net4people / bbs

Forum for discussing Internet censorship circumvention
3.45k stars 82 forks source link

What is more resistance to blockage v2ray, xray or ShadowssocksR? #147

Open nDman opened 2 years ago

nDman commented 2 years ago

Hi Currently I have a private SSR server which is working perfectly but I read that it can be blocked. Because I live in Iran I like to make my server more resistance to blockage.

nDman commented 2 years ago

I must mention I have Openvpn server on my vps and I connect to it trough SSR server. in this way I can tunnel the whole OS but it decrease the connection speed by 1/3 to 1/2.

poorp commented 2 years ago

xray is in my experience your safest bet. Try vless+ws. Clients that support vless are: Windows : V2rayN or Netch Android : V2rayNG and many others IOS : there is an app in appstore called "Fair" Ubuntu : you can use the cli and install xray-core directly or try "V2rayA"

nDman commented 2 years ago

Thank you for your recommendation. I will try it. Is this a valid way to do it: Install VLESS with XTLS based on xray core? or this one: How to Create a VLESS WebSocket TLS CDN Server?

poorp commented 2 years ago

or this one:

Both of them should work as long as you find an Iranian CDN that you can use instead of Cloudflare because Cloudflare seems to be blocked (and all other non-Iranian CDNs afaik). You could also just skip the TLS (domain an CDN) part and just use vless + ws but it could make your server sus and more prone to being blocked specially if a lot of traffic is going through it.

nDman commented 2 years ago

My host is outside of Iran so no problem about Cloudflare, it blocked for hosts inside Iran. Thanks you so much 💚

free-the-internet commented 2 years ago

My host is outside of Iran so no problem about Cloudflare, it blocked for hosts inside Iran. Thanks you so much green_heart

CloudFlare is in front of your host, no matter where your server is, if you use CDN, the client must contact the CDN first. If CF is blocked in Iran, simply, you can't use it.

free-the-internet commented 2 years ago

I must mention I have Openvpn server on my vps and I connect to it trough SSR server. in this way I can tunnel the whole OS but it decrease the connection speed by 1/3 to 1/2.

Do not use OpenVPN on top of SSR. There are tools to pass the data through Tun/Tap interface that can forward the traffic with your proxy: DATA <----> TAP <----> SSR CLIENT <-----------------> SSR SERVER For windows and Linux see this: https://github.com/net4people/bbs/issues/143

Also, look at this repo https://github.com/SagerNet

free-the-internet commented 2 years ago

Hi Currently I have a private SSR server which is working perfectly but I read that it can be blocked. Because I live in Iran I like to make my server more resistance to blockage.

Which version of SSR are you using? Could you provide a link?

nDman commented 2 years ago

Installed it with teddysun's installer script.

nDman commented 2 years ago

My host is outside of Iran so no problem about Cloudflare, it blocked for hosts inside Iran. Thanks you so much green_heart

CloudFlare is in front of your host, no matter where your server is, if you use CDN, the client must contact the CDN first. If CF is blocked in Iran, simply, you can't use it.

Hmm, already setup-ed my domain with cloudflare and I can open my site without vpn. 🤔 I found this article about: cloudflare in iran Just some cloudflare ips blocked in Iran and if we make another account we may get an ip which is not blocked, mine is working. Also cloudflare ssl won't work with .ir domains, mine isn't.

free-the-internet commented 2 years ago

Installed it with teddysun's installer script.

Tha's the old one with vulnerabilities, and prone to being blocked. use this: https://github.com/shadowsocks/shadowsocks-rust

I found this article about: cloudflare in iran

Always better to tell where is the destination of the link specially if you are directing the user from here to Iranian websites operating inside of Iran.

Bryan2333 commented 2 years ago

try NaïveProxy