What's the difference between V2Ray and Shadowsocks?

Both V2Ray and Shadowsocks are proxy tools, but they have different design philosophies. Shadowsocks is simple and focused, primarily providing a SOCKS5 proxy. V2Ray is a platform with high modularity, supporting more protocols (like VMess, VLESS, Trojan), and includes advanced features such as built-in routing, load balancing, and traffic obfuscation. It offers more flexible configuration and generally stronger anti-censorship capabilities.

Why is Nginx needed when configuring WebSocket+TLS?

Nginx (or another web server) plays two key roles in this setup: 1) **Frontend Proxy**: It listens on the standard port 443, handles TLS encryption/decryption, and forwards WebSocket traffic to the backend V2Ray. This makes V2Ray traffic appear as normal HTTPS website traffic. 2) **Camouflage and Fallback**: It can simultaneously host a real website or serve a default page. If a visitor is not a V2Ray client, they see a normal webpage, providing excellent camouflage.

How can I test if my V2Ray configuration is correct and working?

You can test with the following steps: 1) **Server-side**: Check service status with `systemctl status v2ray` and view logs for errors with `journalctl -u v2ray`. 2) **Network Connectivity**: Test the local proxy on the server using `curl -x socks5://127.0.0.1:your_port`. 3) **Client Connection**: After configuring the server info on the client, try accessing a website that shows your IP (like ip.sb) and verify if the displayed IP is your server's IP. 4) **Routing Test**: Access both domestic and international websites to check if traffic splitting works according to your routing rules.

V2Ray Configuration in Practice: From Basics to Advanced, Building a Stable and Reliable Proxy Environment

4/19/2026 · 3 min

V2Ray Configuration in Practice: From Basics to Advanced

V2Ray is a powerful network proxy tool renowned for its modular design, rich protocol support, and strong anti-censorship capabilities. This guide will walk you through the configuration process from basic installation to advanced setups, helping you build a stable and reliable proxy environment.

1. Basic Installation and Environment Setup

1.1 Server-Side Installation

On a Linux server, the recommended method is using the official installation script. First, connect to your server via SSH, then execute the following command:

bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh)

After installation, the main V2Ray configuration file is located at /usr/local/etc/v2ray/config.json.

1.2 Client-Side Installation

Client choice depends on your operating system.

Windows/macOS/Linux: Download the corresponding GUI client (like V2RayN, V2RayX, Qv2ray) or command-line version from V2Ray's GitHub Releases page.
Android/iOS: Use third-party apps like V2RayNG or Shadowrocket.

2. Core Protocol Configuration

The heart of V2Ray is its flexible configuration. A basic setup typically involves Inbound and Outbound settings.

2.1 Server Configuration Example

Here is a basic server configuration (config.json) using the VMess protocol:

{
  "inbounds": [{
    "port": 10086,
    "protocol": "vmess",
    "settings": {
      "clients": [
        {
          "id": "your-uuid-here", // Generate using the `uuidgen` command
          "alterId": 64
        }
      ]
    },
    "streamSettings": {
      "network": "tcp"
    }
  }],
  "outbounds": [{
    "protocol": "freedom",
    "settings": {}
  }]
}

After configuration, start the service with systemctl start [v2ray](/en/blog/deep-dive-into-v2ray-protocols-technical-evolution-and-security-considerations-from-vmess-to-xtl) and enable auto-start with systemctl enable v2ray.

2.2 Client Configuration

The client needs to configure an outbound connection pointing to the server's address, port, and UUID. In GUI clients, this is usually done via "Add Server" or "Import Configuration."

3. Advanced Configuration and Optimization

3.1 Enabling WebSocket + TLS + Web (CDN)

This is currently the most popular and resilient configuration. It transports data via the WebSocket protocol, encrypts it with TLS, and uses a web server (like Nginx/Apache) as a frontend, potentially even behind a CDN.

Key Steps:

Obtain a Domain and SSL Certificate: You can use Let's Encrypt for a free certificate.
Configure V2Ray WebSocket Inbound: Change the network in streamSettings to "ws" and set a path (e.g., "/ray").
Configure Web Server (e.g., Nginx): Add a location block in the Nginx config to reverse proxy traffic from a specific path (e.g., /ray) to V2Ray's local listening port (e.g., 127.0.0.1:10086).

3.2 Dynamic Port and Fallback

Dynamic Port functionality periodically changes the inbound port, making interference more difficult. The Fallback feature allows a single port (like 443) to handle both V2Ray WebSocket traffic and normal web service, achieving better camouflage.

3.3 Load Balancing and Routing

For users with multiple servers, you can configure Load Balancing on the client side to distribute traffic across servers, improving stability and speed. Additionally, leverage V2Ray's powerful Routing feature to implement traffic rules, such as direct connection for domestic websites and proxy for international ones.

4. Security Hardening and Best Practices

Use a Strong UUID: Avoid online UUID generators; use system commands (like uuidgen).
Regular Updates: Follow V2Ray project releases and update promptly to patch potential vulnerabilities.
Firewall Configuration: Only open necessary ports (like 80, 443) on your server's firewall.
Disable Logging: Set "log": {"access": "none", "error": "none"} in the config file to reduce disk writes and privacy exposure.
Run with Least Privilege: Create a dedicated system user to run the V2Ray service.

By following these steps, you can evolve from a simple proxy setup to a network environment equipped with advanced features, strong anti-interference, and good security. The configuration process requires patience and attention to detail, but the resulting stability and freedom are well worth the effort.