目前绕过中国GFW代理的最佳实践是什么？/ What is the current best practice of creating a proxy to bypass GFW China?

[v4ray]

Which protocol is the most stable (not detected and blacklisted) and most performant?

I found there were reports that v2ray+tls , xray+xtls were all blocked by GFW in the past once or many times. Are there better options?

[RPRX]

利益相关：Xray-core developer

我不知道你是否生活在中国，如果你真正生活在中国，就会知道主流的就剩这几种稳定翻墙方式：

• IPLC 等“不过墙”的线路，缺点是贵，且通信管理局偶尔会拔线、清退等
• REALITY 等“偷证书”的方式，暂未出现过大规模封锁报告，缺点是不如激进发包的协议快
• Hysteria 等 QUIC 类代理，曾经有过大规模封锁报告，但目前基本可用，缺点是若激进发包，VPS、ISP 可能会限制
• CDN（有很多能过 CDN 的协议），优点是不会被永久封锁，缺点是不稳定

XTLS Vision 也从未出现过大规模封锁报告，尽管我们认为 Vision without Seed 会有固定的流量特征，所以我们在弄 Vision Seed

---

Disclaimer: Xray-core developer

I don't know if you live in China, but if you do, you know that these are the only stable ways to get around the wall:

• IPLC and other “no wall crossing” connections, the downside is that they are expensive, and the communications administration occasionally disconnects and terminates them
• REALITY and other “certificate stealing” methods, there have been no reports of large-scale blockades, the downside is that they are not as fast as radical packet dispatching protocols
• QUIC-like proxies such as Hysteria have been reported to be blocked on a large scale, but are currently basically available. The disadvantage is that if aggressive packet sending is used, VPS and ISPs may impose restrictions
• CDN (there are many protocols that can pass through CDN), the advantage is that it will not be permanently blocked, the disadvantage is that it is unstable

XTLS Vision has never been reported to be blocked on a large scale, although we believe that Vision without Seed will have fixed traffic characteristics, so we are working on Vision Seed

[terada46]

利益相关：Xray-core developer

我不知道你是否生活在中国，如果你真正生活在中国，就会知道主流的就剩这几种稳定翻墙方式：

• IPLC 等“不过墙”的线路，缺点是贵，且通信管理局偶尔会拔线、清退等
• REALITY 等“偷证书”的方式，暂未出现过大规模封锁报告，缺点是不如激进发包的协议快
• Hysteria 等 QUIC 类代理，曾经有过大规模封锁报告，但目前基本可用，缺点是若激进发包，VPS、ISP 可能会限制
• CDN（有很多能过 CDN 的协议），优点是不会被永久封锁，缺点是不稳定

XTLS Vision 也从未出现过大规模封锁报告，尽管我们认为 Vision without Seed 会有固定的流量特征，所以我们在弄 Vision Seed

Disclaimer: Xray-core developer

I don't know if you live in China, but if you do, you know that these are the only stable ways to get around the wall:

• IPLC and other “no wall crossing” connections, the downside is that they are expensive, and the communications administration occasionally disconnects and terminates them
• REALITY and other “certificate stealing” methods, there have been no reports of large-scale blockades, the downside is that they are not as fast as radical packet dispatching protocols
• QUIC-like proxies such as Hysteria have been reported to be blocked on a large scale, but are currently basically available. The disadvantage is that if aggressive packet sending is used, VPS and ISPs may impose restrictions
• CDN (there are many protocols that can pass through CDN), the advantage is that it will not be permanently blocked, the disadvantage is that it is unstable

XTLS Vision has never been reported to be blocked on a large scale, although we believe that Vision without Seed will have fixed traffic characteristics, so we are working on Vision Seed

使用XTLS Vision超过两年半，从来没有被封锁过，非常稳定。 自己拥有几条线路，按规则分配给不同网站分流，流量整体均衡，没有哪一台会有大流量，并且全部都是个人自用，不分享他人，不知道这点对稳定使用是否有主要的影响。

I have been using XTLS Vision for more than two and a half years and it has never been blocked. It is very stable. I own several lines, which are allocated to different websites according to rules to balance the overall traffic. None of them will have a large amount of traffic, and they are all for personal use and will not be shared with others. I don't know if this has a major impact on stable use.

[iopq]

I'd like to add that when I played a p2p game over UDP, any server I used got blocked within an hour or two. So I tried hysteria 2 and port hopping delayed getting blocked at first, until you used enough ports and the whole IP was blocked. I'm not sure the faketcp feature of hysteria 1 works or not, because it wasn't working well.

The most stable and high performance solution is udp2raw + wireguard. I put udpspeeder in there as well because of packet loss to my VPS so it became udpspeeder + udp2raw + wireguard. This is most stable solution for gaming