A small personal VPN that works from mainland China: VLESS + XTLS-Vision + REALITY (TCP 443) via Xray, plus Hysteria2 (UDP 443) via sing-box, on a $5/month AWS Lightsail instance. Tested October 2026 with Xray 26.3.27, sing-box 1.14.3, Ubuntu 24.04 and v2RayTun on Android.
Placeholders used below: <REGION>, <SERVER_IP>, <UUID>, <PRIVATE_KEY>, <PUBLIC_KEY>, <SHORT_ID>, <HY2_PASSWORD>, <OBFS_PASSWORD>, <CERT_PIN>.
Lessons learned: