Files
ai-xray/sni_test_results.md
2026-03-08 07:09:56 +00:00

3.5 KiB

SNI Configuration Test Results

Date: 2026-02-20 04:47 UTC Server: share.alogins.net (83.99.190.32) Protocol: VLESS + XTLS-Reality + Vision Reality dest: www.delfi.lv:443

Results

# SNI Type Conn Latency Min Latency Avg Latency P95 Latency Max Download Upload
1 www.delfi.lv Latvia news #1 OK 120ms 121ms 124ms 124ms 44.79 Mbps 33.90 Mbps
2 www.lmt.lv Latvia telecom #1 OK 130ms 133ms 136ms 136ms 50.58 Mbps 37.33 Mbps
3 www.tele2.lv Latvia telecom #2 FAIL
4 www.lsm.lv Latvia public broadcasting FAIL
5 www.inbox.lv Latvia webmail OK 120ms 121ms 124ms 124ms 45.48 Mbps 32.98 Mbps
6 e-klase.lv Latvia education OK 119ms 121ms 123ms 123ms 54.84 Mbps 29.58 Mbps
7 share.alogins.net Custom domain FAIL
8 www.microsoft.com Worldwide baseline FAIL

Why Some SNIs Failed

SNIs #3, #4, #7, #8 failed because the Reality dest is www.delfi.lv:443. When a probe or handshake arrives with a mismatched SNI (e.g. www.microsoft.com), the dest server (delfi.lv) rejects the TLS ClientHello. Only SNIs whose TLS stacks are compatible with the dest server work. This is a Reality protocol constraint: the dest domain determines which SNIs are viable.

The 4 working SNIs (www.delfi.lv, www.lmt.lv, www.inbox.lv, e-klase.lv) are all hosted behind CDN infrastructure compatible with delfi.lv's TLS responses.

To use other SNIs (e.g. www.microsoft.com), change dest to match (e.g. www.microsoft.com:443).

Best Configuration

Winner: www.delfi.lv (Latvia news #1)

  • Average latency: 121ms
  • Download: 44.79 Mbps
  • Upload: 33.90 Mbps
{
  "tag": "juris-reality",
  "protocol": "vless",
  "settings": {
    "vnext": [{
      "address": "share.alogins.net",
      "port": 443,
      "users": [{
        "id": "64522a14-54aa-4b3c-8071-8c8b17aa1f08",
        "flow": "xtls-rprx-vision",
        "encryption": "none"
      }]
    }]
  },
  "streamSettings": {
    "network": "tcp",
    "security": "reality",
    "realitySettings": {
      "fingerprint": "chrome",
      "serverName": "www.delfi.lv",
      "publicKey": "58Iqd6LuWXgvjAgo92-7KURhTp0Vj79yGF81l_iuvTw",
      "shortId": "48b4c16249ad44ff",
      "spiderX": "/"
    },
    "tcpSettings": { "header": { "type": "none" } }
  }
}

All Configurations

Individual config files are stored in configs/ directory.

  • configs/www.delfi.lv.json — SNI: www.delfi.lv
  • configs/www.lmt.lv.json — SNI: www.lmt.lv
  • configs/www.tele2.lv.json — SNI: www.tele2.lv
  • configs/www.lsm.lv.json — SNI: www.lsm.lv
  • configs/www.inbox.lv.json — SNI: www.inbox.lv
  • configs/e-klase.lv.json — SNI: e-klase.lv
  • configs/share.alogins.net.json — SNI: share.alogins.net
  • configs/www.microsoft.com.json — SNI: www.microsoft.com

Server-Side Reality Settings

"realitySettings": {
  "dest": "www.delfi.lv:443",
  "serverNames": [
    "www.delfi.lv",
    "www.lmt.lv",
    "www.tele2.lv",
    "www.lsm.lv",
    "www.inbox.lv",
    "e-klase.lv",
    "share.alogins.net",
    "www.microsoft.com"
  ],
  "privateKey": "KJfhenZvJV1kXwv4kDC8NPBtMUY0RR8lFrxsxfXfFmY",
  "shortIds": ["48b4c16249ad44ff", ""]
}