3X-UI server with domestic relay server. The scenario here is that direct connection to an international VPS is blocked. However, connecting from a domestic VPS to an international VPS is allowed. Therefore the solution is a double hop from the client PC to a domestic VPS and from the domestic VPS to an international VPS.
Dumbproxy with SNI spoofing. Dumbproxy is a simple HTTP/SOCKS5 forward proxy. It supports SNI spoofing, which is useful in environments where there is an SNI whitelist. This article fleshes out the details from a comment on the discussion "[Russia] Censor has a new method of blocking" on GitHub.
DNSTT tunnel over DNS. Here are practical instructions for tunneling your internet traffic as DNS requests and responses on port 53. This sometimes works in tightly restricted network environments. This post expands on the developer's documentation.
Pingtunnel ICMP tunnel. Pingtunnel is a last-resort tool you can try when almost all TCP/UDP traffic is blocked. It transmit packets to a proxy server using ICMP (the ping protocol). The proxy server then reconstitutes the TCP/UDP traffic and forwards it to the intended destination. The server in this tutorial runs Debian or Ubuntu Linux. The client is a Windows 11 PC.
SlipGate and SlipNet. Sending and receiving traffic over DNS protocol on port udp/53 is highly inefficient, but it may work when all other possibilities are blocked. This tutorial uses Telegram as an example app on the client device.
VayDNS. SlipGate 1.4 and SlipNet 2.5 introduce VayDNS transport. This uses KCP protocol in order to deliver higher performance. VayDNS features configurable idle timeout and keepalive packets for increased reliability. You can also choose the DNS record type used for tunneling.
Vercel XHTTP Relay. A minimal relay running on Vercel Edge Functions that forwards XHTTP traffic from your Xray/V2Ray client to your backend Xray server. The goal: use Vercel's global edge network and the *.vercel.app domain as a front to hide the real IP of your origin server.
VayDNS manual install. After running into problems installing VayDNS using multi-tunnel scripts, I decided to install and configure VayDNS manually.
Test script for MasterHttpRelayVPN-RUST full mode. This page documents my testing procedure. It is based on the developer's documentation at MasterHttpRelayVPN-RUST and in particular on issue #444 and #671. Full mode routes all traffic end-to-end through a Google Apps Script, then through a remote tunnel-node. The trade-off versus apps_script mode is that it works for any protocol and any app, with no man-in-the-middle CA certificate required, but it results in higher latency.
mhr-vps-worker. mhr-vps-worker is a specialized adaptation of the mhr-cfw engine that replaces Cloudflare Workers with a private VPS-based node.js worker. This is the procedure I used to test it.