Bypass
Practice
PRO
Resistance to active probing: setup
We covered the theory of probing — now let's do it by hand. We'll assemble self-steal the way I assemble it on production nodes: a local decoy site on a unix socket, Reality with PROXY protocol, so that during an active ping-through the censor lands on a real page on your own domain. The commands work, the values fit the config builder.
Read the theory →
What we're building
The self-steal scheme: nginx brings up a decoy site on a unix socket (fast, doesn't occupy a public port), and the Xray node listens on :443 with Reality and, during probing, proxies foreign requests into that same socket. Name, IP, and content line up — we covered the mechanics in the theory. Below is the manual nginx variant, for when you want full control.
There's also a fast path through a ready-made installer (it brings up the decoy on Caddy with a set of page templates):
/
This guide is part of paid access
Get full access to unlock the text, configs and builder.
Unlock access →