assyoucandy/telemt-server-guide

This repository is a step-by-step installation guide (written in Russian) for running telemt on an Ubuntu server. Telemt is a proxy tool built in Rust that lets Telegram users connect through an intermediary server when direct access is blocked. The guide is aimed at people who want to set up their own private proxy rather than rely on public ones. The guide explains why a standard proxy setup is no longer sufficient in Russia as of June 2026: internet filtering equipment (referred to as TSPU) was upgraded to detect Telegram proxy traffic not just by protocol signature but also by TLS handshake patterns and TCP packet sizes. The guide walks through three layers of protection designed to make the proxy traffic look like ordinary HTTPS web traffic: genuine TLS fronting (where the server presents a real certificate from a masking domain), a TCP segment size setting called client_mss, and a firewall rule that limits how often a single IP address can attempt new connections per second. The setup process is broken into ten sections covering: what telemt does and why it is needed, preparing the Ubuntu system, installing the binary, generating secrets, writing configuration files for multiple proxy instances, registering each instance as a systemd service (so they start automatically), configuring the UFW firewall, starting and verifying the services, generating client connection links, and ongoing maintenance and updates. Requirements are Ubuntu 20.04 or newer, root access, and telemt version 3.4.15 or later. A separate mini-guide within the repository addresses a specific problem on iOS: after the Telegram app is suspended in the background, it sometimes fails to reconnect to the proxy because the server holds a stale connection open. The fix adjusts TCP keepalive settings at the system level so the server detects and closes dead connections quickly, forcing the iOS client to reconnect cleanly.