# Censorship-resistant hosting
> Censorship-resistant hosting means running your own proxy or publishing endpoint on infrastructure that national filtering systems have not blocked. Incognito VPS allocates fresh IPv4 addresses verified against public block feeds, in eight jurisdictions outside the reach of the filtering states, from $4.00 per month.
**Source:** https://incognitovps.com/censorship-resistant-hosting
**Updated:** 2026-08-05

## Why a personal endpoint beats a commercial VPN

Commercial VPN endpoints are enumerable. Their address ranges are published, shared among thousands of users, and consequently blocked in bulk by any filtering system that cares. A single-user endpoint on an address nobody else uses does not appear on those lists, because there is no pattern to detect.

The trade-off is real and worth stating: a personal endpoint has an anonymity set of one. If your adversary can already see that you rented a server, a personal endpoint tells them more than a shared VPN would. It defeats blocking, not observation.

## Protocols that currently survive deep packet inspection

The landscape moves, so treat this as a snapshot rather than a permanent ranking. As of mid-2026, VLESS with REALITY is the most durable option against active-probing systems: it borrows a real TLS handshake from a genuine third-party site, so a prober sees an ordinary connection to that site rather than a proxy.

Hysteria2 runs over QUIC with aggressive congestion control and performs well on lossy or deliberately throttled links. Shadowsocks-2022 fixed the AEAD weaknesses that made earlier versions detectable. MTProto remains useful specifically for Telegram in networks where Telegram alone is blocked.

- VLESS + REALITY — strongest against active probing; Xray-core or 3x-ui.
- Hysteria2 — QUIC-based, best throughput on throttled or lossy links.
- Shadowsocks-2022 — mature, lightweight, wide client support.
- V2Ray VMess over WebSocket + TLS — survives behind a CDN front.
- MTProto (mtg) — Telegram-specific, fake-TLS transport.
- AmneziaWG — WireGuard with obfuscated handshake for WG-blocking networks.

## Address hygiene matters more than the protocol

A fresh address will eventually be detected and blocked if a filtering system is actively looking. When that happens the protocol is not the fix; the address is. Every plan includes free address rotation when an address becomes unreachable from a filtered region, and there is no limit on how often you can ask.

Our recommendation for a filtered network is the SCOUT plan at $4.00/month in Moldova or Bulgaria — the cheapest usable endpoint we sell, and both locations sit outside the political reach of the states running the filtering.


## Frequently asked questions

### Which protocol works best in China?

VLESS with REALITY, currently. It presents a genuine TLS handshake borrowed from a real third-party site, so active probing sees an ordinary connection. Keep a Hysteria2 endpoint as a fallback — the landscape changes.

### Will my IP get blocked?

Eventually, if a filtering system is actively looking for it. Address rotation is free and unlimited on every plan. Rotation is a maintenance task in this use case, not a failure.

### Which location should I choose?

For China, Moldova or the Netherlands give the best routing. For Iran, Bulgaria or Romania. For Russia, Moldova. Latency to the filtered region matters more than legal posture for this use case.

### Is running a proxy legal?

In our jurisdictions, yes — operating a proxy server is lawful in all eight. The law of the country you are connecting from is a separate question and one you should look into yourself.


---

Incognito VPS — Offshore VPS, bare-metal and GPU servers in 16 locations, 8 of them chosen for their legal properties. No identity required, crypto-only payment, deployed in 55 seconds.
Operating since 2020. 16 locations, 8 of them privacy jurisdictions. AS204287.
Payment: BTC, XMR, ETH, USDT, USDC, LTC, TRX, SOL, BNB, DOGE, TON, DAI. No identity verification at any point.
Catalogue: https://incognitovps.com/pricing.md · API: https://incognitovps.com/openapi.json · Index: https://incognitovps.com/llms.txt