inferno1978/vless-ultimate-installer

VLESS Ultimate Installer is a Russian-language Python project that automates setting up a VLESS proxy server on a Linux VPS, intended as a personal anti-censorship tunnel. VLESS is the protocol used by the Xray-core proxy, and the installer covers both the REALITY variant over TCP and an xHTTP over TLS variant. The README targets Ubuntu 20.04, 22.04, or 24.04 and Debian 11, 12, or 13, requires Python 3.10 or newer, root access, and a public IP. A one-line bootstrap script downloads and runs an installer from the repository, or the user can clone the repo to /opt/vless-ultimate and run main.py manually. The single entry point opens an interactive menu, and CLI flags such as --status, --scheduled-backup, and --switch-mode-a or --switch-mode-b are also available. The installer supports three deployment modes. Mode A is a single VPS that the client connects to directly. Mode B is a cascade where the client first reaches an entry VPS inside Russia, which then forwards to a foreign exit VPS over an AmneziaWG (AWG 2.0) tunnel. Mode B Multi extends this to several exit nodes with built-in balancing, up to ten. Around this it bundles a long list of features: encrypted DNS through DNSCrypt-proxy with leak tests, split tunneling using RIPE NCC data for Russian subnets, optional Cloudflare WARP in full, selective, or runet-only modes, Telegram notifications, configuration exports for Clash Meta and Sing-box clients, user management with QR codes, share links, TTL, and traffic limits, and security pieces such as AutoBan, a DPI detector, a honeypot, and SSH hardening. The repository centers on main.py, bootstrap.sh, a verify.py integrity check, and a vless_installer package whose _core.py the README estimates at around 37,000 lines, plus modules for MTProto proxying, an nginx watchdog, ipset persistence across reboot, smoke tests after each config apply, atomic Xray config apply, RIPE file age checks, and cluster operations on exit nodes. The running stack uses Xray-core for VLESS handling, nginx for TLS termination and a masking decoy site, AmneziaWG for the encrypted entry-to-exit tunnel, Certbot for Let's Encrypt certificates in the xHTTP mode, and ipset plus iptables for optional Russian-subnet ingress blocking.