数据库配置"
+        echo "📋 数据库配置："
+        echo "   数据库名: $DB_NAME"
+        echo "   用户名: $DB_USER"
+      else
+        echo "❌ .env 文件中的数据库配置不完整"
+        echo "🛑 更新终止"
+        return 1
+      fi
+    else
+      echo "❌ 未找到 .env 文件"
+      echo "🛑 更新终止"
+      return 1
+    fi
+  fi
+
+  # 检查必要的数据库配置
+  if [[ -z "$DB_PASSWORD" || -z "$DB_USER" || -z "$DB_NAME" ]]; then
+    echo "❌ 数据库配置不完整（缺少必要参数）"
+    echo "🛑 更新终止"
+    return 1
+  fi
+
+  # 执行数据库字段变更
+  echo "🔄 执行数据库结构更新..."
+
+  # 创建临时迁移文件（现在有了数据库信息）
+  cat > temp_migration.sql <<EOF
+-- 数据库结构更新
+USE \`$DB_NAME\`;
+
+-- user 表：删除 name 字段（如果存在）
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'user'
+        AND column_name = 'name'
+    ),
+    'ALTER TABLE \`user\` DROP COLUMN \`name\`;',
+    'SELECT "Column \`name\` not exists in \`user\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- node 表：删除 port 字段、添加 server_ip 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'port'
+    ),
+    'ALTER TABLE \`node\` DROP COLUMN \`port\`;',
+    'SELECT "Column \`port\` not exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'server_ip'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`server_ip\` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;',
+    'SELECT "Column \`server_ip\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 将 ip 赋值给 server_ip（如果字段都存在）
+UPDATE \`node\`
+SET \`server_ip\` = \`ip\`
+WHERE \`server_ip\` IS NULL;
+
+-- node 表：修改 ip 字段类型为 longtext
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'ip'
+        AND data_type = 'varchar'
+    ),
+    'ALTER TABLE \`node\` MODIFY COLUMN \`ip\` LONGTEXT CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;',
+    'SELECT "Column \`ip\` not exists or already modified in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- node 表：添加 version 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'version'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`version\` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL;',
+    'SELECT "Column \`version\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- node 表：添加 port_sta 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'port_sta'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`port_sta\` INT(10) DEFAULT 1000 COMMENT "端口起始范围";',
+    'SELECT "Column \`port_sta\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- node 表：添加 port_end 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'port_end'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`port_end\` INT(10) DEFAULT 65535 COMMENT "端口结束范围";',
+    'SELECT "Column \`port_end\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有节点设置默认端口范围
+UPDATE \`node\`
+SET \`port_sta\` = 1000, \`port_end\` = 65535
+WHERE \`port_sta\` IS NULL OR \`port_end\` IS NULL;
+
+-- node 表：添加 http、tls、socks 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'http'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`http\` INT(10) DEFAULT 0 COMMENT "HTTP 服务端口";',
+    'SELECT "Column \`http\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'tls'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`tls\` INT(10) DEFAULT 0 COMMENT "TLS 服务端口";',
+    'SELECT "Column \`tls\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'node'
+        AND column_name = 'socks'
+    ),
+    'ALTER TABLE \`node\` ADD COLUMN \`socks\` INT(10) DEFAULT 0 COMMENT "SOCKS 服务端口";',
+    'SELECT "Column \`socks\` already exists in \`node\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有节点设置 http、tls、socks 默认值
+UPDATE \`node\`
+SET \`http\` = IFNULL(\`http\`, 0),
+    \`tls\` = IFNULL(\`tls\`, 0),
+    \`socks\` = IFNULL(\`socks\`, 0);
+
+-- tunnel 表：删除废弃字段（如果存在）
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'in_port_sta'
+    ),
+    'ALTER TABLE \`tunnel\` DROP COLUMN \`in_port_sta\`;',
+    'SELECT "Column \`in_port_sta\` not exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'in_port_end'
+    ),
+    'ALTER TABLE \`tunnel\` DROP COLUMN \`in_port_end\`;',
+    'SELECT "Column \`in_port_end\` not exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'out_ip_sta'
+    ),
+    'ALTER TABLE \`tunnel\` DROP COLUMN \`out_ip_sta\`;',
+    'SELECT "Column \`out_ip_sta\` not exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'out_ip_end'
+    ),
+    'ALTER TABLE \`tunnel\` DROP COLUMN \`out_ip_end\`;',
+    'SELECT "Column \`out_ip_end\` not exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- tunnel 表：添加 tcp_listen_addr、udp_listen_addr、protocol（如果不存在）
+
+-- tcp_listen_addr
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'tcp_listen_addr'
+    ),
+    'ALTER TABLE \`tunnel\` ADD COLUMN \`tcp_listen_addr\` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT "0.0.0.0";',
+    'SELECT "Column \`tcp_listen_addr\` already exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- udp_listen_addr
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'udp_listen_addr'
+    ),
+    'ALTER TABLE \`tunnel\` ADD COLUMN \`udp_listen_addr\` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT "0.0.0.0";',
+    'SELECT "Column \`udp_listen_addr\` already exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- protocol
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'protocol'
+    ),
+    'ALTER TABLE \`tunnel\` ADD COLUMN \`protocol\` VARCHAR(10) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT "tls";',
+    'SELECT "Column \`protocol\` already exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- traffic_ratio (流量倍率)
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'traffic_ratio'
+    ),
+    'ALTER TABLE \`tunnel\` ADD COLUMN \`traffic_ratio\` DECIMAL(5,1) DEFAULT 1.0 COMMENT "流量倍率";',
+    'SELECT "Column \`traffic_ratio\` already exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有数据设置默认流量倍率
+UPDATE \`tunnel\`
+SET \`traffic_ratio\` = 1.0
+WHERE \`traffic_ratio\` IS NULL;
+
+-- forward 表：删除 proxy_protocol 字段（如果存在）
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'forward'
+        AND column_name = 'proxy_protocol'
+    ),
+    'ALTER TABLE \`forward\` DROP COLUMN \`proxy_protocol\`;',
+    'SELECT "Column \`proxy_protocol\` not exists in \`forward\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- forward 表：修改 remote_addr 字段类型为 longtext
+SET @sql = (
+  SELECT IF(
+    EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'forward'
+        AND column_name = 'remote_addr'
+        AND data_type = 'varchar'
+    ),
+    'ALTER TABLE \`forward\` MODIFY COLUMN \`remote_addr\` LONGTEXT CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci NOT NULL;',
+    'SELECT "Column \`remote_addr\` not exists or already modified in \`forward\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- forward 表：添加 strategy 字段（负载均衡策略）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'forward'
+        AND column_name = 'strategy'
+    ),
+    'ALTER TABLE \`forward\` ADD COLUMN \`strategy\` VARCHAR(100) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT "fifo" COMMENT "负载均衡策略";',
+    'SELECT "Column \`strategy\` already exists in \`forward\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有数据设置默认负载均衡策略
+UPDATE \`forward\`
+SET \`strategy\` = 'fifo'
+WHERE \`strategy\` IS NULL;
+
+-- forward 表：添加 inx 字段（排序索引）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'forward'
+        AND column_name = 'inx'
+    ),
+    'ALTER TABLE \`forward\` ADD COLUMN \`inx\` INT(10) DEFAULT 0 COMMENT "排序索引";',
+    'SELECT "Column \`inx\` already exists in \`forward\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有数据设置默认排序索引
+UPDATE \`forward\`
+SET \`inx\` = 0
+WHERE \`inx\` IS NULL;
+
+-- tunnel 表：添加 interface_name 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'tunnel'
+        AND column_name = 'interface_name'
+    ),
+    'ALTER TABLE \`tunnel\` ADD COLUMN \`interface_name\` VARCHAR(200) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL;',
+    'SELECT "Column \`interface_name\` already exists in \`tunnel\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- forward 表：添加 interface_name 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'forward'
+        AND column_name = 'interface_name'
+    ),
+    'ALTER TABLE \`forward\` ADD COLUMN \`interface_name\` VARCHAR(200) CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci DEFAULT NULL;',
+    'SELECT "Column \`interface_name\` already exists in \`forward\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 创建 vite_config 表（如果不存在）
+CREATE TABLE IF NOT EXISTS \`vite_config\` (
+  \`id\` int(10) NOT NULL AUTO_INCREMENT,
+  \`name\` varchar(200) NOT NULL,
+  \`value\` varchar(200) NOT NULL,
+  \`time\` bigint(20) NOT NULL,
+  PRIMARY KEY (\`id\`),
+  UNIQUE KEY \`unique_name\` (\`name\`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- 创建 statistics_flow 表（如果不存在）
+CREATE TABLE IF NOT EXISTS \`statistics_flow\` (
+  \`id\` bigint(20) NOT NULL AUTO_INCREMENT,
+  \`user_id\` int(10) NOT NULL,
+  \`flow\` bigint(20) NOT NULL,
+  \`total_flow\` bigint(20) NOT NULL,
+  \`time\` varchar(100) NOT NULL,
+  \`created_time\` bigint(20) NOT NULL,
+  PRIMARY KEY (\`id\`)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
+
+-- statistics_flow 表：添加 created_time 字段（如果不存在）
+SET @sql = (
+  SELECT IF(
+    NOT EXISTS (
+      SELECT 1
+      FROM information_schema.COLUMNS
+      WHERE table_schema = DATABASE()
+        AND table_name = 'statistics_flow'
+        AND column_name = 'created_time'
+    ),
+    'ALTER TABLE \`statistics_flow\` ADD COLUMN \`created_time\` BIGINT(20) NOT NULL DEFAULT 0 COMMENT "创建时间毫秒时间戳";',
+    'SELECT "Column \`created_time\` already exists in \`statistics_flow\`";'
+  )
+);
+PREPARE stmt FROM @sql;
+EXECUTE stmt;
+DEALLOCATE PREPARE stmt;
+
+-- 为现有记录设置当前毫秒时间戳（仅当 created_time 为 0 或 NULL 时）
+UPDATE \`statistics_flow\`
+SET \`created_time\` = UNIX_TIMESTAMP() * 1000
+WHERE \`created_time\` = 0 OR \`created_time\` IS NULL;
+
+EOF
+
+  # 检查数据库容器
+  if ! docker ps --format "{{.Names}}" | grep -q "^gost-mysql$"; then
+    echo "❌ 数据库容器 gost-mysql 未运行"
+    echo "🔍 当前运行的容器："
+    docker ps --format "table {{.Names}}\t{{.Image}}\t{{.Status}}"
+    echo "❌ 数据库结构更新失败，请手动执行 temp_migration.sql"
+    echo "📁 迁移文件已保存为 temp_migration.sql"
+    return 1
+  fi
+
+  # 执行数据库迁移
+  if docker exec -i gost-mysql mysql -u "$DB_USER" -p"$DB_PASSWORD" < temp_migration.sql 2>/dev/null; then
+    echo "✅ 数据库结构更新完成"
+  else
+    echo "⚠️ 使用用户密码失败，尝试root密码..."
+    if docker exec -i gost-mysql mysql -u root -p"$DB_PASSWORD" < temp_migration.sql 2>/dev/null; then
+      echo "✅ 数据库结构更新完成"
+    else
+      echo "❌ 数据库结构更新失败，请手动执行 temp_migration.sql"
+      echo "📁 迁移文件已保存为 temp_migration.sql"
+      echo "🔍 数据库容器状态: $(docker inspect -f '{{.State.Status}}' gost-mysql 2>/dev/null || echo '容器不存在')"
+      echo "🛑 更新终止"
+      return 1
+    fi
+  fi
+
+  # 清理临时文件
+  rm -f temp_migration.sql
+
  echo "✅ 更新完成"
 }

+# 导出数据库备份
+export_migration_sql() {
+  echo "📄 开始导出数据库备份..."
+
+  # 获取数据库配置信息
+  echo "🔍 获取数据库配置信息..."
+
+  # 先检查后端容器是否在运行
+  if ! docker ps --format "{{.Names}}" | grep -q "^springboot-backend$"; then
+    echo "❌ 后端容器未运行，尝试从 .env 文件读取配置..."
+
+    # 从 .env 文件读取配置
+    if [[ -f ".env" ]]; then
+      DB_NAME=$(grep "^DB_NAME=" .env | cut -d'=' -f2 2>/dev/null)
+      DB_PASSWORD=$(grep "^DB_PASSWORD=" .env | cut -d'=' -f2 2>/dev/null)
+      DB_USER=$(grep "^DB_USER=" .env | cut -d'=' -f2 2>/dev/null)
+
+      if [[ -n "$DB_NAME" && -n "$DB_PASSWORD" && -n "$DB_USER" ]]; then
+        echo "✅ 从 .env 文件读取数据库配置成功"
+      else
+        echo "❌ .env 文件中的数据库配置不完整"
+        return 1
+      fi
+    else
+      echo "❌ 未找到 .env 文件"
+      return 1
+    fi
+  else
+    # 从容器环境变量获取数据库信息
+    DB_INFO=$(docker exec springboot-backend env | grep "^DB_" 2>/dev/null || echo "")
+
+    if [[ -n "$DB_INFO" ]]; then
+      DB_NAME=$(echo "$DB_INFO" | grep "^DB_NAME=" | cut -d'=' -f2)
+      DB_PASSWORD=$(echo "$DB_INFO" | grep "^DB_PASSWORD=" | cut -d'=' -f2)
+      DB_USER=$(echo "$DB_INFO" | grep "^DB_USER=" | cut -d'=' -f2)
+
+      echo "✅ 从容器环境变量读取数据库配置成功"
+    else
+      echo "❌ 无法从容器获取数据库配置，尝试从 .env 文件读取..."
+
+      if [[ -f ".env" ]]; then
+        DB_NAME=$(grep "^DB_NAME=" .env | cut -d'=' -f2 2>/dev/null)
+        DB_PASSWORD=$(grep "^DB_PASSWORD=" .env | cut -d'=' -f2 2>/dev/null)
+        DB_USER=$(grep "^DB_USER=" .env | cut -d'=' -f2 2>/dev/null)
+
+        if [[ -n "$DB_NAME" && -n "$DB_PASSWORD" && -n "$DB_USER" ]]; then
+          echo "✅ 从 .env 文件读取数据库配置成功"
+        else
+          echo "❌ .env 文件中的数据库配置不完整"
+          return 1
+        fi
+      else
+        echo "❌ 未找到 .env 文件"
+        return 1
+      fi
+    fi
+  fi
+
+  # 检查必要的数据库配置
+  if [[ -z "$DB_PASSWORD" || -z "$DB_USER" || -z "$DB_NAME" ]]; then
+    echo "❌ 数据库配置不完整（缺少必要参数）"
+    return 1
+  fi
+
+  echo "📋 数据库配置："
+  echo "   数据库名: $DB_NAME"
+  echo "   用户名: $DB_USER"
+
+  # 检查数据库容器是否运行
+  if ! docker ps --format "{{.Names}}" | grep -q "^gost-mysql$"; then
+    echo "❌ 数据库容器未运行，无法导出数据"
+    echo "🔍 当前运行的容器："
+    docker ps --format "table {{.Names}}\t{{.Image}}\t{{.Status}}"
+    return 1
+  fi
+
+  # 生成数据库备份文件
+  SQL_FILE="database_backup_$(date +%Y%m%d_%H%M%S).sql"
+  echo "📝 导出数据库备份: $SQL_FILE"
+
+  # 使用 mysqldump 导出数据库
+  echo "⏳ 正在导出数据库..."
+  if docker exec gost-mysql mysqldump -u "$DB_USER" -p"$DB_PASSWORD" --single-transaction --routines --triggers "$DB_NAME" > "$SQL_FILE" 2>/dev/null; then
+    echo "✅ 数据库导出成功"
+  else
+    echo "⚠️ 使用用户密码失败，尝试root密码..."
+    if docker exec gost-mysql mysqldump -u root -p"$DB_PASSWORD" --single-transaction --routines --triggers "$DB_NAME" > "$SQL_FILE" 2>/dev/null; then
+      echo "✅ 数据库导出成功"
+    else
+      echo "❌ 数据库导出失败"
+      rm -f "$SQL_FILE"
+      return 1
+    fi
+  fi
+
+  # 检查文件大小
+  if [[ -f "$SQL_FILE" ]] && [[ -s "$SQL_FILE" ]]; then
+    FILE_SIZE=$(du -h "$SQL_FILE" | cut -f1)
+    echo "📁 文件位置: $(pwd)/$SQL_FILE"
+    echo "📊 文件大小: $FILE_SIZE"
+  else
+    echo "❌ 导出的文件为空或不存在"
+    rm -f "$SQL_FILE"
+    return 1
+  fi
+}


 # 卸载功能
@@ -414,7 +1068,7 @@ uninstall_panel() {
  echo "🛑 停止并删除容器、镜像、卷..."
  $DOCKER_CMD down --rmi all --volumes --remove-orphans
  echo "🧹 删除配置文件..."
-  rm -f docker-compose.yml .env
+  rm -f docker-compose.yml gost.sql .env
  echo "✅ 卸载完成"
 }

@@ -443,6 +1097,11 @@ main() {
        exit 0
        ;;
      4)
+        export_migration_sql
+        delete_self
+        exit 0
+        ;;
+      5)
        echo "👋 退出脚本"
        delete_self
        exit 0
@@ -1,3 +0,0 @@
-<factorypath>
-    <factorypathentry kind="VARJAR" id="M2_REPO/org/projectlombok/lombok/1.18.30/lombok-1.18.30.jar" enabled="true" runInBatchMode="false"/>
-</factorypath>
@@ -1,39 +0,0 @@
-# SPRINGBOOT BACKEND KNOWLEDGE BASE
-
-**Generated:** Mon Feb 02 2026
-
-## OVERVIEW
-Admin API for Flux Panel. Manages users, tunnels, nodes, forwards, quotas, and speed limits.
-**Stack:** Java 21, Spring Boot 2.7.18, SQLite, MyBatis Plus (+ join), FastJSON2.
-
-## STRUCTURE
-```
-springboot-backend/
-├── src/main/java/com/admin/
-│   ├── controller/      # /api/v1/* endpoints
-│   ├── entity/          # DB models
-│   ├── mapper/          # MyBatis Plus mappers
-│   ├── service/         # Business logic
-│   ├── config/          # WebMvc/JWT/CORS/WebSocket config
-│   └── common/          # DTOs, auth, exception handling, utilities
-└── src/main/resources/
-    ├── application.yml  # Config (DB_PATH/JWT_SECRET/LOG_DIR)
-    ├── mapper/          # XML mappers
-    ├── schema.sql       # Schema
-    └── data.sql         # Seed data
-```
-
-## CONVENTIONS
- **DB**: SQLite URL is `jdbc:sqlite:${DB_PATH:/app/data/gost.db}` (`springboot-backend/src/main/resources/application.yml`).
- **Auth**: JWT in `Authorization` header; enforced by `com.admin.common.interceptor.JwtInterceptor` for `/api/**` (with explicit excludes in `com.admin.config.WebMvcConfig`).
- **Roles**: `@RequireRole` means admin-only (`role_id == 0`) via `com.admin.common.aop.RoleAspect`.
- **Responses**: Controllers return `com.admin.common.lang.R` (`code == 0` success).
- **CORS**: Allow-all origins; `Authorization` is exposed (`com.admin.config.WebMvcConfig`).
-
-## COMMANDS
-```bash
-cd springboot-backend
-mvn clean package
-mvn test
-java -jar target/admin-0.0.1-SNAPSHOT.jar
-```
@@ -16,12 +16,11 @@ ENV LC_ALL=en_US.UTF-8
 RUN sed -i 's/archive.ubuntu.com/mirrors.ustc.edu.cn/g' /etc/apt/sources.list \
    && sed -i 's/security.ubuntu.com/mirrors.ustc.edu.cn/g' /etc/apt/sources.list \
    && apt-get update \
-    && apt-get install -y --no-install-recommends fontconfig fonts-dejavu sqlite3 \
+    && apt-get install -y --no-install-recommends fontconfig fonts-dejavu \
    && apt-get clean \
    && rm -rf /var/lib/apt/lists/*

 COPY --from=build /app/target/*.jar app.jar
-
 EXPOSE 6365

 ENTRYPOINT ["sh", "-c", "exec java $JAVA_OPTS -jar /app/app.jar"]
@@ -69,9 +69,10 @@
        </dependency>

        <dependency>
-            <groupId>org.xerial</groupId>
-            <artifactId>sqlite-jdbc</artifactId>
-            <version>3.45.0.0</version>
+            <groupId>com.mysql</groupId>
+            <artifactId>mysql-connector-j</artifactId>
+            <version>8.2.0</version>
+            <scope>runtime</scope>
        </dependency>

        <dependency>
@@ -1,32 +0,0 @@
-# SPRINGBOOT BACKEND (com.admin) KNOWLEDGE BASE
-
-## OVERVIEW
-Primary Java code for the admin API. Controllers expose `/api/v1/*` endpoints and return `R` response envelopes.
-
-## STRUCTURE
-```
-springboot-backend/src/main/java/com/admin/
-├── controller/  # REST controllers (e.g., /api/v1/user)
-├── service/     # Business logic interfaces + impl/
-├── mapper/      # MyBatis Plus mappers
-├── entity/      # DB entities
-├── config/      # WebMvc/JWT/CORS/WebSocket config
-└── common/      # DTOs, auth, exception handling, utilities
-```
-
-## WHERE TO LOOK
-| Task | Location | Notes |
-|------|----------|-------|
-| User/login endpoints | `springboot-backend/src/main/java/com/admin/controller/UserController.java` | `/api/v1/user/*` |
-| Auth enforcement | `springboot-backend/src/main/java/com/admin/config/WebMvcConfig.java` | Intercepts `/api/**`, excludes login/config/captcha |
-| JWT validation | `springboot-backend/src/main/java/com/admin/common/interceptor/JwtInterceptor.java` | Requires `Authorization` header |
-| Admin-only ops | `springboot-backend/src/main/java/com/admin/common/annotation/RequireRole.java` | Enforced by `RoleAspect` |
-| Response envelope | `springboot-backend/src/main/java/com/admin/common/lang/R.java` | `code == 0` success |
-| Global error handling | `springboot-backend/src/main/java/com/admin/common/exception/GlobalExceptionHandler.java` | Maps exceptions -> `R.err(...)` |
-
-## CONVENTIONS
- Controllers are mostly `@PostMapping` (even for list/get/delete) and use `/api/v1/*` prefixes.
- JWT is custom (no 3p lib) and includes `role_id` in payload (`springboot-backend/src/main/java/com/admin/common/utils/JwtUtil.java`).
-
-## ANTI-PATTERNS
- Do not change auth header format lightly: frontend expects `Authorization: <token>` (no `Bearer`).
@@ -13,7 +13,6 @@ import org.springframework.scheduling.annotation.EnableScheduling;
@SpringBootApplication
@EnableAsync
@EnableScheduling
-@MapperScan("com.admin.mapper")
 public class AdminApplication {

    public static void main(String[] args) {
@@ -0,0 +1,128 @@
+package com.admin;
+
+import com.baomidou.mybatisplus.core.exceptions.MybatisPlusException;
+import com.baomidou.mybatisplus.core.toolkit.StringPool;
+import com.baomidou.mybatisplus.core.toolkit.StringUtils;
+import com.baomidou.mybatisplus.generator.AutoGenerator;
+import com.baomidou.mybatisplus.generator.InjectionConfig;
+import com.baomidou.mybatisplus.generator.config.*;
+import com.baomidou.mybatisplus.generator.config.po.TableInfo;
+import com.baomidou.mybatisplus.generator.config.rules.NamingStrategy;
+import com.baomidou.mybatisplus.generator.engine.FreemarkerTemplateEngine;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Scanner;
+
+// 演示例子，执行 main 方法控制台输入模块表名回车自动生成对应项目目录中
+public class CodeGenerator {
+
+    /**
+     * <p>
+     * 读取控制台内容
+     * </p>
+     */
+    public static String scanner(String tip) {
+        Scanner scanner = new Scanner(System.in);
+        StringBuilder help = new StringBuilder();
+        help.append("请输入" + tip + "：");
+        System.out.println(help.toString());
+        if (scanner.hasNext()) {
+            String ipt = scanner.next();
+            if (StringUtils.isNotBlank(ipt)) {
+                return ipt;
+            }
+        }
+        throw new MybatisPlusException("请输入正确的" + tip + "！");
+    }
+
+    public static void main(String[] args) {
+        // 代码生成器
+        AutoGenerator mpg = new AutoGenerator();
+
+        // 全局配置
+        GlobalConfig gc = new GlobalConfig();
+        String projectPath = System.getProperty("user.dir");
+        gc.setOutputDir(projectPath + "/src/main/java");
+        gc.setAuthor("QAQ");
+        gc.setOpen(false);
+        // gc.setSwagger2(true); 实体属性 Swagger2 注解
+        gc.setServiceName("%sService");
+        mpg.setGlobalConfig(gc);
+
+        // 数据源配置 - 使用环境变量
+        DataSourceConfig dsc = new DataSourceConfig();
+        String dbHost = System.getenv("DB_HOST");
+        String dbName = System.getenv("DB_NAME");
+        String dbUser = System.getenv("DB_USER");
+        String dbPassword = System.getenv("DB_PASSWORD");
+        
+        if (dbHost == null || dbName == null || dbUser == null || dbPassword == null) {
+            throw new MybatisPlusException("请设置数据库环境变量: DB_HOST, DB_NAME, DB_USER, DB_PASSWORD");
+        }
+        
+        dsc.setUrl("jdbc:mysql://" + dbHost + "/" + dbName + "?useUnicode=true&useSSL=false&characterEncoding=utf8&serverTimezone=Asia/Shanghai");
+        dsc.setDriverName("com.mysql.cj.jdbc.Driver");
+        dsc.setUsername(dbUser);
+        dsc.setPassword(dbPassword);
+        mpg.setDataSource(dsc);
+
+        // 包配置
+        PackageConfig pc = new PackageConfig();
+//        pc.setModuleName(scanner("模块名"));
+        pc.setParent("com.admin");
+        mpg.setPackageInfo(pc);
+
+        // 自定义配置
+        InjectionConfig cfg = new InjectionConfig() {
+            @Override
+            public void initMap() {
+                // to do nothing
+            }
+        };
+
+        // 如果模板引擎是 freemarker
+        String templatePath = "/templates/mapper.xml.ftl";
+        // 如果模板引擎是 velocity
+//         String templatePath = "/templates/mapper.xml.vm";
+
+        // 自定义输出配置
+        List<FileOutConfig> focList = new ArrayList<>();
+        // 自定义配置会被优先输出
+        focList.add(new FileOutConfig(templatePath) {
+            @Override
+            public String outputFile(TableInfo tableInfo) {
+                return projectPath + "/src/main/resources/mapper/" + pc.getModuleName()
+                        + "/" + tableInfo.getEntityName() + "Mapper" + StringPool.DOT_XML;
+            }
+        });
+
+        cfg.setFileOutConfigList(focList);
+        mpg.setCfg(cfg);
+
+        // 配置模板
+        TemplateConfig templateConfig = new TemplateConfig();
+
+
+        templateConfig.setXml(null);
+        mpg.setTemplate(templateConfig);
+
+        // 策略配置
+        StrategyConfig strategy = new StrategyConfig();
+        strategy.setNaming(NamingStrategy.underline_to_camel);
+        strategy.setColumnNaming(NamingStrategy.underline_to_camel);
+        strategy.setSuperEntityClass("com.admin.entity.BaseEntity");
+        strategy.setEntityLombokModel(true);
+        strategy.setRestControllerStyle(true);
+        // 公共父类
+        strategy.setSuperControllerClass("com.admin.controller.BaseController");
+        strategy.setSuperEntityColumns("id", "created_time", "updated_time", "status");
+        strategy.setInclude(scanner("表名，多个英文逗号分割").split(","));
+        strategy.setControllerMappingHyphenStyle(true);
+//        strategy.setTablePrefix("sys_");//动态调整
+        mpg.setStrategy(strategy);
+        mpg.setTemplateEngine(new FreemarkerTemplateEngine());
+        mpg.execute();
+    }
+
+}
@@ -1,16 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-import javax.validation.constraints.NotEmpty;
-import javax.validation.constraints.NotNull;
-import java.util.List;
-
-@Data
-public class BatchChangeTunnelDto {
-    
-    @NotEmpty(message = "转发ID列表不能为空")
-    private List<Long> forwardIds;
-    
-    @NotNull(message = "目标隧道ID不能为空")
-    private Long targetTunnelId;
-}
@@ -1,12 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-import javax.validation.constraints.NotEmpty;
-import java.util.List;
-
-@Data
-public class BatchDeleteDto {
-    
-    @NotEmpty(message = "ID列表不能为空")
-    private List<Long> ids;
-}
@@ -1,39 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-import java.util.List;
-import java.util.ArrayList;
-
-@Data
-public class BatchOperationResultDto {
-    
-    private int successCount;
-    private int failCount;
-    private List<FailedItem> failedItems = new ArrayList<>();
-    
-    @Data
-    public static class FailedItem {
-        private Long id;
-        private String reason;
-        
-        public FailedItem() {}
-        
-        public FailedItem(Long id, String reason) {
-            this.id = id;
-            this.reason = reason;
-        }
-    }
-    
-    public void addFailedItem(Long id, String reason) {
-        this.failedItems.add(new FailedItem(id, reason));
-        this.failCount++;
-    }
-    
-    public void incrementSuccess() {
-        this.successCount++;
-    }
-    
-    public boolean isAllSuccess() {
-        return failCount == 0;
-    }
-}
@@ -1,12 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-import javax.validation.constraints.NotEmpty;
-import java.util.List;
-
-@Data
-public class BatchRedeployDto {
-    
-    @NotEmpty(message = "ID列表不能为空")
-    private List<Long> ids;
-}
@@ -1,15 +0,0 @@
-package com.admin.common.dto;
-
-
-import lombok.Data;
-
-import java.util.List;
-
-@Data
-public class ChainNodesItems {
-
-    private String mode;
-
-    private List<Integer> nodeIds;
-
-}
@@ -1,21 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-@Data
-public class DiagnosisResult {
-    private Long nodeId;
-    private String nodeName;
-    private String targetIp;
-    private Integer targetPort;
-    private String description;
-    private boolean success;
-    private String message;
-    private double averageTime;
-    private double packetLoss;
-    private long timestamp;
-    private Integer fromChainType;
-    private Integer fromInx;
-    private Integer toChainType;
-    private Integer toInx;
-}
@@ -21,6 +21,14 @@ public class ForwardDto {
    private String remoteAddr;

    private String strategy;
-
+    
+    /**
+     * 入口端口（可选，为空时自动分配）
+     */
+    @Min(value = 1, message = "端口号不能小于1")
+    @Max(value = 65535, message = "端口号不能大于65535")
    private Integer inPort;
+
+    private String interfaceName;
+
 } 
@@ -1,10 +0,0 @@
-package com.admin.common.dto;
-
-
-import lombok.Data;
-
-@Data
-public class ForwardPortDto {
-    private Integer node_id;
-    private Integer port;
-}
@@ -19,14 +19,22 @@ public class ForwardUpdateDto {
    
    @NotBlank(message = "转发名称不能为空")
    private String name;
-
+    
+    @NotNull(message = "隧道ID不能为空")
    private Integer tunnelId;
-
+    
    @NotBlank(message = "远程地址不能为空")
    private String remoteAddr;

    private String strategy;
-
+    
+    /**
+     * 入口端口（可选，为空时自动分配）
+     */
+    @Min(value = 1, message = "端口号不能小于1")
+    @Max(value = 65535, message = "端口号不能大于65535")
    private Integer inPort;

+    @TableField(updateStrategy = FieldStrategy.IGNORED)
+    private String interfaceName;
 } 
@@ -25,11 +25,6 @@ public class ForwardWithTunnelDto {
    private String name;
    

-    /**
-     * 入口IP
-     */
-    private String inIp;
-
    /**
     * 入口端口
     */
@@ -61,10 +56,15 @@ public class ForwardWithTunnelDto {
     * 隧道名称
     */
    private String tunnelName;
-
+    
+    /**
+     * 入口IP
+     */
+    private String inIp;

    private String userName;

+
    /**
     * 用户ID
     */
@@ -87,4 +87,6 @@ public class ForwardWithTunnelDto {
    private String strategy;

    private Integer inx;
+
+    private String interfaceName;
 }
@@ -1,14 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import javax.validation.constraints.NotBlank;
-
-@Data
-public class GroupCreateDto {
-
-    @NotBlank(message = "分组名称不能为空")
-    private String name;
-
-    private Integer status;
-}
@@ -1,15 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import javax.validation.constraints.NotNull;
-
-@Data
-public class GroupPermissionAssignDto {
-
-    @NotNull(message = "用户分组ID不能为空")
-    private Long userGroupId;
-
-    @NotNull(message = "隧道分组ID不能为空")
-    private Long tunnelGroupId;
-}
@@ -1,13 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-@Data
-public class GroupPermissionDetailDto {
-    private Long id;
-    private Long userGroupId;
-    private String userGroupName;
-    private Long tunnelGroupId;
-    private String tunnelGroupName;
-    private Long createdTime;
-}
@@ -1,18 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import javax.validation.constraints.NotBlank;
-import javax.validation.constraints.NotNull;
-
-@Data
-public class GroupUpdateDto {
-
-    @NotNull(message = "分组ID不能为空")
-    private Long id;
-
-    @NotBlank(message = "分组名称不能为空")
-    private String name;
-
-    private Integer status;
-}
@@ -13,20 +13,19 @@ public class NodeDto {
    @NotBlank(message = "节点名称不能为空")
    private String name;

+    @NotBlank(message = "入口IP不能为空")
+    private String ip;
+
    @NotBlank(message = "服务器ip不能为空")
    private String serverIp;

-    private String serverIpV4;
+    @NotNull(message = "起始端口不能为空")
+    @Min(value = 1, message = "起始端口必须大于0")
+    @Max(value = 65535, message = "起始端口不能超过65535")
+    private Integer portSta;

-    private String serverIpV6;
-
-    @NotBlank(message = "可用端口不能为空")
-    private String port;
-
-    private String interfaceName;
-
-    private String tcpListenAddr = "0.0.0.0";
-
-    private String udpListenAddr = "0.0.0.0";
-
-} 
+    @NotNull(message = "结束端口不能为空")
+    @Min(value = 1, message = "结束端口必须大于0")
+    @Max(value = 65535, message = "结束端口不能超过65535")
+    private Integer portEnd;
+} 
@@ -4,6 +4,8 @@ import lombok.Data;

 import javax.validation.constraints.NotBlank;
 import javax.validation.constraints.NotNull;
+import javax.validation.constraints.Max;
+import javax.validation.constraints.Min;

@Data
 public class NodeUpdateDto {
@@ -14,22 +16,23 @@ public class NodeUpdateDto {
    @NotBlank(message = "节点名称不能为空")
    private String name;

+    @NotBlank(message = "入口IP不能为空")
+    private String ip;
+
    @NotBlank(message = "服务器ip不能为空")
    private String serverIp;

-    private String serverIpV4;
+    @NotNull(message = "起始端口不能为空")
+    @Min(value = 1, message = "起始端口必须大于0")
+    @Max(value = 65535, message = "起始端口不能超过65535")
+    private Integer portSta;

-    private String serverIpV6;
+    @NotNull(message = "结束端口不能为空")
+    @Min(value = 1, message = "结束端口必须大于0")
+    @Max(value = 65535, message = "结束端口不能超过65535")
+    private Integer portEnd;

-    @NotBlank(message = "可用port不能为空")
-    private String port;
-
-    private String interfaceName;
    private Integer http;
    private Integer tls;
    private Integer socks;
-
-    private String tcpListenAddr = "0.0.0.0";
-
-    private String udpListenAddr = "0.0.0.0";
-} 
+} 
@@ -17,4 +17,10 @@ public class SpeedLimitUpdateDto {
    @NotNull(message = "速度限制不能为空")
    @Min(value = 1, message = "速度限制必须大于0")
    private Integer speed;
+
+    @NotNull(message = "隧道ID不能为空")
+    private Long tunnelId;
+
+    @NotBlank(message = "隧道名称不能为空")
+    private String tunnelName;
 } 
@@ -1,48 +0,0 @@
-package com.admin.common.dto;
-
-import com.admin.entity.ChainTunnel;
-import lombok.Data;
-
-import java.math.BigDecimal;
-import java.util.ArrayList;
-import java.util.List;
-
-/**
- * 隧道详情DTO - 包含节点配置信息
- */
-@Data
-public class TunnelDetailDto {
-    
-    private Long id;
-
-    /**
-     * Display/order index for drag-sorting in admin UI.
-     * Lower value appears first.
-     */
-    private Integer inx;
-    
-    private String name;
-    
-    private Integer type; // 1: 端口转发, 2: 隧道转发
-    
-    private Integer flow; // 1: 单向, 2: 双向
-    
-    private BigDecimal trafficRatio;
-    
-    private Integer status;
-    
-    private Long createdTime;
-    
-    private Long updatedTime;
-
-    private String inIp;
-    
-    // 入口节点列表
-    private List<ChainTunnel> inNodeId = new ArrayList<>();
-    
-    // 转发链节点列表（二维数组结构）
-    private List<List<ChainTunnel>> chainNodes = new ArrayList<>();
-    
-    // 出口节点列表
-    private List<ChainTunnel> outNodeId = new ArrayList<>();
-}
@@ -1,36 +1,45 @@
 package com.admin.common.dto;

-import com.admin.entity.ChainTunnel;
 import lombok.Data;
 import javax.validation.constraints.NotBlank;
 import javax.validation.constraints.NotNull;
+import javax.validation.constraints.Min;
+import javax.validation.constraints.Max;
 import javax.validation.constraints.DecimalMin;
 import javax.validation.constraints.DecimalMax;
 import java.math.BigDecimal;
-import java.util.List;

@Data
 public class TunnelDto {
    
    @NotBlank(message = "隧道名称不能为空")
    private String name;
-
+    
    @NotNull(message = "入口节点不能为空")
-    private List<ChainTunnel> inNodeId;
-
-    private List<List<ChainTunnel>> chainNodes;
-
-    private List<ChainTunnel> outNodeId;
-
-    private String inIp;
+    private Long inNodeId;

+    // 出口节点ID，当type=1时可以为空，会自动设置为入口节点ID
+    private Long outNodeId;
+    
    @NotNull(message = "隧道类型不能为空")
    private Integer type;
    
    @NotNull(message = "流量计算类型不能为空")
    private Integer flow;
    
+    // 流量倍率，默认为1.0
    @DecimalMin(value = "0.0", inclusive = false, message = "流量倍率必须大于0.0")
    @DecimalMax(value = "100.0", message = "流量倍率不能大于100.0")
    private BigDecimal trafficRatio;
+
+    private String interfaceName;
+    
+    // 协议类型，默认为tls
+    private String protocol;
+    
+    // TCP监听地址，默认为0.0.0.0
+    private String tcpListenAddr = "0.0.0.0";
+    
+    // UDP监听地址，默认为0.0.0.0
+    private String udpListenAddr = "0.0.0.0";
 } 
@@ -1,16 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import javax.validation.constraints.NotNull;
-import java.util.List;
-
-@Data
-public class TunnelGroupAssignTunnelsDto {
-
-    @NotNull(message = "隧道分组ID不能为空")
-    private Long groupId;
-
-    @NotNull(message = "隧道列表不能为空")
-    private List<Long> tunnelIds;
-}
@@ -1,17 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import java.util.ArrayList;
-import java.util.List;
-
-@Data
-public class TunnelGroupDetailDto {
-    private Long id;
-    private String name;
-    private Integer status;
-    private Long createdTime;
-    private Long updatedTime;
-    private List<Long> tunnelIds = new ArrayList<>();
-    private List<String> tunnelNames = new ArrayList<>();
-}
@@ -0,0 +1,36 @@
+package com.admin.common.dto;
+
+import lombok.Data;
+
+@Data
+public class TunnelListDto {
+
+    private Integer id;
+
+    private String name;
+    
+    /**
+     * 入口IP
+     */
+    private String ip;
+    
+    /**
+     * 入口节点端口起始范围
+     */
+    private Integer inNodePortSta;
+    
+    /**
+     * 入口节点端口结束范围
+     */
+    private Integer inNodePortEnd;
+
+    /**
+     * 隧道类型（1-端口转发，2-隧道转发）
+     */
+    private Integer type;
+    
+    /**
+     * 协议类型
+     */
+    private String protocol;
+}
@@ -1,6 +1,5 @@
 package com.admin.common.dto;

-import com.admin.entity.ChainTunnel;
 import com.baomidou.mybatisplus.annotation.FieldStrategy;
 import com.baomidou.mybatisplus.annotation.TableField;
 import lombok.Data;
@@ -11,32 +10,35 @@ import javax.validation.constraints.Max;
 import javax.validation.constraints.DecimalMin;
 import javax.validation.constraints.DecimalMax;
 import java.math.BigDecimal;
-import java.util.List;

@Data
 public class TunnelUpdateDto {
-
+    
    @NotNull(message = "隧道ID不能为空")
    private Long id;
-
+    
    @NotBlank(message = "隧道名称不能为空")
    private String name;
-
+    
    @NotNull(message = "流量计算类型不能为空")
    private Integer flow;
-
-    private String inIp;
-
+    
+    // 流量倍率
    @DecimalMin(value = "0.0", inclusive = false, message = "流量倍率必须大于0.0")
    @DecimalMax(value = "100.0", message = "流量倍率不能大于100.0")
    private BigDecimal trafficRatio;

-    // 入口节点配置（可选，为空时不更新节点配置）
-    private List<ChainTunnel> inNodeId;
+    @NotBlank
+    private String protocol;

-    // 转发链节点配置（二维数组，每一跳可有多个节点）
-    private List<List<ChainTunnel>> chainNodes;
+    // TCP监听地址
+    @NotBlank
+    private String tcpListenAddr;
+    
+    // UDP监听地址
+    @NotBlank
+    private String udpListenAddr;

-    // 出口节点配置
-    private List<ChainTunnel> outNodeId;
-}
+    @TableField(updateStrategy = FieldStrategy.IGNORED)
+    private String interfaceName;
+} 
@@ -1,16 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import javax.validation.constraints.NotNull;
-import java.util.List;
-
-@Data
-public class UserGroupAssignUsersDto {
-
-    @NotNull(message = "用户分组ID不能为空")
-    private Long groupId;
-
-    @NotNull(message = "用户列表不能为空")
-    private List<Long> userIds;
-}
@@ -1,17 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-import java.util.ArrayList;
-import java.util.List;
-
-@Data
-public class UserGroupDetailDto {
-    private Long id;
-    private String name;
-    private Integer status;
-    private Long createdTime;
-    private Long updatedTime;
-    private List<Long> userIds = new ArrayList<>();
-    private List<String> userNames = new ArrayList<>();
-}
@@ -1,10 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-
-@Data
-public class UserInfo {
-    private final Integer userId;
-    private final Integer roleId;
-    private final String userName;
-}
@@ -1,26 +0,0 @@
-package com.admin.common.dto;
-
-import com.admin.entity.UserTunnel;
-import com.admin.service.impl.ForwardServiceImpl;
-import lombok.Data;
-
-@Data
-public class UserPermissionResult {
-    public boolean hasError;
-    private String errorMessage;
-    private Integer limiter;
-    private UserTunnel userTunnel;
-
-    public static UserPermissionResult success(Integer limiter, UserTunnel userTunnel) {
-        UserPermissionResult result = new UserPermissionResult();
-        result.setLimiter(limiter);
-        result.setUserTunnel(userTunnel);
-        return result;
-    }
-
-    public static UserPermissionResult error(String errorMessage) {
-        UserPermissionResult result = new UserPermissionResult();
-        result.setErrorMessage(errorMessage);
-        return result;
-    }
-}
@@ -1,26 +0,0 @@
-package com.admin.common.dto;
-
-import lombok.Data;
-import javax.validation.Valid;
-import javax.validation.constraints.NotNull;
-import javax.validation.constraints.NotEmpty;
-import java.util.List;
-
-@Data
-public class UserTunnelBatchAssignDto {
-    
-    @NotNull(message = "用户ID不能为空")
-    private Integer userId;
-    
-    @Valid
-    @NotEmpty(message = "隧道列表不能为空")
-    private List<TunnelAssignItem> tunnels;
-    
-    @Data
-    public static class TunnelAssignItem {
-        @NotNull(message = "隧道ID不能为空")
-        private Integer tunnelId;
-        
-        private Integer speedId;
-    }
-}
@@ -13,15 +13,28 @@ public class UserTunnelDto {
    @NotNull(message = "隧道ID不能为空")
    private Integer tunnelId;
    
+    @NotNull(message = "流量限制不能为空")
    @Min(value = 0, message = "流量限制不能小于0")
    private Long flow;
    
+    @NotNull(message = "转发数量不能为空")
    @Min(value = 0, message = "转发数量不能小于0")
    private Integer num;
    
+    /**
+     * 流量重置时间（时间戳）
+     */
+    @NotNull(message = "流量重置时间不能为空")
    private Long flowResetTime;
    
+    /**
+     * 到期时间（时间戳）
+     */
+    @NotNull(message = "到期时间不能为空")
    private Long expTime;
    
+    /**
+     * 限速规则ID（可选，null表示不限速）
+     */
    private Integer speedId;
-}
+} 
@@ -1,71 +0,0 @@
-package com.admin.common.migration;
-
-import lombok.extern.slf4j.Slf4j;
-import org.springframework.boot.ApplicationArguments;
-import org.springframework.boot.ApplicationRunner;
-import org.springframework.core.Ordered;
-import org.springframework.core.annotation.Order;
-import org.springframework.jdbc.core.JdbcTemplate;
-import org.springframework.stereotype.Component;
-
-import java.util.HashSet;
-import java.util.Set;
-
-/**
- * Lightweight SQLite schema migration.
- *
- * Spring Boot SQL init uses CREATE TABLE IF NOT EXISTS, so existing installations
- * won't automatically receive new columns. This runner adds missing columns in-place.
- */
-@Slf4j
-@Component
-@Order(Ordered.HIGHEST_PRECEDENCE)
-public class SqliteSchemaMigration implements ApplicationRunner {
-
-    private final JdbcTemplate jdbcTemplate;
-
-    public SqliteSchemaMigration(JdbcTemplate jdbcTemplate) {
-        this.jdbcTemplate = jdbcTemplate;
-    }
-
-    @Override
-    public void run(ApplicationArguments args) {
-        ensureColumn("node", "inx", "INTEGER NOT NULL DEFAULT 0");
-        ensureColumn("tunnel", "inx", "INTEGER NOT NULL DEFAULT 0");
-        ensureTable("CREATE TABLE IF NOT EXISTS tunnel_group (id INTEGER PRIMARY KEY AUTOINCREMENT, name VARCHAR(100) NOT NULL, created_time INTEGER NOT NULL, updated_time INTEGER NOT NULL, status INTEGER NOT NULL)");
-        ensureTable("CREATE TABLE IF NOT EXISTS user_group (id INTEGER PRIMARY KEY AUTOINCREMENT, name VARCHAR(100) NOT NULL, created_time INTEGER NOT NULL, updated_time INTEGER NOT NULL, status INTEGER NOT NULL)");
-        ensureTable("CREATE TABLE IF NOT EXISTS tunnel_group_tunnel (id INTEGER PRIMARY KEY AUTOINCREMENT, tunnel_group_id INTEGER NOT NULL, tunnel_id INTEGER NOT NULL, created_time INTEGER NOT NULL)");
-        ensureTable("CREATE TABLE IF NOT EXISTS user_group_user (id INTEGER PRIMARY KEY AUTOINCREMENT, user_group_id INTEGER NOT NULL, user_id INTEGER NOT NULL, created_time INTEGER NOT NULL)");
-        ensureTable("CREATE TABLE IF NOT EXISTS group_permission (id INTEGER PRIMARY KEY AUTOINCREMENT, user_group_id INTEGER NOT NULL, tunnel_group_id INTEGER NOT NULL, created_time INTEGER NOT NULL)");
-        ensureTable("CREATE TABLE IF NOT EXISTS group_permission_grant (id INTEGER PRIMARY KEY AUTOINCREMENT, user_group_id INTEGER NOT NULL, tunnel_group_id INTEGER NOT NULL, user_tunnel_id INTEGER NOT NULL, created_by_group INTEGER NOT NULL DEFAULT 0, created_time INTEGER NOT NULL)");
-        ensureColumn("group_permission_grant", "created_by_group", "INTEGER NOT NULL DEFAULT 0");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_tunnel_group_name ON tunnel_group(name)");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_user_group_name ON user_group(name)");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_tunnel_group_tunnel_unique ON tunnel_group_tunnel(tunnel_group_id, tunnel_id)");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_user_group_user_unique ON user_group_user(user_group_id, user_id)");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_group_permission_unique ON group_permission(user_group_id, tunnel_group_id)");
-        ensureTable("CREATE UNIQUE INDEX IF NOT EXISTS idx_group_permission_grant_unique ON group_permission_grant(user_group_id, tunnel_group_id, user_tunnel_id)");
-    }
-
-    private void ensureColumn(String table, String column, String columnDefinition) {
-        Set<String> columns = new HashSet<>(
-                jdbcTemplate.query(
-                        "PRAGMA table_info(" + table + ")",
-                        (rs, rowNum) -> rs.getString("name")
-                )
-        );
-
-        if (columns.contains(column)) {
-            return;
-        }
-
-        log.info("Adding missing column {}.{}", table, column);
-        jdbcTemplate.execute(
-                "ALTER TABLE " + table + " ADD COLUMN " + column + " " + columnDefinition
-        );
-    }
-
-    private void ensureTable(String ddl) {
-        jdbcTemplate.execute(ddl);
-    }
-}
@@ -5,7 +5,8 @@ import com.admin.common.lang.R;
 import com.admin.common.utils.GostUtil;
 import com.admin.entity.*;
 import com.admin.service.*;
-import com.alibaba.fastjson.JSONArray;
+import com.alibaba.fastjson.JSONObject;
+import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.context.annotation.Lazy;
 import org.springframework.scheduling.annotation.Async;
@@ -13,7 +14,6 @@ import org.springframework.stereotype.Service;

 import javax.annotation.Resource;
 import java.util.ArrayList;
-import java.util.Arrays;
 import java.util.List;
 import java.util.Objects;

@@ -33,7 +33,8 @@ public class CheckGostConfigAsync {
    private SpeedLimitService speedLimitService;

    @Resource
-    TunnelService tunnelService;
+    @Lazy
+    private TunnelService tunnelService;



@@ -42,51 +43,56 @@ public class CheckGostConfigAsync {
     */
    @Async
    public void cleanNodeConfigs(String node_id, GostConfigDto gostConfig) {
+        System.out.println(JSONObject.toJSONString(gostConfig));
        Node node = nodeService.getById(node_id);
        if (node != null) {
-            cleanOrphanedServices(gostConfig.getServices(), node);
-            cleanOrphanedChains(gostConfig.getChains(), node);
-            cleanOrphanedLimiters(gostConfig.getLimiters(), node);
+            cleanOrphanedServices(gostConfig, node);
+            cleanOrphanedChains(gostConfig, node);
+            cleanOrphanedLimiters(gostConfig, node);
        }
    }

    /**
     * 清理孤立的服务
     */
-    private void cleanOrphanedServices(List<ConfigItem> configItems, Node node) {
-        if (configItems == null) return;
-        for (ConfigItem service : configItems) {
+    private void cleanOrphanedServices(GostConfigDto gostConfig, Node node) {
+        if (gostConfig.getServices() == null) {
+            return;
+        }
+
+        for (ConfigItem service : gostConfig.getServices()) {
            safeExecute(() -> {

                if (!Objects.equals(service.getName(), "web_api")){
-                    List<String> serviceIds = parseServiceName(service.getName());
+                    String[] serviceIds = parseServiceName(service.getName());
+                    if (serviceIds.length == 4) {
+                        String forwardId = serviceIds[0];
+                        String userId = serviceIds[1];
+                        String userTunnelId = serviceIds[2];
+                        String type = serviceIds[3];

-                    JSONArray services = new JSONArray();
-                    if (Objects.equals(serviceIds.getLast(), "tls")){
-                        String forward_id = serviceIds.getFirst();
-                        services.add(forward_id + "_tls");
+                        if (Objects.equals(type, "tcp")) { // 只处理TCP，避免重复处理
+                            Forward forward = forwardService.getById(forwardId);
+                            if (forward == null) {
+                                log.info("删除孤立的服务: {} (节点: {})", service.getName(), node.getId());
+                                GostDto gostDto = GostUtil.DeleteService(node.getId(), forwardId + "_" + userId + "_" + userTunnelId);
+                                System.out.println(gostDto);
+                            }
+                        }

-                        Tunnel tunnel = tunnelService.getById(forward_id);
-                        if (tunnel == null) {
-                            GostUtil.DeleteService(node.getId(), services);
-                            log.info("删除孤立的服务: {} (节点: {})", service.getName(), node.getId());
+
+                        if (Objects.equals(type, "tls")) {
+                            Forward forward = forwardService.getById(forwardId);
+                            if (forward == null) {
+                                log.info("删除孤立的服务: {} (节点: {})", service.getName(), node.getId());
+                                GostUtil.DeleteRemoteService(node.getId(), forwardId+"_"+userId+"_"+userTunnelId);
+                            }
                        }

                    }
-
-                    if (Objects.equals(serviceIds.getLast(), "tcp")){
-                        String forward_id = serviceIds.getFirst();
-                        services.add(forward_id + "_" + serviceIds.get(1) + "_" + serviceIds.get(2) + "_tcp");
-                        services.add(forward_id + "_" + serviceIds.get(1) + "_" + serviceIds.get(2) + "_udp");
-
-                        Forward forward = forwardService.getById(forward_id);
-                        if (forward == null) {
-                            GostUtil.DeleteService(node.getId(), services);
-                            log.info("删除孤立的服务: {} (节点: {})", service.getName(), node.getId());
-                        }
-                    }
-
                }
+
+
            }, "清理服务 " + service.getName());
        }

@@ -95,15 +101,28 @@ public class CheckGostConfigAsync {
    /**
     * 清理孤立的链
     */
-    private void cleanOrphanedChains(List<ConfigItem> configItems, Node node) {
-        if (configItems == null) return;
-        for (ConfigItem chain : configItems) {
+    private void cleanOrphanedChains(GostConfigDto gostConfig, Node node) {
+        if (gostConfig.getChains() == null) {
+            return;
+        }
+        
+
+        for (ConfigItem chain : gostConfig.getChains()) {
            safeExecute(() -> {
-                List<String>  serviceIds = parseServiceName(chain.getName());
-                Tunnel tunnel = tunnelService.getById(serviceIds.getLast());
-                if (tunnel == null) {
-                    GostUtil.DeleteChains(node.getId(), chain.getName());
-                    log.info("删除孤立的链: {} (节点: {})", chain.getName(), node.getId());
+                String[] serviceIds = parseServiceName(chain.getName());
+                if (serviceIds.length == 4) {
+                    String forwardId = serviceIds[0];
+                    String userId = serviceIds[1];
+                    String userTunnelId = serviceIds[2];
+                    String type = serviceIds[3];
+                    
+                    if (Objects.equals(type, "chains")) {
+                        Forward forward = forwardService.getById(forwardId);
+                        if (forward == null) {
+                            log.info("删除孤立的链: {} (节点: {})", chain.getName(), node.getId());
+                            GostUtil.DeleteChains(node.getId(), forwardId+"_"+userId+"_"+userTunnelId);
+                        }
+                    }
                }
            }, "清理链 " + chain.getName());
        }
@@ -112,21 +131,69 @@ public class CheckGostConfigAsync {
    /**
     * 清理孤立的限流器
     */
-    private void cleanOrphanedLimiters(List<ConfigItem> configItems, Node node) {
-        if (configItems == null) return;
+    private void cleanOrphanedLimiters(GostConfigDto gostConfig, Node node) {
+        if (gostConfig.getLimiters() == null) {
+            return;
+        }
        

-        for (ConfigItem limiter : configItems) {
+        for (ConfigItem limiter : gostConfig.getLimiters()) {
            safeExecute(() -> {
                SpeedLimit speedLimit = speedLimitService.getById(limiter.getName());
                if (speedLimit == null) {
-                    GostUtil.DeleteLimiters(node.getId(), Long.parseLong(limiter.getName()));
                    log.info("删除孤立的限流器: {} (节点: {})", limiter.getName(), node.getId());
+                    GostUtil.DeleteLimiters(node.getId(), Long.parseLong(limiter.getName()));
                }
            }, "清理限流器 " + limiter.getName());
        }
    }

+    /**
+     * 同步限流器
+     */
+    private void syncLimiters(GostConfigDto gostConfig, Node node) {
+        List<Tunnel> tunnelList = tunnelService.list(new QueryWrapper<Tunnel>().eq("in_node_id", node.getId()));
+        if (tunnelList == null || tunnelList.isEmpty()) return;
+        safeExecute(() -> {
+            StringBuilder tunnelIds = new StringBuilder();
+            for (Tunnel tunnel : tunnelList) {
+                tunnelIds.append(tunnel.getId()).append(",");
+            }
+            String ids = tunnelIds.deleteCharAt(tunnelIds.length() - 1).toString();
+            List<SpeedLimit> speedLimits = speedLimitService.list(new QueryWrapper<SpeedLimit>().in("tunnel_id", ids));
+            if (speedLimits != null && !speedLimits.isEmpty()) {
+                List<ConfigItem> limiters = gostConfig.getLimiters();
+                List<Long> limiters_ids = new ArrayList<>();
+                List<Long>  speedLimits_ids = new ArrayList<>();
+                if (limiters != null){
+                    for (ConfigItem limiter : limiters) {
+                        limiters_ids.add(Long.valueOf(limiter.getName()));
+                    }
+                }
+                for (SpeedLimit speedLimit : speedLimits) {
+                    speedLimits_ids.add(speedLimit.getId());
+                }
+                List<Long> diff = new ArrayList<>(speedLimits_ids);
+                diff.removeAll(limiters_ids);
+                System.out.println(diff);
+                if (!diff.isEmpty()) {
+
+                    for (Long speed_id : diff) {
+                        SpeedLimit speedLimit = speedLimitService.getById(speed_id);
+                        if (speedLimit != null) {
+                            SpeedLimitUpdateDto speedLimitUpdateDto = new SpeedLimitUpdateDto();
+                            speedLimitUpdateDto.setId(speed_id);
+                            speedLimitUpdateDto.setName(speedLimit.getName());
+                            speedLimitUpdateDto.setSpeed(speedLimit.getSpeed());
+                            speedLimitUpdateDto.setTunnelId(speedLimit.getTunnelId());
+                            speedLimitUpdateDto.setTunnelName(speedLimit.getTunnelName());
+                            speedLimitService.updateSpeedLimit(speedLimitUpdateDto);
+                        }
+                    }
+                }
+            }
+        }, "同步限流器 ");
+    }

    /**
     * 安全执行操作，捕获异常
@@ -143,8 +210,7 @@ public class CheckGostConfigAsync {
    /**
     * 解析服务名称
     */
-    private List<String> parseServiceName(String serviceName) {
-        String[] split = serviceName.split("_");
-        return new ArrayList<>(Arrays.asList(split));
+    private String[] parseServiceName(String serviceName) {
+        return serviceName.split("_");
    }
 }
@@ -1,9 +1,14 @@
 package com.admin.common.task;

-import com.admin.common.dto.GostDto;
 import com.admin.common.utils.GostUtil;
-import com.admin.entity.*;
-import com.admin.service.*;
+import com.admin.entity.Forward;
+import com.admin.entity.Tunnel;
+import com.admin.entity.User;
+import com.admin.entity.UserTunnel;
+import com.admin.service.ForwardService;
+import com.admin.service.TunnelService;
+import com.admin.service.UserService;
+import com.admin.service.UserTunnelService;
 import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
 import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
 import lombok.extern.slf4j.Slf4j;
@@ -33,9 +38,6 @@ public class ResetFlowAsync {
    @Resource
    TunnelService tunnelService;

-    @Resource
-    ChainTunnelService chainTunnelService;
-
    /**
     * 每天0点执行流量重置任务
     * 查询出用户和隧道的重置流量日期是今天的数据，将上下流量重置为0
@@ -195,18 +197,12 @@ public class ResetFlowAsync {
            // 查询对应转发
            List<Forward> forwardList = forwardService.list(new QueryWrapper<Forward>().eq("user_id", user.getId()).eq("status", 1));
            for (Forward forward : forwardList) {
-
-                List<ChainTunnel> chainTunnels = chainTunnelService.list(new QueryWrapper<ChainTunnel>().eq("tunnel_id", forward.getTunnelId()).eq("chain_type", 1));
-                for (ChainTunnel chainTunnel : chainTunnels) {
-                    UserTunnel userTunnel = userTunnelService.getOne(new QueryWrapper<UserTunnel>().eq("user_id", forward.getUserId()).eq("tunnel_id", forward.getTunnelId()));
-                    if (userTunnel != null) {
-                        String name = buildServiceName(forward.getId(), forward.getUserId(), userTunnel.getId());
-                        GostUtil.PauseAndResumeService(chainTunnel.getNodeId(), name, "PauseService");
-                    }
+                UserTunnel userTunnel = userTunnelService.getOne(new QueryWrapper<UserTunnel>().eq("user_id", forward.getUserId()).eq("tunnel_id", forward.getTunnelId()));
+                if (userTunnel != null) {
+                    pauseForwardService(forward, userTunnel.getId());
+                    forward.setStatus(0);
+                    forwardService.updateById(forward);
                }
-
-                forward.setStatus(0);
-                forwardService.updateById(forward);
            }
            user.setStatus(0);
            userService.updateById(user);
@@ -221,23 +217,25 @@ public class ResetFlowAsync {
        for (UserTunnel userTunnel : user_tunnel_list) {
            List<Forward> forwardList = forwardService.list(new QueryWrapper<Forward>().eq("tunnel_id", userTunnel.getTunnelId()).eq("user_id", userTunnel.getUserId()).eq("status", 1));
            for (Forward forward : forwardList) {
-
-                List<ChainTunnel> chainTunnels = chainTunnelService.list(new QueryWrapper<ChainTunnel>().eq("tunnel_id", forward.getTunnelId()).eq("chain_type", 1));
-                for (ChainTunnel chainTunnel : chainTunnels) {
-                    String name = buildServiceName(forward.getId(), forward.getUserId(), userTunnel.getId());
-                    GostUtil.PauseAndResumeService(chainTunnel.getNodeId(), name, "PauseService");
-                }
+                pauseForwardService(forward, userTunnel.getId());
                forward.setStatus(0);
                forwardService.updateById(forward);
            }
-
-
            userTunnel.setStatus(0);
            userTunnelService.updateById(userTunnel);
        }
    }


+    private void pauseForwardService(Forward forward, Integer userTunnelId) {
+        Tunnel tunnel = tunnelService.getById(forward.getTunnelId());
+        if (tunnel == null) return;
+
+        GostUtil.PauseService(tunnel.getInNodeId(), buildServiceName(forward.getId(), forward.getUserId(), userTunnelId));
+        if (tunnel.getType() == 2){
+            GostUtil.PauseRemoteService(tunnel.getOutNodeId(), buildServiceName(forward.getId(), forward.getUserId(), userTunnelId));
+        }
+    }


    private String buildServiceName(Long forwardId, Integer userId, Integer userTunnelId) {
@@ -42,6 +42,7 @@ public class AESCrypto {
            this.secretKey = new SecretKeySpec(keyBytes, ALGORITHM);
            this.secureRandom = new SecureRandom();
            
+            log.info("AES加密器初始化成功");
        } catch (Exception e) {
            log.info("AES加密器初始化失败", e);
            throw new RuntimeException("AES加密器初始化失败: " + e.getMessage(), e);
@@ -1,15 +1,13 @@
 package com.admin.common.utils;

-import cn.hutool.core.util.StrUtil;
+import com.admin.common.dto.GostConfigDto;
 import com.admin.common.dto.GostDto;
-import com.admin.entity.*;
+import com.admin.entity.Tunnel;
 import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
 import org.apache.commons.lang3.StringUtils;
+import org.aspectj.apache.bcel.generic.RET;

-import java.util.regex.Pattern;
-import java.util.List;
-import java.util.Map;
 import java.util.Objects;

 public class GostUtil {
@@ -17,11 +15,7 @@ public class GostUtil {

    public static GostDto AddLimiters(Long node_id, Long name, String speed) {
        JSONObject data = createLimiterData(name, speed);
-        GostDto gostDto = WebSocketServer.send_msg(node_id, data, "AddLimiters");
-        if (gostDto.getMsg().contains("exists")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
+        return WebSocketServer.send_msg(node_id, data, "AddLimiters");
    }

    public static GostDto UpdateLimiters(Long node_id, Long name, String speed) {
@@ -35,182 +29,266 @@ public class GostUtil {
    public static GostDto DeleteLimiters(Long node_id, Long name) {
        JSONObject req = new JSONObject();
        req.put("limiter", name + "");
-        GostDto gostDto = WebSocketServer.send_msg(node_id, req, "DeleteLimiters");
-        if (gostDto.getMsg().contains("not found")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
+        return WebSocketServer.send_msg(node_id, req, "DeleteLimiters");
    }

-    public static GostDto AddChains(Long node_id, List<ChainTunnel> chainTunnels, Map<Long, Node> node_s) {
+    public static GostDto AddService(Long node_id, String name, Integer in_port, Integer limiter, String remoteAddr, Integer fow_type, Tunnel tunnel, String strategy, String interfaceName) {
+        JSONArray services = new JSONArray();
+        String[] protocols = {"tcp", "udp"};
+        for (String protocol : protocols) {
+            JSONObject service = createServiceConfig(name, in_port, limiter, remoteAddr, protocol, fow_type, tunnel, strategy, interfaceName);
+            services.add(service);
+        }
+        return WebSocketServer.send_msg(node_id, services, "AddService");
+    }
+
+    public static GostDto UpdateService(Long node_id, String name, Integer in_port, Integer limiter, String remoteAddr, Integer fow_type, Tunnel tunnel, String strategy, String interfaceName) {
+        JSONArray services = new JSONArray();
+        String[] protocols = {"tcp", "udp"};
+        for (String protocol : protocols) {
+            JSONObject service = createServiceConfig(name, in_port, limiter, remoteAddr, protocol, fow_type, tunnel, strategy, interfaceName);
+            services.add(service);
+        }
+        return WebSocketServer.send_msg(node_id, services, "UpdateService");
+    }
+
+    public static GostDto DeleteService(Long node_id, String name) {
+        JSONObject data = new JSONObject();
+        JSONArray services = new JSONArray();
+        services.add(name + "_tcp");
+        services.add(name + "_udp");
+        data.put("services", services);
+        return WebSocketServer.send_msg(node_id, data, "DeleteService");
+    }
+
+    public static GostDto AddRemoteService(Long node_id, String name, Integer out_port, String remoteAddr,  String protocol, String strategy, String interfaceName) {
+        JSONObject data = new JSONObject();
+        data.put("name", name + "_tls");
+        data.put("addr", ":" + out_port);
+
+        if (StringUtils.isNotBlank(interfaceName)) {
+            JSONObject metadata = new JSONObject();
+            metadata.put("interface", interfaceName);
+            data.put("metadata", metadata);
+        }
+
+
+        JSONObject handler = new JSONObject();
+        handler.put("type", "relay");
+        data.put("handler", handler);
+        JSONObject listener = new JSONObject();
+        listener.put("type", protocol);
+        data.put("listener", listener);
+        JSONObject forwarder = new JSONObject();
        JSONArray nodes = new JSONArray();
-        Node fromNode = node_s.get(node_id);
-        for (ChainTunnel chainTunnel : chainTunnels) {
-            JSONObject dialer = new JSONObject();
-            dialer.put("type", chainTunnel.getProtocol());

-            JSONObject connector = new JSONObject();
-            connector.put("type", "relay");
-
-            Node node_info = node_s.get(chainTunnel.getNodeId());
+        String[] split = remoteAddr.split(",");
+        int num = 1;
+        for (String addr : split) {
            JSONObject node = new JSONObject();
-            node.put("name", "node_" + chainTunnel.getInx());
-
-            String dialHost = (fromNode != null && node_info != null)
-                    ? selectDialHost(fromNode, node_info)
-                    : (node_info != null ? node_info.getServerIp() : null);
-            node.put("addr", processServerAddress(dialHost + ":" + chainTunnel.getPort()));
-            node.put("connector", connector);
-            node.put("dialer", dialer);
-
-
-
+            node.put("name", "node_" + num );
+            node.put("addr", addr);
            nodes.add(node);
+            num ++;
        }
-        JSONObject hop = new JSONObject();
-        hop.put("name", "hop_" + chainTunnels.getFirst().getTunnelId());
-
-        // interface设置在转发链
-        if (StringUtils.isNotBlank(node_s.get(node_id).getInterfaceName())) {
-            hop.put("interface", node_s.get(node_id).getInterfaceName());
+        if (strategy == null || strategy.equals("")){
+            strategy = "fifo";
        }
-
-
+        forwarder.put("nodes", nodes);
        JSONObject selector = new JSONObject();
-        selector.put("strategy", chainTunnels.getFirst().getStrategy());
+        selector.put("strategy", strategy);
        selector.put("maxFails", 1);
-        selector.put("failTimeout", 600000000000L); // 600 秒（纳秒单位）
+        selector.put("failTimeout", "600s");
+        forwarder.put("selector", selector);
+
+        data.put("forwarder", forwarder);
+        JSONArray services = new JSONArray();
+        services.add(data);
+        return WebSocketServer.send_msg(node_id, services, "AddService");
+    }
+
+    public static GostDto UpdateRemoteService(Long node_id, String name, Integer out_port, String remoteAddr,String protocol, String strategy, String interfaceName) {
+        JSONObject data = new JSONObject();
+        data.put("name", name + "_tls");
+        data.put("addr", ":" + out_port);
+
+        if (StringUtils.isNotBlank(interfaceName)) {
+            JSONObject metadata = new JSONObject();
+            metadata.put("interface", interfaceName);
+            data.put("metadata", metadata);
+        }


-        hop.put("selector", selector);
+        JSONObject handler = new JSONObject();
+        handler.put("type", "relay");
+        data.put("handler", handler);
+        JSONObject listener = new JSONObject();
+        listener.put("type", protocol);
+        data.put("listener", listener);
+        JSONObject forwarder = new JSONObject();
+        JSONArray nodes = new JSONArray();
+
+        String[] split = remoteAddr.split(",");
+        int num = 1;
+        for (String addr : split) {
+            JSONObject node = new JSONObject();
+            node.put("name", "node_" + num );
+            node.put("addr", addr);
+            nodes.add(node);
+            num ++;
+        }
+        if (strategy == null || strategy.equals("")){
+            strategy = "fifo";
+        }
+        forwarder.put("nodes", nodes);
+        JSONObject selector = new JSONObject();
+        selector.put("strategy", strategy);
+        selector.put("maxFails", 1);
+        selector.put("failTimeout", "600s");
+        forwarder.put("selector", selector);
+
+        data.put("forwarder", forwarder);
+        JSONArray services = new JSONArray();
+        services.add(data);
+        return WebSocketServer.send_msg(node_id, services, "UpdateService");
+    }
+
+    public static GostDto DeleteRemoteService(Long node_id, String name) {
+        JSONArray data = new JSONArray();
+        data.add(name + "_tls");
+        JSONObject req = new JSONObject();
+        req.put("services", data);
+        return WebSocketServer.send_msg(node_id, req, "DeleteService");
+    }
+
+    public static GostDto PauseService(Long node_id, String name) {
+        JSONObject data = new JSONObject();
+        JSONArray services = new JSONArray();
+        services.add(name + "_tcp");
+        services.add(name + "_udp");
+        data.put("services", services);
+        return WebSocketServer.send_msg(node_id, data, "PauseService");
+    }
+
+    public static GostDto ResumeService(Long node_id, String name) {
+        JSONObject data = new JSONObject();
+        JSONArray services = new JSONArray();
+        services.add(name + "_tcp");
+        services.add(name + "_udp");
+        data.put("services", services);
+        return WebSocketServer.send_msg(node_id, data, "ResumeService");
+    }
+
+    public static GostDto PauseRemoteService(Long node_id, String name) {
+        JSONObject data = new JSONObject();
+        JSONArray services = new JSONArray();
+        services.add(name + "_tls");
+        data.put("services", services);
+        return WebSocketServer.send_msg(node_id, data, "PauseService");
+    }
+
+    public static GostDto ResumeRemoteService(Long node_id, String name) {
+        JSONObject data = new JSONObject();
+        JSONArray services = new JSONArray();
+        services.add(name + "_tls");
+        data.put("services", services);
+        return WebSocketServer.send_msg(node_id, data, "ResumeService");
+    }
+
+    public static GostDto AddChains(Long node_id, String name, String remoteAddr, String protocol, String interfaceName) {
+        JSONObject dialer = new JSONObject();
+        dialer.put("type", protocol);
+        if (Objects.equals(protocol, "quic")){
+            JSONObject metadata = new JSONObject();
+            metadata.put("keepAlive", true);
+            metadata.put("ttl", "10s");
+            dialer.put("metadata", metadata);
+        }
+
+
+
+
+        JSONObject connector = new JSONObject();
+        connector.put("type", "relay");
+
+        JSONObject node = new JSONObject();
+        node.put("name", "node-" + name);
+        node.put("addr", remoteAddr);
+        node.put("connector", connector);
+        node.put("dialer", dialer);
+
+        if (StringUtils.isNotBlank(interfaceName)) {
+            node.put("interface", interfaceName);
+        }
+
+
+        JSONArray nodes = new JSONArray();
+        nodes.add(node);
+
+        JSONObject hop = new JSONObject();
+        hop.put("name", "hop-" + name);
        hop.put("nodes", nodes);

        JSONArray hops = new JSONArray();
        hops.add(hop);

        JSONObject data = new JSONObject();
-        data.put("name", "chains_" + chainTunnels.getFirst().getTunnelId());
+        data.put("name", name + "_chains");
        data.put("hops", hops);

-        GostDto gostDto = WebSocketServer.send_msg(node_id, data, "AddChains");
-        if (gostDto.getMsg().contains("exists")){
-            gostDto.setMsg("OK");
+        return WebSocketServer.send_msg(node_id, data, "AddChains");
+    }
+
+    public static GostDto UpdateChains(Long node_id, String name, String remoteAddr, String protocol, String interfaceName) {
+        JSONObject dialer = new JSONObject();
+        dialer.put("type", protocol);
+
+        if (Objects.equals(protocol, "quic")){
+            JSONObject metadata = new JSONObject();
+            metadata.put("keepAlive", true);
+            metadata.put("ttl", "10s");
+            dialer.put("metadata", metadata);
        }
-        return gostDto;
+
+
+        JSONObject connector = new JSONObject();
+        connector.put("type", "relay");
+
+        JSONObject node = new JSONObject();
+        node.put("name", "node-" + name);
+        node.put("addr", remoteAddr);
+        node.put("connector", connector);
+        node.put("dialer", dialer);
+
+        if (StringUtils.isNotBlank(interfaceName)) {
+            node.put("interface", interfaceName);
+        }
+
+        JSONArray nodes = new JSONArray();
+        nodes.add(node);
+
+        JSONObject hop = new JSONObject();
+        hop.put("name", "hop-" + name);
+        hop.put("nodes", nodes);
+
+        JSONArray hops = new JSONArray();
+        hops.add(hop);
+
+        JSONObject data = new JSONObject();
+        data.put("name", name + "_chains");
+        data.put("hops", hops);
+        JSONObject req = new JSONObject();
+        req.put("chain", name + "_chains");
+        req.put("data", data);
+       return WebSocketServer.send_msg(node_id, req, "UpdateChains");
    }

    public static GostDto DeleteChains(Long node_id, String name) {
        JSONObject data = new JSONObject();
-        data.put("chain", name);
-        GostDto gostDto = WebSocketServer.send_msg(node_id, data, "DeleteChains");
-        if (gostDto.getMsg().contains("not found")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
+        data.put("chain", name + "_chains");
+        return WebSocketServer.send_msg(node_id, data, "DeleteChains");
    }

-    public static GostDto AddChainService(Long node_id, ChainTunnel chainTunnel, Map<Long, Node> node_s) {
-        JSONArray services = new JSONArray();
-        Node node_info = node_s.get(chainTunnel.getNodeId());
-        JSONObject service_item = new JSONObject();
-        service_item.put("name", chainTunnel.getTunnelId() + "_tls");
-        service_item.put("addr", node_info.getTcpListenAddr() + ":" + chainTunnel.getPort());
-        
-        // 只为出口节点(chainType=3)设置 interface
-        if (chainTunnel.getChainType() == 3 && StringUtils.isNotBlank(node_s.get(node_id).getInterfaceName())) {
-            JSONObject metadata = new JSONObject();
-            metadata.put("interface", node_s.get(node_id).getInterfaceName());
-            service_item.put("metadata", metadata);
-        }
-
-        JSONObject handler = new JSONObject();
-        handler.put("type", "relay");
-        if (chainTunnel.getChainType() == 2){
-            handler.put("chain","chains_" + chainTunnel.getTunnelId());
-        }
-        service_item.put("handler", handler);
-
-        JSONObject listener = new JSONObject();
-        listener.put("type", chainTunnel.getProtocol());
-        service_item.put("listener", listener);
-
-        services.add(service_item);
-
-        GostDto gostDto = WebSocketServer.send_msg(node_id, services, "AddService");
-        if (gostDto.getMsg().contains("exists")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
-    }
-
-    public static GostDto AddAndUpdateService(String name, Integer limiter, Node node, Forward forward, ForwardPort forwardPort, Tunnel tunnel, String meth) {
-        JSONArray services = new JSONArray();
-        String[] protocols = {"tcp", "udp"};
-        for (String protocol : protocols) {
-            JSONObject service = new JSONObject();
-            service.put("name", name + "_" + protocol);
-            if (Objects.equals(protocol, "tcp")){
-                service.put("addr", node.getTcpListenAddr() + ":" + forwardPort.getPort());
-            }else {
-                service.put("addr", node.getUdpListenAddr() + ":" + forwardPort.getPort());
-            }
-
-            // 只在端口转发时设置 interface（隧道转发时 interface 在转发链的节点上设置）
-            if (tunnel.getType() == 1 && StringUtils.isNotBlank(node.getInterfaceName())) {
-                JSONObject metadata = new JSONObject();
-                metadata.put("interface", node.getInterfaceName());
-                service.put("metadata", metadata);
-            }
-
-            // 添加限流器配置
-            if (limiter != null) {
-                service.put("limiter", limiter.toString());
-            }
-
-            // 配置处理器
-            JSONObject handler = new JSONObject();
-            handler.put("type", protocol);
-            if (tunnel.getType() == 2){
-                handler.put("chain", "chains_" + forward.getTunnelId());
-            }
-            service.put("handler", handler);
-
-            // 配置监听器
-            JSONObject listener = createListener(protocol);
-            service.put("listener", listener);
-
-            JSONObject forwarder = createForwarder(forward.getRemoteAddr(), forward.getStrategy());
-            service.put("forwarder", forwarder);
-
-            services.add(service);
-        }
-        GostDto gostDto = WebSocketServer.send_msg(node.getId(), services, meth);
-        if (gostDto.getMsg().contains("exists")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
-    }
-
-    public static GostDto DeleteService(Long node_id, JSONArray services) {
-        JSONObject data = new JSONObject();
-        data.put("services", services);
-        GostDto gostDto = WebSocketServer.send_msg(node_id, data, "DeleteService");
-        if (gostDto.getMsg().contains("not found")){
-            gostDto.setMsg("OK");
-        }
-        return gostDto;
-    }
-
-    public static GostDto PauseAndResumeService(Long node_id, String name, String meth) {
-        JSONObject data = new JSONObject();
-        JSONArray services = new JSONArray();
-        services.add(name + "_tcp");
-        services.add(name + "_udp");
-        data.put("services", services);
-        return WebSocketServer.send_msg(node_id, data, meth);
-    }
-
-
    private static JSONObject createLimiterData(Long name, String speed) {
        JSONObject data = new JSONObject();
        data.put("name", name.toString());
@@ -220,10 +298,59 @@ public class GostUtil {
        return data;
    }

+    private static JSONObject createServiceConfig(String name, Integer in_port, Integer limiter, String remoteAddr, String protocol, Integer fow_type, Tunnel tunnel, String strategy, String interfaceName) {
+        JSONObject service = new JSONObject();
+        service.put("name", name + "_" + protocol);
+        if (Objects.equals(protocol, "tcp")){
+            service.put("addr", tunnel.getTcpListenAddr() + ":" + in_port);
+        }else {
+            service.put("addr", tunnel.getUdpListenAddr() + ":" + in_port);
+        }
+
+        if (StringUtils.isNotBlank(interfaceName)) {
+            JSONObject metadata = new JSONObject();
+            metadata.put("interface", interfaceName);
+            service.put("metadata", metadata);
+        }
+
+
+        // 添加限流器配置
+        if (limiter != null) {
+            service.put("limiter", limiter.toString());
+        }
+
+        // 配置处理器
+        JSONObject handler = createHandler(protocol, name, fow_type);
+        service.put("handler", handler);
+
+        // 配置监听器
+        JSONObject listener = createListener(protocol);
+        service.put("listener", listener);
+
+        // 端口转发需要配置转发器
+        if (isPortForwarding(fow_type)) {
+            JSONObject forwarder = createForwarder(remoteAddr, strategy);
+            service.put("forwarder", forwarder);
+        }
+        return service;
+    }
+
+    private static JSONObject createHandler(String protocol, String name, Integer fow_type) {
+        JSONObject handler = new JSONObject();
+        handler.put("type", protocol);
+
+        // 隧道转发需要添加链配置
+        if (isTunnelForwarding(fow_type)) {
+            handler.put("chain", name + "_chains");
+        }
+
+        return handler;
+    }
+
    private static JSONObject createListener(String protocol) {
        JSONObject listener = new JSONObject();
        listener.put("type", protocol);
-        if (Objects.equals(protocol, "udp")) {
+        if (Objects.equals(protocol, "udp")){
            JSONObject metadata = new JSONObject();
            metadata.put("keepAlive", true);
            listener.put("metadata", metadata);
@@ -239,13 +366,13 @@ public class GostUtil {
        int num = 1;
        for (String addr : split) {
            JSONObject node = new JSONObject();
-            node.put("name", "node_" + num);
+            node.put("name", "node_" + num );
            node.put("addr", addr);
            nodes.add(node);
-            num++;
+            num ++;
        }

-        if (strategy == null || strategy.isEmpty()) {
+        if (strategy == null || strategy.equals("")){
            strategy = "fifo";
        }

@@ -259,153 +386,12 @@ public class GostUtil {
        return forwarder;
    }

-    public static String processServerAddress(String serverAddr) {
-        if (StrUtil.isBlank(serverAddr)) {
-            return serverAddr;
-        }
-
-        // 如果已经被方括号包裹，直接返回
-        if (serverAddr.startsWith("[")) {
-            return serverAddr;
-        }
-
-        // 查找最后一个冒号，分离主机和端口
-        int lastColonIndex = serverAddr.lastIndexOf(':');
-        if (lastColonIndex == -1) {
-            // 没有端口号，直接检查是否需要包裹
-            return isIPv6Address(serverAddr) ? "[" + serverAddr + "]" : serverAddr;
-        }
-
-        String host = serverAddr.substring(0, lastColonIndex);
-        String port = serverAddr.substring(lastColonIndex);
-
-        // 检查主机部分是否为IPv6地址
-        if (isIPv6Address(host)) {
-            return "[" + host + "]" + port;
-        }
-
-        return serverAddr;
+    private static boolean isPortForwarding(Integer fow_type) {
+        return fow_type != null && fow_type == 1;
    }

-    private static boolean isIPv6Address(String address) {
-        // IPv6地址包含多个冒号，至少2个
-        if (!address.contains(":")) {
-            return false;
-        }
-
-        // 计算冒号数量，IPv6地址至少有2个冒号
-        long colonCount = address.chars().filter(ch -> ch == ':').count();
-        return colonCount >= 2;
+    private static boolean isTunnelForwarding(Integer fow_type) {
+        return fow_type != null && fow_type != 1;
    }

-    /**
-     * v4 优先：当两端都有 v4 时选择 v4，否则尝试 v6。
-     * 用于节点之间建立链路（A -> B 需要选择 B 的地址族，且 A 需要支持该地址族）。
-     */
-    public static String selectDialHost(Node fromNode, Node toNode) {
-        if (fromNode == null || toNode == null) {
-            throw new IllegalArgumentException("node is null");
-        }
-
-        boolean fromV4 = supportsV4(fromNode);
-        boolean fromV6 = supportsV6(fromNode);
-        boolean toV4 = supportsV4(toNode);
-        boolean toV6 = supportsV6(toNode);
-
-        if (fromV4 && toV4) {
-            return pickToAddressV4(toNode);
-        }
-        if (fromV6 && toV6) {
-            return pickToAddressV6(toNode);
-        }
-
-        throw new RuntimeException(
-                "节点链路不兼容：" + safeName(fromNode) + "(v4=" + fromV4 + ",v6=" + fromV6 + ") -> "
-                        + safeName(toNode) + "(v4=" + toV4 + ",v6=" + toV6 + ")"
-        );
-    }
-
-    private static String safeName(Node node) {
-        if (node.getName() == null || node.getName().isBlank()) {
-            return "node_" + node.getId();
-        }
-        return node.getName();
-    }
-
-    private static boolean supportsV4(Node node) {
-        // New dual-stack fields take precedence over legacy serverIp.
-        // If user explicitly provided only v6, treat as v6-only.
-        if (StrUtil.isNotBlank(node.getServerIpV4())) {
-            return true;
-        }
-
-        if (StrUtil.isNotBlank(node.getServerIpV6())) {
-            return false;
-        }
-
-        String legacy = node.getServerIp();
-        if (StrUtil.isBlank(legacy)) {
-            return false;
-        }
-
-        legacy = legacy.trim();
-        if (looksLikeIpv4(legacy)) {
-            return true;
-        }
-        if (isIPv6Address(legacy)) {
-            return false;
-        }
-
-        // 域名/其它：无法判断，按双栈处理以保持兼容
-        return true;
-    }
-
-    private static boolean supportsV6(Node node) {
-        // New dual-stack fields take precedence over legacy serverIp.
-        // If user explicitly provided only v4, treat as v4-only.
-        if (StrUtil.isNotBlank(node.getServerIpV6())) {
-            return true;
-        }
-
-        if (StrUtil.isNotBlank(node.getServerIpV4())) {
-            return false;
-        }
-
-        String legacy = node.getServerIp();
-        if (StrUtil.isBlank(legacy)) {
-            return false;
-        }
-
-        legacy = legacy.trim();
-        if (isIPv6Address(legacy)) {
-            return true;
-        }
-        if (looksLikeIpv4(legacy)) {
-            return false;
-        }
-
-        // 域名/其它：无法判断，按双栈处理以保持兼容
-        return true;
-    }
-
-    private static String pickToAddressV4(Node toNode) {
-        if (StrUtil.isNotBlank(toNode.getServerIpV4())) {
-            return toNode.getServerIpV4().trim();
-        }
-        String legacy = toNode.getServerIp();
-        return legacy != null ? legacy.trim() : null;
-    }
-
-    private static String pickToAddressV6(Node toNode) {
-        if (StrUtil.isNotBlank(toNode.getServerIpV6())) {
-            return toNode.getServerIpV6().trim();
-        }
-        String legacy = toNode.getServerIp();
-        return legacy != null ? legacy.trim() : null;
-    }
-
-    private static boolean looksLikeIpv4(String value) {
-        Pattern ipv4 = Pattern.compile("^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$");
-        return ipv4.matcher(value).matches();
-    }
 }
@@ -229,7 +229,6 @@ public class WebSocketServer extends TextWebSocketHandler {
                String socks = (String) session.getAttributes().get("socks");
                
                log.info("节点 {} 尝试连接，开始处理连接逻辑", nodeId);
-                log.info("屏蔽协议数据:http->{}, tls->{}, socks->{}", http, tls, socks);
                
                // 检查是否已有该节点的连接，如果有则记录日志但直接覆盖
                WebSocketSession existingSession = nodeSessions.get(nodeId);
@@ -1,6 +1,5 @@
 package com.admin.config;

-import com.baomidou.mybatisplus.annotation.DbType;
 import com.baomidou.mybatisplus.autoconfigure.ConfigurationCustomizer;
 import com.baomidou.mybatisplus.extension.plugins.MybatisPlusInterceptor;
 import com.baomidou.mybatisplus.extension.plugins.inner.BlockAttackInnerInterceptor;
@@ -16,9 +15,7 @@ public class MybatisPlusConfig {
    @Bean
    public MybatisPlusInterceptor mybatisPlusInterceptor() {
        MybatisPlusInterceptor interceptor = new MybatisPlusInterceptor();
-        // 配置分页插件，指定数据库类型为 SQLite
-        PaginationInnerInterceptor paginationInterceptor = new PaginationInnerInterceptor(DbType.SQLITE);
-        interceptor.addInnerInterceptor(paginationInterceptor); // 分页插件
+        interceptor.addInnerInterceptor(new PaginationInnerInterceptor()); // 分页插件
        interceptor.addInnerInterceptor(new BlockAttackInnerInterceptor()); // 防止全表更新插件
        return interceptor;
    }
@@ -1,172 +0,0 @@
-package com.admin.config;
-
-import lombok.extern.slf4j.Slf4j;
-import org.springframework.boot.ApplicationArguments;
-import org.springframework.boot.ApplicationRunner;
-import org.springframework.scheduling.annotation.EnableScheduling;
-import org.springframework.scheduling.annotation.Scheduled;
-import org.springframework.stereotype.Component;
-
-import javax.annotation.PreDestroy;
-import javax.sql.DataSource;
-import java.sql.Connection;
-import java.sql.PreparedStatement;
-import java.sql.ResultSet;
-import java.sql.Statement;
-import java.util.HashSet;
-import java.util.Set;
-import java.util.regex.Pattern;
-
-/**
- * SQLite 数据库配置
- * 启用 WAL (Write-Ahead Logging) 模式以提高并发性能
- * 添加定期 checkpoint 和优雅关闭处理
- */
-@Slf4j
-@Component
-@EnableScheduling
-public class SQLiteConfig implements ApplicationRunner {
-
-    private final DataSource dataSource;
-
-    public SQLiteConfig(DataSource dataSource) {
-        this.dataSource = dataSource;
-    }
-
-    @Override
-    public void run(ApplicationArguments args) throws Exception {
-        try (Connection connection = dataSource.getConnection();
-             Statement statement = connection.createStatement()) {
-            
-            statement.execute("PRAGMA journal_mode=WAL;");
-            statement.execute("PRAGMA synchronous=NORMAL;");
-            statement.execute("PRAGMA cache_size=-64000;"); // 64MB 缓存
-            statement.execute("PRAGMA temp_store=MEMORY;");
-            statement.execute("PRAGMA busy_timeout=5000;"); // 5秒超时
-            statement.execute("PRAGMA wal_autocheckpoint=1000;"); // 每1000页自动checkpoint
-
-            ensureNodeDualStackColumns(connection);
-             
-            log.info("SQLite WAL mode configured successfully");
-        } catch (Exception e) {
-            log.error("Failed to configure SQLite database", e);
-            throw e;
-        }
-    }
-
-    private void ensureNodeDualStackColumns(Connection connection) throws Exception {
-        Set<String> cols = getTableColumns(connection, "node");
-        if (cols.isEmpty()) {
-            return;
-        }
-
-        ensureColumnIfMissing(connection, cols, "node", "server_ip_v4", "VARCHAR(100)");
-        ensureColumnIfMissing(connection, cols, "node", "server_ip_v6", "VARCHAR(100)");
-
-        backfillNodeDualStackColumns(connection);
-    }
-
-    private void backfillNodeDualStackColumns(Connection connection) throws Exception {
-        Pattern ipv4 = Pattern.compile("^(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$");
-
-        try (Statement statement = connection.createStatement();
-             ResultSet rs = statement.executeQuery("SELECT id, server_ip, server_ip_v4, server_ip_v6 FROM node;");
-             PreparedStatement updV4 = connection.prepareStatement("UPDATE node SET server_ip_v4 = ? WHERE id = ?;");
-             PreparedStatement updV6 = connection.prepareStatement("UPDATE node SET server_ip_v6 = ? WHERE id = ?;")
-        ) {
-            while (rs.next()) {
-                long id = rs.getLong("id");
-                String serverIp = rs.getString("server_ip");
-                String v4 = rs.getString("server_ip_v4");
-                String v6 = rs.getString("server_ip_v6");
-
-                if (serverIp == null || serverIp.isBlank()) {
-                    continue;
-                }
-                if ((v4 != null && !v4.isBlank()) || (v6 != null && !v6.isBlank())) {
-                    continue;
-                }
-
-                String trimmed = serverIp.trim();
-
-                if (ipv4.matcher(trimmed).matches()) {
-                    updV4.setString(1, trimmed);
-                    updV4.setLong(2, id);
-                    updV4.executeUpdate();
-                } else {
-                    long colonCount = trimmed.chars().filter(ch -> ch == ':').count();
-                    if (colonCount >= 2) {
-                        updV6.setString(1, trimmed);
-                        updV6.setLong(2, id);
-                        updV6.executeUpdate();
-                    }
-                }
-            }
-        }
-    }
-
-    private Set<String> getTableColumns(Connection connection, String table) throws Exception {
-        Set<String> cols = new HashSet<>();
-        try (Statement statement = connection.createStatement();
-             ResultSet rs = statement.executeQuery("PRAGMA table_info(" + table + ");")) {
-            while (rs.next()) {
-                String name = rs.getString("name");
-                if (name != null && !name.isBlank()) {
-                    cols.add(name);
-                }
-            }
-        }
-        return cols;
-    }
-
-    private void ensureColumnIfMissing(
-            Connection connection,
-            Set<String> existingColumns,
-            String table,
-            String column,
-            String type
-    ) throws Exception {
-        if (existingColumns.contains(column)) {
-            return;
-        }
-
-        try (Statement statement = connection.createStatement()) {
-            statement.execute("ALTER TABLE " + table + " ADD COLUMN " + column + " " + type + ";");
-        }
-
-        log.info("SQLite schema updated: added {}.{}", table, column);
-    }
-    
-    /**
-     * 定期执行 checkpoint，确保 WAL 文件内容写入主数据库
-     * 每5分钟执行一次
-     */
-    @Scheduled(fixedDelay = 300000, initialDelay = 300000)
-    public void performCheckpoint() {
-        try (Connection connection = dataSource.getConnection();
-             Statement statement = connection.createStatement()) {
-            
-            statement.execute("PRAGMA wal_checkpoint(TRUNCATE);");
-            log.debug("SQLite WAL checkpoint completed");
-        } catch (Exception e) {
-            log.error("Failed to perform SQLite checkpoint", e);
-        }
-    }
-    
-    /**
-     * 应用关闭前执行最终的 checkpoint，确保所有数据都写入主数据库文件
-     */
-    @PreDestroy
-    public void onShutdown() {
-        log.info("Performing final SQLite checkpoint before shutdown...");
-        try (Connection connection = dataSource.getConnection();
-             Statement statement = connection.createStatement()) {
-            
-            // 强制执行 checkpoint，将所有 WAL 内容写入主数据库
-            statement.execute("PRAGMA wal_checkpoint(TRUNCATE);");
-            log.info("Final SQLite checkpoint completed successfully");
-        } catch (Exception e) {
-            log.error("Failed to perform final SQLite checkpoint", e);
-        }
-    }
-}
@@ -3,17 +3,15 @@ package com.admin.controller;
 import com.admin.common.aop.LogAnnotation;
 import com.admin.common.dto.FlowDto;
 import com.admin.common.dto.GostConfigDto;
+import com.admin.common.lang.R;
 import com.admin.common.task.CheckGostConfigAsync;
 import com.admin.common.utils.AESCrypto;
 import com.admin.common.utils.GostUtil;
 import com.admin.entity.*;
-import com.admin.service.ChainTunnelService;
 import com.alibaba.fastjson.JSON;
-import com.alibaba.fastjson.JSONArray;
 import com.alibaba.fastjson.JSONObject;
 import com.baomidou.mybatisplus.core.conditions.query.QueryWrapper;
 import com.baomidou.mybatisplus.core.conditions.update.UpdateWrapper;
-import org.springframework.context.annotation.Lazy;
 import org.springframework.web.bind.annotation.*;
 import lombok.extern.slf4j.Slf4j;

@@ -23,6 +21,7 @@ import java.util.Date;
 import java.util.List;
 import java.util.Objects;
 import java.util.concurrent.ConcurrentHashMap;
+import java.util.stream.Collectors;

 /**
 * 流量上报控制器
@@ -66,10 +65,6 @@ public class FlowController extends BaseController {
    @Resource
    CheckGostConfigAsync checkGostConfigAsync;

-    @Resource
-    @Lazy
-    ChainTunnelService chainTunnelService;
-
    /**
     * 加密消息包装器
     */
@@ -152,17 +147,15 @@ public class FlowController extends BaseController {
        String decryptedData = decryptIfNeeded(rawData, secret);

        // 3. 解析为FlowDto列表
-        JSONArray flowDataList = JSONObject.parseArray(decryptedData);
-        log.info("节点上报流量数据{}", flowDataList);
-        for (int i = 0; i < flowDataList.size(); i++) {
-            String jsonObject = flowDataList.getJSONObject(i).toJSONString();
-            FlowDto flowDto = JSONObject.parseObject(jsonObject, FlowDto.class);
-            if (!Objects.equals(flowDto.getN(), "web_api")) {
-                processFlowData(flowDto);
-            }
+        FlowDto flowDataList = JSONObject.parseObject(decryptedData, FlowDto.class);
+        if (Objects.equals(flowDataList.getN(), "web_api")) {
+            return SUCCESS_RESPONSE;
        }
-        return SUCCESS_RESPONSE;

+        // 记录日志
+        log.info("节点上报流量数据{}", flowDataList);
+        // 4. 处理流量数据
+        return processFlowData(flowDataList);
    }

    /**
@@ -219,30 +212,24 @@ public class FlowController extends BaseController {
    /**
     * 处理流量数据的核心逻辑
     */
-    private void processFlowData(FlowDto flowDataList) {
+    private String processFlowData(FlowDto flowDataList) {
        String[] serviceIds = parseServiceName(flowDataList.getN());
        String forwardId = serviceIds[0];
        String userId = serviceIds[1];
        String userTunnelId = serviceIds[2];

        Forward forward = forwardService.getById(forwardId);
-        if (forward != null){
-            Tunnel tunnel = tunnelService.getById(forward.getTunnelId());

-            //  处理流量倍率及单双向计算
-            BigDecimal trafficRatio = tunnel.getTrafficRatio();
-            BigDecimal originalD = BigDecimal.valueOf(flowDataList.getD());
-            BigDecimal originalU = BigDecimal.valueOf(flowDataList.getU());
-            BigDecimal newD = originalD.multiply(trafficRatio);
-            BigDecimal newU = originalU.multiply(trafficRatio);
-            flowDataList.setD(newD.longValue() * tunnel.getFlow());
-            flowDataList.setU(newU.longValue() * tunnel.getFlow());
-        }
+        // 获取流量计费类型
+        int flowType = getFlowType(forward);
+
+        //  处理流量倍率及单双向计算
+        FlowDto flowStats = filterFlowData(flowDataList, forward, flowType);

        // 先更新所有流量统计 - 确保流量数据的一致性
-        updateForwardFlow(forwardId, flowDataList);
-        updateUserFlow(userId, flowDataList);
-        updateUserTunnelFlow(userTunnelId, flowDataList);
+        updateForwardFlow(forwardId, flowStats);
+        updateUserFlow(userId, flowStats);
+        updateUserTunnelFlow(userTunnelId, flowStats);

        // 7. 检查和服务暂停操作
        String name = buildServiceName(forwardId, userId, userTunnelId);
@@ -251,6 +238,7 @@ public class FlowController extends BaseController {
            checkUserTunnelRelatedLimits(userTunnelId, name, userId);
        }

+        return SUCCESS_RESPONSE;
    }

    private void checkUserRelatedLimits(String userId, String name) {
@@ -289,7 +277,7 @@ public class FlowController extends BaseController {
        UserTunnel userTunnel = userTunnelService.getById(userTunnelId);
        if (userTunnel == null) return;
        long flow = userTunnel.getInFlow() + userTunnel.getOutFlow();
-        if (flow >= userTunnel.getFlow() * BYTES_TO_GB) {
+        if (flow >= userTunnel.getFlow() *  BYTES_TO_GB) {
            pauseSpecificForward(userTunnel.getTunnelId(), name, userId);
            return;
        }
@@ -313,15 +301,45 @@ public class FlowController extends BaseController {

    public void pauseService(List<Forward> forwardList, String name) {
        for (Forward forward : forwardList) {
-            List<ChainTunnel> chainTunnels = chainTunnelService.list(new QueryWrapper<ChainTunnel>().eq("tunnel_id", forward.getTunnelId()).eq("chain_type", 1));
-            for (ChainTunnel chainTunnel : chainTunnels) {
-                GostUtil.PauseAndResumeService(chainTunnel.getNodeId(), name, "PauseService");
+            Tunnel tunnel = tunnelService.getById(forward.getTunnelId());
+            if (tunnel != null){
+                GostUtil.PauseService(tunnel.getInNodeId(), name);
+                if (tunnel.getType() == 2){
+                    GostUtil.PauseRemoteService(tunnel.getOutNodeId(), name);
+                }
            }
            forward.setStatus(0);
            forwardService.updateById(forward);
        }
    }

+    private FlowDto filterFlowData(FlowDto flowDto, Forward forward, int flowType) {
+        if (forward != null) {
+            Tunnel tunnel = tunnelService.getById(forward.getTunnelId());
+            if (tunnel != null) {
+                BigDecimal trafficRatio = tunnel.getTrafficRatio();
+
+                BigDecimal originalD = BigDecimal.valueOf(flowDto.getD());
+                BigDecimal originalU = BigDecimal.valueOf(flowDto.getU());
+
+                BigDecimal newD = originalD.multiply(trafficRatio);
+                BigDecimal newU = originalU.multiply(trafficRatio);
+
+                flowDto.setD(newD.longValue() * flowType);
+                flowDto.setU(newU.longValue() * flowType);
+            }
+        }
+        return flowDto;
+    }
+
+    private int getFlowType(Forward forward) {
+        int defaultFlowType = 2;
+        if (forward == null) return defaultFlowType;
+        Tunnel tunnel = tunnelService.getById(forward.getTunnelId());
+        if (tunnel == null) return defaultFlowType;
+        return tunnel.getFlow();
+    }
+
    private void updateForwardFlow(String forwardId, FlowDto flowStats) {
        // 对相同转发的流量更新进行同步，避免并发覆盖
        synchronized (getForwardLock(forwardId)) {
@@ -1,13 +1,10 @@
 package com.admin.controller;

-import com.admin.common.aop.LogAnnotation;
-import com.admin.common.annotation.RequireRole;
-import com.admin.common.dto.BatchDeleteDto;
-import com.admin.common.dto.BatchRedeployDto;
-import com.admin.common.dto.BatchChangeTunnelDto;
-import com.admin.common.dto.ForwardDto;
-import com.admin.common.dto.ForwardUpdateDto;
-import com.admin.common.lang.R;
+import com.admin.common.aop.LogAnnotation;
+import com.admin.common.annotation.RequireRole;
+import com.admin.common.dto.ForwardDto;
+import com.admin.common.dto.ForwardUpdateDto;
+import com.admin.common.lang.R;
 import com.admin.service.ForwardService;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
@@ -94,40 +91,10 @@ public class ForwardController extends BaseController {
     * @param params 包含forwards数组的参数，每个元素包含id和inx
     * @return 更新结果
     */
-    @LogAnnotation
-    @PostMapping("/update-order")
-    public R updateForwardOrder(@RequestBody Map<String, Object> params) {
-        return forwardService.updateForwardOrder(params);
-    }
-
-    @LogAnnotation
-    @PostMapping("/batch-delete")
-    public R batchDelete(@Validated @RequestBody BatchDeleteDto batchDeleteDto) {
-        return forwardService.batchDeleteForwards(batchDeleteDto);
-    }
-
-    @LogAnnotation
-    @PostMapping("/batch-pause")
-    public R batchPause(@Validated @RequestBody BatchDeleteDto batchDeleteDto) {
-        return forwardService.batchPauseForwards(batchDeleteDto);
-    }
-
-    @LogAnnotation
-    @PostMapping("/batch-resume")
-    public R batchResume(@Validated @RequestBody BatchDeleteDto batchDeleteDto) {
-        return forwardService.batchResumeForwards(batchDeleteDto);
-    }
-
-    @LogAnnotation
-    @PostMapping("/batch-redeploy")
-    public R batchRedeploy(@Validated @RequestBody BatchRedeployDto batchRedeployDto) {
-        return forwardService.batchRedeployForwards(batchRedeployDto);
-    }
-
-    @LogAnnotation
-    @PostMapping("/batch-change-tunnel")
-    public R batchChangeTunnel(@Validated @RequestBody BatchChangeTunnelDto batchChangeTunnelDto) {
-        return forwardService.batchChangeTunnel(batchChangeTunnelDto);
-    }
-
-}
+    @LogAnnotation
+    @PostMapping("/update-order")
+    public R updateForwardOrder(@RequestBody Map<String, Object> params) {
+        return forwardService.updateForwardOrder(params);
+    }
+
+}
@@ -1,123 +0,0 @@
-package com.admin.controller;
-
-import com.admin.common.aop.LogAnnotation;
-import com.admin.common.annotation.RequireRole;
-import com.admin.common.dto.GroupCreateDto;
-import com.admin.common.dto.GroupPermissionAssignDto;
-import com.admin.common.dto.GroupUpdateDto;
-import com.admin.common.dto.TunnelGroupAssignTunnelsDto;
-import com.admin.common.dto.UserGroupAssignUsersDto;
-import com.admin.common.lang.R;
-import com.admin.service.GroupService;
-import org.springframework.validation.annotation.Validated;
-import org.springframework.web.bind.annotation.CrossOrigin;
-import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
-import org.springframework.web.bind.annotation.RequestMapping;
-import org.springframework.web.bind.annotation.RestController;
-
-import javax.annotation.Resource;
-import java.util.Map;
-
-@RestController
-@CrossOrigin
-@RequestMapping("/api/v1/group")
-public class GroupController {
-
-    @Resource
-    private GroupService groupService;
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/tunnel/list")
-    public R tunnelGroupList() {
-        return groupService.getTunnelGroups();
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/tunnel/create")
-    public R createTunnelGroup(@Validated @RequestBody GroupCreateDto dto) {
-        return groupService.createTunnelGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/tunnel/update")
-    public R updateTunnelGroup(@Validated @RequestBody GroupUpdateDto dto) {
-        return groupService.updateTunnelGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/tunnel/delete")
-    public R deleteTunnelGroup(@RequestBody Map<String, Object> params) {
-        Long id = Long.valueOf(params.get("id").toString());
-        return groupService.deleteTunnelGroup(id);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/tunnel/assign")
-    public R assignTunnels(@Validated @RequestBody TunnelGroupAssignTunnelsDto dto) {
-        return groupService.assignTunnelsToGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/list")
-    public R userGroupList() {
-        return groupService.getUserGroups();
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/create")
-    public R createUserGroup(@Validated @RequestBody GroupCreateDto dto) {
-        return groupService.createUserGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/update")
-    public R updateUserGroup(@Validated @RequestBody GroupUpdateDto dto) {
-        return groupService.updateUserGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/delete")
-    public R deleteUserGroup(@RequestBody Map<String, Object> params) {
-        Long id = Long.valueOf(params.get("id").toString());
-        return groupService.deleteUserGroup(id);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/assign")
-    public R assignUsers(@Validated @RequestBody UserGroupAssignUsersDto dto) {
-        return groupService.assignUsersToGroup(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/permission/list")
-    public R listPermissions() {
-        return groupService.getGroupPermissions();
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/permission/assign")
-    public R assignPermission(@Validated @RequestBody GroupPermissionAssignDto dto) {
-        return groupService.assignGroupPermission(dto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/permission/remove")
-    public R removePermission(@RequestBody Map<String, Object> params) {
-        Long id = Long.valueOf(params.get("id").toString());
-        return groupService.removeGroupPermission(id);
-    }
-}
@@ -1,14 +1,13 @@
-package com.admin.controller;
-
-
-import com.admin.common.annotation.RequireRole;
-import com.admin.common.aop.LogAnnotation;
-import com.admin.common.dto.BatchDeleteDto;
-import com.admin.common.dto.NodeDto;
-import com.admin.common.dto.NodeUpdateDto;
-import com.admin.common.lang.R;
-import org.springframework.validation.annotation.Validated;
-import org.springframework.web.bind.annotation.*;
+package com.admin.controller;
+
+
+import com.admin.common.annotation.RequireRole;
+import com.admin.common.aop.LogAnnotation;
+import com.admin.common.dto.NodeDto;
+import com.admin.common.dto.NodeUpdateDto;
+import com.admin.common.lang.R;
+import org.springframework.validation.annotation.Validated;
+import org.springframework.web.bind.annotation.*;

 import java.util.Map;

@@ -55,31 +54,12 @@ public class NodeController extends BaseController {
        return nodeService.deleteNode(id);
    }

-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/install")
-    public R getInstallCommand(@RequestBody Map<String, Object> params) {
-        Long id = Long.valueOf(params.get("id").toString());
-        return nodeService.getInstallCommand(id);
-    }
-
-    /**
-     * 更新节点排序
-     * @param params 包含nodes数组的参数，每个元素包含id和inx
-     * @return 更新结果
-     */
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/update-order")
-    public R updateNodeOrder(@RequestBody Map<String, Object> params) {
-        return nodeService.updateNodeOrder(params);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/batch-delete")
-    public R batchDelete(@Validated @RequestBody BatchDeleteDto batchDeleteDto) {
-        return nodeService.batchDeleteNodes(batchDeleteDto);
-    }
-
-}
+    @LogAnnotation
+    @RequireRole
+    @PostMapping("/install")
+    public R getInstallCommand(@RequestBody Map<String, Object> params) {
+        Long id = Long.valueOf(params.get("id").toString());
+        return nodeService.getInstallCommand(id);
+    }
+
+}
@@ -2,12 +2,9 @@ package com.admin.controller;

 import com.admin.common.aop.LogAnnotation;
 import com.admin.common.annotation.RequireRole;
-import com.admin.common.dto.BatchDeleteDto;
-import com.admin.common.dto.BatchRedeployDto;
 import com.admin.common.dto.TunnelDto;
 import com.admin.common.dto.TunnelUpdateDto;

-import com.admin.common.dto.UserTunnelBatchAssignDto;
 import com.admin.common.dto.UserTunnelDto;
 import com.admin.common.dto.UserTunnelQueryDto;
 import com.admin.common.dto.UserTunnelUpdateDto;
@@ -81,13 +78,6 @@ public class TunnelController extends BaseController {
    public R assignUserTunnel(@Validated @RequestBody UserTunnelDto userTunnelDto) {
        return userTunnelService.assignUserTunnel(userTunnelDto);
    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/user/batch-assign")
-    public R batchAssignUserTunnel(@Validated @RequestBody UserTunnelBatchAssignDto batchAssignDto) {
-        return userTunnelService.batchAssignUserTunnel(batchAssignDto);
-    }
    
    /**
     * 查询用户隧道权限列表
@@ -147,30 +137,4 @@ public class TunnelController extends BaseController {
        return tunnelService.diagnoseTunnel(tunnelId);
    }

-    /**
-     * 更新隧道排序
-     * @param params 包含tunnels数组的参数，每个元素包含id和inx
-     * @return 更新结果
-     */
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/update-order")
-    public R updateTunnelOrder(@RequestBody Map<String, Object> params) {
-        return tunnelService.updateTunnelOrder(params);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/batch-delete")
-    public R batchDelete(@Validated @RequestBody BatchDeleteDto batchDeleteDto) {
-        return tunnelService.batchDeleteTunnels(batchDeleteDto);
-    }
-
-    @LogAnnotation
-    @RequireRole
-    @PostMapping("/batch-redeploy")
-    public R batchRedeploy(@Validated @RequestBody BatchRedeployDto batchRedeployDto) {
-        return tunnelService.batchRedeployTunnels(batchRedeployDto);
-    }
-
 }
@@ -1,42 +0,0 @@
-package com.admin.entity;
-
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import lombok.Data;
-import lombok.EqualsAndHashCode;
-
-import java.io.Serializable;
-
-@Data
-@EqualsAndHashCode(callSuper = false)
-public class ChainTunnel implements Serializable {
-
-    private static final long serialVersionUID = 1L;
-
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    // 关联的隧道ID
-    private Long tunnelId;
-
-    // 记录所选节点的类型： 1是入口节点  2是转发链  3是出口节点
-    private Integer chainType;
-
-    // 记录所选节点的ID
-    private Long nodeId;
-
-    // 记录节点使用的端口  入口没有次配置为null
-    private Integer port;
-
-    // 负载模式 入口没有次配置为null
-    private String strategy;
-    
-    // 只有转发链有次参数 表示是第几条
-    private Integer inx;
-
-    // 使用的协议 入口没有次配置为null
-    private String protocol;
-
-
-}
@@ -1,12 +1,6 @@
 package com.admin.entity;

 import java.io.Serializable;
-import java.util.List;
-
-import com.admin.common.dto.ForwardPortDto;
-import com.baomidou.mybatisplus.annotation.TableField;
-import com.baomidou.mybatisplus.annotation.TableName;
-import com.baomidou.mybatisplus.extension.handlers.JacksonTypeHandler;
 import lombok.Data;
 import lombok.EqualsAndHashCode;

@@ -20,7 +14,6 @@ import lombok.EqualsAndHashCode;
 */
@Data
@EqualsAndHashCode(callSuper = false)
-@TableName(autoResultMap = true)
 public class Forward extends BaseEntity{

    private static final long serialVersionUID = 1L;
@@ -33,8 +26,14 @@ public class Forward extends BaseEntity{

    private Integer tunnelId;

+    private Integer inPort;
+
+    private Integer outPort;
+
    private String remoteAddr;

+    private String interfaceName;
+
    private String strategy;

    private Long inFlow;
@@ -42,4 +41,5 @@ public class Forward extends BaseEntity{
    private Long outFlow;

    private Integer inx;
+
 }
@@ -1,28 +0,0 @@
-package com.admin.entity;
-
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import com.baomidou.mybatisplus.annotation.TableName;
-import lombok.Data;
-import lombok.EqualsAndHashCode;
-
-import java.util.List;
-
-@Data
-@EqualsAndHashCode(callSuper = false)
-@TableName(autoResultMap = true)
-public class ForwardPort{
-
-    /**
-     * 主键ID
-     */
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    private Long forwardId;
-
-    private Long nodeId;
-
-    private Integer port;
-}
@@ -1,22 +0,0 @@
-package com.admin.entity;
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import lombok.Data;
-
-import java.io.Serializable;
-
-@Data
-public class GroupPermission implements Serializable {
-
-    private static final long serialVersionUID = 1L;
-
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    private Long userGroupId;
-
-    private Long tunnelGroupId;
-
-    private Long createdTime;
-}
@@ -1,26 +0,0 @@
-package com.admin.entity;
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import lombok.Data;
-
-import java.io.Serializable;
-
-@Data
-public class GroupPermissionGrant implements Serializable {
-
-    private static final long serialVersionUID = 1L;
-
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    private Long userGroupId;
-
-    private Long tunnelGroupId;
-
-    private Long userTunnelId;
-
-    private Integer createdByGroup;
-
-    private Long createdTime;
-}
@@ -14,23 +14,23 @@ import lombok.EqualsAndHashCode;
 */
@Data
@EqualsAndHashCode(callSuper = true)
-public class Node extends BaseEntity {
+public class Node extends BaseEntity {

    private static final long serialVersionUID = 1L;

    private String name;

-    private String secret;
-
-    private String serverIp;
-
-    private String serverIpV4;
-
-    private String serverIpV6;
+    private String secret;
+
+    private String ip;
+
+    private String serverIp;

    private String version;

-    private String port;
+    private Integer portSta;
+
+    private Integer portEnd;

    private Integer http;

@@ -38,15 +38,4 @@ public class Node extends BaseEntity {

    private Integer socks;

-    private String interfaceName;
-
-    private String tcpListenAddr;
-
-    private String udpListenAddr;
-
-    /**
-     * Display/order index for drag-sorting in admin UI.
-     * Lower value appears first.
-     */
-    private Integer inx;
-}
+}
@@ -2,12 +2,6 @@ package com.admin.entity;

 import java.io.Serializable;
 import java.math.BigDecimal;
-import java.util.List;
-
-import com.admin.common.dto.ChainNodesItems;
-import com.baomidou.mybatisplus.annotation.TableField;
-import com.baomidou.mybatisplus.annotation.TableName;
-import com.baomidou.mybatisplus.extension.handlers.JacksonTypeHandler;
 import lombok.Data;
 import lombok.EqualsAndHashCode;

@@ -21,24 +15,59 @@ import lombok.EqualsAndHashCode;
 */
@Data
@EqualsAndHashCode(callSuper = true)
-@TableName(autoResultMap = true)
-public class Tunnel extends BaseEntity {
+public class Tunnel extends BaseEntity {

    private static final long serialVersionUID = 1L;

+    /**
+     * 隧道名称
+     */
    private String name;

+    /**
+     * 入口节点ID
+     */
+    private Long inNodeId;
+
+    /**
+     * 入口IP (兼容字段)
+     */
+    private String inIp;
+
+    /**
+     * 出口节点ID
+     */
+    private Long outNodeId;
+
+    /**
+     * 出口IP (兼容字段)
+     */
+    private String outIp;
+
+    /**
+     * 隧道类型（1-端口转发，2-隧道转发）
+     */
    private Integer type;

+    /**
+     * 流量计算类型（1 单向计算上传。2 双向）
+     */
    private int flow;

-    private BigDecimal trafficRatio;
-
-    private String inIp;
-
-    /**
-     * Display/order index for drag-sorting in admin UI.
-     * Lower value appears first.
-     */
-    private Integer inx;
-}
+    /**
+     * 协议类型
+     */
+    private String protocol;
+
+    /**
+     * 流量倍率
+     */
+    private BigDecimal trafficRatio;
+
+
+    private String tcpListenAddr;
+
+    private String udpListenAddr;
+
+    private String interfaceName;
+}
@@ -1,13 +0,0 @@
-package com.admin.entity;
-
-import lombok.Data;
-import lombok.EqualsAndHashCode;
-
-@Data
-@EqualsAndHashCode(callSuper = true)
-public class TunnelGroup extends BaseEntity {
-
-    private static final long serialVersionUID = 1L;
-
-    private String name;
-}
@@ -1,22 +0,0 @@
-package com.admin.entity;
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import lombok.Data;
-
-import java.io.Serializable;
-
-@Data
-public class TunnelGroupTunnel implements Serializable {
-
-    private static final long serialVersionUID = 1L;
-
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    private Long tunnelGroupId;
-
-    private Long tunnelId;
-
-    private Long createdTime;
-}
@@ -1,13 +0,0 @@
-package com.admin.entity;
-
-import lombok.Data;
-import lombok.EqualsAndHashCode;
-
-@Data
-@EqualsAndHashCode(callSuper = true)
-public class UserGroup extends BaseEntity {
-
-    private static final long serialVersionUID = 1L;
-
-    private String name;
-}
@@ -1,22 +0,0 @@
-package com.admin.entity;
-
-import com.baomidou.mybatisplus.annotation.IdType;
-import com.baomidou.mybatisplus.annotation.TableId;
-import lombok.Data;
-
-import java.io.Serializable;
-
-@Data
-public class UserGroupUser implements Serializable {
-
-    private static final long serialVersionUID = 1L;
-
-    @TableId(value = "id", type = IdType.AUTO)
-    private Long id;
-
-    private Long userGroupId;
-
-    private Long userId;
-
-    private Long createdTime;
-}
@@ -1,7 +0,0 @@
-package com.admin.mapper;
-
-import com.admin.entity.ChainTunnel;
-import com.baomidou.mybatisplus.core.mapper.BaseMapper;
-
-public interface ChainTunnelMapper extends BaseMapper<ChainTunnel> {
-}
@@ -4,7 +4,6 @@ import com.admin.entity.Forward;
 import com.admin.common.dto.ForwardWithTunnelDto;
 import com.baomidou.mybatisplus.core.mapper.BaseMapper;
 import org.apache.ibatis.annotations.Param;
-import org.apache.ibatis.annotations.Select;

 import java.util.List;

@@ -31,5 +30,4 @@ public interface ForwardMapper extends BaseMapper<Forward> {
     */
    List<ForwardWithTunnelDto> selectForwardsWithTunnelByUserId(@Param("userId") Integer userId);

-
 }
@@ -1,8 +0,0 @@
-package com.admin.mapper;
-
-import com.admin.entity.Forward;
-import com.admin.entity.ForwardPort;
-import com.baomidou.mybatisplus.core.mapper.BaseMapper;
-
-public interface ForwardPortMapper extends BaseMapper<ForwardPort> {
-}
@@ -1,7 +0,0 @@
-package com.admin.mapper;
-
-import com.admin.entity.GroupPermissionGrant;
-import com.baomidou.mybatisplus.core.mapper.BaseMapper;
-
-public interface GroupPermissionGrantMapper extends BaseMapper<GroupPermissionGrant> {
-}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
qaq	a155bc64c0	增加稳定版arm支持	2025-11-25 09:43:32 +08:00
qaq	62bd8ea469	修复稳定版面板显示屏蔽协议状态不一致问题	2025-11-25 09:21:36 +08:00
qaq	f3a9684be4	修复稳定版面板显示屏蔽协议状态不一致问题	2025-11-25 09:18:40 +08:00