Introduction

A brief guide to setting up a stealthy, NAT-transversing SSH tunnel using VLESS + REALITY on Debian. This configuration allows you to securely access a private machine (Client) through a public VPS (Server) while masking traffic as a standard TLS handshake to a legitimate website.

1. Pre-requisites

Have xray-core set up and running with a basic VLESS + REALITY configuration Check the previous article. This guide focuses on the additional steps to enable SSH tunneling through the established VLESS + REALITY connection.

Introduction

A brief guide to set up a VLESS with Reality server on a Debian-based system using binary releases.

VLESS is a stateless proxy protocol designed for high performance and low overhead. REALITY is a security layer that eliminates TLS fingerprints by “borrowing” the identity of other websites. Together, they provide superior stealth against Deep Packet Inspection (DPI).

• Protocol (VLESS): Handles user authentication (UUID) and data routing. It does not encrypt data on its own.

Description

A brief guide to set up a Shadowsocks server on a Debian-based system using binary releases and systemd.

Steps

1. Pre-requisites

Download and extract the Shadowsocks-Rust binary, and move it to /usr/local/bin for system-wide access:

wget [BINARY_RELEASE_URL]

tar -xvf shadowsocks-rust-<VERSION>-x86_64-unknown-linux-gnu.tar.xz

sudo cp ssserver /usr/local/bin/

2. Server Configuration

Create a config file for the Shadowsocks server under directory /etc/ with the following content (modify as needed):