NeuroAgent

How to Speed Up VPN Connection and Bypass RKN Blockades

Solving VPN speed issues in Russia: configuring VLESS with Reality, traffic obfuscation, port changes, and bypassing provider restrictions.

Question

How to cut VPN connection speed from the provider or Roskomnadzor and restore normal operation?

I’m using VPN on a rented VPS (cloud4box hosting) with configuration through 3x-UI. Everything worked stably before, but two days ago the connection speed dropped sharply. The connection establishes, but the speed is so low that it’s only enough for Telegram, while it’s impossible to open websites in a browser.

I tried to solve the problem by configuring SNI for Reality according to the guide (https://wiki.yukikras.net/ru/selfsni), rented a DNS and domain, but it didn’t help.

Please advise what other solutions there are for the problem of low VPN connection speed? What settings or alternative methods can help bypass restrictions from the provider or Roskomnadzor?

NeuroAgent

Your VPN speed issues can be resolved by configuring the VLESS protocol with Reality, using traffic obfuscation, changing ports and servers, and applying DNS obfuscation to bypass RKN and provider restrictions.

Table of Contents


Basic reasons for slow VPN speeds

Slow VPN connection speeds in Russia are most often caused by three main factors:

1. RKN blocking and deep packet inspection (DPI)
Roskomnadzor has significantly strengthened its efforts to block VPN services. Currently, almost 260 VPN services have been blocked, which is 31% more than last year’s figures [1]. RKN uses advanced DPI technologies to detect and slow down VPN traffic.

2. Internet provider restrictions
Your providers may intentionally limit VPN connection speeds by identifying traffic based on ports, protocols, and patterns [2]. Russian providers are actively implementing solutions to bypass service slowdowns, but these solutions don’t always work with VPNs.

3. Technical limitations of your VPS
Insufficient IOPS or CPU can lead to performance degradation, especially when running multiple services in parallel [3]. Transparent limits allow you to properly plan the load and avoid unexpected restrictions.

Important: When renting a cheap server in Kazakhstan, consider that there may be limitations on RAM capacity, disk speed, and support level. More expensive solutions provide guaranteed resources [4].


Setting up VLESS with Reality to bypass blocks

The VLESS protocol with Reality is one of the most effective methods for bypassing RKN blocks. It mimics regular HTTPS traffic and successfully bypasses DPI filters [5].

Basic setup steps:

1. Creating a configuration in 3x-UI

  • Select the VLESS protocol
  • Enable TLS and Reality
  • Configure the port (non-standard ports 443, 8080, 8443 are recommended)
  • Specify the domain name for SNI

2. Reality configuration
Reality is a modern protocol that masks VPN traffic as regular HTTPS traffic [6]. To configure it:

json
{
  "type": "direct",
  "tag": "reality",
  "address": "your-domain.com",
  "port": 443,
  "network": "tcp",
  "reality_settings": {
    "show": false,
    "dest": "your-domain.com:443",
    "xver": 0,
    "server_names": ["your-domain.com"],
    "private_key": "your-private-key",
    "min_client": "",
    "max_client": "",
    "max_timediff": 0,
    "max_uptime": 0
  }
}

3. DNS obfuscation
Configuring DNS through VPN is critically important for preventing leaks and bypassing blocks [7]. Use your VPS’s internal DNS servers:

dns:
  servers:
    - 1.1.1.1
    - 8.8.8.8
    - tcp+udp:1.1.1.1
    - tcp+udp:8.8.8.8

Methods to speed up VPN connection

1. Traffic obfuscation

Obfuscation helps hide the fact that you’re using a VPN from your provider:

bash
# For Linux/macOS
sudo apt install shadowsocks-libev ss-local -c config.json -v

Obfuscation settings:

json
{
  "plugin": "v2ray-plugin",
  "plugin_opts": "tls;host=example.com"
}

2. Changing ports and protocols

  • Ports: Use non-standard ports (443, 8080, 8443)
  • Protocols: Switch to faster protocols:
    • VLESS (fastest)
    • Trojan (good balance of speed and security)
    • Shadowsocks (lightweight and fast)

3. Network optimization

  • Multiplexing: Enable multiplexing to reduce latency
  • Compression: Disable traffic compression (can slow things down)
  • Caching: Configure DNS and HTTP caching

4. Selecting the optimal server

Choose the nearest server (Kazakhstan, Finland, Turkey) to reduce latency [8]. Enable obfuscation in client settings.


Alternative protocols and settings

1. Shadowsocks with obfuscation

Shadowsocks with v2ray-plugin provides excellent speed and bypasses blocks:

json
{
  "method": "chacha20-ietf-poly1305",
  "plugin": "v2ray-plugin",
  "plugin_opts": "server;host=example.com;tls"
}

2. Trojan-GFW

Trojan effectively masks itself as HTTPS traffic:

  • Uses port 443
  • Requires a valid SSL/TLS certificate
  • Supports multiplexing

3. Hysteria2

New protocol with aggressive obfuscation:

  • Automatically switches ports
  • Uses QUIC to reduce latency
  • Requires minimal server resources

4. NaïveProxy

Masks traffic as Chrome traffic:

  • Uses system proxy settings
  • Requires installing Chrome browser on the server
  • Excellent for bypassing blocks

Technical solutions to bypass restrictions

1. HomeProxy + OpenWRT

Complete bypass of blocks through VLESS-Reality and 3x-ui panel [9]. This combination provides:

  • Effective DPI bypass
  • Automatic port switching
  • Load balancing

2. SSH tunneling

Set up SSH tunneling as a backup option:

bash
ssh -C -N -D 1080 user@your-vps-ip

3. Connection multiplexing

Use multiplexing to combine multiple connections into one:

json
{
  "mux": {
    "enabled": true,
    "concurrency": 8
  }
}

4. CDN and proxy servers

Configure proxy servers through CDN to mask traffic:

  • Cloudflare
  • AWS CloudFront
  • Google Cloud CDN

Practical recommendations and tips

1. Performance monitoring

Regularly check speed and connection parameters:

bash
# Speed test
speedtest-cli

# Load monitoring
htop
nethogs

2. Backup solutions

Prepare several backup options:

  • Different protocols (VLESS, Trojan, Shadowsocks)
  • Different server locations
  • Alternative ports

3. Software updates

Regularly update:

  • 3x-UI panel
  • Xray core
  • System dependencies

4. Testing in different conditions

Test performance:

  • At different times of day
  • With different network loads
  • Through different internet providers

5. Professional solutions

If self-setup doesn’t help, consider:

  • Renting servers in Kazakhstan [4]
  • Using specialized VPN services for Russia [10]
  • Consulting with professional system administrators

Tip: When choosing VPS hosting, pay attention to guaranteed resources, extended security options, and additional services. More expensive solutions often provide better stability and speed [11].


Sources

  1. Almost 260 VPN services blocked in Russia - Interfax
  2. Russian providers implement solutions to bypass YouTube slowdown - Comss.ru
  3. TOP-12 VPS rental services for LLM - RATING (NOVEMBER 2025)
  4. Top-12 server rental in Kazakhstan - RATING (NOVEMBER 2025)
  5. VPN not working in Russia 11.07.2025 — 3 ways to restore in 2 minutes
  6. Which VPN works in Russia in 2025 - only working services
  7. DNS-over-VLESS - directing DNS traffic through xray proxy
  8. HomeProxy + OpenWRT: complete bypass of blocks through VLESS-Reality and 3x-ui panel - YouTube
  9. 3X-UI VPN | Fast & Secure Server Management Panel
  10. 7 Best VPN for Russia 2025: Fast Servers for Russian IP
  11. Top-12 anonymous hosting: rating of the best VPS servers and rental for privacy and reliability - RATING (OCTOBER 2025)

Conclusion

VPN speed problems in Russia can be solved with a systematic approach:

  1. Update your protocol to VLESS with Reality — this is the modern standard for bypassing blocks
  2. Configure traffic obfuscation — critically important for masking from your provider
  3. Select optimal servers — Kazakhstan, Finland, or Turkey will provide minimal latency
  4. Regularly update software — keep up with 3x-UI and Xray core updates
  5. Use multiple backup options — prepare different protocols and ports

If self-setup doesn’t yield results, consider professional solutions or renting servers with guaranteed resources. Remember that the blocking situation is constantly changing, so it’s important to be ready to quickly adjust your settings.