A blocked node usually isn't down to one cause. Combining the points below noticeably lowers the odds of being detected and blocked.
Protocol and disguise
- Prefer VLESS + REALITY or Trojan so traffic looks like ordinary HTTPS.
- Avoid bare VMess / SS — at least wrap it in TLS or obfuscation.
Ports and IPs
- Use common HTTPS ports like
443; obscure ports make you stand out. - Protect a clean IP: don't use it for mass scanning, spam or other high-risk activity that gets it flagged.
- Keep a spare IP / domain ready so you can switch quickly when blocked.
Usage habits
- Don't publicly share a self-hosted node — the wider it's shared, the faster it's noticed.
- Ease off during heavy-traffic windows (e.g. concentrated late-night downloads); an abnormal traffic pattern is itself a signature.
Keep fallbacks
Don't put all your eggs in one basket: a primary REALITY line plus a Hysteria2 or CDN backup means one line getting blocked doesn't drop you to zero.
There's no absolutely block-proof setup — only combinations that are “more costly to block and faster to recover”. The essence of resistance is making your traffic as unremarkable as possible.