From 810661d5f42f4133736e26f882f7323a5705655a Mon Sep 17 00:00:00 2001
From: aoshiguchen <1052045476@qq.com>
Date: Thu, 15 Jan 2026 15:17:27 +0800
Subject: [PATCH] =?UTF-8?q?=E8=BF=9E=E6=8E=A5=E5=85=B3=E9=97=AD=E3=80=81?=
 =?UTF-8?q?=E5=BC=82=E5=B8=B8=E5=A4=84=E7=90=86=E4=BC=98=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../client/core/CmdChannelHandler.java        | 28 ++++++--
 .../client/core/RealServerChannelHandler.java | 41 ++++++++---
 .../client/core/TcpProxyChannelHandler.java   | 42 ++++++++---
 .../client/core/UdpProxyChannelHandler.java   | 40 ++++++++---
 .../client/core/UdpRealServerHandler.java     | 43 ++++++++++++
 .../ProxyMessageDisconnectHandler.java        | 16 ++---
 .../proxy/core/ProxyTunnelChannelHandler.java | 34 ++++++---
 .../proxy/core/TcpVisitorChannelHandler.java  | 42 +++++++----
 .../proxy/core/UdpVisitorChannelHandler.java  | 36 +++++++---
 .../enhance/HttpVisitorChannelHandler.java    | 42 ++++++++---
 .../HttpVisitorSecurityChannelHandler.java    | 69 +++++++++++++++++-
 .../TcpVisitorSecurityChannelHandler.java     | 70 ++++++++++++++++++-
 .../UdpVisitorSecurityChannelHandler.java     | 70 ++++++++++++++++++-
 .../VisitorFlowLimiterChannelHandler.java     | 65 +++++++++++++++--
 14 files changed, 540 insertions(+), 98 deletions(-)

diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/CmdChannelHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/CmdChannelHandler.java
index c1cb7c27..f45f6217 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/CmdChannelHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/CmdChannelHandler.java
@@ -1,5 +1,6 @@
 package org.dromara.neutrinoproxy.client.core;
 
+import io.netty.handler.codec.DecoderException;
 import org.dromara.neutrinoproxy.client.config.ProxyConfig;
 import org.dromara.neutrinoproxy.client.util.ProxyUtil;
 import org.dromara.neutrinoproxy.core.Constants;
@@ -13,6 +14,7 @@ import io.netty.handler.timeout.IdleStateEvent;
 import lombok.extern.slf4j.Slf4j;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.SocketException;
 
 /**
@@ -60,11 +62,29 @@ public class CmdChannelHandler extends SimpleChannelInboundHandler<ProxyMessage>
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[Cmd Channel] Client connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[Cmd Channel]  IO Error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[Cmd Channel]  decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[Cmd Channel]  error", cause);
         }
-        log.error("[CMD Channel]Client CmdChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
     }
 
     @Override
diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/RealServerChannelHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/RealServerChannelHandler.java
index ba5ee077..137393da 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/RealServerChannelHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/RealServerChannelHandler.java
@@ -1,15 +1,15 @@
 package org.dromara.neutrinoproxy.client.core;
 
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.client.util.ProxyUtil;
 import org.dromara.neutrinoproxy.core.Constants;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
 import io.netty.buffer.ByteBuf;
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelOption;
-import io.netty.channel.SimpleChannelInboundHandler;
 
+import java.io.IOException;
 import java.net.SocketException;
 
 /**
@@ -57,9 +57,10 @@ public class RealServerChannelHandler extends SimpleChannelInboundHandler<ByteBu
         Channel realServerChannel = ctx.channel();
         String visitorId = ProxyUtil.getVisitorIdByRealServerChannel(realServerChannel);
         ProxyUtil.removeRealServerChannel(visitorId);
-        Channel channel = realServerChannel.attr(Constants.NEXT_CHANNEL).get();
-        if (channel != null) {
-            channel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+        Channel proxyChannel = realServerChannel.attr(Constants.NEXT_CHANNEL).get();
+        if (proxyChannel != null && proxyChannel.isActive()) {
+            // channel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+            proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
         }
 
         super.channelInactive(ctx);
@@ -78,10 +79,28 @@ public class RealServerChannelHandler extends SimpleChannelInboundHandler<ByteBu
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[Real Server Channel] Client connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[Real Server Channel] IO Error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[Real Server Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[Real Server Channel] error", cause);
         }
-        log.error("Client ProxyChannel Error", cause);
     }
 }
diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/TcpProxyChannelHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/TcpProxyChannelHandler.java
index 79f37760..b90a8525 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/TcpProxyChannelHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/TcpProxyChannelHandler.java
@@ -1,9 +1,8 @@
 package org.dromara.neutrinoproxy.client.core;
 
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelOption;
-import io.netty.channel.SimpleChannelInboundHandler;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import io.netty.handler.timeout.IdleStateEvent;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.client.util.ProxyUtil;
@@ -12,6 +11,7 @@ import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.SocketException;
 
 /**
@@ -45,21 +45,43 @@ public class TcpProxyChannelHandler extends SimpleChannelInboundHandler<ProxyMes
     public void channelInactive(ChannelHandlerContext ctx) throws Exception {
         // 数据传输连接
         Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
-        if (realServerChannel != null && realServerChannel.isActive()) {
-            realServerChannel.close();
+        if (null != realServerChannel && realServerChannel.isActive()) {
+            // realServerChannel.close();
+            realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
         }
 
+        ProxyUtil.returnTcpProxyChanel(ctx.channel());
+        ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
         ProxyUtil.removeTcpProxyChanel(ctx.channel());
+
         super.channelInactive(ctx);
     }
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[TCP Proxy Channel] Client connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[TCP Proxy Channel] IO Error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[TCP Proxy Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[TCP Proxy Channel] error", cause);
         }
-        log.error("[TCP Proxy Channel]Client ProxyChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
     }
 
     @Override
diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpProxyChannelHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpProxyChannelHandler.java
index 01fe0087..2d73f4c5 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpProxyChannelHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpProxyChannelHandler.java
@@ -1,9 +1,8 @@
 package org.dromara.neutrinoproxy.client.core;
 
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelOption;
-import io.netty.channel.SimpleChannelInboundHandler;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import io.netty.handler.timeout.IdleStateEvent;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.client.util.ProxyUtil;
@@ -12,6 +11,7 @@ import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.SocketException;
 
 /**
@@ -46,20 +46,40 @@ public class UdpProxyChannelHandler extends SimpleChannelInboundHandler<ProxyMes
         // 数据传输连接
         Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
         if (realServerChannel != null && realServerChannel.isActive()) {
-            realServerChannel.close();
+            // realServerChannel.close();
+            realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
         }
 
-        ProxyUtil.removeTcpProxyChanel(ctx.channel());
+        ProxyUtil.returnUdpProxyChanel(ctx.channel());
+        ProxyUtil.removeUdpProxyChanel(ctx.channel());
         super.channelInactive(ctx);
     }
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[UDP Proxy Channel] Client connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[UDP Proxy Channel] IO Error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[UDP Proxy Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[UDP Proxy Channel] error", cause);
         }
-        log.error("[UDP Proxy Channel]Client ProxyChannel Error channelId:{}", ctx.channel().id().asLongText(), cause);
     }
 
     @Override
diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpRealServerHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpRealServerHandler.java
index e48b4500..6574e120 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpRealServerHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/core/UdpRealServerHandler.java
@@ -3,12 +3,15 @@ package org.dromara.neutrinoproxy.client.core;
 import io.netty.channel.ChannelHandlerContext;
 import io.netty.channel.SimpleChannelInboundHandler;
 import io.netty.channel.socket.DatagramPacket;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.client.constant.Constants;
 import org.dromara.neutrinoproxy.client.util.UdpChannelBindInfo;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
+import java.net.SocketException;
 import java.util.Date;
 
 /**
@@ -40,4 +43,44 @@ public class UdpRealServerHandler extends SimpleChannelInboundHandler<DatagramPa
             udpChannelBindInfo.getLockChannel().setLastActiveTime(new Date());
         }
     }
+
+    @Override
+    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[UDP RealServer Channel] Client connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[UDP RealServer Channel] IO Error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[UDP RealServer Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[UDP RealServer Channel] error", cause);
+        }
+    }
+
+//    @Override
+//    public void channelInactive(ChannelHandlerContext ctx) throws Exception {
+//        // 数据传输连接
+//        Channel realServerChannel = ctx.channel().attr(org.dromara.neutrinoproxy.core.Constants.NEXT_CHANNEL).get();
+//        if (realServerChannel != null && realServerChannel.isActive()) {
+//            // realServerChannel.close();
+//            realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+//        }
+//
+//        ProxyUtil.removeUdpProxyChanel(ctx.channel());
+//        super.channelInactive(ctx);
+//    }
 }
diff --git a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/handler/ProxyMessageDisconnectHandler.java b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/handler/ProxyMessageDisconnectHandler.java
index d1ada2d7..acc20971 100644
--- a/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/handler/ProxyMessageDisconnectHandler.java
+++ b/neutrino-proxy-client/src/main/java/org/dromara/neutrinoproxy/client/handler/ProxyMessageDisconnectHandler.java
@@ -1,14 +1,10 @@
 package org.dromara.neutrinoproxy.client.handler;
 
-import org.dromara.neutrinoproxy.client.util.ProxyUtil;
 import org.dromara.neutrinoproxy.core.Constants;
 import org.dromara.neutrinoproxy.core.ProxyDataTypeEnum;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.ProxyMessageHandler;
 import org.dromara.neutrinoproxy.core.dispatcher.Match;
-import io.netty.buffer.Unpooled;
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelFutureListener;
 import io.netty.channel.ChannelHandlerContext;
 import org.noear.solon.annotation.Component;
 
@@ -23,12 +19,12 @@ public class ProxyMessageDisconnectHandler implements ProxyMessageHandler {
 
 	@Override
 	public void handle(ChannelHandlerContext ctx, ProxyMessage proxyMessage) {
-		Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
-		if (null != realServerChannel) {
-			ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
-			ProxyUtil.returnTcpProxyChanel(ctx.channel());
-			realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
-		}
+//		Channel realServerChannel = ctx.channel().attr(Constants.NEXT_CHANNEL).get();
+//		if (null != realServerChannel) {
+//			ctx.channel().attr(Constants.NEXT_CHANNEL).remove();
+//			ProxyUtil.returnTcpProxyChanel(ctx.channel());
+//			realServerChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+//		}
 		ctx.close();
 	}
 
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/ProxyTunnelChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/ProxyTunnelChannelHandler.java
index d3de5ef8..6c383d37 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/ProxyTunnelChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/ProxyTunnelChannelHandler.java
@@ -1,5 +1,6 @@
 package org.dromara.neutrinoproxy.server.proxy.core;
 
+import io.netty.handler.codec.DecoderException;
 import org.dromara.neutrinoproxy.core.Constants;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.dispatcher.Dispatcher;
@@ -17,6 +18,7 @@ import io.netty.handler.timeout.IdleStateEvent;
 import lombok.extern.slf4j.Slf4j;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
 import java.net.SocketException;
 import java.util.Date;
@@ -82,7 +84,7 @@ public class ProxyTunnelChannelHandler extends SimpleChannelInboundHandler<Proxy
             if (visitorChannel.isActive() && null == isUdp) {
                 // 数据发送完成后再关闭连接，解决http1.0数据传输问题
                 visitorChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
-                visitorChannel.close();
+                // visitorChannel.close();
             }
         } else {
             CmdChannelAttachInfo cmdChannelAttachInfo = ProxyUtil.getAttachInfo(ctx.channel());
@@ -112,15 +114,29 @@ public class ProxyTunnelChannelHandler extends SimpleChannelInboundHandler<Proxy
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
-//        super.exceptionCaught(ctx, cause);
-//        if (ctx.channel().isActive()) {
-//            ctx.channel().close();
-//        }
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[Tunnel Channel] Connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[Tunnel Channel] IO error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[Tunnel Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[Tunnel Channel] error", cause);
         }
-        log.error("[Tunnel Channel] error", cause);
     }
 
     @Override
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/TcpVisitorChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/TcpVisitorChannelHandler.java
index 344f5d1d..f9b36519 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/TcpVisitorChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/TcpVisitorChannelHandler.java
@@ -2,10 +2,9 @@ package org.dromara.neutrinoproxy.server.proxy.core;
 
 import cn.hutool.core.util.StrUtil;
 import io.netty.buffer.ByteBuf;
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelOption;
-import io.netty.channel.SimpleChannelInboundHandler;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.core.Constants;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
@@ -15,6 +14,7 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
 import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
 import java.net.SocketException;
 
@@ -28,11 +28,29 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[TCP Visitor Channel] connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[TCP Visitor Channel] IO error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[TCP Visitor Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[TCP Visitor Channel] error", cause);
         }
-        log.error("VisitorChannel error", cause);
     }
 
     @Override
@@ -98,11 +116,7 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
         InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
         Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
 
-        if (null == cmdChannel) {
-            // 该端口还没有代理客户端
-            ctx.channel().close();
-        } else {
-
+        if (null != cmdChannel) {
             // 用户连接断开，从控制连接中移除
             String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
             ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
@@ -119,6 +133,8 @@ public class TcpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteBu
                 proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
                 // 通知客户端，用户连接已经断开
                 proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+
+                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
             }
         }
 
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
index 924fbf64..4432742e 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
@@ -6,6 +6,7 @@ import io.netty.channel.ChannelHandlerContext;
 import io.netty.channel.ChannelOption;
 import io.netty.channel.SimpleChannelInboundHandler;
 import io.netty.channel.socket.DatagramPacket;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.core.Constants;
 import org.dromara.neutrinoproxy.core.ProxyMessage;
@@ -16,6 +17,7 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
 import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
 import java.net.SocketException;
 
@@ -122,14 +124,32 @@ public class UdpVisitorChannelHandler extends SimpleChannelInboundHandler<Datagr
         super.channelActive(ctx);
     }
 
-    @Override
-    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
-        if (cause instanceof SocketException && cause.getMessage().contains("Connection reset")) {
-            ctx.channel().close();
-            return;
-        }
-        log.error("[UDP Visitor Channel]VisitorChannel error", cause);
-    }
+//    @Override
+//    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
+//        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+//        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+//        if (cause instanceof IOException) {
+//            // IOException及其子类（包括SocketException）都是致命的网络异常
+//            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+//                // Connection reset是常见的客户端断开，使用debug级别
+//                log.debug("[UDP Visitor Channel] Connection reset: {}", cause.getMessage());
+//            } else {
+//                log.error("[UDP Visitor Channel] IO error", cause);
+//            }
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else if(cause instanceof DecoderException) {
+//            // 协议解析错误，为防止数据污染，立即关闭
+//            log.debug("[UDP Visitor Channel] decoder error: {}", cause.getMessage());
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else {
+//            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+//            log.error("[UDP Visitor Channel] error", cause);
+//        }
+//    }
 
     @Override
     public void channelWritabilityChanged(ChannelHandlerContext ctx) throws Exception {
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/enhance/HttpVisitorChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/enhance/HttpVisitorChannelHandler.java
index 40a18a0f..2abbfc65 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/enhance/HttpVisitorChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/enhance/HttpVisitorChannelHandler.java
@@ -1,10 +1,9 @@
 package org.dromara.neutrinoproxy.server.proxy.enhance;
 
 import io.netty.buffer.ByteBuf;
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelOption;
-import io.netty.channel.SimpleChannelInboundHandler;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.dromara.neutrinoproxy.core.Constants;
@@ -16,7 +15,9 @@ import org.dromara.neutrinoproxy.server.service.FlowReportService;
 import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
+import java.net.SocketException;
 
 /**
  * @author: aoshiguchen
@@ -82,11 +83,7 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
         InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
         Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
 
-        if (cmdChannel == null) {
-            // 该端口还没有代理客户端
-            ctx.channel().close();
-        } else {
-
+        if (null != cmdChannel) {
             // 用户连接断开，从控制连接中移除
             String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
             ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
@@ -103,6 +100,8 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
                 proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
                 // 通知客户端，用户连接已经断开
                 proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+
+                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
             }
         }
 
@@ -116,8 +115,29 @@ public class HttpVisitorChannelHandler extends SimpleChannelInboundHandler<ByteB
 
     @Override
     public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) {
-        // 当出现异常就关闭连接
-        ctx.close();
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[HTTP Visitor Channel] Connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[HTTP Visitor Channel] IO error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[HTTP Visitor Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[HTTP Visitor Channel] error", cause);
+        }
     }
 
     @Override
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/HttpVisitorSecurityChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/HttpVisitorSecurityChannelHandler.java
index d32c25ff..ec22dd02 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/HttpVisitorSecurityChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/HttpVisitorSecurityChannelHandler.java
@@ -2,13 +2,14 @@ package org.dromara.neutrinoproxy.server.proxy.security;
 
 import io.netty.buffer.ByteBuf;
 import io.netty.buffer.Unpooled;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelInboundHandlerAdapter;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import io.netty.util.CharsetUtil;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.checkerframework.checker.i18nformatter.qual.I18nFormat;
 import org.dromara.neutrinoproxy.core.Constants;
+import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.util.HttpUtil;
 import org.dromara.neutrinoproxy.core.util.IpUtil;
 import org.dromara.neutrinoproxy.server.service.DomainService;
@@ -17,6 +18,10 @@ import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
 import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
+import java.net.InetSocketAddress;
+import java.net.SocketException;
+
 /**
  * @author: aoshiguchen
  * @date: 2023/12/14
@@ -109,4 +114,64 @@ public class HttpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdap
         // 继续传播
         ctx.fireChannelRead(cumulationBuf);
     }
+
+    @Override
+    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[HTTP Visitor Security Channel] Connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[HTTP Visitor Security Channel] IO error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[HTTP Visitor Security Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[HTTP Visitor Security Channel] error", cause);
+        }
+    }
+
+    @Override
+    public void channelInactive(ChannelHandlerContext ctx) throws Exception {
+
+        // 通知代理客户端
+        Channel visitorChannel = ctx.channel();
+        InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
+        Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
+
+        if (null != cmdChannel) {
+            // 用户连接断开，从控制连接中移除
+            String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
+            ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
+
+            // 删除代理附加对象
+            ProxyUtil.remoteProxyConnectAttachment(visitorId);
+
+            Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
+            if (proxyChannel != null && proxyChannel.isActive()) {
+                proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
+                proxyChannel.attr(Constants.LICENSE_ID).remove();
+                proxyChannel.attr(Constants.VISITOR_ID).remove();
+
+                proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
+                // 通知客户端，用户连接已经断开
+                proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+
+                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+            }
+        }
+
+        super.channelInactive(ctx);
+    }
 }
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/TcpVisitorSecurityChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/TcpVisitorSecurityChannelHandler.java
index cbcb45f3..409fc0a5 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/TcpVisitorSecurityChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/TcpVisitorSecurityChannelHandler.java
@@ -1,18 +1,22 @@
 package org.dromara.neutrinoproxy.server.proxy.security;
 
 import io.netty.buffer.ByteBuf;
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelInboundHandlerAdapter;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.StringUtils;
 import org.dromara.neutrinoproxy.core.Constants;
+import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.core.util.IpUtil;
 import org.dromara.neutrinoproxy.server.service.PortMappingService;
 import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
+import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
+import java.net.SocketException;
 
 /**
  * @author: aoshiguchen
@@ -65,4 +69,64 @@ public class TcpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdapt
         ctx.fireChannelActive();
     }
 
+    @Override
+    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+        if (cause instanceof IOException) {
+            // IOException及其子类（包括SocketException）都是致命的网络异常
+            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+                // Connection reset是常见的客户端断开，使用debug级别
+                log.debug("[TCP Visitor Security Channel] Connection reset: {}", cause.getMessage());
+            } else {
+                log.error("[TCP Visitor Security Channel] IO error", cause);
+            }
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else if(cause instanceof DecoderException) {
+            // 协议解析错误，为防止数据污染，立即关闭
+            log.debug("[TCP Visitor Security Channel] decoder error: {}", cause.getMessage());
+            if (ctx.channel().isActive()) {
+                ctx.channel().close();
+            }
+        } else {
+            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+            log.error("[TCP Visitor Security Channel] error", cause);
+        }
+    }
+
+    @Override
+    public void channelInactive(ChannelHandlerContext ctx) throws Exception {
+
+        // 通知代理客户端
+        Channel visitorChannel = ctx.channel();
+        InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
+        Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
+
+        if (null != cmdChannel) {
+            // 用户连接断开，从控制连接中移除
+            String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
+            ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
+
+            // 删除代理附加对象
+            ProxyUtil.remoteProxyConnectAttachment(visitorId);
+
+            Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
+            if (proxyChannel != null && proxyChannel.isActive()) {
+                proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
+                proxyChannel.attr(Constants.LICENSE_ID).remove();
+                proxyChannel.attr(Constants.VISITOR_ID).remove();
+
+                proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
+                // 通知客户端，用户连接已经断开
+                proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+
+                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+            }
+        }
+
+        super.channelInactive(ctx);
+    }
+
 }
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/UdpVisitorSecurityChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/UdpVisitorSecurityChannelHandler.java
index 8e9d43f0..257d4989 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/UdpVisitorSecurityChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/UdpVisitorSecurityChannelHandler.java
@@ -1,16 +1,20 @@
 package org.dromara.neutrinoproxy.server.proxy.security;
 
-import io.netty.channel.Channel;
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelInboundHandlerAdapter;
+import io.netty.buffer.Unpooled;
+import io.netty.channel.*;
 import io.netty.channel.socket.DatagramPacket;
+import io.netty.handler.codec.DecoderException;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.core.Constants;
+import org.dromara.neutrinoproxy.core.ProxyMessage;
 import org.dromara.neutrinoproxy.server.service.PortMappingService;
 import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
+import org.dromara.neutrinoproxy.server.util.ProxyUtil;
 import org.noear.solon.Solon;
 
+import java.io.IOException;
 import java.net.InetSocketAddress;
+import java.net.SocketException;
 
 /**
  * @author: aoshiguchen
@@ -36,4 +40,64 @@ public class UdpVisitorSecurityChannelHandler extends ChannelInboundHandlerAdapt
         ctx.channel().attr(Constants.SERVER_PORT).set(sa.getPort());
         ctx.fireChannelRead(msg);
     }
+
+//    @Override
+//    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+//        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+//        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+//        if (cause instanceof IOException) {
+//            // IOException及其子类（包括SocketException）都是致命的网络异常
+//            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+//                // Connection reset是常见的客户端断开，使用debug级别
+//                log.debug("[UDP Visitor Security Channel] Connection reset: {}", cause.getMessage());
+//            } else {
+//                log.error("[UDP Visitor Security Channel] IO error", cause);
+//            }
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else if(cause instanceof DecoderException) {
+//            // 协议解析错误，为防止数据污染，立即关闭
+//            log.debug("[UDP Visitor Security Channel] decoder error: {}", cause.getMessage());
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else {
+//            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+//            log.error("[UDP Visitor Security Channel] error", cause);
+//        }
+//    }
+
+//    @Override
+//    public void channelInactive(ChannelHandlerContext ctx) throws Exception {
+//
+//        // 通知代理客户端
+//        Channel visitorChannel = ctx.channel();
+//        InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
+//        Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
+//
+//        if (null != cmdChannel) {
+//            // 用户连接断开，从控制连接中移除
+//            String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
+//            ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
+//
+//            // 删除代理附加对象
+//            ProxyUtil.remoteProxyConnectAttachment(visitorId);
+//
+//            Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
+//            if (proxyChannel != null && proxyChannel.isActive()) {
+//                proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
+//                proxyChannel.attr(Constants.LICENSE_ID).remove();
+//                proxyChannel.attr(Constants.VISITOR_ID).remove();
+//
+//                proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
+//                // 通知客户端，用户连接已经断开
+//                proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+//
+//                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+//            }
+//        }
+//
+//        super.channelInactive(ctx);
+//    }
 }
diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/VisitorFlowLimiterChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/VisitorFlowLimiterChannelHandler.java
index d99fdfa3..ad42b7ab 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/VisitorFlowLimiterChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/security/VisitorFlowLimiterChannelHandler.java
@@ -1,16 +1,14 @@
 package org.dromara.neutrinoproxy.server.proxy.security;
 
-import io.netty.channel.ChannelHandlerContext;
-import io.netty.channel.ChannelInboundHandlerAdapter;
+import io.netty.channel.*;
 import io.netty.handler.traffic.ChannelTrafficShapingHandler;
 import lombok.extern.slf4j.Slf4j;
 import org.dromara.neutrinoproxy.core.Constants;
-import org.dromara.neutrinoproxy.server.service.LicenseService;
 import org.dromara.neutrinoproxy.server.service.PortMappingService;
-import org.dromara.neutrinoproxy.server.service.SecurityGroupService;
 import org.dromara.neutrinoproxy.server.service.bo.FlowLimitBO;
 import org.noear.solon.Solon;
 
+
 /**
  * 访问者流量限制器
  * @author: aoshiguchen
@@ -47,4 +45,63 @@ public class VisitorFlowLimiterChannelHandler extends ChannelInboundHandlerAdapt
         ctx.fireChannelRead(msg);
     }
 
+//    @Override
+//    public void exceptionCaught(ChannelHandlerContext ctx, Throwable cause) throws Exception {
+//        // 对于网络IO异常（致命异常），关闭channel以防止资源泄漏
+//        // 对于其他异常（可能是可恢复的业务异常），只记录日志
+//        if (cause instanceof IOException) {
+//            // IOException及其子类（包括SocketException）都是致命的网络异常
+//            if (cause instanceof SocketException && cause.getMessage() != null && cause.getMessage().contains("Connection reset")) {
+//                // Connection reset是常见的客户端断开，使用debug级别
+//                log.debug("[Visitor FlowLimit Channel] Connection reset: {}", cause.getMessage());
+//            } else {
+//                log.error("[Visitor FlowLimit Channel] IO error", cause);
+//            }
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else if(cause instanceof DecoderException) {
+//            // 协议解析错误，为防止数据污染，立即关闭
+//            log.debug("[Visitor FlowLimit Channel] decoder error: {}", cause.getMessage());
+//            if (ctx.channel().isActive()) {
+//                ctx.channel().close();
+//            }
+//        } else {
+//            // 其他异常只记录日志，不关闭channel，让Netty自己处理
+//            log.error("[Visitor FlowLimit Channel] error", cause);
+//        }
+//    }
+
+//    @Override
+//    public void channelInactive(ChannelHandlerContext ctx) throws Exception {
+//
+//        // 通知代理客户端
+//        Channel visitorChannel = ctx.channel();
+//        InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
+//        Channel cmdChannel = ProxyUtil.getCmdChannelByServerPort(sa.getPort());
+//
+//        if (null != cmdChannel) {
+//            // 用户连接断开，从控制连接中移除
+//            String visitorId = ProxyUtil.getVisitorIdByChannel(visitorChannel);
+//            ProxyUtil.removeVisitorChannelFromCmdChannel(cmdChannel, visitorId);
+//
+//            // 删除代理附加对象
+//            ProxyUtil.remoteProxyConnectAttachment(visitorId);
+//
+//            Channel proxyChannel = visitorChannel.attr(Constants.NEXT_CHANNEL).get();
+//            if (proxyChannel != null && proxyChannel.isActive()) {
+//                proxyChannel.attr(Constants.NEXT_CHANNEL).remove();
+//                proxyChannel.attr(Constants.LICENSE_ID).remove();
+//                proxyChannel.attr(Constants.VISITOR_ID).remove();
+//
+//                proxyChannel.config().setOption(ChannelOption.AUTO_READ, true);
+//                // 通知客户端，用户连接已经断开
+//                proxyChannel.writeAndFlush(ProxyMessage.buildDisconnectMessage(visitorId));
+//
+//                proxyChannel.writeAndFlush(Unpooled.EMPTY_BUFFER).addListener(ChannelFutureListener.CLOSE);
+//            }
+//        }
+//
+//        super.channelInactive(ctx);
+//    }
 }