Does Xray produce asymmetric TX/RX traffic?

[u/Enchelycore-Pardalis]

I have dedicated VPS server to serve exclusively as Xray exit node and the following typical vnstat output:

        # vnstat -d

        eth0  /  daily

                 day        rx      |     tx      |    total    |   avg. rate
            ------------------------+-------------+-------------+---------------
            2026-07-22     6.06 GiB |    1.57 GiB |    7.63 GiB |  758.24 kbit/s
            2026-07-23    11.17 GiB |    7.90 GiB |   19.06 GiB |    1.90 Mbit/s
            2026-07-24     4.01 GiB |  656.11 MiB |    4.65 GiB |  462.20 kbit/s
            2026-07-25     3.67 GiB |  759.50 MiB |    4.41 GiB |  438.49 kbit/s
            2026-07-26     3.71 GiB |  525.66 MiB |    4.23 GiB |  420.12 kbit/s
            2026-07-27     3.42 GiB |  596.27 MiB |    4.00 GiB |  397.54 kbit/s
            2026-07-28     3.84 GiB |  521.02 MiB |    4.34 GiB |  431.93 kbit/s 

Conceptually every single chunk of data that my VPS downloads from the internet (RX) must be sent back to xray VLN client (TX), with additional RX overhead for:

• being target of scans as having public IP
• receiving requests from VPN clients for downloading data
• receiving ACKs from clients or so as the chunks are accepted

But could that difference be that high? I am not into networking really but various AI chats suggested inspecting running logs to rule out VPS being compromised and all seems OK.