Introduction

A brief guide to setting up a stealthy, NAT-transversing SSH tunnel using VLESS + REALITY on Debian. This configuration allows you to securely access a private machine (Client) through a public VPS (Server) while masking traffic as a standard TLS handshake to a legitimate website.

1. Pre-requisites

Have xray-core set up and running with a basic VLESS + REALITY configuration Check the previous article. This guide focuses on the additional steps to enable SSH tunneling through the established VLESS + REALITY connection.

Introduction

A brief guide to set up a VLESS with Reality server on a Debian-based system using binary releases.

VLESS is a stateless proxy protocol designed for high performance and low overhead. REALITY is a security layer that eliminates TLS fingerprints by “borrowing” the identity of other websites. Together, they provide superior stealth against Deep Packet Inspection (DPI).

• Protocol (VLESS): Handles user authentication (UUID) and data routing. It does not encrypt data on its own.