x-ui VS Xray-core

Hello, I have made this server using X-UI and I'm using VLESS and VMESS with WS transmission type.

v2-ui seems to have migrated to x-ui (https://github.com/vaxilu/x-ui). Not entirely sure if it is the same developer or a new one, only found it as I use xray to varying success. Still can't get a JP vultr VPS to function right even with CDN.

A developer who goes by RPRX on GitHub released a thing called Reality as part of the Xray-core project. And what it does is, instead of trying to look-like-Google in a clever statistical way, it just establishes a real TLS connection to real google.com.

This is basically what Xray [1] does. For any connection request matching a particular SNI and not presenting a secret key, it proxies the entire SSL handshake and data to a camouflage website. Otherwise it can be used as a regular proxy disguised as SSL traffic to that website (with the camouflage website being set as the SNI host, so for all purposes legit traffic to that host).

It's meant to get around the great firewall in China, so it has to avoid the GFW's active probers that check to make sure the external website is a (legit) host. However a friend was able to get it to work American's in-flight firewall if the proxy SNI is set to Google Analytics.

[1] https://github.com/XTLS/Xray-core

https://github.com/XTLS/Xray-core/releases/tag/v1.6.2

wget https://github.com/XTLS/Xray-core/releases/download/v25.3.6/Xray-linux-64.zip unzip Xray-linux-64.zip chmod +x xray mv xray /usr/bin/xray

> something standard and indistinguishable, like QUIC, DTLS or TLS1.3, for their transport layer.

Exactly this does exist, search for xray / xtls-reality.

A node pretends to be a valid web site, with a valid third-party TLS certificate (like a CDN node serving that website), until a correct secret key is presented, then it looks like regular TLS-encrypted web traffic.

E.g. https://github.com/XTLS/Xray-core — most documentation, sadly but expectedly, is in Chinese and Russian, because these folks seem to need this most.

- [xray](https://github.com/xtls/xray-core)

I have been researching VPN protocols that work in China and found that Xray [0] is the most recommended route to escape the GFW. An ideal VPN setup is one where packets appear as normal https traffic. Some VPN setups take it a step further and proxy the traffic through Cloudflare. Setting all this up is nowhere as easy as Wireguard. Coincidentally, I came across this project on Github earlier today which is an obfuscation proxy for Wireguard [1], but I haven't found any information about how well it works.

[0] https://github.com/XTLS/Xray-core

[1] https://github.com/database64128/swgp-go

Take a look at this thread as an example: https://github.com/XTLS/Xray-core/issues/2059