Network on Ito Archives

Enabling Reverse SSH Tunneling over VLESS + REALITY

Sun, 29 Mar 2026 18:13:00 -0400

Introduction

A brief guide to setting up a stealthy, NAT-transversing SSH tunnel using VLESS + REALITY on Debian. This configuration allows you to securely access a private machine (Client) through a public VPS (Server) while masking traffic as a standard TLS handshake to a legitimate website.

1. Pre-requisites

Have xray-core set up and running with a basic VLESS + REALITY configuration Check the previous article. This guide focuses on the additional steps to enable SSH tunneling through the established VLESS + REALITY connection.

Deploying VLESS + REALITY: A Stealth Proxy Guide for Debian

Mon, 09 Feb 2026 19:43:00 -0500

Introduction

A brief guide to set up a VLESS with Reality server on a Debian-based system using binary releases.

VLESS is a stateless proxy protocol designed for high performance and low overhead. REALITY is a security layer that eliminates TLS fingerprints by “borrowing” the identity of other websites. Together, they provide superior stealth against Deep Packet Inspection (DPI).

Protocol (VLESS): Handles user authentication (UUID) and data routing. It does not encrypt data on its own.

Manual Installation and Configuration of Shadowsocks-Rust on Debian

Tue, 03 Feb 2026 19:06:00 -0500

Description

A brief guide to set up a Shadowsocks server on a Debian-based system using binary releases and systemd.

Steps

1. Pre-requisites

Download and extract the Shadowsocks-Rust binary, and move it to /usr/local/bin for system-wide access:

wget [BINARY_RELEASE_URL]

tar -xvf shadowsocks-rust-<VERSION>-x86_64-unknown-linux-gnu.tar.xz

sudo cp ssserver /usr/local/bin/

2. Server Configuration

Create a config file for the Shadowsocks server under directory /etc/ with the following content (modify as needed):