Building a Xray Master Config ? - Can you help me debug? #3785
CrhistopherSchulze
started this conversation in
General
Replies: 1 comment
-
Hello, I have no idea what you are trying to do. Please state your goal clearly and don't add a bunch of AI garbage. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi everyone,
I'm completely new to the whole X-Ray VPN world. I've been playing around with it a lot, configuring it on several VPS servers, and I'm not entirely happy with the standard solutions. There are so many protocols and settings you can tweak to make improvements. I've been diving deep into it for days, trying to understand everything. I've also used ChatGPT a lot and have tried to create an X-Ray configuration that includes everything that's somehow compatible, at least according to ChatGPT.
I'm wondering if any of you could help me debug this a bit. Has anyone done similar projects before? Are there any resources you could point me to? Can you help me understand why it's not working in general? Do you see any obvious mistakes? Should I be discouraged? Have I fundamentally misunderstood the concept? I'm very open to learning and would appreciate any feedback.
I hope I can inspire people to go beyond the standard X-Ray configuration examples and really optimize things. Is that possible? I hope I can get people on board with this idea.
Please don't blame me for this idea:
https://pastebin.com/Zeb7KBVp
{ "inbounds": [ { "protocol": "vless", "settings": { "clients": [ { "id": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" } ], "decryption": "none" }, "streamSettings": { "flow": "xtls-rprx-vision", "network": "grpc", "grpcSettings": { "serviceName": "vless-grpc", "multiMode": true, "concurrent": 240, "bufferSize": 20971520 }, "security": "xtls", "xtlsSettings": { "flowControl": { "enable": true, "type": "advanced_adaptive", "lowLatencyMode": true, "bufferSize": 83886080, "realtimeAdjustment": true, "stabilityOptimizations": { "packetLoss": true, "latencyThreshold": 10, "autoBufferAdjust": { "enable": true, "thresholds": { "lowLatency": { "bufferSize": 41943040, "latencyLimit": 20 }, "mediumLatency": { "bufferSize": 83886080, "latencyLimit": 50 }, "highLatency": { "bufferSize": 125829120, "latencyLimit": 100 } }, "adjustInterval": 5000, "adaptiveResponse": true } } }, "congestionControl": { "bbr": { "version": "v2" } } }, "httpSettings": { "headers": { "dynamic": true, "custom": { "Host": "api.google.com", "X-Requested-With": "XMLHttpRequest", "User-Agent": [ "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:89.0) Gecko/20100101 Firefox/89.0", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.1 Safari/605.1.15", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Edge/91.0.4472.124 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Brave/91.0.4472.124 Safari/537.36", "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Vivaldi/91.0.4472.124 Safari/537.36" ], "Accept-Language": [ "en-US", "de-DE", "fr-FR" ], "Referer": "https://www.amazon.com/", "X-Amzn-Trace-Id": "Root=1-5d2a14b5-76fbc2e101b48cf8c31b", "X-Forwarded-For": "203.0.113.0", "X-Real-IP": "203.0.113.0", "Forwarded": "for=203.0.113.0;proto=https", "X-Original-Host": "api.google.com", "Connection": "keep-alive", "Cache-Control": "no-cache, no-store, must-revalidate", "Content-Type": "application/json", "Upgrade-Insecure-Requests": "1", "TE": "trailers", "Pragma": "no-cache", "Expires": "0" } } }, "mtu": { "enable": true, "size": "adaptive", "fallback": 1388 } } } ], "tlsSettings": { "cipherSuites": [ "CHACHA20_POLY1305", "AES_128_GCM_SHA256" ], "version": "TLSv1.3", "sessionResumption": true, "zeroRTT": true, "forwardSecrecy": { "enable": true, "eccCurve": "none", "dhParams": "optimized" }, "utls": { "enable": true, "dynamic": true, "rotationInterval": "9min" }, "padding": { "enable": true, "size": [ "400B", "1633B" ], "rotationInterval": "13m", "dynamicSize": true, "frequency": "moderate" } }, "realitySettings": { "primaryDomain": "google.com", "backupDomain": [ "amazon.com" ], "multiDomain": true }, "visionSettings": { "enable": true, "encryption": "dynamic", "encryptionLevel": "high", "timeout": 300, "bufferSize": 20971520, "adaptive": true, "reconnect": true, "congestionControl": { "bbr": { "version": "v2", "adaptiveMode": true, "latencyOptimization": true } }, "stability": { "packetLossTolerance": true, "autoAdjust": true } }, "networkOptimization": { "dnsCache": { "enable": true, "cacheTime": 600, "negativeCache": { "enable": true, "cacheTime": 180 }, "ttl": 3600, "cacheSize": 512 }, "connectionCacheControl": { "enable": true, "dynamic": true } }, "stabilityAndErrorCorrection": { "fec": { "enable": true, "maxBuffer": 69206016, "packetRecovery": true } }, "keepAliveSettings": { "enable": true, "interval": 13, "dynamicAdjust": false }, "compression": { "gzip": { "enable": true, "level": 9 } }, "jitterBufferSettings": { "enable": true, "size": 40, "dynamicAdjust": true }, "alpnSettings": { "alpnProtocols": [ "http/1.1", "h2", "h3" ], "enable": true }, "tcpFastOpen": { "enable": true, "optimizeHandshake": true } }
Overall, this Xray configuration is highly optimized for:
Speed: Using protocols like VLESS, gRPC, and advanced flow control for minimal latency and maximum throughput.
Security: Employing strong encryption (XTLS, TLSv1.3), forward secrecy, and various obfuscation techniques to protect user privacy.
Stability: Implementing features like FEC, jitter buffers, and keep-alives to ensure a reliable connection.
Stealth: Using techniques like uTLS, dynamic fingerprints, and HTTP/2 to disguise traffic and evade detection.
Breakdown of Key Features
Inbound Protocol and Flow Control:
VLESS: A performant and secure protocol for client-server communication.
gRPC: A high-performance, HTTP/2-based RPC framework.
XTLS-RPRX-Vision: A combination of XTLS encryption and flow control for optimized performance.
Advanced adaptive flow control: Dynamically adjusts to network conditions.
Network Protocols and Optimizations:
gRPC settings: Optimized for multiplexing and high throughput.
MTU optimization: Dynamically adjusts the maximum transmission unit size.
DNS cache: Improves performance by caching DNS lookups.
Connection cache control: Efficiently manages connections.
Encryption and Security:
TLS settings: Uses strong ciphers, TLS 1.3, and session resumption for security.
Forward secrecy: Ensures that compromised long-term keys do not compromise past session data.
uTLS and camouflage: Disguises traffic to evade detection.
Padding: Adds random data to packets for obfuscation.
Obfuscation and Stealth:
HTTP fake headers: Mimics legitimate HTTP traffic.
Reality: Uses domain fronting to disguise traffic as legitimate HTTPS connections.
Vision: Provides dynamic encryption and automatic adaptation to network conditions.
Stability and Error Correction:
FEC: Recovers lost packets for improved reliability.
Packet loss tolerance: Can tolerate some packet loss without compromising connection.
Keep-alive: Maintains an active connection.
Compression, Jitter Buffer, and ALPN:
Gzip: Compresses data for efficient transmission.
Jitter buffer: Compensates for network latency variations.
ALPN: Selects the most appropriate protocol for the connection.
TCP Optimizations:
TCP Fast Open: Speeds up connection establishment.
In essence, this Xray configuration is designed to provide a fast, secure, and reliable VPN connection, while evading detection by network administrators and ISPs.
Would you like me to elaborate on any specific part of the configuration?
Perhaps you'd like to understand more about:
XTLS-RPRX-Vision and its advantages
uTLS and how it helps to evade detection
Domain fronting and its role in obfuscation
FEC and its importance for stability
Or any other specific aspect of the configuration.
Please feel free to ask any questions you may have
Beta Was this translation helpful? Give feedback.
All reactions