oldcatY

bash -c "$(curl -L https://github.com/XTLS/Xray-install/raw/main/install-release.sh)" @ install --beta

curl -Lo /usr/local/etc/xray/config.json https://raw.githubusercontent.com/chika0801/Xray-examples/main/VLESS-XTLS-uTLS-REALITY/config_server.json

systemctl restart xray && sleep 0.2 && systemctl status xray

{
    "log": {
        "loglevel": "warning"
    },
    "routing": {
        "domainStrategy": "IPIfNonMatch",
        "rules": [
            {
                "type": "field",
                "ip": [
                    "geoip:cn"
                ],
                "outboundTag": "block"
            }
        ]
    },
    "inbounds": [
        {
            "listen": "0.0.0.0",
            "port": 443,
            "protocol": "vless",
            "settings": {
                "clients": [
                    {
                        "id": "chika", // Execute xray uuid generation, or a string of 1-30 bytes
                        "flow": "xtls-rprx-vision"
                    }
                ],
                "decryption": "none"
            },
            "streamSettings": {
                "network": "tcp",
                "security": "reality",
                "realitySettings": {
                    "show": false, // If true, output debug information
                    "dest": "itunes.apple.com:443", // Minimum standard for target websites: foreign websites, support TLSv1.3, X25519, and H2, not for domain redirection (the main domain may be used for redirection to www)
                    "xver": 0,
                    "serverNames": [ // List of serverNames available to clients, * wildcard is not supported for now
                        "itunes.apple.com", // Execute xray tls ping www.lovelive-anime.jp, display Pinging with SNI, handshake succeeded, Allowed domains:***, fill in the value of Allowed domains
                    ],
                    "privateKey": "2KZ4uouMKgI8nR-LDJNP1_MHisCJOmKGj9jUjZLncVU", // Execute xray x25519 generation, fill in the value of "Private key"
                    "shortIds": [ // List of shortIds available to clients, used to distinguish different clients
                        "", // If this item exists, the client shortId can be empty
                        "a1", // 0 to f, length is a multiple of 2, maximum length is 16, or execute openssl rand -hex 8 to generate
                        "bc19",
                        "b2da06",
                        "2d940fe6",
                        "b85e293fa1",
                        "4a9f72b5c803",
                        "19f70b462cea5d",
                        "6ba85179e30d4fc2"
                    ]
                }
            },
            "sniffing": {
                "enabled": true,
                "destOverride": [
                    "http",
                    "tls"
                ]
            }
        }
    ],
    "outbounds": [
        {
            "protocol": "freedom",
            "tag": "direct"
        },
        {
            "protocol": "blackhole",
            "tag": "block"
        }
    ],
    "policy": {
        "levels": {
            "0": {
                "handshake": 2,
                "connIdle": 120
            }
        }
    }
}

- {name: VLess.XTLS.uTLS.Reality, server: server_ip or domain, port: 443, type: vless, uuid: same as above, tls: true, udp: true, flow: xtls-rprx-vision, servername: itunes.apple.com, reality-opts: {public-key: YyZo1wIsp71MAi-wyrCfQjYF72Rbs5CdDPtsD1OhBnM}, client-fingerprint: chrome}