Protocols Practice PRO

Selfsteal + nginx: step by step

Setting up selfsteal by hand on nginx. A decoy site on a local socket, a cert for your domain, an inbound with xver, and verifying that from the outside an ordinary website is what shows. Type your domain into the builder above. Why do all this and how it breaks deep analysis — I covered in the paired theory piece.

Read the theory →

What we're building

Ordinary Reality steals the handshake from someone else's site, but the foreign domain's SNI doesn't resolve to your IP — under deep analysis that's a mismatch. Selfsteal fixes it: serverNames = your domain (with an A record to the node), target = your decoy site on a local nginx socket. SNI, IP, and content are consistent — an active probe lands on a real site at your address.

In the official Remnawave template this is done through a unix socket (/dev/shm/nginx.so…


      
        /
        This guide is part of paid access
        Get full access to unlock the text, configs and builder.
        Unlock access →