How to cut VPN connection speed from the provider or Roskomnadzor and restore normal operation?
I’m using VPN on a rented VPS (cloud4box hosting) with configuration through 3x-UI. Everything worked stably before, but two days ago the connection speed dropped sharply. The connection establishes, but the speed is so low that it’s only enough for Telegram, while it’s impossible to open websites in a browser.
I tried to solve the problem by configuring SNI for Reality according to the guide (https://wiki.yukikras.net/ru/selfsni), rented a DNS and domain, but it didn’t help.
Please advise what other solutions there are for the problem of low VPN connection speed? What settings or alternative methods can help bypass restrictions from the provider or Roskomnadzor?
Your VPN speed issues can be resolved by configuring the VLESS protocol with Reality, using traffic obfuscation, changing ports and servers, and applying DNS obfuscation to bypass RKN and provider restrictions.
Table of Contents
- Basic reasons for slow VPN speeds
- Setting up VLESS with Reality to bypass blocks
- Methods to speed up VPN connection
- Alternative protocols and settings
- Technical solutions to bypass restrictions
- Practical recommendations and tips
Basic reasons for slow VPN speeds
Slow VPN connection speeds in Russia are most often caused by three main factors:
1. RKN blocking and deep packet inspection (DPI)
Roskomnadzor has significantly strengthened its efforts to block VPN services. Currently, almost 260 VPN services have been blocked, which is 31% more than last year’s figures [1]. RKN uses advanced DPI technologies to detect and slow down VPN traffic.
2. Internet provider restrictions
Your providers may intentionally limit VPN connection speeds by identifying traffic based on ports, protocols, and patterns [2]. Russian providers are actively implementing solutions to bypass service slowdowns, but these solutions don’t always work with VPNs.
3. Technical limitations of your VPS
Insufficient IOPS or CPU can lead to performance degradation, especially when running multiple services in parallel [3]. Transparent limits allow you to properly plan the load and avoid unexpected restrictions.
Important: When renting a cheap server in Kazakhstan, consider that there may be limitations on RAM capacity, disk speed, and support level. More expensive solutions provide guaranteed resources [4].
Setting up VLESS with Reality to bypass blocks
The VLESS protocol with Reality is one of the most effective methods for bypassing RKN blocks. It mimics regular HTTPS traffic and successfully bypasses DPI filters [5].
Basic setup steps:
1. Creating a configuration in 3x-UI
- Select the VLESS protocol
- Enable TLS and Reality
- Configure the port (non-standard ports 443, 8080, 8443 are recommended)
- Specify the domain name for SNI
2. Reality configuration
Reality is a modern protocol that masks VPN traffic as regular HTTPS traffic [6]. To configure it:
{
"type": "direct",
"tag": "reality",
"address": "your-domain.com",
"port": 443,
"network": "tcp",
"reality_settings": {
"show": false,
"dest": "your-domain.com:443",
"xver": 0,
"server_names": ["your-domain.com"],
"private_key": "your-private-key",
"min_client": "",
"max_client": "",
"max_timediff": 0,
"max_uptime": 0
}
}
3. DNS obfuscation
Configuring DNS through VPN is critically important for preventing leaks and bypassing blocks [7]. Use your VPS’s internal DNS servers:
dns:
servers:
- 1.1.1.1
- 8.8.8.8
- tcp+udp:1.1.1.1
- tcp+udp:8.8.8.8
Methods to speed up VPN connection
1. Traffic obfuscation
Obfuscation helps hide the fact that you’re using a VPN from your provider:
# For Linux/macOS
sudo apt install shadowsocks-libev ss-local -c config.json -v
Obfuscation settings:
{
"plugin": "v2ray-plugin",
"plugin_opts": "tls;host=example.com"
}
2. Changing ports and protocols
- Ports: Use non-standard ports (443, 8080, 8443)
- Protocols: Switch to faster protocols:
- VLESS (fastest)
- Trojan (good balance of speed and security)
- Shadowsocks (lightweight and fast)
3. Network optimization
- Multiplexing: Enable multiplexing to reduce latency
- Compression: Disable traffic compression (can slow things down)
- Caching: Configure DNS and HTTP caching
4. Selecting the optimal server
Choose the nearest server (Kazakhstan, Finland, Turkey) to reduce latency [8]. Enable obfuscation in client settings.
Alternative protocols and settings
1. Shadowsocks with obfuscation
Shadowsocks with v2ray-plugin provides excellent speed and bypasses blocks:
{
"method": "chacha20-ietf-poly1305",
"plugin": "v2ray-plugin",
"plugin_opts": "server;host=example.com;tls"
}
2. Trojan-GFW
Trojan effectively masks itself as HTTPS traffic:
- Uses port 443
- Requires a valid SSL/TLS certificate
- Supports multiplexing
3. Hysteria2
New protocol with aggressive obfuscation:
- Automatically switches ports
- Uses QUIC to reduce latency
- Requires minimal server resources
4. NaïveProxy
Masks traffic as Chrome traffic:
- Uses system proxy settings
- Requires installing Chrome browser on the server
- Excellent for bypassing blocks
Technical solutions to bypass restrictions
1. HomeProxy + OpenWRT
Complete bypass of blocks through VLESS-Reality and 3x-ui panel [9]. This combination provides:
- Effective DPI bypass
- Automatic port switching
- Load balancing
2. SSH tunneling
Set up SSH tunneling as a backup option:
ssh -C -N -D 1080 user@your-vps-ip
3. Connection multiplexing
Use multiplexing to combine multiple connections into one:
{
"mux": {
"enabled": true,
"concurrency": 8
}
}
4. CDN and proxy servers
Configure proxy servers through CDN to mask traffic:
- Cloudflare
- AWS CloudFront
- Google Cloud CDN
Practical recommendations and tips
1. Performance monitoring
Regularly check speed and connection parameters:
# Speed test
speedtest-cli
# Load monitoring
htop
nethogs
2. Backup solutions
Prepare several backup options:
- Different protocols (VLESS, Trojan, Shadowsocks)
- Different server locations
- Alternative ports
3. Software updates
Regularly update:
- 3x-UI panel
- Xray core
- System dependencies
4. Testing in different conditions
Test performance:
- At different times of day
- With different network loads
- Through different internet providers
5. Professional solutions
If self-setup doesn’t help, consider:
- Renting servers in Kazakhstan [4]
- Using specialized VPN services for Russia [10]
- Consulting with professional system administrators
Tip: When choosing VPS hosting, pay attention to guaranteed resources, extended security options, and additional services. More expensive solutions often provide better stability and speed [11].
Sources
- Almost 260 VPN services blocked in Russia - Interfax
- Russian providers implement solutions to bypass YouTube slowdown - Comss.ru
- TOP-12 VPS rental services for LLM - RATING (NOVEMBER 2025)
- Top-12 server rental in Kazakhstan - RATING (NOVEMBER 2025)
- VPN not working in Russia 11.07.2025 — 3 ways to restore in 2 minutes
- Which VPN works in Russia in 2025 - only working services
- DNS-over-VLESS - directing DNS traffic through xray proxy
- HomeProxy + OpenWRT: complete bypass of blocks through VLESS-Reality and 3x-ui panel - YouTube
- 3X-UI VPN | Fast & Secure Server Management Panel
- 7 Best VPN for Russia 2025: Fast Servers for Russian IP
- Top-12 anonymous hosting: rating of the best VPS servers and rental for privacy and reliability - RATING (OCTOBER 2025)
Conclusion
VPN speed problems in Russia can be solved with a systematic approach:
- Update your protocol to VLESS with Reality — this is the modern standard for bypassing blocks
- Configure traffic obfuscation — critically important for masking from your provider
- Select optimal servers — Kazakhstan, Finland, or Turkey will provide minimal latency
- Regularly update software — keep up with 3x-UI and Xray core updates
- Use multiple backup options — prepare different protocols and ports
If self-setup doesn’t yield results, consider professional solutions or renting servers with guaranteed resources. Remember that the blocking situation is constantly changing, so it’s important to be ready to quickly adjust your settings.