sasukefreestyle/xtls-iran-tls

How to make a V2ray (XTLS) Server for bypassing internet censorship in Iran.

xtls-iran-tls's Issues

Not working with TCI, # Update from TCI users needed, please report.

Hi Sasuke
thx for this tutorial.
I followed step by step and done.

but in both android and windows i got test Error on TCI ISP
I tested on TCI, Irancell and Rightel ISP's. just TCI has error.
what is problem? need I more complex configure? I need a configure to working on just TCI.

please help to fix this problem
thank you again.

Consider using systemd DynamicUser

https://0pointer.net/blog/dynamic-users-with-systemd.html

Using this, the user doesn't need to create a new user on the machine to run the service. Or need to use any existing user.

No such authorization

Command entered:

sudo certbot certonly

Expected result:

Spin up a temporary webserver (standalone)

Actual result:

Saving debug log to /var/log/letsencrypt/letsencrypt.log

How would you like to authenticate with the ACME CA?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: Runs an HTTP server locally which serves the necessary validation files under
the /.well-known/acme-challenge/ request path. Suitable if there is no HTTP
server already running. HTTP challenge only (wildcards not supported).
(standalone)
2: Saves the necessary validation files to a .well-known/acme-challenge/
directory within the nominated webroot path. A seperate HTTP server must be
running and serving files from the webroot path. HTTP challenge only (wildcards
not supported). (webroot)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1
Enter email address (used for urgent renewal and security notices)
 (Enter 'c' to cancel): [email protected]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf. You must
agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: y

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: n
Account registered.
Please enter the domain name(s) you would like on your certificate (comma and/or
space separated) (Enter 'c' to cancel): xxxxx.xxxxx.xxx
Requesting a certificate for xxxxx.xxxxx.xxx
An unexpected error occurred:
No such authorization
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

Thank you, but please add requests

Option to add users and limit by data consumed or expiry date.

Print QR code for easy sharing.

use your config with xui

Hello,
i have installed x-ui panel already, and i want use your config and then use private CDN to hide ip, its possible?
so if possible, what configs i should set on x-ui panel ?
note: in x-ui panel i think i cant add vision

screenshot:
https://prnt.sc/L5-0h-BTie1R

Thanks for your help

Nginx source list add

There is an issue with adding the link to the source list for Nginx.
check this out:
https://nginx.org/en/linux_packages.html#Ubuntu

hi, can you please help me with xtls vision?

Hi. I'm an Iranian. Have a USA vps. The ip is unfiltered and ports are accessable from Iran. But tls configs (ws tls, tcp tls, trojan ,etc) are having a lot of problems! It connects but the ping is very high, like 2000 when it should be 800 at most, and it's very unstable, it disconnects randomly and gives "tls handshake timeout" and has awful speed and ping. It only happens when I'm using tls. This is probably sth to do with government blocking. I have heard that xtls vision can solve this "tls handshake timeout" error. I installed x-ui. X-ui only has tls with vision flow, not xtls with vision flow. Is it okay or does it have to be xtls?? + I saw you mentioned something about fall back to fake ngingx website. How exactly can I do it? For example, I wanna make a vless xtls vision config with fall back to ngnix website. So steps are like this ?

1: setting up an ngninx server on port 443 or 8443.
2: making the config and putting the nginx hostname in the SNI field?

Please help a bother out. I'm confused , and frustrated. I'm also willing to give you the vps credentials to set up whatever you want, because I only know how to use x-ui.

Xray service not starting

× xray.service - XTLS Xray-Core a VMESS/VLESS Server
Loaded: loaded (/etc/systemd/system/xray.service; enabled; preset: enabled)
Active: failed (Result: exit-code) since Sun 2023-03-05 18:06:12 UTC; 757ms ago
Duration: 2ms
Process: 982 ExecStart=/home/aniskhanak/xray/xray run -config /home/aniskhanak/xray/config.json (code=exited, status=2>
Main PID: 982 (code=exited, status=217/USER)
CPU: 1ms

Mar 05 18:06:12 ubuntu-1vcpu-2gb-lon1 systemd[1]: xray.service: Scheduled restart job, restart counter is at 5.
Mar 05 18:06:12 ubuntu-1vcpu-2gb-lon1 systemd[1]: Stopped XTLS Xray-Core a VMESS/VLESS Server.
Mar 05 18:06:12 ubuntu-1vcpu-2gb-lon1 systemd[1]: xray.service: Start request repeated too quickly.
Mar 05 18:06:12 ubuntu-1vcpu-2gb-lon1 systemd[1]: xray.service: Failed with result 'exit-code'.
Mar 05 18:06:12 ubuntu-1vcpu-2gb-lon1 systemd[1]: Failed to start XTLS Xray-Core a VMESS/VLESS Server.

v2ray client for IOS

Can You please recommend free v2ray client for IOS as v2rayNG is available only for Android?

bind() to unix:/dev/shm fails on OpenVZ VPS

Hello and thanks for your comprehensive guide.
I am having a problem starting nginx with your provided config file in my OpenVZ VPS. I get the following error when I run systemctl restart nginx:

Mar 14 19:40:14 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h1.sock failed (98: Address already in use)
Mar 14 19:40:14 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h2c.sock failed (98: Address already in use)
Mar 14 19:40:15 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h1.sock failed (98: Address already in use)
Mar 14 19:40:15 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h2c.sock failed (98: Address already in use)
Mar 14 19:40:15 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h1.sock failed (98: Address already in use)
Mar 14 19:40:15 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] bind() to unix:/dev/shm/h2c.sock failed (98: Address already in use)
Mar 14 19:40:16 vps97472.hostsailor.com nginx[11319]: nginx: [emerg] still could not bind()
Mar 14 19:40:16 vps97472.hostsailor.com systemd[1]: nginx.service: Control process exited, code=exited status=1
Mar 14 19:40:16 vps97472.hostsailor.com systemd[1]: nginx.service: Failed with result 'exit-code'.
Mar 14 19:40:16 vps97472.hostsailor.com systemd[1]: Failed to start A high performance web server and a reverse proxy server.

I'm not sure what this unix:/dev/shm listen address is but I Googled it and it seems it's some kind of memory sharing technique and I suspect maybe it's because I am using OpenVZ that I get this error because OpenVZ itself uses shared memory and is different from a real machine or KVM machines.