Gaming server set up in UDP QoS environments

[iopq]

I was able to finally set this up and it required a few pieces:

1. XHTTP3 server set up

https://github.com/XTLS/Xray-examples/blob/main/VLESS-XHTTP3-Nginx/

first you can make sure you actually set up nginx and xray correctly before continuing to the next step

on Ubuntu I had to install a newer nginx because it needs QUIC support like so:

sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring
curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor     | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null
gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
http://nginx.org/packages/mainline/ubuntu `lsb_release -cs` nginx"     | sudo tee /etc/apt/sources.list.d/nginx.list
echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n"     | sudo tee /etc/apt/preferences.d/99nginx

you can use a socket like in the sample setup or just another port like 8443

so it goes client on 443 -> | nginx 8443 -> xray

2. insert udp2raw in front of nginx so change the port to something else, like 7443

https://github.com/wangyu-/udp2raw

now udp2raw listens on port 443

you can open up tmux and run it in there

sudo ./udp2raw_amd64_hw_aes -s -l 0.0.0.0:443 -r 127.0.0.1:7443 -k "somepassword" --raw-mode faketcp --auth-mode hmac_sha1 -a --fix-gro

so it's client xray now listens on localhost:7443 in the local set up -> udp2raw 443 -> | udp2raw 7443 -> nginx 8443 -> xray

since it's QUIC it runs over UDP which can work with udp2raw which can mask traffic as TCP or ICMP even

3. (optional) insert udpspeeder behind udp2raw to compensate for packet loss in the link

https://github.com/wangyu-/UDPspeeder

./speederv2_amd64 -s -l 0.0.0.0:6443 -r 127.0.0.1:7443 -k "otherpassword" -f2:2,20:8 --mode 0 --timeout 4

then change the port of udp2raw to match

sudo ./udp2raw_amd64_hw_aes -s -l 0.0.0.0:443 -r 127.0.0.1:6443 -k "somepassword" --raw-mode faketcp --auth-mode hmac_sha1 -a --fix-gro

now you have xray 7443 -> udpspeeder 6443 -> udp2raw 443 -> | udp2raw 6443 -> udpspeeder 7443 -> nginx 8443 -> xray

4. (Linux only) if you need to set up tproxy to capture all packets for games it can be done like so:

https://serverfault.com/questions/1169137/how-do-i-send-all-tcp-and-udp-traffic-over-tproxy-without-making-a-loop

I suggest the GID setup and running udp2raw/udpspeeder as the proxy user so the packets get ignored by the tproxy rules

That way you can play even wine games that require UDP connections without appearing like you're doing anything but connecting to a website over TCP

Problems

1. REALITY is not usable in this setup because it doesn't support QUIC. I did get banned for 3 minutes which caused me to lose my stream and game connection.
2. It uses FEC so if you stream the games you need to decrease your bit rate unless you do an even more advanced set-up like a separate proxy for OBS
3. Your DNS set-up might be broken because xray is not in front, but udp2raw is. There might be a way to fix this, but I didn't wrap my head around why it's using the system resolver without it being captured by the xray