X-Proxy: The Complete Beginner’s Guide

7 Advanced X-Proxy Configuration Tips

1. Run X-Proxy in WAN/bridge mode for transparent routing

• Why: Replaces modem-router to reduce double NAT and improve throughput for mobile/UDP proxies.
• How: Put your ISP modem in bridge/IP-pass-through mode, then enable WAN settings on X-Proxy (set interface, VLAN/MTU, PPPoE or credentials as provided by ISP). Enable NAT only for published proxy ports.

2. Tune MTU and MSS to avoid fragmentation

• Why: Mobile dongles and VPN/QUIC paths often require smaller MTU to prevent packet loss and retransmits.
• How: Lower system MTU (e.g., 1400–1450) on WAN and USB interface; set TCP MSS clamping to MTU-40 to ensure reliable connections.

3. Use VLANs and interface binding for traffic segregation

• Why: Keeps management, proxy, and upstream traffic isolated (security, QoS, routing).
• How: Create VLANs for dongles vs. public-facing proxy ports; bind X-Proxy services to specific virtual interfaces or IPs so each proxy instance uses the intended SIM/dongle.

4. Configure QUIC/HTTP3 and UDP proxy fallback

• Why: QUIC/HTTP3 can improve latency and evade detection, but not all targets support it.
• How: Enable QUIC/HTTP3 support where available and add a deterministic fallback to TCP/HTTPS or UDP proxy mode. Monitor success rates and route per-target.

5. Harden authentication and access controls

• Why: Prevents unauthorized use and abuse of proxy endpoints.
• How: Enable token or IP-based authentication, restrict management panel to LAN or VPN, enforce strong admin passwords, rotate API keys, and rate-limit per-client connections.

6. Optimize dongle and USB hub power/latency settings

• Why: USB hubs and low power can cause dongle disconnects and high error rates.
• How: Use a powered USB hub, set autosuspend off for USB serial devices, increase USB polling where supported, and monitor signal strength — move SIMs/dongles to improve cellular reception.

7. Implement logging, metrics, and automated health checks

• Why: Detect failures, SIM exhaustion, routing issues, and performance regressions quickly.
• How: Export X-Proxy logs and metrics (connection success, error rates, bandwidth per SIM) to a monitoring system; add health-check scripts that restart failing dongle interfaces or failover traffic to spare SIMs.

If you want, I can convert these into step-by-step CLI commands or provide example config snippets for a specific X-Proxy version.