Censorship bypass: VLESS+REALITY, sing-box, and a CDN fallback
The full writeup: one VPS sharing port 443 between a real site and a VLESS+REALITY tunnel, decoy validation, the nginx stream SNI mux, a Cloudflare-fronted CDN fallback, full sing-box client setup with TUN and mux, …