Xray REALITY is a transport and authentication mechanism used with the Xray platform to make protected connections more resistant to traffic filtering and detection. It is designed to make a connection resemble legitimate TLS traffic to a real website, making it more difficult for network operators and DPI systems to identify the connection as a proxy or VPN tunnel.

REALITY does not simply "integrate" Xray traffic into ordinary HTTPS connections. Instead, it uses the TLS protocol and a technique known as TLS handshake imitation to make the connection appear to be associated with a legitimate TLS-enabled website. This can help Xray connections operate in networks where conventional VPN or proxy traffic is actively blocked.

REALITY also uses cryptographic keys to authenticate the connection between the client and server. Once the required keys and parameters have been generated and configured, connecting on the client side can be relatively straightforward, as the user does not need to manage certificates for the decoy website.

Back to the section