Please help! my VLESS-TCP-XTLS-Vision-REALITY network is slowwwwwwwwly!

[PunkFleet]

I'm using PassGuard v1.9.0 (the server-side Xray should be a newer version) to configure separate panels and nodes, but I suspect this isn't related to the issue since connections work normally and logs appear fine. On the client side, I'm using Passwall 2 (I suspect this is also unrelated). The problem is that everything appears normal within Passwall's built-in ping check, and speeds even seem quite good.

However, when actually accessing webpages or downloading files, speeds are extremely slow. YouTube debug speeds are barely reaching 400 kb/s.

Here's my Xray-Core configuration. To be honest, I combined settings from Hiddify Manager with the official documentation tutorial—it feels like a comprehensive setup. So why is this happening? Oh, and for my node's SNI address, I used the node machine's public IPv4 instead of a domain name.

Experts, please take a look—is this configuration causing the extreme latency?

{
  "log": {
    "loglevel": "warning"
  },
  "dns": {
    "servers": [
      "1.1.1.1",
      "8.8.8.8",
      "localhost"
    ],
    "queryStrategy": "UseIPv4",
    "tag": "DNS-Internal"
  },
  "inbounds": [
    {
      "tag": "VLESS-TCP-XTLS-Vision-REALITY",
      "listen": "0.0.0.0",
      "port": 443,
      "protocol": "vless",
      "settings": {
        "clients": [],
        "decryption": "mlkem768x25519plus.native.600s.100-111-1111.75-0-111.50-0-3333.KwNx5o0CegOz-LLmVghqI9AMkatM8lFkAhGVphdpwXY",
        "encryption": "mlkem768x25519plus.native.0rtt.100-111-1111.75-0-111.50-0-3333.4kG-aY6uq0vSXypMFKLWYJ9YCfVBobdOrwW7_U3qZXw"
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "tcpSettings": {
          "acceptProxyProtocol": false,
          "header": {
            "type": "none"
          }
        },
        "realitySettings": {
          "show": false,
          "dest": "yahoo.com:443",
          "xver": 0,
          "serverNames": [
            "yahoo.com",
            "www.yahoo.com"
          ],
          "privateKey": "D7Di4Je1W6zfgPp3y30VhOeEr1NbLjkyzzY63GhsGDA",
          "publicKey": "KZOM8h4NCz2EbCXWBQh3I8hr-MZpN0zQL3BxWV3ffRc",
          "shortIds": [
            "b68d5b9a3a94b3c6"
          ],
          "spiderX": "/",
          "fingerprint": "chrome"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "metadataOnly": false,
        "routeOnly": false
      }
    },
    {
      "tag": "VLESS-XHTTP-REALITY",
      "listen": "0.0.0.0",
      "port": 15193,
      "protocol": "vless",
      "settings": {
        "clients": [],
        "decryption": "mlkem768x25519plus.native.600s.100-111-1111.75-0-111.50-0-3333.f43iv8it28aHMY-qZVn2ZB-wsnYq90l0sneikryLmUw",
        "encryption": "mlkem768x25519plus.native.0rtt.100-111-1111.75-0-111.50-0-3333.rBmRa8758A9XJ1toaGTc7aZzn4KScStwRXW51vVOyjU"
      },
      "streamSettings": {
        "network": "xhttp",
        "xhttpSettings": {
          "mode": "auto"
        },
        "security": "reality",
        "realitySettings": {
          "show": false,
          "dest": "www.microsoft.com:443",
          "xver": 0,
          "serverNames": [
            "microsoft.com",
            "www.microsoft.com"
          ],
          "privateKey": "D7Di4Je1W6zfgPp3y30VhOeEr1NbLjkyzzY63GhsGDA",
          "publicKey": "KZOM8h4NCz2EbCXWBQh3I8hr-MZpN0zQL3BxWV3ffRc",
          "SpiderX": "/",
          "shortIds": [
            "b68d5b9a3a94b3c6"
          ],
          "mldsa65Seed": "0MA_CEXNLTbmj4EmAGkbNUbeGH2XdI8wENchdyX1LhA",
          "mldsa65Verify": "IV-aaNKWbt_AVt1wl6_rKSaXPoN3nPrM69Qp3rpUdviaAglVAePjUXYZ_9-gTB6-Yyn7AiFJvuv7xwdGAh13HHC-tEZBBDkZ5iHVeffJ5dZLBdZ86TZ-8mWbguOEFGn9-oDF3ymyGEZ5aoHRMePKNT4rcMN43Panz298SWAFD2rLh2eK_ctDfzTMhGepIaMUmLfopc08svW19qOkdh7tBrEXSzAiM48gr2Db60PYuUC2pbR-vz1LE8AOfyhvcv2cXni7s9P41GMV1NpwWfb7XPdRofKkZCMn2GzZDCTicm4IsW2RRe4GhUjjTPWCxC0aROBlEE05DYNzITqW2mC9EvG7yEoCR0_uloSwBrz3XWEHjqFVvCdBgAzYEB0oV7g-y4y6Spmu1KRFqU5texkD6ob7krDR-2nqQbNwo_gLJ2VWtMBIIJxYG843ncv9E1prbQuvwEyQVDlF9FfeLcnwjnSMRtrjO4yCoyeOOnNx7n40ttMhaOOwdmJrPZDm6NOwtUnpnoUwjTfn1GRF_2Lq4wC0nDbNhoRTpKd7qxAoymwOT8v61pewP-h55hE0vh22MJ-kELTubY7PbqmemA0HzgPvtC4lO0H5L2g1L1PObVHdR2cjoKtxVLMRyObew_425to0hck1j9qBBceK-oEA_6nMjfHIEzrIPE0i9h9qOWbrOSM4SFhsPrqQhgJTuneBWoztZ92vQdjGemm_KB0kBV8u1vAvRdg5O4xpuHpgUhW3_jMps_FXdsC_C5mn2h-X083VCyY0Bbewmu0HWn7MRZKHmWiCrxpzwDxawCjIQCMgZbY2f-p6EztQhbZqprtsanDhCcpx7mGQU0gBuewmthfnBBBUVYHbaiN1LmW0LSZpYB75vHZWb5o6FdVY6WmLhRJUbd5oO7EFB0JPWERDOLDb01WbonliN1r5BQjf3lyMI_1O50l_yRvDuaeiRNSEFjbt_SIH8UvcwnEmil-jAWM807Ebm5Oqus7M61Rru4xT2oaNP-dYeaKgP5uw_l9pxvMR3MzDKV-pVny2TCMqT39ezSlcLL82vW35kwBitB4Df1vHz6ETmb3b0Px788A3caAVVBxTKD2SafstAi5wqAcPlEB7OgtLue0bV3dpg8dRZBfSDRMXbJuJKcGveAO7_zJ_yxmLwXDAStU_MKVHuXVtISXf3JqIE9SdVUXvGmJZMnPS5KHURRPjpBV9hTYeRHenyrVHbDQKb278826zr1A6y9HqWOYBVeBew-fDEHRMsORctc6270oNeACDmKLmSbrI5jD08-yymCN7V04nGyNVJ9X887ax6QlCFpnANQWW0JjvTYVND9Is66SxpWGo-V8tO-FMIahzFk3uR4HvP_nZIv5Q3xSrHVENMuWjg6riPnacS5waZGF70QsrgKGc8jv_-Tyz6ZZPrybm2sBjA7RTKTj35LesiGTkQfzCYNr45U-jSa8VlaMXHOkTDR1c0bNfe4MHcIELh_SKMD3itL1AlUrqD0Mvdq4DjplyqXZsD-g0wE4Rs83gc7VUo4qY5667MOmX2i1kYhHVvMnoTFMaqfWFEGOFBSbMqNfB8GsmkvyTLXCJ8jAsf5C72r4AV1kXuOX2XRL8StGFgJTLq48MNyLmKxACX3fc0IaPGCad4wxrOfC2S8xmagApFPiyiv4X5SKKYTZ4_6YhAWDEQuldkxOqaTOx_T3ZJWw_SrXdibhVabTWNwDjtf1kamglmJz53mQr01-laoLtYKjpnqXtEfbDBY3_WHXymcdNFiGI2_PejGJ5Rc7z2SRvKuoUXhzFRHjYgmwQ15lA-2qCTQnMWrv0O09yIzUma0nlOdBv59Gfk1sTGi6MqAntBIyv9IGluyEU0SS6R3pOW0Sutvw6ZPXGj6Czgw9SpNIH4F5hopOSKtKmLARQXF66qCx8IgPMMnmQPyeAJfuZfIvGauQHNu987r37L5-18mMIJOkEIWJA_y8u2fn8hJ7D8ZfgGDMIlK76Q00vTGJxbQuS-ORCgltKvQuUdR3satgl8mfqPX9Bn9pin3SwohPPL8XIGBG7bqd0KdftIgtEQnX3rxHq2mB5vb65ePV9uw2qHV51sWF_dBNs7JH5mqfu5j8Jc7rlLziYx0UPHgZPslUOcbb5llIHBIc5SBUCdFTMDakFxygyEAuDqEBszoibbX8Ovr9ecRF1mY67WpJVKwcoeOLNBYwxZbuP1QjtsPW3AUyg69aMXyov5nbn_CU-u1XWzDBZ5tBVv9OZIskhDCwTvJgTZLy5hP3xBvGJVriUJ94CjeK2wCVSLrx141yn8TzCSdBvPxtFOM0fLw5zZdWPmRHWMNSauNCPg5GdfzDFSi04ielqQmDhYGhFl-RZYQuITZWodeA4UFay7x-K_ZoSHeQLZ-ttXCtBGiNl9mVZEpsQOQqfYo7dROOnRZfbQQntLzoBTwzQRGuGDpfrlyAzjcah-ZSa0VAIo8YHCDxYViZi6-8kfhlFOgBvYVgjoULbJ3D7Tb0qVg3FL9UoMXGK4bBmYhZek9-9TfthnXNUrgRHH8axPDPsgMfExle5gqezr_Dh2JnaUAl66SQIta80Uk9v3Qq2qQzeALio4cr_zjY",
          "fingerprint": "chrome"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ]
      }
    },
    {
      "tag": "TROJAN+TCP+REALITY",
      "listen": "0.0.0.0",
      "port": 15192,
      "protocol": "trojan",
      "settings": {
        "clients": []
      },
      "streamSettings": {
        "network": "tcp",
        "security": "reality",
        "tcpSettings": {
          "acceptProxyProtocol": false,
          "header": {
            "type": "none"
          }
        },
        "realitySettings": {
          "show": false,
          "dest": "microsoft.com:443",
          "xver": 0,
          "serverNames": [
            "microsoft.com",
            "www.microsoft.com"
          ],
          "privateKey": "6ohMAoANC_72gRI8gdSOemTNRSLGEXR_vVROlT86IaQ",
          "publicKey": "m0wWW2AJG8wvT_emHfvL-VzGcjpq9PYpCIJtXmST6GQ",
          "shortIds": [
            "a67a0926713b6819"
          ],
          "mldsa65Seed": "",
          "spiderX": "/",
          "fingerprint": "chrome"
        }
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "metadataOnly": false,
        "routeOnly": false
      }
    },
    {
      "tag": "SHADOWSOCKS",
      "listen": "0.0.0.0",
      "port": 15191,
      "protocol": "shadowsocks",
      "settings": {
        "method": "chacha20-ietf-poly1305",
        "password": "q0LOg9E7+Pam3iT6VYFYMPNEMJ5FOJq39buXuVTssbk=",
        "network": "tcp,udp",
        "clients": [],
        "ivCheck": false
      },
      "sniffing": {
        "enabled": true,
        "destOverride": [
          "http",
          "tls"
        ],
        "metadataOnly": false,
        "routeOnly": false
      }
    }
  ],
  "outbounds": [
    {
      "domainStrategy": "UseIPv4v6",
      "tag": "freedom",
      "protocol": "freedom",
      "settings": {}
    },
    {
      "domainStrategy": "UseIPv4v6",
      "tag": "WARP",
      "protocol": "freedom",
      "streamSettings": {
        "sockopt": {
          "tcpFastOpen": true,
          "interface": "warp"
        }
      }
    },
    {
      "protocol": "blackhole",
      "tag": "blackhole"
    },
    {
      "tag": "forbidden_sites",
      "protocol": "blackhole"
    },
    {
      "tag": "DNS-Internal",
      "protocol": "dns",
      "settings": {
        "port": 53
      }
    }
  ],
  "routing": {
    "domainStrategy": "IPOnDemand",
    "domainMatcher": "hybrid",
    "rules": [
      {
        "type": "field",
        "outboundTag": "freedom",
        "ip": [
          "127.0.0.1",
          "这里是我的节点的公网ipv4地址",
          "这里是我的节点的内网ipv4地址"
        ],
        "port": "443,80,53"
      },
      {
        "type": "field",
        "port": 53,
        "network": "tcp,udp",
        "outboundTag": "DNS-Internal"
      },
      {
        "type": "field",
        "outboundTag": "freedom",
        "domain": [
          "geosite:geolocation-!cn",
          "geosite:google",
          "geosite:netflix",
          "geosite:spotify",
          "geosite:nvidia",
          "geosite:bytedance",
          "geosite:tiktok",
          "geosite:unity",
          "geosite:reddit",
          "geosite:openai",
          "domain:ip.gs",
          "domain:kmplayer.com",
          "domain:ipinfo.io",
          "domain:openai.com",
          "domain:ai.com",
          "domain:freepik.com",
          "domain:developer.mozilla.org",
          "domain:behance.net",
          "domain:remini.com",
          "domain:snapchat.com",
          "domain:tunetank.com",
          "domain:livechart.me",
          "domain:9anime.me",
          "domain:pixelexperience.org",
          "domain:evolution-x.org",
          "domain:kenvyra.xyz",
          "domain:spark-os.live",
          "domain:pixelos.net",
          "domain:gamebanana.com",
          "domain:myanimelist.net",
          "domain:sourcemod.net",
          "domain:alliedmods.net",
          "domain:pagespeed.web.dev",
          "domain:axieinfinity.com",
          "domain:clubhouse.com",
          "domain:omegle.com",
          "domain:alldatasheet.com",
          "domain:flaticon.com",
          "domain:xda-developers.com",
          "domain:giglio.com",
          "domain:lookmovie2.to",
          "domain:adbtc.top",
          "domain:homedepot.com",
          "domain:flutter.dev",
          "domain:adobe.com"
        ]
      },
      {
        "inboundTag": [
          "api"
        ],
        "outboundTag": "api",
        "type": "field"
      },
      {
        "type": "field",
        "port": "0-65535",
        "outboundTag": "freedom"
      }
    ]
  }
}

[PunkFleet]

@M03ED please help😥

[M03ED]

i don't think problem because of configuration
the firewall probably detect a suspicious traffic and limited the bandwidth

[PunkFleet]

bandwidth

Has any resolution for that? Does I need change to other protocols?