Technical — OxeraVPN Blog

← All articles

29 articles in the Technical category.

• How to Use GitHub in China — 2026 Developer Guide
  GitHub is periodically blocked in China. Developers — here's how to use git, push code, and access repositories from China.
• What Is a VPN Kill Switch and Do You Need One in China?
  A kill switch blocks all internet traffic if your VPN drops — essential protection in China. Here's how it works and why you need it.
• VPN Split Tunneling Explained — How to Use It in China
  Split tunneling lets you route some apps through a VPN and others directly. Here's how to use it to optimize speed in China.
• WireGuard vs VLESS in China — Which Protocol Wins?
  WireGuard is great globally but gets blocked in China. VLESS + Reality is purpose-built for the GFW. Here's the full comparison.
• Shadowsocks vs VLESS — The Evolution of China Proxy Tools
  Shadowsocks was the first tool to beat the GFW at scale. VLESS builds on its lessons. Here's the full evolution of China proxy tools.
• How China's Great Firewall Works in 2026 — Technical Deep Dive
  The GFW uses DPI, IP blocking, DNS poisoning and ML fingerprinting. Here's exactly how it detects and blocks VPNs — and why VLESS + Reality evades it.
• XTLS Vision Explained — Why It's Faster Than Plain TLS for China VPNs
  XTLS Vision is the speed flow used inside VLESS that skips redundant TLS encryption on already-encrypted traffic. Here's the technical breakdown.
• Trojan vs VLESS in China — Which Protocol Wins in 2026?
  Trojan was the gold standard for China VPN traffic for years. VLESS + Reality changed the math. Here's the head-to-head for 2026.
• NaïveProxy Deep Dive — How It Hides VPN Traffic Inside Real Chrome
  NaïveProxy uses an unmodified Chrome network stack to make VPN traffic indistinguishable from regular HTTPS browsing. Here's how it works.
• ShadowTLS Explained — How It Hides Shadowsocks Inside Real TLS
  ShadowTLS wraps Shadowsocks inside a real TLS handshake to a real upstream server. Here's why it's so hard to detect, with a 2026 GFW resilience check.
• TUIC Protocol Explained — QUIC-Based Stealth Tunnel for China in 2026
  TUIC is a lightweight QUIC tunnel that's seen heavy use in China after Hysteria. Here's the technical breakdown and 2026 GFW resilience.
• MASQUE Protocol Explained — The Future of Stealth VPNs in 2026
  MASQUE tunnels arbitrary traffic over HTTP/3 QUIC. iCloud Private Relay and Cloudflare WARP both rely on it. Here's the explainer for VPN users.
• Hysteria2 Protocol Explained — The QUIC-Based Stealth Tunnel
  Hysteria2 uses QUIC to disguise VPN traffic as normal video streaming. Here's how it works and why it's nearly impossible to detect.
• Why Most VPNs Fail in China — The Technical Reality
  85% of VPN services don't work from inside China. Here's the technical breakdown of why and what successful providers do differently.
• Great Firewall Updates 2026 — New Blocking Techniques Explained
  China's GFW added TLS fingerprinting and AI-powered detection in 2026. Here's what's new and how VLESS + Reality still evades it.
• What Is VLESS + Reality Protocol? Why It Beats Traditional VPNs
  VLESS + Reality makes VPN traffic look identical to normal HTTPS — here's how it works and why it's the best choice for bypassing China's Great Firewall.
• Domain Fronting in 2026 — What Still Works After CDN Crackdowns
  Cloudflare, Google and Fastly all officially banned domain fronting years ago — but variants survive. Here's what works in 2026 and what to use instead.
• QUIC vs TCP for VPN — 2026 Performance Benchmarks
  QUIC promises lower latency for VPNs but UDP gets throttled in many networks. Here's the 2026 benchmark across China, hotel WiFi and mobile carriers.
• WireGuard Obfuscation in 2026 — Five Techniques That Actually Work
  Vanilla WireGuard's UDP fingerprint is trivially detectable. Here are five tested obfuscation strategies — udp2raw, AmneziaWG, wstunnel, phantun and more — for 2026.
• SNI Proxy Setup — TLS-SNI-Based Routing for Multi-Domain VPS
  SNI Proxy lets you host multiple TLS sites behind one IP without decryption. Here's the full 2026 setup including HSTS and ACME chaining.
• Cloak Protocol Explained — Pluggable Transport for OpenVPN/Shadowsocks
  Cloak makes VPN traffic look like plain HTTPS to fool DPI. Here's how it works, deployment best practices and 2026 status against the GFW.
• 3X-UI vs X-UI — Which Panel for a Personal VPS in 2026?
  3X-UI is a fork of X-UI with newer protocols and a cleaner UI. Here's a feature-by-feature comparison and migration guide for 2026.
• Marzban Panel Setup — 2026 Self-Host Guide
  Marzban is the leading multi-user Xray panel for self-hosters. Here's the verified 2026 setup walkthrough including TLS, telegram bot and metrics.
• Mihomo (Clash Meta) Guide — The 2026 Power-User Setup
  Mihomo is the actively maintained fork of Clash with full support for modern protocols. Here's the complete 2026 configuration and rules guide.
• sing-box vs Xray in 2026 — Which Universal Proxy Core Wins?
  sing-box and Xray both implement modern proxy stacks but differ in architecture, performance and config style. Here's the head-to-head review for 2026.
• AmneziaWG Explained — Obfuscated WireGuard for Censored Networks
  AmneziaWG modifies WireGuard handshakes to evade DPI. Here's how it works, when to use it, and how it compares to vanilla WireGuard in 2026.
• The Great Firewall of China — How It Works (2026 Guide)
  A deep dive into how China's Great Firewall blocks content using DNS poisoning, IP blocking, deep packet inspection, and more.
• V2Ray vs OpenVPN for China — Which Is Better?
  OpenVPN gets blocked by the GFW within hours. V2Ray (and its successor Xray) remain one of the most effective protocols for China.
• V2RayNG vs NekoBox on Android — Which to Use in China (2026)
  V2RayNG is the legacy default. NekoBox is the modern challenger. Here's a deep comparison for Android users in China.