Kaelo ya Bofelo: Jang go Tsenya VLESS + XTLS-Reality mo VPS

Mo dikgaolong tse di nang le censorship e e boima ya inthanete, di-VPN tsa maemo jaaka OpenVPN kgotsa le WireGuard di lemogwa bonolo le go thibelwa ke DPI (Deep Packet Inspection). Tharabololo ke VLESS ka XTLS-Reality. Thekenoloji e e fitlha traffic ya gago gore e lebege jaaka kgolagano e e tlwaelegileng go ya kwa website e e tumileng (jaaka Microsoft kgotsa Apple), go dira gore go nne thata go e farologanya le go browsing ga gale. Kaelo e e tletseng e tla go tsamaisa ka kgato nngwe le nngwe ya go e seta mo Hiddence VPS.

Ke ka Ntlha ya Eng VLESS + Reality?

• Bofitlha: E iphitlha jaaka traffic ya semolao ya HTTPS.
• Ga go Tlhokege Domain: Go farologana le mekgwa ya pele, ga o tlhoke go reka leina la domain. Reality e 'adima' TLS handshake ya saete ya nnete.
• Tiragatso e e Kwa Godimo: XTLS e fokotsa overhead, e go fa lebelo la nnete.
• Multi-Platform: E tshegediwa mo Windows, macOS, Android, le iOS.

Di-prerequisite

• VPS e ntšha e e nang le Ubuntu 22.04 kgotsa 24.04 (Hiddence VPS e a kgothalediwa)
• Root access mo server
• SSH client (PuTTY, Terminal, jalo jalo)

Kgato 1: Baakanya Server ya Gago

Santlha, ntšhwafatsa system ya gago mme o letlelele BBR (algorithm ya taolo ya pitlagano ya Google) go na le lebelo le le botoka la network.

apt update && apt upgrade -y

# Letlelela BBR
echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p

Kgato 2: Tsenya 3x-ui Panel

Re tla dirisa 3x-ui panel (MHSanaei fork), e leng sediriswa se se maatla thata sa go laola di-protocol tsa Xray. Tsamaisa taelo e le nngwe e go e tsenya:

bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

Kgato 3: Beakanya VLESS-Reality Inbound

Tsena mo panel ya gago (http://YOUR_IP:2053 ka default). Eya kwa 'Inbounds' > 'Add Inbound'. Dirisa di-setting tse di nepagetseng tse go na le tshireletso e e kwa godimo:

• Remark: VLESS-Reality
• Protocol: vless
• Listen IP: 0.0.0.0
• Port: 443 (Botlhokwa! Se dirise di-port tse dingwe tsa Reality)
• Transmission: TCP
• Security: reality
• Dest: www.microsoft.com:443 (kgotsa www.apple.com:443, dl.google.com:443)
• SNI: www.microsoft.com (E tshwanetse go tshwana le Dest)
• Flow: xtls-rprx-vision (E gaisa go na le tiragatso)
• uTLS: chrome
• Tobetsa 'Get New Cert' go tlhama di-key tsa public/private.

Kgato 4: Golaganya Client ya Gago

Mo panel, tobetsa icon ya QR code fa thoko ga inbound ya gago e ntšha. O ka e scan ka mobile app ya gago kgotsa wa kopisa link.

• Android: v2rayNG kgotsa Hiddify Next
• iOS: V2Box kgotsa FoXray
• Windows: v2rayN kgotsa Hiddify Next
• macOS: V2Box kgotsa FoXray

Dikeletso tse di Tletseng tsa Optimization

1. Se dirise SNI e e tshwanang go botlhe. Fa Microsoft e le bonya go wena, leka di-domain tse di farologaneng jaaka `www.samsung.com` kgotsa `www.amazon.com`. 2. Boloka di-client app tsa gago di ntšhwafaditswe. Xray core e ntšhwafadiwa gantsi. 3. Fa IP ya gago e thibelwa, tsenya gape OS go tswa mo Hiddence panel mme o deploy gape mo metsotsong e le 5.