NEW Check if your VPN is honest — a free subscription audit in 60 seconds
← Back to library
Bypass Practice PRO

Resistance to active probing: setup

We covered the theory of probing — now let's do it by hand. We'll assemble self-steal the way I assemble it on production nodes: a local decoy site on a unix socket, Reality with PROXY protocol, so that during an active ping-through the censor lands on a real page on your own domain. The commands work, the values fit the config builder.

Read the theory

What we're building

The self-steal scheme: nginx brings up a decoy site on a unix socket (fast, doesn't occupy a public port), and the Xray node listens on :443 with Reality and, during probing, proxies foreign requests into that same socket. Name, IP, and content line up — we covered the mechanics in the theory. Below is the manual nginx variant, for when you want full control.

There's also a fast path through a ready-made installer (it brings up the decoy on Caddy with a set of page templates):

/

This guide is part of paid access

Get full access to unlock the text, configs and builder.

Unlock access