VPS for VLESS + Reality (bypass DPI)

WireGuard and OpenVPN are excellent VPNs and terrible at hiding that they're VPNs. In Iran, China and Russia, deep packet inspection (DPI) recognises their handshakes and blocks them — often within minutes of first use. VLESS + Reality, from the Xray project, solves this differently: instead of encrypting a VPN handshake, it impersonates the TLS handshake of a real, popular HTTPS website. To DPI, your connection looks exactly like someone visiting an ordinary site on port 443. There is no VPN fingerprint to match.

Running it on a VPS you control — paid in crypto, no KYC — gives you a private, censorship-resistant endpoint that's yours alone.

What Reality needs

• A dedicated IPv4. Reality must own an inbound IP:443. Nano-IP ($8/mo — dedicated IP, 1 GB RAM) is plenty for personal use; step up if you'll share it with family or run other services. Our NAT plans can't accept inbound 443, so a dedicated-IP plan is required.
• Very little CPU/RAM. Xray is light — a single-user Reality endpoint barely registers. The IP matters more than the specs.
• A location outside the censored network. Germany or Finland (EU) — clean routes, real data-protection law.

Honest scope

This is a censorship-resistant private endpoint you control — not anonymity. No-KYC means we don't ask who you are; it does not make traffic anonymous, and no single IP is guaranteed to survive forever in the most aggressive networks. Reality defeats DPI-based blocking; it is not protection against a global traffic-analysis adversary.

Set up VLESS + Reality (Ubuntu 24.04)

# dedicated-IP plan, root shell
bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install

# generate a Reality key pair (save both keys)
xray x25519

# generate a short ID
openssl rand -hex 8

Edit /usr/local/etc/xray/config.json — a minimal VLESS + Reality inbound:

{
  "inbounds": [{
    "listen": "0.0.0.0",
    "port": 443,
    "protocol": "vless",
    "settings": { "clients": [{ "id": "PASTE-A-UUID", "flow": "xtls-rprx-vision" }], "decryption": "none" },
    "streamSettings": {
      "network": "tcp",
      "security": "reality",
      "realitySettings": {
        "dest": "www.microsoft.com:443",
        "serverNames": ["www.microsoft.com"],
        "privateKey": "PRIVATE-KEY-FROM-x25519",
        "shortIds": ["SHORT-ID"]
      }
    }
  }],
  "outbounds": [{ "protocol": "freedom" }]
}

xray uuid                       # generate the client UUID for the config above
systemctl enable --now xray
systemctl status xray

Build the VLESS link from your UUID, public key, dest and short ID, then import it into v2rayNG (Android), Nekoray (desktop) or sing-box (iOS/everywhere). Choose a dest that's a large, always-up HTTPS site not itself blocked in your region.

Why EQVPS for anti-censorship

• Dedicated IPv4 from $8/mo, all ports open, self-service reverse DNS.
• EU locations (Germany, Finland) — clean routes, strong privacy law.
• No KYC, crypto payment. Email to sign up, USDC/USDT to pay — nothing tying the endpoint to your identity on our side.
• Root in ~60 seconds. Clean Ubuntu/Debian images; install Xray and you're online.

Full step-by-step setup guide →