diff --git a/net/src/main/java/com/zfoo/net/core/proxy/TunnelProtocolServer2Client.java b/net/src/main/java/com/zfoo/net/core/proxy/TunnelProtocolServer2Client.java
index 1e2fc774..306e5cb8 100644
--- a/net/src/main/java/com/zfoo/net/core/proxy/TunnelProtocolServer2Client.java
+++ b/net/src/main/java/com/zfoo/net/core/proxy/TunnelProtocolServer2Client.java
@@ -67,16 +67,12 @@ public class TunnelProtocolServer2Client {
 
 
     public void write(ByteBuf out) {
-        try {
-            out.ensureWritable(22);
-            out.writerIndex(PacketService.PACKET_HEAD_LENGTH);
-            ByteBufUtils.writeLong(out, sid);
-            ByteBufUtils.writeLong(out, uid);
-            out.writeBytes(retainedByteBuf);
-            NetContext.getPacketService().writeHeaderBefore(out);
-        } finally {
-            ReferenceCountUtil.release(retainedByteBuf);
-        }
+        out.ensureWritable(22);
+        out.writerIndex(PacketService.PACKET_HEAD_LENGTH);
+        ByteBufUtils.writeLong(out, sid);
+        ByteBufUtils.writeLong(out, uid);
+        out.writeBytes(retainedByteBuf);
+        NetContext.getPacketService().writeHeaderBefore(out);
     }
     // -----------------------------------------------------------------------------------------------------------------
 
diff --git a/net/src/main/java/com/zfoo/net/core/proxy/handler/ProxyCodecHandler.java b/net/src/main/java/com/zfoo/net/core/proxy/handler/ProxyCodecHandler.java
index a6581a62..d0fd8603 100644
--- a/net/src/main/java/com/zfoo/net/core/proxy/handler/ProxyCodecHandler.java
+++ b/net/src/main/java/com/zfoo/net/core/proxy/handler/ProxyCodecHandler.java
@@ -26,6 +26,8 @@ import io.netty.buffer.ByteBuf;
 import io.netty.channel.ChannelHandlerContext;
 import io.netty.handler.codec.ByteToMessageCodec;
 import io.netty.util.ReferenceCountUtil;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 
 import java.util.List;
 
@@ -34,6 +36,8 @@ import java.util.List;
  */
 public class ProxyCodecHandler extends ByteToMessageCodec<TunnelProtocolServer2Client> {
 
+    private static final Logger logger = LoggerFactory.getLogger(ProxyCodecHandler.class);
+
 
     @Override
     protected void decode(ChannelHandlerContext ctx, ByteBuf in, List<Object> out) {
@@ -57,11 +61,20 @@ public class ProxyCodecHandler extends ByteToMessageCodec<TunnelProtocolServer2C
 
         if (CollectionUtils.isEmpty(TunnelServer.tunnels)) {
             in.readSlice(length);
+            logger.warn("Tunnel server has no tunnels");
             return;
         }
+
         var tunnel = RandomUtils.randomEle(TunnelServer.tunnels);
         if (!SessionUtils.isActive(tunnel)) {
             in.readSlice(length);
+            logger.warn("Tunnel server has no active tunnels");
+            return;
+        }
+
+        if (!tunnel.isWritable()) {
+            in.readSlice(length);
+            logger.warn("Tunnel server has no writable tunnels");
             return;
         }
 
diff --git a/net/src/main/java/com/zfoo/net/core/proxy/handler/TunnelServerCodecHandler.java b/net/src/main/java/com/zfoo/net/core/proxy/handler/TunnelServerCodecHandler.java
index 9981158c..3d813012 100644
--- a/net/src/main/java/com/zfoo/net/core/proxy/handler/TunnelServerCodecHandler.java
+++ b/net/src/main/java/com/zfoo/net/core/proxy/handler/TunnelServerCodecHandler.java
@@ -60,7 +60,11 @@ public class TunnelServerCodecHandler extends ByteToMessageCodec<TunnelProtocolS
 
     @Override
     protected void encode(ChannelHandlerContext ctx, TunnelProtocolServer2Client tunnelProtocol, ByteBuf out) {
-        tunnelProtocol.write(out);
+        try {
+            tunnelProtocol.write(out);
+        } finally {
+            ReferenceCountUtil.release(tunnelProtocol.getRetainedByteBuf());
+        }
     }
 
 }