vless+reality · active probe resistant · xray-core

Works where
VPNs are
blocked.

Your traffic looks like ordinary HTTPS to deep-packet inspection and active probes. One QR scan to connect — or one subscription URL that keeps itself current as we rotate servers.

try 1 day free →see plans

no card · 24h access · activated via telegram

bash — store4gateway
❯store4gateway connect

resolving server endpoint...

✓tls handshake on port 44312ms
✓traffic fingerprint: https
✓active probe resistance: passed
✓connected

plan: standard · 200 GB remaining

❯█

$ store4gateway --help

How it works

options
--camouflageVLESS+Reality on port 443. Traffic is classified as legitimate TLS by any DPI system or active probe. No proxy fingerprint.
--connect <key>QR code contains the full VLESS access key URI. Scan with Hiddify, v2RayTun, or import a Clash Verge profile on desktop — no manual configuration. See /install for guides.
--subscribeOne subscription URL lists every live server in the fleet and is rebuilt on each fetch. When we rotate an IP or add a location, your client picks it up on its next refresh — nothing to re-import. Hiddify also reads your remaining data and expiry from it.
--privacyBandwidth is metered for billing. Destinations, timestamps, and content are never stored or logged. Delete your account yourself from the dashboard at any time.

$ store4gateway compare --protocols

VPN vs Shadowsocks vs VLESS+Reality

VPNs fail against deep-packet inspection in Iran, Myanmar, and mainland China. VLESS+Reality defeats protocol fingerprinting by borrowing a real site's TLS certificate — probes see genuine HTTPS.

dimensionvpnshadowsocks + tlsvless+reality
passive dpidetectedlooks like httpsidentical to real https
active probingpartial (obfs servers)exposed since ~2019probe sees real website
tls certificaten/aself-signed or own domainreal cert from target site
tls fingerprintn/adetectable (not a real browser)mimics a real browser (utls)
cn/ir/mm recordblocked on std configsworks until probedresists the methods deployed today
full tunnelyes, by defaulttun mode availabletun mode available
setupapp install, one-tapqr scanqr scan or subscription url

read more: vpn vs shadowsocks vs vless+reality — which actually works? → · amnezia vpn vs store4gateway →

$ store4gateway --clients

Works with any VLESS+Reality client.

Scan the QR code from your dashboard or the Telegram bot — or import your subscription URL once and let the client keep itself up to date. No manual configuration required. All clients below are free.

Hiddifyandroid · ios · win · mac · linux

Popular in Iran. One-tap import, auto-routing, free.

v2RayTunandroid · ios · win

Lightweight VLESS client. Free on App Store and Google Play.

Clash Verge Revwin · mac · linux

Desktop, mihomo core. Download a ready-made profile from your dashboard.

Any VLESS+Reality clientany platform

Paste the access URL or scan the QR — no vendor lock-in.

full download & setup guide →

$ store4gateway plans

Plans & pricing

planpricedata / mo
starter$3/mo50 GB
standard# most popular$6/mo200 GB
pro$10/mo500 GB

# included with all plans

✓vless+reality — censorship-resistant

✓shadowsocks 2022 fallback on supported servers

✓every server in the fleet, switch anytime

✓auto-updating subscription url

✓hiddify, v2raytun, clash verge

✓unlimited devices

✓cancel anytime

dedicated ip

new

your own VPS, not shared. dedicated server provisioned in under 5 minutes.

✓VLESS+Reality or Shadowsocks 2022

✓your IP — not on any blocklist

✓Singapore · Tokyo · London · Frankfurt · Amsterdam

✓from $20/mo · pay with crypto or card

get started →

→ not sure yet? try 24 hours free via telegram — no card, auto-expires, one per account.

# refer invite a friend and you each win. When someone you refer buys any paid plan, you get 1 free month. Grab your referral link from your dashboard or the Telegram bot (/referral).

# news follow @store4gateway on Telegram for updates, new features, and tips.

$ store4gateway faq

Frequently asked questions

Q:Is there a free trial?
[+]
A:

Yes — 24 hours on the Starter plan, no card required. Open our Telegram bot and send /trial. Your access key arrives instantly. After 24 hours access is automatically revoked; no charge, nothing to cancel. One trial per account.

Q:What is VLESS+Reality and how is it different from a VPN?
[+]
A:

VLESS is an encrypted proxy protocol, not a VPN. VPNs like WireGuard and OpenVPN produce a distinctive handshake that deep-packet inspection can identify and block. VLESS with Reality TLS makes your connection indistinguishable from a legitimate HTTPS session to a real website — structurally identical to normal encrypted web traffic.

Q:Why does this work when my VPN is blocked?
[+]
A:

Firewalls block VPNs by fingerprinting their handshake signatures and blacklisting known server IP ranges. Our servers use VLESS+Reality: your connection appears as a legitimate TLS session to a real website on port 443. Active probes from the firewall receive a valid TLS response from what looks like an ordinary web server. There is no VPN handshake to detect. We also run a fleet across several countries and rotate server IPs when one gets blocked, so a blocklisted address is replaced rather than waited out.

Q:Does this use TLS camouflage? What protocol exactly?
[+]
A:

Yes. We use VLESS with Reality TLS on port 443. Reality presents the TLS certificate of a real website, so on the wire your session closely resembles ordinary HTTPS traffic to that site. Your access key URL configures the full chain automatically from the QR code. No manual setup.

Q:Which app do I use?
[+]
A:

On mobile we recommend Hiddify (all platforms, free, popular in Iran) or v2RayTun (Android, iOS, Windows, free). On Windows, macOS, or Linux you can also use Clash Verge Rev — your dashboard generates a ready-to-import profile for it. Any client that supports VLESS+Reality will work, but we only officially test against Hiddify, v2RayTun, and Clash Verge. See store4gateway.com/install for step-by-step guides.

Q:Do I have to re-import my key when a server changes?
[+]
A:

No. Alongside the QR code you get a personal subscription URL. Hiddify, v2RayTun, and other clients refresh it on their own schedule, and we rebuild the list from the live fleet on every request — so rotated IPs and newly added locations reach you automatically. Hiddify also displays your remaining data and expiry date from it. Get the URL from your dashboard or by sending /subscribe to the Telegram bot.

Q:Which protocols do I get?
[+]
A:

VLESS+Reality is the default and what we recommend everywhere. On supported servers your dashboard also exposes a Shadowsocks 2022 key on the same port, which is useful for clients like ShadowRocket that do not speak VLESS. Both point at the same account and share your data cap.

Q:What happens if I hit my data cap?
[+]
A:

Your access is suspended for the rest of the billing cycle. No overage charges, ever.

Q:Do you have a referral program?
[+]
A:

Yes. Share your personal referral link — when someone signs up through it and buys any paid plan, you earn 1 free month, automatically credited to your account. There is no limit on how many friends you can refer. Get your link from your dashboard or by sending /referral to our Telegram bot.

Q:Do you keep logs?
[+]
A:

We log bandwidth counts for billing. We do not log destinations, timestamps, or content. No browsing history is stored. Analytics are self-hosted and cookieless, and you can erase your account yourself from the dashboard. The full detail is on our privacy page at store4gateway.com/privacy.

Q:Can I pay with crypto?
[+]
A:

Yes. Bitcoin Lightning (BTC-LN), USDT-TRC20 (Tron), USDC on Base (Coinbase L2), and USDC on Solana (SPL). We do not currently accept on-chain BTC, ETH, or other tokens.

Store4Gateway — Works where VPNs are blocked