Xray VLESS + REALITY Configuration Guide: TCP 443 Shared with an HTTPS Site
1. What the pieces are, and the problem they solve None of sections 2 to 11 makes sense without four ideas underneath it: a tunnel, the TLS handshake a filter reads, the protocol carried inside that handshake, and the way a server can prove who it is without owning a certificate. This section covers those four ideas, then explains why the parts are arranged this way. 1.1 The problem Every network you join decides what its users may reach. Hotel and airport wifi, mobile carriers and office firewalls usually allow one thing: HTTPS on TCP 443 to ordinary web servers, because blocking it breaks every website. Other ports are fair game for a block. ...