Hacker News Reader

What makes this worth using over something like vless? Work blocked my gatcha game so I've had to set up a xray/vless/xhttp/tls proxy and it works flawlessly. Gets through the corp firewall unscathed at full bandwidth and no appreciable increase in latency.

View on HN

Could you please drop names/links to the magic sauce if there's anything more than the names mentioned?

I need to open ssh myself and for now I decided on tunnelling over http/3 terminated somewhere in aws/gcp/cf, but maybe your method is better.

Just use Amnezia VPN - it can masquerade as https.

I can't, my endpoint runs software enforcing compliance. "no disallowed VPN software" is one of the rules.

Besides, where's fun in it :)

https://github.com/XTLS/Xray-core

It won't help you get around the endpoint compliance software, I use this for my byod phone (Streisand is a nice ios client). VLESS is the proxy protocol, kinda like SOCKS I guess. It uses xhttp over TLS as the transport.

Thanks a lot. VPNs are forbidden but this might easily slip under the radar (I can even check the signatures on the endpoint protection and our office firewall :))

It's less about breaking the rules, more about getting around the limitations in case I need it and don't fancy waiting 2 days for approval. Might end up with pure http/3, but this tool is fascinating. Thanks!

Reply on news.ycombinator.com