It's my port for wireguard and here what I can't understand: when I blocking port for this wireguard service I still can use wireguard even if ufw deny it.
No, I think issue not resolved after update thunderbolt, but I just reinstalled arch and now all works good
outgoing, I guess. I mean, it's on my vps which I want to use for vpn