Your own VPN on a VPS: VLESS Reality + Xray-core in 10 minutes

To create your own resilient VPN based on the VLESS Reality protocol, it is sufficient to rent a VPS with the Ubuntu 22.04 operating system, 1 GB of RAM, and 1 vCPU — such a solution starts at $7/month on the VPS-XS plan and provides complete traffic masking as a regular TLS connection to a popular web resource, which guarantees bypassing Deep Packet Inspection (DPI) systems.

Why VLESS Reality is the Best Choice for Bypassing Blocks in 2024-2025

Traditional protocols, such as OpenVPN or L2TP, are easily identified by DPI (Deep Packet Inspection) systems due to specific headers and traffic behavior patterns. Even WireGuard, despite its high speed, has a characteristic "handshake" when establishing a connection, leading to its rapid blocking at cross-border nodes. VLESS Reality vps solves this problem through "certificate borrowing" technology (Destination Select). To your provider, your traffic looks like a standard request to a legitimate site, such as Microsoft, Samsung, or Apple.

Technical Advantages of the Xray-core and Reality Combo

• No Own Certificate Required: Unlike classic VLESS + TLS, Reality does not require purchasing a domain or issuing SSL certificates via Let's Encrypt. It "steals" the public part of the certificate from any site that supports TLS 1.3.
• Minimal Overhead: Xray-core is written in Go and optimized for high performance. The VLESS protocol is "stateless," which reduces the load on the VPS processor.
• Protection Against Active Probing: If a censor attempts to access your IP address, the server will simply redirect them to the actual site you are masking as.

Many users, when choosing a Hetzner alternative, look specifically for infrastructure where network filters will not interfere with proxy protocols. Valebyte provides clean IP addresses that are not blacklisted by major streaming services and search engines.

Choosing a Server Configuration: Which VPS is Needed for Xray

Stable operation of an xray vps setup does not require massive computing power. The main focus should be on the quality of the network channel and the server location. If your goal is high content loading speeds and minimal ping, choose locations in Europe (Netherlands, Germany).

Parameter	Minimum Requirements	Recommended (for 5-10 users)
Processor (vCPU)	1 Core (2.0 GHz+)	2 Cores (high frequency)
RAM	512 MB - 1 GB	2 GB
Disk (NVMe/SSD)	10 GB	20 GB
Network Channel	100 Mbps	1 Gbps
OS	Ubuntu 22.04 LTS	Ubuntu 22.04 / Debian 12

When comparing Vultr vs Valebyte, it is important to consider that channel stability during evening hours is critical for a VPN. The VPS-XS plan for $7 per month fully covers the needs of a personal VPN server, providing bandwidth up to 1 Gbps without the strict traffic limits often found with "cloud giants."

Step-by-Step Xray Setup on Ubuntu 22.04

The simplest and most effective way to deploy your own vpn on a vps is to use the 3x-ui graphical control panel. It allows you to manage users, generate QR codes for connections, and monitor traffic consumption through a web interface.

Step 1: Server Preparation

Connect to your VPS via SSH (using PuTTY or a terminal) and update the system packages:

apt update && apt upgrade -y
apt install curl socat -y

Step 2: Installing the 3x-ui Panel

Use the automatic installation script, which will configure Xray-core and the web interface:

bash <(curl -Ls https://raw.githubusercontent.com/mack-a/v2ray-agent/master/install.sh)

Or an alternative popular version of 3x-ui:

bash <(curl -Ls https://raw.githubusercontent.com/MaksZ93/3x-ui/master/install.sh)

During the installation process, the script will prompt you to choose a port for the panel (e.g., 2053), a login, and a password. Be sure to save these details. Once completed, the panel will be accessible at http://your_server_IP:2053.

Step 3: Configuring the VLESS Reality Inbound Connection

After logging into the 3x-ui panel, go to the "Inbounds" section and click "Add Inbound."

1. Remark: Any name (e.g., MyVPN).
2. Protocol: vless.
3. Port: 443 (mandatory for Reality to simulate HTTPS).
4. Transmission: TCP.
5. Security: Reality.
6. uTLS: Chrome (this simulates the Chrome browser fingerprint).
7. Dest: google.com:443 (or any other international site with TLS 1.3).
8. Server Names (SNI): google.com.
9. Private Key: Click "Get New Keys" to generate a key pair.

It is important to understand that xray configuration via Reality requires using port 443 on the external interface. If you plan to host a website on Nginx on the same server, you will need a fallback (redirection) setup, but for a clean VPN server, just leave port 443 free for Xray.

If you are looking for a DigitalOcean alternative to host such a proxy, Valebyte offers more flexible network settings, simplifying port forwarding and working with custom protocols.

VPN VPS: Bypassing Blocks with Fine-Tuned Reality

The main feature of Reality is "Short IDs." These are short identifiers added to the client's request. You can add several of these IDs in the 3x-ui settings to share access between different devices or friends. This is an additional layer of security that prevents unauthorized use of your proxy.

Flow: Vision for Maximum Masking

In the VLESS settings, it is recommended to select xtls-rprx-vision in the "Flow" field. This technology was developed specifically to combat TLS inspection. It removes characteristic packet sizes that could reveal proxy traffic by adding random "noise" to the size of transmitted data. This is critical for vpn vps bypassing blocks in regions with strict censorship.

Choosing a Domain for Masking (SNI)

Do not use domains that are blocked in your country. For example, masking as Facebook or Instagram might cause the connection to the IP address itself to be dropped. It is better to choose neutral resources:

• dl.google.com
• www.microsoft.com
• www.samsung.com
• www.nvidia.com

Connecting Clients: v2RayN, Hiddify, and Nekobox

Once the server is configured, click the QR code icon in the 3x-ui panel or copy the link (vless://...).

Setup on Windows (v2RayN)

Download v2RayN from GitHub. Extract the archive and run it. Click "Servers" -> "Import bulk URL from clipboard." After importing, select the server and press Enter. In the bottom panel of the program, ensure "Set system proxy" mode is selected. Now all your traffic goes through the vless reality vps.

Setup on Android/iOS (Hiddify / Nekobox)

Hiddify is a universal client that supports all modern protocols. Simply click the "Plus" icon and scan the QR code from the 3x-ui panel. The program will automatically configure the routing. For advanced Android users, Nekobox is recommended as it allows for more detailed rule configuration for individual applications (e.g., routing only the browser and YouTube through the VPN).

Comparing local providers with international ones often shows that Reg.ru / Beget vs Western VPS is a choice between a "walled garden" internet and freedom. An international VPS from Valebyte allows you to bypass any local restrictions without fear of sudden protocol blocking by the hoster.

Speed Optimization: Enabling BBR on the Server

BBR (Bottleneck Bandwidth and Round-trip propagation time) is a TCP congestion control algorithm from Google. Enabling it on your VPS can significantly increase data download speeds, especially on unstable channels with packet loss.

Check the current algorithm:

sysctl net.ipv4.tcp_congestion_control

If it is not bbr, execute the following commands:

echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
sysctl -p

After this, your own vpn on a vps will work noticeably faster when watching 4K video or downloading large files.

Security and Administration

Although 3x-ui is password-protected, for a professional xray vps setup, it is recommended to restrict access to the panel port to your IP only or use an SSH tunnel. It is also worth setting up automatic Xray-core updates via a script to receive security patches in a timely manner.

Security Recommendations:

• Use a non-standard port for SSH (not 22).
• Install fail2ban to protect against brute-force password attacks.
• Regularly change the Private Key in the Reality settings.
• Monitor the logs in the 3x-ui panel to detect unauthorized access attempts early.

Economic Benefits: Own VPS vs Paid VPN Services

Purchasing a ready-made VPN service today costs $10-15 per month, and you share an IP address with hundreds of other users, which often leads to Google captchas and website blocks. Your own server on Valebyte for $7 offers:

• Clean Dedicated IP: You are the sole owner of the address.
• Data Control: No logs on the VPN provider's side.
• Flexibility: Ability to host a Telegram proxy or even a small website on the same server.
• Scalability: You can create accounts for your entire family at no extra cost.

Conclusions

To create a reliable and fast VPN in current conditions, it is optimal to use the VLESS Reality and Xray-core combination based on a VPS from Valebyte. This solution provides the maximum level of traffic masking and stable speeds at a minimal cost of $7/month, making it the best choice for both private users and system administrators.