XPROXY

VPS Forwarding — Use Proxy from Anywhere

VPS Forwarding lets you expose your XProxy proxies to the internet through a cloud server's public IP — even if your home router doesn't support port forwarding or your upload speed is limited.

Ways to expose XProxy remotely

  • Router Port Forwarding — simplest, but requires a router that supports it and a fast upload connection.
  • Tailscale VPN — easy mesh VPN, good for personal use.
  • VPS Forwarding — most reliable and professional. This guide covers this method.

Why use VPS Forwarding?

A VPS acts as an intermediary: Customer → VPS public IP → XProxy server → mobile network.

VPS Forwarding Diagram
VPS Forwarding routes traffic from clients through the VPS public IP to the local XProxy box
  • Your router doesn't support port forwarding.
  • Your home upload speed is below 50 Mbps.
  • You want to hide your home IP address.
  • You need a static public IP without DDNS.
  • You need full UDP support for SOCKS5 proxies (gaming, QUIC, HTTP/3).
You may not need VPS Forwarding if your home router has 300+ Mbps upload and supports port forwarding, or if you want to minimize VPS costs.

Prerequisites

  • A VPS running Ubuntu (Amazon EC2, Vultr, Linode, or OVH).
  • Recommended: OVH VPS — unlimited bandwidth, 500 Mbps / 1 Gbps.
  • Choose a VPS close to your physical location for lower latency.

Security settings before you start

In the XProxy dashboard, enable all of these before proceeding to protect your proxy endpoints and dashboard from unauthorized access:

  • Dashboard User Authentication

    Dashboard User Authentication Setup
    Enable User Authentication under General Settings in your dashboard
    • Enable dashboard authentication: Activates login protection for the management dashboard.
    • Force authentication in LAN connections: Requires authentication even for devices on the same local network, preventing unauthorized internal access.

  • Proxy Authentication Settings

    Proxy Authentication Settings
    Enable proxy authentication, password auth, and LAN authentication
    • Enable proxy authentication: Requires username/password for all proxy connections.
    • Force authentication in LAN connections: Ensures LAN users must authenticate, preventing unauthorized internal usage.
All authentication options must be enabled before setting up port forwarding.

Step 1 — Prepare your VPS

SSH into your VPS as root and update the system:

bash
sudo apt update && sudo apt upgrade -y

Step 2 — Open firewall ports

Ensure ports 80 to 65550 are open. To disable the firewall temporarily:

bash
systemctl disable ufw && systemctl stop ufw

Step 3 — Connect XProxy to your VPS

Open the XProxy dashboard → General Settings → Forwarding Ports. Enter your VPS IP, SSH port (22), username (root), and password. Click Save & Test.

VPS Forwarding Setup
Configure VPS server connection settings and test the connection

Step 4 — Configure forwarding rules

  • Network Isolation (SIM Upload) — routes each SIM's traffic through its own mobile network. Enable when SIM upload speed is faster than your WAN.
  • Enable UDP for SOCKS5 — required for gaming, VoIP, QUIC, HTTP/3. Each UDP SOCKS5 connection uses ~40 MB of RAM on the VPS.
  • Starting Relay Port — base port for forwarding (default: auto). For multiple services on the same VPS, set a unique starting port (e.g. 65011) and increment by 10 per service.
    Adjust and Manage Ports in XProxy
    Configure and manage ports for multiple forwarding services

Monitoring & troubleshooting

All active forwarding ports will appear in green. If there's an issue, the port will be marked red, making it easy to identify and troubleshoot problems.

Monitoring Ports Status
Green indicates active forwarding, while red indicates connection issues
  • If UDP traffic is heavy, upgrade your VPS RAM.
  • Always choose a VPS close to your physical location for best performance.