求职！ iStoreOS 安装 OpenClash 之后， 500 兆宽带国内速度骤减，国外满速，如何排查原因

测速结果：国内 国外 软路由安装在服务器中，CPU 性能应该不是瓶颈，测速期间占用不超出 10% 个人猜测是配置文件的原因，但是又知道具体是哪的原因，请大佬看看 已经去除了节点信息，其余的全部保留

port: 7890
socks-port: 7891
allow-lan: true
bind-address: "*"
mode: rule
log-level: info
ipv6: false
profile:
 store-selected: true
 store-fake-ip: true
unified-delay: true
tcp-concurrent: true
dns:
 enable: true
 ipv6: false
 listen: 0.0.0.0:7874
 fake-ip-range: 198.18.0.1/16
 use-hosts: true
 default-nameserver:
 - 119.29.29.29
 nameserver:
 - https://doh.pub/dns-query
 - https://dns.alidns.com/dns-query
 fake-ip-filter:
 - "*.lan"
 - localhost.ptlogin2.qq.com
 - dns.msftncsi.com
 - "*.srv.nintendo.net"
 - "*.stun.playstation.net"
 - xbox.*.microsoft.com
 - "*.xboxlive.com"
 - "*.localdomain"
 - "*.example"
 - "*.invalid"
 - "*.localhost"
 - "*.test"
 - "*.local"
 - "*.home.arpa"
 - time.*.com
 - time.*.gov
 - time.*.edu.cn
 - time.*.apple.com
 - time-ios.apple.com
 - time1.*.com
 - time2.*.com
 - time3.*.com
 - time4.*.com
 - time5.*.com
 - time6.*.com
 - time7.*.com
 - ntp.*.com
 - ntp1.*.com
 - ntp2.*.com
 - ntp3.*.com
 - ntp4.*.com
 - ntp5.*.com
 - ntp6.*.com
 - ntp7.*.com
 - "*.time.edu.cn"
 - "*.ntp.org.cn"
 - "+.pool.ntp.org"
 - time1.cloud.tencent.com
 - music.163.com
 - "*.music.163.com"
 - "*.126.net"
 - musicapi.taihe.com
 - music.taihe.com
 - songsearch.kugou.com
 - trackercdn.kugou.com
 - "*.kuwo.cn"
 - api-jooxtt.sanook.com
 - api.joox.com
 - joox.com
 - y.qq.com
 - "*.y.qq.com"
 - streamoc.music.tc.qq.com
 - mobileoc.music.tc.qq.com
 - isure.stream.qqmusic.qq.com
 - dl.stream.qqmusic.qq.com
 - aqqmusic.tc.qq.com
 - amobile.music.tc.qq.com
 - "*.xiami.com"
 - "*.music.migu.cn"
 - music.migu.cn
 - "+.msftconnecttest.com"
 - "+.msftncsi.com"
 - localhost.sec.qq.com
 - "+.qq.com"
 - "+.tencent.com"
 - "+.srv.nintendo.net"
 - "*.n.n.srv.nintendo.net"
 - "+.cdn.nintendo.net"
 - "+.stun.playstation.net"
 - xbox.*.*.microsoft.com
 - "*.*.xboxlive.com"
 - xnotify.xboxlive.com
 - "+.battlenet.com.cn"
 - "+.wotgame.cn"
 - "+.wggames.cn"
 - "+.wowsgame.cn"
 - "+.wargaming.net"
 - proxy.golang.org
 - stun.*.*
 - stun.*.*.*
 - "+.stun.*.*"
 - "+.stun.*.*.*"
 - "+.stun.*.*.*.*"
 - "+.stun.*.*.*.*.*"
 - heartbeat.belkin.com
 - "*.linksys.com"
 - "*.linksyssmartwifi.com"
 - "*.router.asus.com"
 - mesu.apple.com
 - swscan.apple.com
 - swquery.apple.com
 - swdownload.apple.com
 - swcdn.apple.com
 - swdist.apple.com
 - lens.l.google.com
 - stun.l.google.com
 - na.b.g-tun.com
 - "+.nflxvideo.net"
 - "*.square-enix.com"
 - "*.finalfantasyxiv.com"
 - "*.ffxiv.com"
 - "*.ff14.sdo.com"
 - ff.dorado.sdo.com
 - "*.mcdn.bilivideo.cn"
 - "+.media.dssott.com"
 - shark007.net
 - Mijia Cloud
 - "+.cmbchina.com"
 - "+.cmbimg.com"
 - local.adguard.org
 - "+.sandai.net"
 - "+.n0808.com"
 - "+.uu.163.com"
 - ps.res.netease.com
 - "+.pub.3gppnetwork.org"
 - geosite:category-games
 - "+.vio.vin"
 - "+.baidu.com"
 - "+.taobao.com"
 - "+.tailscale.com"
 - "+.tailscale.io"
 fallback:
 - tls://jp.tiar.app
 - tls://dot.tiar.app
 - https://dns.quad9.net/dns-query
 - https://dns.google/dns-query
 - https://dns.cloudflare.com/dns-query
 - https://1.1.1.1/dns-query
 - https://public.dns.iij.jp/dns-query
 - https://jp.tiar.app/dns-query
 - https://jp.tiarap.org/dns-query
 - https://doh.dnslify.com/dns-query
 - https://dns.twnic.tw/dns-query
 - https://dns.oszx.co/dns-query
 - https://doh.applied-privacy.net/query
 - https://dnsforge.de/dns-query
 - https://doh.ffmuc.net/dns-query
 - https://doh.mullvad.net/dns-query
 fallback-filter:
   geoip: true
   geoip-code: CN
   ipcidr:
   - 240.0.0.0/4
 fake-ip-filter-mode: blacklist
 enhanced-mode: fake-ip
rule-providers:
 Apple:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Apple/Apple_Classical_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Apple_No_Resolve.yaml"
 BiliBili:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/BiliBili/BiliBili_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/BiliBili_No_Resolve.yaml"
 Netflix:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Netflix/Netflix_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Netflix_No_Resolve.yaml"
 Disney:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Disney/Disney_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Disney_No_Resolve.yaml"
 TikTok:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/TikTok/TikTok_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/TikTok_No_Resolve.yaml"
 GlobalMedia:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/GlobalMedia/GlobalMedia_Classical_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/GlobalMedia_Classical_No_Resolve.yaml"
 OpenAI:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/OpenAI/OpenAI_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/OpenAI_No_Resolve.yaml"
 Google:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Google/Google_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Google_No_Resolve.yaml"
 Microsoft:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Microsoft/Microsoft_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Microsoft_No_Resolve.yaml"
 PayPal:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/PayPal/PayPal_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/PayPal_No_Resolve.yaml"
 Telegram:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Telegram/Telegram_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Telegram_No_Resolve.yaml"
 Steam:
   type: http
   behavior: classical
   url: https://ghproxy.com/https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/SteamCN/SteamCN.yaml
   interval: 86400
   path: "./rule_provider/Steam_No_Resolve.yaml"
 Lan:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Lan/Lan_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/Lan_No_Resolve.yaml"
 ChinaMax:
   type: http
   behavior: classical
   url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/ChinaMax/ChinaMax_Classical_No_IPv6_No_Resolve.yaml
   interval: 86400
   path: "./rule_provider/ChinaMax_Classical_No_IPv6_No_Resolve.yaml"
 v-steamCN:
   type: file
   behavior: classical
   path: "./rule_provider/v-steamCN.yaml"
   format: yaml
 v-steam:
   type: file
   behavior: classical
   path: "./rule_provider/v-steam.yaml"
   format: yaml
rules:
- IP-CIDR,45.121.184.0/24,DIRECT
- DOMAIN-SUFFIX,tailscale.io,DIRECT
- DOMAIN-SUFFIX,tailscale.com,DIRECT
- RULE-SET,v-steamCN,DIRECT
- RULE-SET,v-steam,DIRECT
- RULE-SET,Apple,Apple
- RULE-SET,BiliBili,BiliBili
- RULE-SET,Netflix,Netflix
- RULE-SET,Disney,Disney
- RULE-SET,TikTok,TikTok
- RULE-SET,GlobalMedia,GlobalMedia
- RULE-SET,OpenAI,OpenAI
- RULE-SET,Steam,Steam
- RULE-SET,Google,Google
- RULE-SET,PayPal,PayPal
- RULE-SET,Telegram,Telegram
- RULE-SET,Microsoft,Microsoft
- RULE-SET,Lan,DIRECT
- RULE-SET,ChinaMax,DIRECT
- MATCH,Kuromis
redir-port: 7892
tproxy-port: 7895
mixed-port: 7893
external-controller: 0.0.0.0:9090
secret: 9zBetjKF
external-ui: "/usr/share/openclash/ui"
keep-alive-interval: 15
keep-alive-idle: 600
sniffer:
 enable: true
 parse-pure-ip: true
tun:
 enable: true
 stack: mixed
 device: utun
 dns-hijack:
 - tcp://any:53
 endpoint-independent-nat: true
 auto-route: false
 auto-detect-interface: false
 auto-redirect: false
 strict-route: false
authentication:
- Clash:m3l7qRCX