Alternatives to V2RAY?

[Kein]

Looks like as of today it is now completely and easily throttled here.

[ghost]

Use Trojan protocol

[ghost]

@Kein Are you v2ray guru or newbie? If you are newbie then I suggest you start reading v2fly's v2ray guide first.

Trojan protocol is VERY difficult to block because it uses real website certificate.

---

V2Fly's V2Ray (now evolved into V2Ray Core v5+) supports Trojan as a proxy protocol, typically over TLS for HTTPS-like camouflage. Below are example client and server JSON config files using plain Trojan/TLS (no additional transports like WebSocket for simplicity).

Server Config

This inbound listens on port 443 with a single user password, requiring TLS termination (e.g., via Caddy or Nginx).

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "port": 443,
      "protocol": "trojan",
      "settings": {
        "customers": [
          {
            "email": "user@example.com",
            "password": "your-strong-password-here"
          }
        ],
        "packetEncoding": "None"
      },
      "streamSettings": {
        "network": "tcp",
        "security": "tls",
        "tlsSettings": {
          "certificates": [
            {
              "certificateFile": "/path/to/fullchain.pem",
              "keyFile": "/path/to/privkey.pem"
            }
          ]
        }
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "freedom"
    }
  ]
}

Replace certificate paths with your actual TLS certs (e.g., from Let's Encrypt).

Client Config

This outbound connects to the server using the matching password and SNI.

{
  "log": {
    "loglevel": "warning"
  },
  "inbounds": [
    {
      "port": 10808,
      "listen": "127.0.0.1",
      "protocol": "socks",
      "settings": {
        "udp": true
      }
    }
  ],
  "outbounds": [
    {
      "protocol": "trojan",
      "settings": {
        "servers": [
          {
            "address": "your-domain.com",
            "port": 443,
            "password": "your-strong-password-here"
          }
        ]
      },
      "streamSettings": {
        "network": "tcp",
        "security": "tls",
        "tlsSettings": {
          "serverName": "your-domain.com",
          "allowInsecure": false
        }
      }
    }
  ]
}

Match the address, port, password, and serverName (SNI) to your server. Use allowInsecure: true only for testing self-signed certs.

[ghost]

https://github.com/v2fly/v2ray-core/issues?q=is%3Aissue%20trojan

[Kein]

Ah, I see, this requires an actual domain, dedicated IP (no cheap NAT) and a certificate, that is a bit too much complexity and also expensive. But good to know.

[ghost]

Depends on your censored level, but I use VMESS+TLS like this //

User ---> nginx(:443 HTTPS) --localhost--> v2ray(VMESS) --> Internet

This is easy, there are many guides and you can set this up without domain name or cert (use self-signed)

[Kein]

Got any guides at hand to skim over?