REALITY

REALITY is a transport protocol introduced by Xray in 2023, solving a fundamental weakness of TLS proxies: your certificate is fake. Traditional VLESS+TLS setups require a domain name and Let’s Encrypt certificate, but the certificate itself becomes a fingerprint—with no real website behind it, the traffic pattern stands out immediately. REALITY’s approach is fundamentally different: directly borrow the TLS handshake of a real website. What the server presents to detection systems is the TLS certificate and handshake details of that actual website, indistinguishable from normal traffic. ...

The previous post covered deploying Xray REALITY on the server side. This one focuses specifically on client configuration—once you’ve collected the usernames, server addresses, public keys and other info for various platforms, here’s how to configure them in different clients. You’ll need to prepare the following information (obtained from the server configuration): Parameter Description Server Address VPS public IP Port Port the server listens on (port 443 recommended) UUID Client ID configured on the server Public Key Public key generated by xray x25519 Short ID One of the shortIds configured on the server SNI serverNames configured on the server (e.g., www.apple.com) mihomo (Clash Meta) mihomo natively supports REALITY. Add the configuration to the proxies: section: ...