Find connection issues by symptom

Cross-Border Connection Troubleshooting Guide

Work through the client, route, system network, DNS, subscription, and app-routing layers in order. Identify the affected layer first, then change the relevant setting instead of changing several variables at once and losing the cause.

System troubleshooting guide Windows / macOS / iOS / Android / Linux

Build a Reproducible Troubleshooting Sequence

Connection problems are often hardest to solve not because a hidden switch is missing, but because the symptoms are too vague. “It doesn’t work” might mean the client will not start, the subscription cannot be read, a route handshake fails, a connection succeeds but domains will not open, or only one app is bypassing the proxy. These symptoms feel similar on screen but can originate at entirely different layers. Effective troubleshooting starts by turning impressions into observable facts: Can the client open? Are routes visible in the subscription? Does the status change after clicking Connect? Does the system show a network-permission prompt? Do both the domain and a direct network request fail? Does the same symptom persist after changing network environments?

Save the current environment first. Note the platform, client mode, route type, exact error text, and the last change made before the problem began. Do not delete every configuration or simultaneously change routes, protocols, DNS, and the client. Several changes may restore the connection temporarily while hiding the real cause; when the problem returns, you will still have to guess from the beginning. A safer approach is to preserve a reproducible state, retest the same target after each check, and confirm whether the result changes.

Assign the issue to the right layer

Observed symptom Check first Avoid for now
Subscription is empty or update returns an error Login state, subscription URL, and the client's subscription entry Repeatedly switching routes
Connect button does nothing or disconnects immediately Network permissions, local services, route, and system time Changing app-routing rules
Shows connected but pages will not open DNS, proxy mode, browser cache, and system proxy Deleting the account outright
Only one app has problems Rule matching, the app's built-in proxy, and protocol compatibility Resetting the entire system network

Keep the baseline test simple. First quit other tools that alter the network path, pause browser networking extensions, leave the client at its default settings, and choose a route that is relatively close to your location with a clear purpose. VPNXV offers 100+ countries / 150+ routes; see the route list for the differences between IEPL, relay, and direct routes. During troubleshooting, the goal is a clear path, not as many combinations as possible. If the default configuration works, gradually restore split routing, custom DNS, or app-level settings so the source of the issue narrows naturally.

Separate an occasional recovery from a stable recovery. One successful page load only shows that the path worked at that moment; it does not prove the change was the root cause. After an adjustment, revisit the same target, switch between foreground and background, reconnect, and check whether other commonly used apps are affected. If recovery occurs only in one browser, check its extensions and cache first. If all apps recover together, the change is more likely at the client, system-proxy, or route layer.

Once the symptom is reproducible, move to the relevant section. If no connection can be established, start with client permissions and the route handshake. If the client shows connected but pages are inaccessible, start with the system proxy and DNS. If performance drops mainly in the evening, start with route congestion and local network contention. If only one app fails, there is no need to reset everything. This order avoids unnecessary changes and creates clearer evidence for a later support ticket.

Can't connect at all: from local permissions to the route handshake

“Can't connect at all” should be broken down further: the client will not start, clicking Connect does nothing, the status briefly changes and returns to disconnected, or it remains stuck on connecting. A client that will not start usually points to the local runtime environment. No response after clicking is often related to network permissions, a local service, or a configuration that was not applied. An immediate disconnect commonly involves an unreachable route, incorrect system time, a network change, or an old session that was not released. A persistent connecting state requires checking whether the current network permits the required connection. Each symptom calls for a different check; do not reduce them all to a route failure.

Confirm that the client has the required permissions

Windows and macOS must allow the client to create a system network interface and change proxy settings. If a system permission prompt was dismissed, the client may still open normally while the connection action never reaches the system network layer. Open the system's network, privacy, or security settings and confirm that VPNXV client permissions are not awaiting approval. On Linux, also check whether the launch method matches the network-management service. Starting from a graphical interface and starting from a terminal may inherit different environment variables, so use the same launch method throughout testing.

On the first connection, iOS and Android request permission to create a network configuration. If that configuration was removed, permissions changed after a system update, or another network tool is using a similar interface, close the other tool and reconnect from the VPNXV client. Do not keep multiple network services connected at the same time. Several icons showing as enabled does not mean traffic will follow the intended path; system proxies and tunnel interfaces may instead override one another.

Check whether the client can read the subscription and routes

When the route list is empty, the Connect button cannot work. Confirm in the user panel that the subscription is still available, then return to the client and update it. If route names are visible but every route fails immediately, change network environments to determine whether the issue is with the current access network or the client itself. Test by switching from one available network to another, or vice versa. If the connection returns immediately after changing networks, check the original network's routing, DNS, guest-network restrictions, and local security software. If the symptom is identical on different networks, inspect the client configuration and account status.

Do not rapidly click several routes while disconnected. The previous connection task may still be running while the next one overwrites its state, leaving a local interface unreleased. Stop the current connection, wait until the client clearly returns to a disconnected state, and then select another route. To compare route types, see the explanations in the route list. IEPL, relay, and direct routes use different paths, so switching types provides more useful evidence than jumping randomly between similar routes.

Rule out system time and stale network state

Encrypted connections depend on accurate system time. If the device time, date, or time zone is clearly wrong, authentication may be rejected while the client shows only a generic connection failure. Enable automatic time synchronization and confirm that time does not remain stale after waking from sleep. Then fully quit the client, reopen it, and test again. Closing a window is not always the same as quitting; some desktop clients keep network services running in the background. Confirm that the process has ended from the tray, menu bar, or system task manager.

If the device has just recovered from sleep, a network change, or an abnormal shutdown, an old interface may still retain an invalid route. Disconnect the client, disable and re-enable the current network connection, then reopen the client. Consider a system network reset only if these reversible steps fail. A reset affects saved local networks, enterprise configurations, and other proxy settings, so it should not be the first move.

nslookup example.com
curl -I https://example.com

The commands above help distinguish domain resolution from a basic request. If the domain lookup itself fails, go to the DNS section. If the domain resolves but the request cannot be established, inspect the proxy path and route. Command output may contain local network information; remove unrelated private data before submitting a support ticket. If connection still fails across different networks, route types, and the default configuration, and the error is consistently reproducible, you have enough information to open a ticket.

Connected, but pages still won't open

A client showing “Connected” only means that the local tunnel or proxy service has started; it does not mean every app's traffic is using that path. When pages will not open, first define the scope: do all browsers fail or only one? Can no domain open, or do known direct addresses fail too? When international sites have problems, do local sites still work? Can the network recover after closing the client? The answers indicate whether the issue is in DNS, the browser, the system proxy, split-routing rules, or the route exit.

Separate a browser issue from a system issue

Use another browser without networking extensions to open the same page. If the other browser works, check the original browser's proxy extension, secure DNS, cache, and persistent connections first. The browser may have enabled its own DNS and bypassed the resolution path supplied by the client, or it may retain a session created before the connection and continue using a failed exit. Fully quit and reopen the browser; this clears stale connections more effectively than refreshing the page. A private window can help rule out cache, but it does not bypass browser-level proxy or secure-DNS settings, so check those options as well.

If every browser and app is offline, check whether the system proxy was written correctly. After an abnormal client exit, the system may retain an old proxy address while the local listening service is no longer running there. All requests are then sent to a nonexistent endpoint. Disconnect first, confirm that the system proxy has returned to its normal state, and reconnect. Do not enter an unknown proxy address manually or treat an example value from a guide as a real configuration.

Check whether the mode and rules send the target down the wrong path

Rule mode uses domains, addresses, and apps to decide between proxy and direct access. Outdated rules, incorrect ordering, or conflicting custom entries can send a site down an unsuitable path. Temporarily switch to the client's global mode for testing. If global mode works but rule mode fails, the route itself is usually usable and the issue is concentrated in rule matching. Restore the default rules and inspect custom entries one by one instead of continuing to change routes. Choose the mode for your actual use case after testing.

If global mode also fails, try a route with a similar purpose but a different path type. Web access depends on the route exit, DNS resolution, and the target site's response; a temporary issue at one exit does not mean the entire subscription is unavailable. VPNXV covers 100+ countries / 150+ routes. Compare routes with clear differences instead of repeatedly clicking similarly named nodes. If only one regional exit cannot reach a particular site, the site may be restricting access by region, account state, or session content; one page alone cannot prove that the entire route has failed.

Clear stale resolution and old connections

The system and browser both cache domain resolution. An address obtained before connecting may belong to the original network and continue to be used afterward; conversely, a result from the proxy environment may remain after disconnecting. Fully quit the browser, disconnect and reconnect the client, then test the same domain. Desktop systems provide their own DNS-cache clearing functions, but commands vary by platform, so avoid copying privileged scripts from unknown sources. If clearing the cache restores access only briefly, continue checking the DNS source and browser secure DNS instead of repeatedly clearing the cache.

Also check whether the page depends on several domains. A homepage loading does not mean its images, login API, or media resources use the same domain. Rule mode may proxy only the main domain while sending related resources direct, resulting in a blank page, an unresponsive login button, or incomplete content. In the client log, observe the target domains and matched rules when the failure occurs rather than looking only at the homepage address. If the log contains a subscription token or account information, hide it before sharing.

If the network does not recover after closing VPNXV, the system may have retained proxy or route state. Confirm that the client has fully quit, then check whether the system proxy still points to a local service. Change settings manually only when you understand their purpose; enterprise networks, development environments, and other tools may also use a proxy. If you cannot tell, keep screenshots and submit a ticket rather than blindly deleting system configuration.

A layered approach to slow speeds and peak-time lag

Speed issues cannot be judged from one test result. Slow first-page loads, slow sustained file transfers, video buffering, and high interaction latency are influenced by DNS, round-trip paths, exit bandwidth, the target service, and the local network in different ways. Identify which experience has degraded before testing, then repeat the test against a fixed target. Do not change routes while also changing test sites, and avoid cloud sync, system updates, or media playback during testing; otherwise you cannot tell whether the change came from the route or local traffic contention.

Establish a local-network baseline

Disconnect the client first and confirm that the current network can reliably reach commonly used local services. If it is still slow when disconnected, address the router, wireless interference, access-network congestion, or background downloads first. A cross-border route cannot repair poor local access quality. On a fixed connection, compare with a wired connection; on Wi-Fi, adjust the device position and avoid weak-signal edges or areas with frequent roaming. Switching mobile cells or changing signal conditions can also cause brief jitter, so keep the location and network type stable during testing.

Then connect to a relatively nearby route and repeat the same action with the same app and target. If a nearby route is clearly more stable while a distant route has higher interaction latency, that is a normal difference in physical path. Choose routes by purpose, not just region. Real-time collaboration, remote terminals, and voice prioritize consistent responsiveness; large-file transfers depend more on sustained throughput; streaming is also affected by the platform's regional and caching policies. Use the route list to compare IEPL, relay, and direct routes instead of forcing every scenario through one exit.

Identify where peak-time congestion occurs

If the connection is stable during the day but repeatedly stalls in the evening, compare the local network while disconnected first. If local access is also slow, congestion is more likely in the access network. If the local network is fine but one route type slows down, switching to a different path type is more informative. Do not switch only among similar routes in the same region, since they may share part of the upstream path. Try another region or route type and observe whether the lag follows the path; this helps locate the issue in local access, the cross-border segment, or the target service.

Peak-time testing should focus on sustained experience rather than a momentary maximum. Stable page completion, repeated media quality drops, and long pauses during remote work reveal usability better than a single top speed. A speed-test server may be on a different network from the real target, producing good results while real apps still lag. Conversely, an average test result does not mean text collaboration or browsing is unusable. Use your primary real-world scenario as the final standard.

Check for competing traffic on the device

System updates, cloud sync, photo backups, game updates, and browser preloading all consume network capacity. Some tasks continue in the background after their windows are closed. Check system network activity, pause transfers unrelated to the test, and reconnect. VPNXV supports unlimited simultaneous devices, but multiple devices doing heavy transfers still share the capacity of the current access network. “Unlimited devices” describes the simultaneous-device limit; it does not mean local broadband resources cannot be shared.

Complex client rules can also make diagnosis harder. Many custom rules, chained proxies, or extra filters may send different requests from the same app along different paths, making the main page fast while its resources are slow. Restore the default configuration and test first. Once the basic route works, add only necessary rules step by step. Repeat the same action after each addition so the most recent change is clear when performance degrades.

Scenario What to watch Priority action
Slow first page load Domain resolution and related page resources Check DNS and browser settings
Slow sustained transfer Local background tasks and path stability Stop competing traffic and change path type
Evening lag Local network compared with different routes Compare the access network and cross-border path
Noticeable interaction latency Route distance, packet loss, and detours Choose a nearby, stable exit

If the issue appears only at a specific time, with a specific route type and target, describe those boundaries in the ticket instead of attaching only a speed-test screenshot. Support needs to know whether the local network is normal while disconnected, whether other routes work, whether the problem is consistently reproducible, and which apps are mainly affected. The more specific the information, the easier it is to determine whether the route or client settings need attention.

Frequent disconnects and mobile background drops

For frequent disconnects, first determine whether the route session actually ended or the app was paused in the background. On desktop, common signs include the client changing to disconnected, a brief system-network interruption, or failure to recover after a network change. On mobile, the connection may stop when the screen locks, the network changes, or a battery-saving policy activates. The remedies differ. A missing status-bar icon alone is not enough; check the client status, recent errors, and system network changes.

On desktop, rule out sleep and network changes first

When Windows and macOS wake from sleep, the network interface is rebuilt and the old session may already be invalid. If the client does not receive the new network state promptly, it may appear connected while no traffic actually passes. Temporarily disable automatic sleep for comparison, or manually disconnect and reconnect after waking. If the problem occurs only after sleep, focus on client background permissions and system power settings rather than repeatedly changing subscriptions.

Switching from wired to wireless or from a fixed network to a shared network changes the local address and default route. During the switch, the old session remains bound to the original interface and usually cannot migrate directly. Wait until the system confirms that the new network is available, then let the client reconnect. If the client offers automatic reconnect, enable it for testing, but confirm that the switch does not leave an old system proxy behind. More frequent reconnection is not always better; repeated attempts before the network stabilizes can make the state oscillate.

Check background activity and battery-saving policies on mobile

iOS and Android manage apps based on battery level, background activity, and network state. If the VPNXV client is restricted from running in the background, the task maintaining the connection may pause when the screen turns off. In system settings, allow the necessary background network activity and avoid placing the client in strict sleep or deep battery-saving lists. Manufacturers use different names for these controls, but the diagnosis is the same: if foreground use on the same route is stable, the connection is lost soon after entering the background, and reopening the client restores it immediately, the system background policy is more likely than a persistent route failure.

Mobile devices may also rebuild the connection when switching between Wi-Fi and cellular networks. If the issue always occurs when leaving Wi-Fi coverage or entering a weak-signal area, disable automatic switching for comparison and test one network at a time. If one network is stable, the problem is related to network migration. In that case, keeping automatic reconnect enabled and reducing other network tools is usually more effective than locking to one route.

Distinguish a route drop from an app hang

Sometimes the client still shows connected but every request stops, then recovers after switching routes. The client may not have recognized the session as invalid. First check whether only one app has stopped. If the browser, system requests, and other apps work, the issue is more likely within that app. If every app stops at once, disconnect and reconnect the same route. Recovery after reconnecting the same route suggests stale session state; recovery only after changing routes calls for further comparison of exits or paths.

The order of timestamps in the client log matters. Record whether a network change, sleep, system-proxy change, or DNS error occurred before the disconnect. Do not capture only the final line; a failed reconnect may simply be the result of an earlier network interruption. When submitting logs, keep the surrounding entries before and after the failure and remove subscription tokens, usernames, and other sensitive fields. If the log is long, describe the reproduction action so support can start at the relevant point.

If frequent disconnects coincide with a complete local-network interruption, fix the access network first. Router reconnects, Wi-Fi roaming, and signal fluctuations can invalidate higher-level connections. If the local network is stable but VPNXV consistently disconnects from the same route across platforms and networks, submit a ticket. Include the platform, network type, route name, whether sleep or foreground/background switching occurred, and whether reconnecting the same route restores service.

Subscription update failures and abnormal route lists

Common signs of a failed subscription update include an empty route list, old routes remaining visible, an error on the Update button, no change after import, or the same subscription working in one client but not being recognized by another. Separate “subscription could not be fetched” from “fetched successfully but parsing failed.” The former usually involves login state, the subscription URL, network access, or account status. The latter is more often related to client format, cache, the import entry point, or a conflict with old configuration.

Fetch the subscription again from the user panel

Do not copy a subscription from chat history, OCR results, or old notes. Sign in to the user panel and get the current content from the download or subscription area. A subscription is sensitive credential data; do not publish it or submit the full URL in a ticket. VPNXV registration requires no email address; a username and password are sufficient. If you forget them, verify the information saved locally instead of repeatedly creating new accounts. Mixing multiple accounts can make it look as though the panel has one plan while the client receives a different subscription.

When copying, avoid including leading or trailing spaces, line breaks, or punctuation. Some apps remove spaces automatically, while others treat them as part of the address. If you transfer the subscription through a system clipboard across devices, make sure a text tool has not truncated it. After importing, explicitly update the subscription in the client rather than merely saving its name. If the client retains an old subscription too, confirm which route group you are viewing before deciding that the new subscription did not apply.

https://example.com/sub?token=YOUR_TOKEN

The address above only illustrates subscription-link structure; it is an obvious example and cannot be used to connect. Get the real subscription only from the VPNXV user panel. In troubleshooting screenshots, hide the token after the query parameters. A ticket usually needs only the error text, client platform, import method, and approximate time—not the complete token.

Determine whether the download or the parsing failed

If a network error appears immediately during an update, first confirm that the client itself can reach the subscription source. Some clients send subscription updates through the system network while node traffic uses another path, so being connected does not guarantee that the update request uses the same exit. Try both disconnected and connected states and record the difference. If the update completes but the list is empty or the format is unrecognized, check that the correct subscription-import entry point was selected and that the client supports the format provided by the panel.

A subscription that reads correctly on another supported platform provides a useful comparison. It suggests that the account and subscription source are probably working, concentrating the issue in the original client's cache or parser. Create a separate subscription entry without deleting the old one and check whether the new entry can read it. Keeping the old configuration prevents accidental loss of working rules and makes field differences easier to compare. Remove duplicates only after the new entry works.

Handle cache, duplicate subscriptions, and update overwrites

A client may cache content by subscription name, URL, or internal identifier. Importing the same URL repeatedly can appear to create new entries while still referencing the old cache. Refresh the current entry first and check whether its update time and route list change. If not, quit and reopen the client, then create a clearly named subscription entry. Do not repeatedly rename routes or manually edit generated sections, because the next update will overwrite those changes.

Keep custom rules separate from the subscription's route configuration. If rules are written directly into an auto-update area and disappear after an update, that does not mean the subscription is damaged; the client replaced the remote content as designed. Use the client's override, configuration-merge, or separate-rules entry point instead. The exact entry varies by platform. If unsure, return to the standard import flow through the Quick Start Guide, then restore custom settings step by step.

Check account and traffic status

Traffic for monthly subscriptions resets each month on the activation date, and the price difference from a mid-cycle upgrade is prorated into the remaining days. Data packages remain available until used and never expire. If the plan or traffic status in the panel differs from expectations, do not try to fix it by repeatedly importing the subscription; the client only reads the result generated by the panel and cannot change account status. Verify the account, plan type, and order history in the panel first, then decide whether an account ticket is needed.

If the user panel opens normally and the subscription can be copied, but several supported clients cannot read it and show the same exact error, submit a ticket. Include the platform, the client's import entry point, the exact error, whether it updates on another network, and whether the subscription is visible in the panel. Do not attach the full subscription URL or password. Support will request any further information needed for verification through the ticket.

Only one app is not using the proxy

If the browser works but one app cannot connect, you usually do not need to reset the entire client. The app may bypass the system proxy, use its own network stack, have built-in proxy settings, support only a particular protocol, or be classified as direct by a rule. First determine whether it fails on launch, at login, or only for specific functions such as images, voice, or sync. Modern apps often distribute the interface, authentication, and content across different domains; one failing function often means some requests took the wrong path, not that the app is unsupported.

Use global mode to verify rule matching

Keep the current route and temporarily switch to global mode, then fully quit and reopen the target app. If it recovers, the route can carry the traffic and the issue is concentrated in the rules. Check the domains and addresses accessed during app startup in the client log and identify which rules matched. Rules are usually matched from top to bottom; a broad direct rule placed first may intercept a request that should use the proxy. Change only entries related to the target and avoid permanently sending all unknown traffic down one path.

If global mode still fails, check whether the app has its own proxy setting. An in-app proxy may override the system proxy and point to an old address or stopped local port. Set the app to follow the system and test again. Some apps read proxy environment variables only at startup, so fully quit the process after changing the setting; closing the window alone may not reload it.

Check app routing and system permissions

Clients that support per-app routing may require you to choose which apps use the proxy. After a system update, app reinstall, or path change, an old selection may no longer point to the current program. Select the target app again and confirm that it is not listed in both direct and proxy groups. On Windows, one product may have multiple launch programs; on macOS, an app may send network requests through a helper process. Selecting only the interface app while omitting the network helper can allow login but prevent content from loading.

Per-app settings on mobile are limited by system capabilities. If the client offers only global or rule mode, use domain rules instead of looking for an app switch that does not exist. iOS and Android network permissions may also be affected by enterprise configuration, work profiles, or other network services. Test first in an ordinary network environment to confirm that managed settings are not changing the app's path.

Check related domains when only some resources fail

If an app's main interface opens but images, attachments, voice features, or login callbacks fail, related domains may not be following the same policy. Open the client connection log and perform one action that reliably triggers the issue, then inspect the domains immediately before and after the failure. Do not test several functions at once or the log will be difficult to correlate. After finding the related domain, add a temporary rule for verification. Once it works, turn it into a long-term rule and document its purpose so it is not accidentally removed later.

If an app uses an account tied to a fixed region, changing the exit may trigger reauthentication or different content. Keep the exit region stable, clear the app's old session, and test again. Do not switch among several regions in quick succession; this adds account-side state changes and mixes route issues with account issues. For differences between AI Tools apps and their web versions, see the AI Tools feature. For Windows global-proxy and split-routing scenarios, see Windows VPN comparison tests.

Test result Most likely direction Next step
Global works, rules fail Rules did not match or a direct rule intercepted the request Check the log and adjust rule order
Browser works, app fails The app's built-in proxy or separate network stack Set it to follow the system and restart the app
Main interface works, some resources fail Related domains use inconsistent paths Identify resource domains and apply one policy
Every mode fails Protocol compatibility, account status, or the target service Change route type and keep the exact error text

When submitting a ticket, name the app, affected features, the comparison between global and rule modes, whether the app has its own proxy setting, and whether another route type changes the result. If the app shows an error code, include the exact error text, but do not submit only a screenshot of the code without reproduction steps. Support needs to know what action triggered the issue to determine whether it involves rules, the protocol, or the target service response.

DNS issues: failed resolution, inconsistent addresses, and leak checks

DNS converts domain names into network addresses. When it misbehaves, common signs include a domain not opening while a direct request to a known address responds, some sites redirecting to the wrong region, the original network's resolver still being used after connecting, or the browser and command line returning different results for the same domain. DNS issues are easily mistaken for route failures because both ultimately prevent a page from loading. The key questions are who performs the lookup, whether the result comes from cache, and whether the browser bypasses system settings.

Compare resolution sources in the system, browser, and client

The client may take over system DNS or may only configure a proxy while leaving system resolution unchanged. The browser may also enable its own secure DNS. When all three are active, the same domain can follow different resolution paths. First disable the browser's independent DNS and test with the system default. Then check whether the client uses custom DNS or remote resolution. During troubleshooting, keep one clear source active; restore browser settings only after the path is stable.

Command-line domain lookups provide a system-resolution comparison, but they do not necessarily reproduce browser behavior. A browser may cache results, preconnect to a target, or use its own encrypted resolver. If the command line succeeds while the browser fails, clear the browser cache and check extensions first. If both fail, inspect the system and client. A differing result from one tool is not by itself evidence of a leak; first confirm whether the requests should have used the same resolution path.

Handle cached and incorrect addresses

DNS caches exist at several levels: the system, browser, router, and app. Clearing only one may leave an old result available from another. Fully quit the target app, disconnect the client, reconnect, and then launch the app. If the issue remains, use the system's supported cache-clearing method. If the router cache cannot be confirmed, test on another network. If the other network works, the original network's resolution or routing deserves attention.

A domain returning multiple addresses is not necessarily abnormal. Content delivery networks assign different addresses based on the resolver and exit location. Focus instead on whether the returned address remains unreachable, appears only with one resolution source, or changes to an exit-region-consistent result after switching routes. Do not mistake normal multi-address responses for poisoning, and do not hard-code a temporary address as a long-term fix. A target service can change, making the fixed address stop working.

Limits of custom DNS

Custom DNS can help standardize resolution, but it is not a universal fix. If the route is unreachable, changing the resolver only returns another unreachable address. If the issue is split routing, custom DNS may make the domain and exit policy less consistent. Before enabling it, determine whether the client uses local or remote resolution and whether DNS requests go direct or through the proxy. If unsure, restore the default configuration and let the client use its designed path.

Rule mode may also rely on domain information. If an app connects directly to an address, uses built-in resolution, or wraps requests in an independent protocol, the client may not see enough information and the rule can fail. When global mode works but rule mode does not, both DNS and rules may be involved. Check the log for the target domain and matched rule before deciding whether to add a rule or change the resolution mode.

nslookup example.com
curl -I https://example.com

Run queries under the same network and client state so conditions do not change between tests. To compare before and after connecting, save each output and label the state. Do not include subscription URLs, usernames, or other account information. If the domain resolves but the request fails, continue checking the route and proxy. If resolution fails while another network works, focus on the current DNS source. If resolution is normal but only the browser fails, return to browser settings.

For a DNS ticket, provide the affected domain, system platform, client mode, whether the browser's independent DNS is enabled, whether the command-line lookup succeeds, and what happens after switching networks. Do not submit your full browsing history. Support only needs a reproducible target and set of conditions. If the issue concerns regional content on one site, also state whether the selected exit region matches the account region so the site's own policy is not mistaken for a DNS fault.

Device alerts, traffic status, and ticket details

When the client reports a device, authorization, traffic, or account issue, return to the user panel and verify the account first. VPNXV supports unlimited simultaneous devices, so a message such as “device limit exceeded” should not be assumed to be a plan restriction. More common causes include the client retaining an old account, a third-party client keeping its own local device record, a stale session, or an error generated by local configuration rather than the VPNXV panel. Confirm that the imported subscription belongs to the account currently signed in, fetch it again, and test.

Distinguish plan traffic from local network limits

Monthly plans include ¥9.9/month with 60GB, ¥18/month with 250GB, and ¥28/month with 500GB; traffic resets monthly on the activation date, and mid-cycle upgrade differences are prorated into the remaining days. Data packages include ¥158/300GB, ¥358/1000GB, and ¥658/3000GB; they remain available until used and never expire. When the client cannot connect, confirm in the panel whether the account uses a monthly plan or a data package and check its status. Deleting the client, reinstalling the system, or repeatedly refreshing the subscription cannot change account-side traffic records.

If the panel status is correct but the client still shows old information, update the subscription, then fully quit and reopen the client. When several subscription entries exist, confirm which entry supplies the selected route. Identical names do not guarantee identical sources; an old subscription may remain in the list. You can temporarily give entries distinct local names, but do not edit remotely generated route fields.

Keep payment and refund issues tied to the order context

VPNXV supports Alipay / WeChat Pay / USDT. If payment is complete but the panel has not changed, do not create the same order again or try to solve it by registering another account. Keep the order status, payment method, and steps that led to the issue from the panel, then submit a ticket through the user panel. For refunds, the stated policy is a 14-day no-questions-asked refund; see the Refund Policy for the application process and scope.

Compare plan features and traffic use on the plan pricing page. If you plan to upgrade mid-cycle, use the plan entry in the user panel because the price difference is prorated into the remaining days. Do not calculate the amount yourself or place multiple orders to assemble a period. If the panel does not match the order expectation, ask support to verify it against the order record.

When to submit a support ticket

A technical ticket is appropriate after testing the default configuration, trying different route types, comparing different networks, and confirming that the issue remains reproducible. Account status, orders, traffic records, and subscription-generation problems should also go directly through a ticket. If a fault happened once and has not returned after reconnecting, keep a record and continue observing. If it persists, has a clear scope, or involves account status, there is no need to repeatedly reinstall the client.

The ticket entry is in the user panel. Make the title describe the symptom directly, such as “Windows pages fail to resolve after connecting” or “Android disconnects after switching networks in the background,” rather than just “Help.” Start with the platform and network environment, then give the route name and type. Describe the actions, expected result, actual result, and attempted fixes in chronological order. If only one app is affected, include its name, affected feature, and the comparison between global and rule modes.

Include

  • System platform and how the client is used
  • Route name, route type, and network environment
  • Reproducible troubleshooting steps
  • Exact error text and necessary screenshots
  • Troubleshooting actions already attempted

Redact before submitting

  • Tokens in the subscription URL
  • Username and password
  • Payment credentials and unrelated order details
  • Personal directory names in logs
  • Browsing content unrelated to the issue

How to save useful logs

Logs should cover the continuous sequence before and after the failure. Record the setup clearly, perform one action that reliably reproduces the issue, then stop instead of flooding the key section with reconnection attempts. Use the client's default log level; do not enable unfamiliar debugging options just to collect more data. After exporting, search for subscription URLs, tokens, and account fields, redact them, and then upload the file.

Screenshots should show the status and the area containing the error, not the entire desktop. If the error disappears quickly, record a short operation video, but still write out the steps because support cannot infer the click order from footage alone. For speed issues, one speed-test result is insufficient; describe the disconnected behavior, differences between route types, and the real apps mainly affected.

If a ticket reply requests more information, continue replying in the original ticket instead of splitting it into separate issues. Distributing the same fault across multiple tickets loses the context. After recovery, it is also useful to say which action worked so the root cause can be confirmed. The goal of system troubleshooting is not to try the most settings, but to reach a verifiable conclusion with the fewest variables.