net4people / bbs

Forum for discussing Internet censorship circumvention
3.47k stars 82 forks source link

Simple, Lightweight Setup for a Beginner? #414

Open burgers4me opened 3 weeks ago

burgers4me commented 3 weeks ago

Hi everyone, I'm in IRN, trying to set up a low-end VPS (only 512 MB of RAM and preferably only with IPv6 as the costs gets lower) with a clean, lightweight configuration, but the learning curve is steep. There are all these protocols and programs like QUIC, gRPC, ws, XTLS, V2ray, xray, xcore, sing-box, etc., and honestly, it’s overwhelming—takes a lot of time just to understand the basics.

I used to run a Hysteria2 connection with minimal configuration, and it worked great, but now it just won’t connect on my home ISP. So I’m currently using trojan(tcp)+tls through vaxilu/x-ui, but the connection feels throttled. Data only arrives in bursts, and it’s frustrating.

Here's the Hysteria2 config I used:

Server config (click to open): ``` listen: :1020 tls: cert: /etc/letsencrypt/live/my.website/fullchain.pem key: /etc/letsencrypt/live/my.website/privkey.pem auth: type: password password: *** masquerade: type: proxy proxy: url: https://some.website rewriteHost: true ```
Client config (click to open): ``` server: my.website:1020 auth: *** bandwidth: up: 20 mbps down: 100 mbps socks5: listen: 127.0.0.1:1080 http: listen: 127.0.0.1:8080 ```

I’m not even sure if there’s a way to get around whatever’s blocking my Hysteria2 connection, and I don’t know what protocol would work best with my ISP. Does anyone know of a tool or method to test different protocols/configs to see what would connect best? Like a benchmarking tool?

I’d really rather use original project repositories or minimalist tools, instead of all these forks and scripts that bundle everything together and aren’t easy to trust or check for security issues. I liked Hysteria2 because it was straightforward, lightweight, and easy to set up.

Any ideas?

underdog-03 commented 3 weeks ago

Hi @burgers4me,

You can use one of the links below to help set up the desired VPN protocol. Make sure your VPS address isn’t blocked in Iran; this is very important, my friend. Also, be sure you have the right client application to test it. The tools below might help speed things up and ensure everything works just the way you like.

Check your VPS IP here. Choose the TCP or HTTP port check option, and verify your IP as shown below.

https://www.host-tracker.com/en/ic/port-check

Screenshot 2024-10-30 at 13 42 41

for your client application setup maybe use this telegram bots @IRAN_VPN_Guide_bot

Hope that helps

burgers4me commented 3 weeks ago

Check your VPS IP here. Choose the TCP or HTTP port check option, and verify your IP as shown below.

https://www.host-tracker.com/en/ic/port-check

My VPS doesn't seem blocked, but when I check my domain and IP on that site, it says 'unsuccessful requests,' even if I pick North America or other regions. I think the firewall might be blocking ICMP ping requests if that tool uses them.

Thanks for sharing those tool links, but as I mentioned, those panels are a bit too heavy on resources and too big to verify security-wise. I don’t need the extra features or web UIs, either.

underdog-03 commented 3 weeks ago

Check your VPS IP here. Choose the TCP or HTTP port check option, and verify your IP as shown below.

https://www.host-tracker.com/en/ic/port-check

My VPS doesn't seem blocked, but when I check my domain and IP on that site, it says 'unsuccessful requests,' even if I pick North America or other regions. I think the firewall might be blocking ICMP ping requests if that tool uses them.

Thanks for sharing those tool links, but as I mentioned, those panels are a bit too heavy on resources and too big to verify security-wise. I don’t need the extra features or web UIs, either.

Maybe Use this: https://github.com/SasukeFreestyle/Hysteria2-Iran

shikantazacomputers commented 3 weeks ago

Here's one that uses original repositories rather than scripts or panels. It sets up Xray Reality with the steal_oneself option: Latest recommendations for Iran

burgers4me commented 3 weeks ago

Here's one that uses original repositories rather than scripts or panels. It sets up Xray Reality with the steal_oneself option: Latest recommendations for Iran

Thanks. I’ll check that out. Do you think an IPv6-only VPS would work?

shikantazacomputers commented 3 weeks ago

Most probably, but you would have to systematically change the configurations, e.g. AAAA instead of A, ::instead of 0.0.0.0, and ::1 instead of 127.0.0.1.

N.B. I have seen some reports saying there are problems issuing SSL certificates to IPv6-only domains. I do not know the solution if you encounter this problem.