Incomplete(I haven't finish writing this guide yet)

Creating Vless and Hysteria2 Proxy Inbounds and Clients with 3x-ui

---

This guide will only show two of proxy protocols that 3x-ui supports, vless and hysteria. For me, these two shows the best results in getting through China's GFW. These setups might not work in Russia as their DPI(deep packet inspections) is stricter than China and definitely not in Iran as they have switched from blacklist to whitelist, only IP addresses approved by the government will pass through.

I will first start with Hysteria2, as it's easy to setup with 3x-ui and I found it has the faster transfer rate compared to any of the Vless inbound setup.

Creating Hysteria2 Inbound and Client

Create a Hysteria2 Inbound

1. From the 3x-ui web control panel, select the Inbounds menu on the left panel and click on the [+Add Inbound] button in the main panel.
2. On the Basic tab, give a name for the inbound in the Remark field.
3. Change the Protocol field from default vless to hysteria.
4. ThePort number will default to a random port number. You can it to 443 or 8433. Personally, I went with 8443 as I used the port hopping feature of Hysteria2 and used 443 for vless.
5. Leave all the other fields to the default settings
6. This step is optional. But if the GFW starts blocking your Hysteria2 traffic, you can enable Port Hopping.
   • Click on the Stream tab and Enable the QUIC Params toggle.
   • Enable the UDP Hop toggle. Leave the default port 20000-50000 for Port Hop and other settings.
7. Click on the Security tab and for SNI enter the VPS hostname. For example, lax1.example.com.
8. Click the `[Set Cert from Panel] button. It should pull the private and private key files from the 3x-ui setup.
9. Finally, click on the [Create] button on the bottom.

Create a Client for Hysteria2/Vless Inbound

1. From the 3x-ui web control panel, select the Clients menu on the left panel and click on the `[+Add Client] button in the main panel.
2. In the Basic tab, under Attached Inbounds, either click on the [Select all] or manually select the inbound(s) from the drop down list.

Skip to section on the export setting to proxy client app, if you're not planning to create a Vless Inbound.

Creating Vless Inbound without using Cloudflare CDN

Create a Vless/XHTTP/Reality Inbound.

1. From the 3x-ui web control panel, select the Inbounds menu on the left panel and click on the [+Add Inbound] button.
2. On the Basic tab, give a name for the inbound in the Remark field.
3. Leave the Protocol field on the default vless.
4. Change the random number for Port to 443 or 8443 as explained in my Hysteria2 setup above.
5. Leave the rest of fields default on their settings and click on the Stream tab and select XHTTP for the Transportsetting.
6. Click on the Security tab and select Reality for the security setting.
7. Next click on the [Find Targets] button. By default it will scan for the well known domains that are not blocked by China. You can select the 1st domain listed as it has lowest ping latency to your VPS, so that domain will be used to mask the proxy's traffic.
8. But you should be able to find a more suitable domain that should be closer to your VPS.
   1. Instead put the CIDR range of the IPv4 address of your VPS. For example, if it's 172.25.251.186, type in 172.25.251.0/24.
   2. It might take a while as it tries to find some suitable candidates. If doesn’t find any, try a range next it, like 172.25.252.0/24.
   3. Hopefully it will find a domain under 20ms latency. Click on the Use next lowest Feasible domain.
   4. It will automatically add it to the SNI field.
9. Click the [Create] button as it should also automatically fill in all of the needed security fields like public and private keys.

Create a Client for Vless

This is pretty much the same as the one for Hysteria2 Inbound. But you don't have to create seperate clients for each inbounds. You can click the [Edit] icon in the Action sub-menu of the Clients menu and then click on [Select all] button to all or any newly created inbounds to the current client.

Export to a Vless/Hysteria2 Client App

In the Clients menu, under the Action sub-menu, click on the [QR Code] icon next to the client you want to export the config to your proxy client program. A QR code will appear on screen.

• Most computer proxy client programs will have Import feature that will scan QR code from the computer screen.
• On a smartphone, you can scan the QR code within te proxy client app running on your phone.
• Above the QR code, next to the client name, you will see 2 icons, and if you hover over them, they will display [Copy] and [Download Image].
  1. [Copy] will export a text config link to the computer's clipboard that you can either import into a proxy client running on the computer or you can save and send it to another device.
  2. [Download Image] will save an image of the QR code in PNG format, either send to another device or scan it later.
  3. By clicking on the QR code itself will also export a copy of the text config to the clipboard.
• If you have multiple inbounds attached to a client, you can expand and collap the QR codes for each inbounds by click on [>] and [v] arrow icons to see the other inbound QR codes.