Your own VPN on a VPS: VLESS Reality + Xray-core in 10 minutes

What is VLESS Reality and why is it the best self-hosted VPN on VPS in 2024?

You can create your own VPN on a VPS with VLESS Reality + Xray-core and the 3x-ui panel in just 10 minutes, using an inexpensive virtual server that will bypass blockages and mask itself as regular TLS traffic.

Amidst growing restrictions on access to information and tightening traffic analysis methods, traditional VPN protocols like OpenVPN or WireGuard are becoming increasingly vulnerable to detection and blocking. This is especially relevant for users who need a VPN VPS to bypass blockages in regions with Deep Packet Inspection (DPI).

VLESS Reality is an advanced combination of the VLESS protocol and the Reality feature, designed for maximum stealth and censorship resistance. VLESS (VMess-Light) is a simplified and high-performance data transfer protocol that is part of the Xray-core ecosystem. It provides efficient traffic tunneling, but its main feature lies in its combination with Reality.

Reality is an innovative obfuscation mechanism that allows your VPN traffic to completely mask itself as regular, legitimate TLS traffic (e.g., HTTPS). Unlike other obfuscation methods, Reality doesn't just "hide" the VPN; it actively mimics a real TLS connection to an existing website. This is achieved by using TLS certificates of well-known domains and the absence of any unique "fingerprints" that could reveal VPN traffic. Thus, for DPI systems, your traffic appears as a normal, secure HTTPS connection to a large, trusted resource, making it virtually indistinguishable from legitimate traffic.

Advantages of VLESS Reality for Bypassing Censorship

• Indistinguishable from regular TLS: Reality creates a "fake" TLS handshake using public certificates of well-known websites, making it virtually impossible for DPI systems to detect.
• High performance: The VLESS protocol is optimized for speed and low latency, ensuring comfortable operation even with resource-intensive applications and streaming.
• No domain required: Unlike many other solutions, Reality does not require purchasing and configuring your own domain, which simplifies deployment and reduces costs.
• Resistance to blocking: Thanks to deep obfuscation, VLESS Reality demonstrates high resistance to actively applied blocking methods, including those used in the Russian Federation.
• Ease of setup: With the 3x-ui panel, deploying and managing a VLESS Reality VPS becomes intuitive even for those who are not experts in network protocols.

By choosing your own VPN on a VPS with VLESS Reality, you get not just a tool for bypassing blockages, but a reliable, high-performance, and maximally stealthy solution that will allow you to maintain freedom of access to information anywhere in the world.

Why Xray-core is the Optimal Choice for VLESS Reality on a VPS?

Xray-core is the foundation for implementing VLESS Reality and plays a key role in ensuring its effectiveness. It is a high-performance, multi-functional proxy server that was developed as a fork of v2ray-core, but with an emphasis on improved performance, stability, and, most importantly, on the development of advanced censorship circumvention protocols such as Reality.

Xray-core Architecture and Capabilities

Xray-core is not just a proxy, but a complete network toolkit capable of routing traffic, obfuscating it, and interacting with various protocols. Its modular architecture allows for easy addition of new features and protocols. For Xray configuration, especially in conjunction with Reality, this means access to advanced encryption and obfuscation algorithms that are constantly updated and improved.

Key reasons why Xray-core is the optimal choice for your self-hosted VPN on a VPS with Reality:

1. Reality Support: Xray-core was one of the first projects to implement and actively develop the Reality protocol. This ensures the best compatibility, stability, and up-to-date features.
2. High Performance: Xray-core is optimized for low latency and high throughput. This is critically important for a VPN, where every millisecond and megabit matters. It efficiently uses system resources, allowing you to run a powerful VPN even on relatively modest VPS.
3. Advanced Routing Features: Xray-core offers flexible routing rules, allowing detailed control over which traffic goes where. This is useful for advanced configurations, such as split tunneling.
4. Active Community and Development: The Xray-core project is actively developed, with regular updates, bug fixes, and new features. This ensures the long-term reliability and relevance of your VPN solution.
5. Cross-platform Compatibility: Xray-core supports many operating systems, making it a universal solution for both the server-side (Linux VPS) and client devices (Windows, macOS, Android, iOS).

By using Xray-core as the backend for VLESS Reality, you guarantee yourself access to the most modern and effective methods of censorship circumvention. This makes Xray VPS setup the choice of professionals striving for maximum reliability and security of their internet connection.

Choosing and Preparing a VPS for VLESS Reality: What You Need to Know?

Choosing the right Virtual Private Server (VPS) is the first and one of the most important steps towards creating your self-hosted VPN on a VPS. The stability, speed, and overall reliability of your VPN service depend on the correct choice.

Minimum VPS Requirements

VLESS Reality + Xray-core does not require a powerful server. The VLESS protocol and Xray-core itself are very efficient and not resource-intensive. However, there are a few key aspects to pay attention to:

• Operating System: It is recommended to use Ubuntu Server 20.04 LTS or 22.04 LTS. These versions are well-supported, have up-to-date packages, and a large community. Debian 10/11/12 will also work perfectly.
• Processor (CPU): 1 vCPU with a frequency of 1-2 GHz will be more than sufficient. Xray-core efficiently uses a single core.
• Random Access Memory (RAM): A minimum of 512 MB, but 1 GB RAM will be optimal for comfortable system operation and the 3x-ui control panel. Our Valebyte.com VPS-XS plan with 1 GB RAM is ideally suited.
• Disk Space: 10-20 GB NVMe or SSD disk will be sufficient. Disk speed is important for quick installation and loading, although it is not a bottleneck for the VPN traffic itself.
• Bandwidth: The more, the better. Look for plans with unlimited traffic or a large monthly limit (e.g., from 1 TB). Port speed should be at least 100 Mbps, but 1 Gbps is standard for most modern VPS providers.
• Virtualization: KVM is preferred. KVM KVM VPS vs OpenVZ VPS in 2026: Still Relevant provides full virtualization, meaning your VPS will operate like a full-fledged physical server with its own kernel, which is important for certain network settings and overall stability. OpenVZ may have limitations.

Recommendations for Choosing a Hosting Provider and Location

For creating your own VPN on a VPS, especially for bypassing blockages, the choice of provider and VPS location is critically important:

1. Geographical Location: Choose a VPS location that is outside the jurisdiction where blockages are applied (e.g., outside the Russian Federation). At the same time, the closer the server is to you geographically, the lower the latency (ping) will be. Popular locations include Finland, Germany, Netherlands, USA.
2. Provider Reputation: Prioritize reliable providers with a good reputation and stable network. Valebyte.com offers reliable VPS in various locations, optimized for performance. If you are unsure what a VPS is, check out our article: What is a VPS in 2026: Buyer's Guide vs Cloud and Dedicated.
3. IPv4 Availability: Ensure your VPS has a dedicated IPv4 address. This is standard, but sometimes the cheapest plans only offer IPv6, which can be problematic.
4. Price: Generally, an entry-level plan is sufficient for VLESS Reality. At Valebyte.com, the VPS-XS plan costing $7/month (with 1 vCPU, 1 GB RAM, 20 GB NVMe, 1 TB traffic) is an excellent solution for most users. Consider annual VPS payment for potential savings.

After choosing and renting a VPS, you will need SSH access to the server. Make sure you have received the IP address, login (usually root), and password for SSH access. At this stage, your VPS is ready for Xray configuration and VLESS Reality.

Step-by-Step Xray VLESS Reality Setup on Ubuntu with 3x-ui Panel

The simplest and most effective way to deploy your own VPN on a VPS with VLESS Reality and Xray-core is to use the 3x-ui web control panel. This panel significantly simplifies the Xray VPS setup process, automating many steps and providing a convenient graphical interface for managing users and configurations.

Connecting to VPS and Installing 3x-ui

Before you begin, ensure that your VPS is running Ubuntu (20.04 LTS or 22.04 LTS) and you have SSH access with root privileges.

1. Connect to your VPS via SSH:
   Use a terminal (Linux/macOS) or PuTTY/MobaXterm (Windows). Replace your_vps_ip with the actual IP address of your server.

   ssh root@your_vps_ip

   Enter the password when prompted.
2. Update the system:
   It is always recommended to update packages before installing new software.

   sudo apt update && sudo apt upgrade -y

3. Install the 3x-ui panel:
   A convenient script is used to install 3x-ui. Execute the following command:

   bash <(curl -Ls https://raw.githubusercontent.com/mhsanaei/3x-ui/master/install.sh)

   The script will prompt you to choose a port for the panel (default 2053), a username (default admin), and a password. Record this information. After the installation is complete, the panel will be accessible at http://your_vps_ip:2053.
4. Configure the firewall (UFW):
   If a firewall (e.g., UFW) is active on your VPS, ensure that ports 2053 (for the 3x-ui panel) and 443 (for VLESS Reality) are open.

   sudo ufw allow 2053/tcp
   sudo ufw allow 443/tcp
   sudo ufw enable
   sudo ufw status

Creating a VLESS Reality Configuration in 3x-ui

Now that the 3x-ui panel is installed and accessible, you can proceed to create the VLESS Reality proxy.

1. Log in to the 3x-ui panel:
   Open your browser and navigate to http://your_vps_ip:2053. Enter the username and password you set during installation.
2. Add a new Inbound connection:
   On the main page of the panel, click the "+ Inbound" or "Add Inbound connection" button.
3. Configure VLESS Reality parameters:
   • Protocol: Select VLESS.
   • Port: Set to 443. This is the standard port for HTTPS, which helps with obfuscation.
   • UID: Leave the default generated one or create your own unique UUID.
   • Flow: Select xtls-rprx-vision. This provides better performance and security.
   • TLS: Select Reality.
   • Dest: This is the address of the "decoy" domain under which your traffic will be masked. Choose a popular, large domain (e.g., www.microsoft.com:443, www.apple.com:443, www.google.com:443). It is important that this domain is operational and has a valid TLS certificate.
   • SNI: Specify the same domain as in "Dest" (e.g., www.microsoft.com).
   • ShortId: Generate a random ShortId (the "Generate" button). This is an additional identifier for Reality.
   • Public Key: Will be generated automatically. This is the public key for Reality, which will be used by clients.
   • Private Key: Will be generated automatically (for the server only).
   • Server Name: Leave empty or specify your VPS IP.

   Example of filling:

   Parameter	Value
   Protocol	VLESS
   Port	443
   UID	(automatically generated UUID)
   Flow	xtls-rprx-vision
   TLS	Reality
   Dest	www.microsoft.com:443
   SNI	www.microsoft.com
   ShortId	(automatically generated ShortId)
   Public Key	(automatically generated key)
   Private Key	(automatically generated key)

4. Save and activate:
   Click the "Create" or "Submit" button. Your new VLESS Reality inbound connection will be created and activated. Xray-core will automatically restart with the new configuration.

Now your self-hosted VPN on a VPS is ready to use. The next step is to configure client applications on your devices to connect to the created server.

Client Configuration: Importing VLESS Reality into v2RayN and Hiddify

After successfully configuring Xray with VLESS Reality on your VPS, the next step is to configure client applications on your devices. We will cover the process of importing the configuration into two popular clients: v2RayN for Windows and Hiddify (formerly Hiddify-Next) for mobile platforms (Android/iOS) and desktop systems (macOS/Windows/Linux).

Obtaining Configuration from the 3x-ui Panel

In the 3x-ui control panel, next to the created VLESS Reality inbound connection, you will find several buttons. We are interested in the "Get Config" button or the QR code icon. Click on it to open a window with configuration information. A link in the format vless://... will be available there, as well as a QR code. Save this link or QR code – you will need them for import.

Importing VLESS Reality into v2RayN (Windows)

v2RayN is a popular client for Windows, supporting Xray-core and all its protocols, including VLESS Reality.

1. Download and install v2RayN:
   Download the latest version of v2RayN from the official GitHub repository (look for .zip files in the Releases section). Unzip the archive to a convenient location, for example, C:\v2rayN. Run v2rayN.exe.
2. Import configuration:
   There are several ways to import in v2RayN:
   • Via clipboard: Copy the vless://... link from the 3x-ui panel. In v2RayN, go to the "Server" menu -> "Add VLESS server from clipboard".
   • Via QR code: If you have a QR code, click "Server" -> "Scan screen QR code" (make sure the QR code is visible on the screen).
   After importing, the new server will appear in the list.
3. Setup and connection:
   • Ensure the imported server is selected (it will be highlighted).
   • Go to "Settings" menu -> "HTTP Proxy Settings" and select "Automatic proxy (default)".
   • Right-click the v2RayN icon in the system tray, select "System Proxy" -> "Automatic proxy (PAC)".
   • To test the connection, select "Server" -> "Test latency of all servers". If everything is configured correctly, you will see low latency.
   • Now your Windows traffic will pass through your own VPN on a VPS.

Importing VLESS Reality into Hiddify (Android/iOS/macOS)

Hiddify (formerly Hiddify-Next) is a universal client that provides a convenient interface and Reality support on various platforms.

1. Download and install Hiddify:
   Download Hiddify from the respective app store (Google Play Store for Android, Apple App Store for iOS/macOS) or from the official Hiddify website for desktop versions. Install the application.
2. Import configuration:
   
   • Via QR code: Open Hiddify, find the "Add Profile" or "Import" button, and select the QR code scanning option. Scan the QR code obtained from the 3x-ui panel.
   • Via link: If the QR code is not available, select the "Add Profile by Link" or "Import from URL" option and paste the vless://... link.
   After importing, the profile will appear in the list.
3. Connection:
   • Select the imported VLESS Reality profile.
   • Click the "Connect" button.
   • Upon the first connection, the system may request permission to create a VPN connection. Confirm it.
   • After a successful connection, the indicator should show an active VPN connection.

After these steps, your traffic on the selected device will be routed through your own VPN on a VPS using VLESS Reality, ensuring secure and stealthy access to the internet.

Bypassing DPI and Masking as TLS: How VLESS Reality Protects Your Traffic?

One of the key reasons why VLESS Reality is considered an advanced solution for VPN VPS blockage circumvention is its unique approach to traffic obfuscation. Unlike many other VPN protocols that attempt to "hide" the VPN signature, Reality actively mimics regular, legitimate HTTPS traffic, making it virtually indistinguishable to Deep Packet Inspection (DPI) systems.

How Reality Works and Bypasses DPI

DPI (Deep Packet Inspection) systems analyze network traffic at various levels, searching for characteristic "fingerprints" of VPN protocols. These fingerprints can include specific headers, byte sequences, anomalies in the TLS handshake, or unusual traffic patterns.

Reality works as follows:

1. TLS Handshake Imitation: When your client attempts to connect to a VPS with VLESS Reality, it does not establish a "pure" VLESS connection. Instead, the client initiates a TLS handshake that, by all external appearances, is identical to a handshake with a real, existing website.
2. Using Public Certificates of Well-Known Domains: Reality uses public TLS certificates of large, well-known websites (e.g., Microsoft, Apple, Google, Amazon). These certificates do not belong to your VPS, but Reality masterfully mimics the process as if your client is establishing a connection with this "decoy" domain. To DPI, this looks like a regular, secure HTTPS connection to a trusted resource.
3. Absence of Unique Fingerprints: Unlike many obfuscation methods, Reality does not add any proprietary "noise" or non-standard fields that could be detected as an anomaly. The entire handshake process and subsequent encryption fully comply with TLS standards.
4. Direct Payload Transmission: After successfully imitating the TLS handshake, the encrypted VLESS traffic is transmitted within this "pseudo-TLS" connection. Since the outer shell appears absolutely legitimate, DPI systems pass it without further analysis, considering it regular HTTPS.
5. Resistance to Active Probing: Some DPI systems attempt to actively probe suspicious servers by sending them various requests to identify VPN services. Reality is resistant to such probing because it correctly responds to requests for the "decoy" domain without revealing itself.

VLESS Reality in the Context of DPI Circumvention in the Russian Federation

In the Russian Federation, DPI systems are actively used to block VPN services. These systems are constantly being improved, and many traditional protocols are no longer effective. VLESS Reality is designed specifically to counteract such advanced systems.

• Masking as HTTPS: Since most internet traffic today is encrypted HTTPS, masking as such is the most effective way to remain undetected. Reality achieves this at an unprecedented level.
• Absence of Centralized Control: Since you are deploying your own VPN on a VPS, you are not dependent on large commercial VPN providers who may be subject to pressure or IP-level blockages.
• Configuration Flexibility: The ability to choose different "decoy" domains allows you to adapt to changing conditions and, if necessary, switch to another domain if the current one raises suspicions for some reason.

Ultimately, VLESS Reality provides a powerful tool for maintaining anonymity and freedom of access to the internet, effectively bypassing even the most advanced DPI systems, including those used in the Russian Federation. This makes it one of the most reliable solutions for those seeking VPN VPS blockage circumvention in 2024.

How Much Does Your Own VPN on a VPS Cost and How to Choose a Valebyte.com Plan?

Creating your own VPN on a VPS with VLESS Reality + Xray-core is not only an effective but also, as a rule, an economically advantageous solution compared to commercial VPN services, especially in the long term. The main expense is the rental of a virtual server.

Cost of VPS for VLESS Reality

VLESS Reality does not require powerful resources, allowing for the use of budget-friendly tariff plans. As mentioned, our Valebyte.com VPS-XS plan for $7/month is an ideal option.

Let's compare this plan with the minimum requirements and present it in a table:

As seen in the table, Valebyte.com VPS-XS fully meets and even exceeds the minimum requirements, providing sufficient resources for stable VLESS Reality operation. 1 TB of monthly traffic is more than enough for most individual users and even a small family.

Additional Factors Affecting Cost

In addition to the basic VPS cost, there are several other aspects to consider:

• Domain Name: Although VLESS Reality does not require its own domain, some users prefer it for convenience (e.g., for using Cloudflare CDN or for easier address memorization). The cost of a domain is usually $10-15 per year.
• Managed vs Self-managed VPS: Valebyte.com offers self-managed VPS. This means you fully control the server and are responsible for its setup and maintenance. If you prefer to have everything done for you, you need a managed VPS, which will be significantly more expensive. You can read more about this here: Self-managed vs Managed VPS in 2026: Which to Choose.
• Backups: Some providers offer automatic backups as an additional paid service. For a VPN, this is usually not critical, as the configuration is easy to restore.
• Hourly Billing: Some providers offer VPS with hourly billing, which can be convenient for testing, but for a permanent VPN service, monthly payment is usually more cost-effective.

Comparison with Commercial VPN Services

Commercial VPN services typically cost from $3 to $15 per month, depending on the subscription term and provider. At first glance, this is comparable to the price of a VPS. However, there are key differences:

• Privacy and Control: With your own VPN on a VPS, you are the sole user. Your traffic is not mixed with the traffic of hundreds of other users, and you have full control over the server. This ensures the maximum level of privacy and security.
• Bypassing Blockages: Commercial VPN services often become targets for blockages, and their IP addresses quickly end up on blacklists. Your personal VPS with VLESS Reality is much less noticeable and more resistant to blockages.
• Performance: You do not share server resources with other users, which guarantees consistently high speed and low latency.
• Customization: You can configure the VPN exactly as you need it, using advanced protocols such as VLESS Reality, which are not always available in commercial services.

Thus, investing in your own VPN on a VPS for $7 a month is not only an economically justified decision but also a step towards complete control over your online privacy and freedom.

Security and Optimization of Your VLESS Reality VPN

Having deployed your own VPN on a VPS with VLESS Reality, you have gained a powerful tool for secure and stealthy internet access. However, like any server service, it requires attention to security and periodic optimization to maintain maximum effectiveness.

Key Security Aspects

1. System Updates: Regularly update your VPS's operating system. This is critically important for patching security vulnerabilities.

   sudo apt update && sudo apt upgrade -y

   Also, remember to periodically reboot the server to apply kernel updates.
2. Strong SSH Credentials:
   • Strong Password: Use a long, complex password for the root user (or any other user with sudo privileges).
   • SSH Keys: Configure SSH key authentication instead of passwords. This significantly enhances security. After setup, disable password login in the /etc/ssh/sshd_config file by setting PasswordAuthentication no and restarting the SSH service.
   • Change SSH Port: Change the standard SSH port (22) to a different, non-standard port. This will reduce the number of automated attacks.
3. Firewall (UFW): Ensure your firewall (e.g., UFW on Ubuntu) is configured correctly. Open only the ports that are absolutely necessary:
   • Port for the 3x-ui panel (default 2053)
   • Port for VLESS Reality (443)
   • Port for SSH (if you changed it from 22)
   Close all other ports.

   sudo ufw default deny incoming
   sudo ufw default allow outgoing
   sudo ufw allow ssh # or your new SSH port
   sudo ufw allow 2053/tcp
   sudo ufw allow 443/tcp
   sudo ufw enable

4. Log Monitoring: Periodically review system logs (e.g., /var/log/auth.log for SSH login attempts) for suspicious activity.
5. Do Not Use Root for Daily Tasks: Create a regular user with limited privileges and use sudo for administrative tasks.

Performance and Stability Optimization

1. VPS Location Selection: As mentioned, choose a VPS location that provides the best balance between distance from censorship and low latency to your location.
2. Resource Monitoring: Use utilities such as htop, glances or your hosting provider's built-in monitoring tools to track CPU, RAM, and network traffic usage. If you notice consistently high load, it might be worth considering a VPS upgrade.
3. TCP BBR Configuration: Enabling the TCP BBR congestion control algorithm can significantly improve throughput and reduce latency, especially on high-bandwidth and lossy channels.

   echo "net.core.default_qdisc=fq" | sudo tee -a /etc/sysctl.conf
   echo "net.ipv4.tcp_congestion_control=bbr" | sudo tee -a /etc/sysctl.conf
   sudo sysctl -p
   sudo sysctl net.ipv4.tcp_congestion_control # Check that bbr is enabled

4. 3x-ui Configuration Backup: Although 3x-ui simplifies setup, it's useful to occasionally export the configuration or take screenshots of the settings so that the service can be quickly restored in case of a server failure.
5. Automatic Xray-core Restart: Ensure that Xray-core is configured to start automatically on system boot and restart in case of failure. 3x-ui usually manages this automatically.

By adhering to these recommendations, you can maintain your VLESS Reality VPS in a secure and high-performance state, ensuring reliable and stealthy access to the internet.

Conclusion

Creating your own VPN on a VPS with VLESS Reality and Xray-core is a powerful and cost-effective solution for bypassing blockages and ensuring internet privacy. With the 3x-ui panel, this process takes only about 10 minutes, and the cost of $7/month for a VPS-XS from Valebyte.com makes it accessible to everyone. This solution provides unparalleled stealth due to its masking as legitimate TLS traffic, making it highly resistant to DPI systems, including those used in the Russian Federation.