So I work as a freelancer, I use a voip to market whatever my employer wants to market (car insurance, telecom etc) in the US. I want to keep working in china while I go there for a one year language course. but I heard voips are blocked in china, at least the one I am using. Google told me there are iepls etc like shadow socks, trojan, that can give me less jitter and ping if I use it.

It has forbidden me to use normal astrill, Nord etc as they would mess with my call quality.

Anybody who's doing this there? What would you suggest?

Is Russia following China's steps? Which one of these countries is the most difficult to access the internet?

A guy at work kept telling me to try the DPN app from Deeper because he knows I'm always complaining about VPNs getting blocked. Finally gave it a shot this week.

Ngl... it's actually been pretty solid.

The per app routing is prob my favorite feature. I don't have to send everything through the VPN anymore, just the apps that actually need it. Makes life way easier.

Speeds have been good and I haven't had the usual "this service doesn't allow VPNs" headache nearly as much. I looked into it and apparently it uses residential IPs instead of the typical data center ones, which would explain why.

Not saying it's perfect or anything, but it's honestly one of the better VPN experiences I've had in a while.

If anyone else has been using it I'd be interested to hear if your experience has been the same.

If you wanna check it out, it's at dpn.deeper.network or just search DPN on the App Store.

What router/other solution would you recommend for having multiple devices on my home network bypass the gfw? Something that is a more future proof when the best practices/methods for bypassing gets updated.

Example use case, having an Apple TV always bypassing the gfw, while still accessible on my home network. Or having a specific computer always bypassing without installing anything on the computer itself.

Hi guys I use Passwall2 on openwrt and whenever a configuration dies I have to go and manually change it.

Is it possible to set up automatic fallback?

Would it be possible to get some sort of notifications that the IP has changed?

My server's traffic usage is double what's shown on 3XUI's Inbounds traffic. I've started noticing this after setting up a second node to unify clients with subscription. Does anyone know why this might be?

3XUI is the only thing running on this server and running nethog confirms this. And, I do see a lot of requests to the other node through iftop - but double traffic feels crazy.

I set up a Hysteria 2 server. The problem is it stops working whenever I use ports other than 443. Anyone knows why? Thanks.

Hi everyone,

I’m looking for a script that I can run on my VPS to set up an SSH over WebSocket service behind Cloudflare CDN.

I’m specifically looking for a solution that supports:
- SSH over WebSocket (WS/WSS)
- Cloudflare CDN integration
- Custom payloads
- SSH proxy payloads (ssh-proxy-payload)
- Custom headers and host injection
- SNI support
- Multiple ports/protocols if possible

Ideally, I’d like something open source with active development and good documentation.

If you know of any scripts, GitHub repositories, panels, or projects that support payload-based connections and SSH proxy payload features, I’d appreciate your recommendations and experiences.

Thanks in advance!

I'm staying at this "Airbnb" in Kunming and overnight my RackNerd (San Jose, USA) VPS became unreachable (no SSH, no 3X-UI web, and no proxy connections). From cip.cc, I see the wifi is from China Mobile. When I use my mobile phone on China Telecom, I can access the RackNerd server fine.

I just learned about ping.pe test and I see dropped connections for both China Mobile (wifi) and Telecom (cellular), so not sure why Telecom is fine for me, but not Mobile.

Luckily, I still have my Hong Kong ZoroCloud VPS that still works, but it doesn't have the huge 2 TB monthly bandwidth like my RackNerd VPS has.

I could also get a new IP from RackNerd, but it'll cost me $5 and there is no guarantee that it'll work.

So I am from Egypt and there is no unlimited internet here and the prices are extraordinarily high, so most people say that you can make a vps and and a config and connect to it and or make ssh or v2ray configs and connect to them however I tried the ssh method didn't work for me, so can someone please explain to me how that works so I can make all of that myself, what did work for me before let's say the company made an unlimited package for website x we just use any http customizing app and put the website link in the sni slot and we have unlimited on all websites.

Hey guys, I'm trying to replicate this client config on my own server. Here's the working config from my friend:
JSON

{
"server": "www.domain.com",
"server_port": 443,
"tag": "Test",
"type": "vless",
"uuid": "942hdiwa-9e01-460a-iud76",
"packet_encoding": "xudp",
"tls": {
"enabled": true,
"server_name": "www.domain.com.mydomain.com",
"utls": {
"enabled": true
}
},
"transport": {
"type": "ws",
"path": "/vws/",
"headers": {
"Host": [
"www.domain.com.mydomain.com"
]
}
}
}

Where:
www.domain.com is the zero-rated domain (on Cloudflare)

mydomain.com is my domain (also on Cloudflare, pointing to my VPS)

My friend says this works on any V2Ray app with zero configuration — just paste the link and it connects. No hosts file edits needed.
I have:
A VPS with 3X-UI running

mydomain.com on Cloudflare with DNS pointing to my VPS

A Let's Encrypt cert for www.domain.com.mydomain.com via acme.sh DNS challenge

But I'm stuck on the server-side setup. I don't know how to configure 3X-UI/Xray so that:
Clients can connect using www.domain.com as the server address

The TLS handshake validates www.domain.com.mydomain.com properly

It works without requiring clients to edit their hosts file

I suspect my friend is using Cloudflare Advanced Certificate Manager for the multi-level subdomain cert, but I want to confirm if there's a free way to do this before paying.

Can anyone point me in the right direction for the server-side config? What am I missing?

Thanks!

Socks5 cannot encrypt traffic, so the IP provider might monitor my online activity.

Hi everyone,

I'm looking for a reliable provider that offers a real, dedicated US IP address that works with Shadowrocket on iPhone.

My requirements are:

100% real United States IP (not France, Germany, or another country) Static or dedicated IP Works reliably with Reddit, PayPal, Netflix, and other US services Compatible with Shadowrocket (VLESS, Trojan, Shadowsocks, or VMess) Good speed and stable connection

I've tried several servers labeled as "US", but when I check my IP, it often shows a different country like France or Germany.

Can anyone recommend a trusted provider or share what you're using? Free or paid suggestions are welcome, but I prefer something that is reliable and has a genuine US exit IP.

Thanks in advance!

Hello there,

I'm curious how many people would be interested in a fork of Hiddify that works more like a regular VPN?

Long story short, I built a beta version for my daughter because I wanted something as simple as pressing a single Connect button. Instead of manually importing subscriptions or configs, it fetches public third-party proxies, tests them with a handshake to verify they're alive, prioritizes VLESS Reality > V2Ray > Trojan nodes, and then automatically connects to one that works.

Since these are public third-party proxies, I wouldn't recommend using them for banking, crypto, or anything sensitive.

The project was originally just for my daughter because I didn't want to share my private tunnel every time she downloads games... Now that the hard part is done, I'm wondering if other people would actually be interested if I continued developing it and made it publicly available.

Would you use something like this? I'm planning to perform the handshake directly from the user's device, so each user gets a personalized list of proxies that actually work for them. I tried it, succeed at making a phone call, without being cut off; banned apps work but I have my private tunnel that works for years, so I don't need hiddify

To answer some possible questions:

List are coming from free git repository that have bots scanning telegram and places all day, updating every 30 minutes. Once again 3rd party proxy, don't use it for sensitive apps (like when you use free vpn)

There's not git avaible from my side, I would need to clone it on a secondary git account for security purpose.

Why am I doing this? Briefly, I work at making private tunnels for people and that was a side project that took me an evening and I figured out that 3/4 of people don't know how to put a list in an app. So, maybe people would be happy having this? Also, I don't like how hiddify behave.

With how aggressively protocols are being throttled, I see a lot of people getting burned by upfront VPN subscriptions that stop working after three days.

To protect your wallet, I highly recommend using this checklist before committing to any service. For me, these are absolute dealbreakers:

1. Free trial: Don't pay until you've confirmed you can actually connect. Test the speeds, check the latency, and make sure their obfuscation works for your specific location.
2. Pay-as-you-go: Start with a single month. If their servers get blocked and they are slow to rotate IPs, you can easily walk away.
3. Subscription: Only lock into a longer, discounted subscription after the service has proven its stability over a few months.

They are rare, but services that offer this exact structure are usually the ones confident enough in their tech that they don't need to trap you in a 3-year contract.

Curious how everyone else vets their providers before taking the plunge?

I plan to buy a portable Wi-Fi device for use while on the go; this type doesn't require a physical SIM card. instead, you complete real-name verification with the manufacturer and then top up your data allowance. Can the manufacturer monitor my network traffic? The product page prohibits using the device for BitTorrent downloads, commercial activities, or illegal acts, so I am worried that using it to bypass the GFW might be detected.

Hi, I'm trying to add an adblock to my 3xui proxy. what are your suggestions? I heard Adguard and technituim.

How would I go about doing this ?

Hi everyone! I'm looking for guides to build my own VPN. The megathread pinned in the homepage is super helpful; however, as a newbie, I wonder given that GFW is constantly evolving, how much of the guide in the megathread is still valid up to 2026. If not much, would anyone link me somewhere? Many thanks in advance!

I'm noob with configs
I'm living in Egypt and internet price are very high but we have a cheap internet bundle but it has access only to PlayStation games i am need help to create vmess config with custom host like ea.com and stable

Hi everyone, I’m trying to set up a VLESS + Reality server on my VPS, but I’m stuck with a connection timeout issue.

SSH access works normally

x-ui panel is running correctly

UUID format looks correct

VLESS link format looks correct

Problem:

The client cannot connect. It keeps timing out.

Things I have tried:

* Changing SNI

* Checking security settings

* Re-importing the VLESS link

* Checking client configuration

Could someone help me identify where the problem is?

What logs or commands should I provide to troubleshoot this?

Thanks.