We've got a new update. We now offer our own Web Console. Open the console and type ssh root@your-server-ip to reach any server you own, right from your browser. No SSH app needed.
When a network blocks the sites you need, a small server in another country running a modern circumvention protocol is often the most reliable way through. Here is which protocol to pick, what size of server it needs, and what no protocol can promise.
A proxy server is light. Prices are one-month prices; a 12-month term takes 50% off.
or $2.88/mo on a 12-month term (−50%)
Our cheapest size. Plenty for browsing, messaging and video for a household.
Configure and orderor $5.75/mo on a 12-month term (−50%)
More CPU for many simultaneous users and a 2 Gbps port for heavier traffic.
Configure and order| VLESS + Reality (Xray) | Shadowsocks-2022 | Hysteria2 | |
|---|---|---|---|
| Transport | TCP | TCP and UDP | QUIC over UDP |
| How it hides | Looks like a TLS handshake to a real website you choose | Encrypted stream with no recognisable header | Looks like HTTP/3 traffic |
| Certificate needed | No: it borrows the target site's handshake | No | Yes, or use ACME |
| Strong point | Widely used where simple proxies get detected | Very light and simple | Fast on lossy, congested links |
| Weak point | More moving parts to configure | Needs the newer 2022 ciphers; the old ones are weaker against probing | UDP is throttled or blocked on some networks |
| Start here if | You want the default choice | You want the simplest setup | Your link is slow or loses packets |
No protocol is undetectable. Censors change their methods, so keep your software up to date and have a second protocol ready.
Install Xray-core from the official project, then check every option against its current documentation before you rely on it.
xray uuid # your client ID
xray x25519 # prints a private key (server) and a public key (client)
openssl rand -hex 8 # a short ID{
"inbounds": [{
"port": 443,
"protocol": "vless",
"settings": {
"clients": [{ "id": "YOUR-UUID", "flow": "xtls-rprx-vision" }],
"decryption": "none"
},
"streamSettings": {
"network": "tcp",
"security": "reality",
"realitySettings": {
"dest": "TARGET-SITE:443",
"serverNames": ["TARGET-SITE"],
"privateKey": "YOUR-PRIVATE-KEY",
"shortIds": ["YOUR-SHORT-ID"]
}
}
}],
"outbounds": [{ "protocol": "freedom" }]
}sudo ufw allow 22/tcp
sudo ufw allow 443/tcp
sudo ufw enable
sudo systemctl enable --now xrayReality needs a real website to imitate. Pick a large site that supports TLS 1.3 and HTTP/2 and is not blocked where your users are. Do not choose a tiny site: it would stand out.
Choose a country with good connectivity to where you are. A nearer server is faster; a very distant one can feel slow even on a fast port. Our locations page lists all ten.
A censor can block an address outright, whatever protocol runs on it. Have a plan: a second server in another country, and a spare protocol. A pay-as-you-go server you can replace is part of the plan, not a failure.
Update Xray-core, Hysteria or Shadowsocks releases and the operating system regularly. Circumvention tools are updated precisely because detection methods change.
Do not run a website on the same IP and port you use for the proxy unless you know how to route it. Keep the proxy server single-purpose.
It is an ordinary VPS used as a private proxy in another country, running a protocol such as VLESS with Reality, Shadowsocks-2022 or Hysteria2 that is built to avoid detection and blocking.
Reality is the common default, Shadowsocks-2022 is the simplest and lightest, and Hysteria2 is best on slow or lossy links. They can run side by side on different ports, so you can switch if one is blocked.
They are good VPNs, but their traffic has a recognisable shape and is blocked on some networks. See WireGuard on your VPS for a normal setup, and use a circumvention protocol when it is blocked.
The $5.76 size (1 vCPU, 2 GB, 40 GB NVMe) is enough for a household. For a group of people at the same time, use 2 vCPU and 4 GB ($11.50 in Romania).
Deploy a new server in another country, move your configuration across and update your clients. Because there is no contract, replacing a blocked server costs only the months you used.
Yes. You create an account with a generated login and pay with Monero, Bitcoin, USDT or another supported coin. We never ask for a name, ID or phone number. See no-KYC VPS hosting.
That depends on where you are. Circumvention tools are legal in many places and restricted in others. You are responsible for following local law, and our terms prohibit abuse of the service.
Checked 19 October 2026. Chain sizes and software requirements change, so confirm against the source before you order.
Pick a country, pay in crypto, log in as root. No ID, no card.