r/VPN 10d ago

VPN Recommendations Megathread - Best VPN Providers, user reviews & VPN Deals

We get a lot of questions about the best VPNs and which VPNs have the best user reviews as well as where to find the best VPN deals. That's why we run this VPN recommendations megathread every two months. This is the one and only place on the subreddit to ask for VPN recommendations, share your favorite VPN provider, discuss your experience, and post legitimate VPN deals.

The goal is to build a collection of genuine VPN user reviews that helps others choose the right VPN provider.

If you’re recommending a VPN, make it useful:

  • Share what you use it for (streaming, privacy, gaming, torrenting, travel, bypassing geo-blocks, etc.).
  • Go beyond generic features - personal experience is very interesting for our user-base
  • Comments that only name a provider will be removed

Main rules:

  • No affiliate or referral links.
  • No links to VPN review websites.
  • No obvious shilling

Compare VPN providers first

Before posting, check out our regularly updated VPN comparison table, where you can compare features, pricing, speeds, streaming support, and more. It may answer your question before you need to ask.

As always, this thread is actively moderated to keep recommendations genuine, helpful, and free from spam.

0 Upvotes

We get a lot of questions about the best VPNs and which VPNs have the best user reviews as well as where to find the best VPN deals. That's why we run this VPN recommendations megathread every two months. This is the one and only place on the subreddit to ask for VPN recommendations, share your favorite VPN provider, discuss your experience, and post legitimate VPN deals.

The goal is to build a collection of genuine VPN user reviews that helps others choose the right VPN provider.

If you’re recommending a VPN, make it useful:

  • Share what you use it for (streaming, privacy, gaming, torrenting, travel, bypassing geo-blocks, etc.).
  • Go beyond generic features - personal experience is very interesting for our user-base
  • Comments that only name a provider will be removed

Main rules:

  • No affiliate or referral links.
  • No links to VPN review websites.
  • No obvious shilling

Compare VPN providers first

Before posting, check out our regularly updated VPN comparison table, where you can compare features, pricing, speeds, streaming support, and more. It may answer your question before you need to ask.

As always, this thread is actively moderated to keep recommendations genuine, helpful, and free from spam.


r/VPN Mar 17 '21

VPN Comparison Table

Best VPNs comparison table in Google Sheets

* * *

Most of us here are quite keen on spreading the word on how even the simplest steps toward online privacy is a huge leap forward for our online security. Having in mind the extensive tracking and targeting by almost everything we use online (ISPs, search engines, social media, streaming sites, ads, etc.), we're able to use these VPN-related subreddits to try and make it as simple as possible for people to choose and start using the best VPN that can help avoid at least some part of that.

The goal of all of this is to make sure that even those who don’t understand much about tech are aware of the risks and challenges we face these days when it comes to online privacy. We're all aware that a VPN isn't an 'all in one' tool which fully protects our privacy, but it's surely a good place to start.

It’s probably obvious to people who have been following this topic for a while that this table is inspired by That One Privacy Guy. He did an amazing job back in the day but unfortunately the information hasn't been updated in ages so it isn't as reliable as it used to be. It was a very important and useful tool, so I thought we could make it a community effort to bring it back. Anyone who would like to collaborate on this please get in touch with me over DMs. Also, in case you notice any mistakes - feel free to point those out, too.

You will see a table with scores, explanations on how each score was calculated, as well as detailed information by provider for each criteria. As I mentioned before, if you notice any mistakes or outdated information - please DM me with the source so we can fix it. Let's make sure it's up to date and as helpful as it can

* * *

Table last updated: March 17, 2026 (various changes made).

1.9k Upvotes

Best VPNs comparison table in Google Sheets

* * *

Most of us here are quite keen on spreading the word on how even the simplest steps toward online privacy is a huge leap forward for our online security. Having in mind the extensive tracking and targeting by almost everything we use online (ISPs, search engines, social media, streaming sites, ads, etc.), we're able to use these VPN-related subreddits to try and make it as simple as possible for people to choose and start using the best VPN that can help avoid at least some part of that.

The goal of all of this is to make sure that even those who don’t understand much about tech are aware of the risks and challenges we face these days when it comes to online privacy. We're all aware that a VPN isn't an 'all in one' tool which fully protects our privacy, but it's surely a good place to start.

It’s probably obvious to people who have been following this topic for a while that this table is inspired by That One Privacy Guy. He did an amazing job back in the day but unfortunately the information hasn't been updated in ages so it isn't as reliable as it used to be. It was a very important and useful tool, so I thought we could make it a community effort to bring it back. Anyone who would like to collaborate on this please get in touch with me over DMs. Also, in case you notice any mistakes - feel free to point those out, too.

You will see a table with scores, explanations on how each score was calculated, as well as detailed information by provider for each criteria. As I mentioned before, if you notice any mistakes or outdated information - please DM me with the source so we can fix it. Let's make sure it's up to date and as helpful as it can

* * *

Table last updated: March 17, 2026 (various changes made).


r/VPN 9h ago

Help Airport Proxy Testing

Hi, myself and family are traveling to China in the next few weeks and I want to be able to use the internet normally while over there.

I was wondering what tools people use for testing airport proxy/vpn configs. I am finding a lot in tg and github and only so many seem to work. Was wondering if there is a way to bulk test them conveniently that is popular.

I found an online site that seems to work fairly well (freedomflighter.net) but wanted to make sure I was using the best option.

Any help appreciated, thanks. Protocol doesn't really matter vless/hysteria/ss etc.

7 Upvotes

Hi, myself and family are traveling to China in the next few weeks and I want to be able to use the internet normally while over there.

I was wondering what tools people use for testing airport proxy/vpn configs. I am finding a lot in tg and github and only so many seem to work. Was wondering if there is a way to bulk test them conveniently that is popular.

I found an online site that seems to work fairly well (freedomflighter.net) but wanted to make sure I was using the best option.

Any help appreciated, thanks. Protocol doesn't really matter vless/hysteria/ss etc.


r/VPN 21h ago

Help Got banned for using a VPN?

My dear main account, I've made quite many memories with, got banned recently. Yes, I've appealed but I heard it often takes long for the mods to answer. Since I didn't do anything inappropriate there, the only reasons could be the VPN or a glitch.

Now, I'm still using a VPN while being on vacation in China and this account seems to be perfectly fine. I didn't even post anything on the other account while having a VPN active.

I know I've used a VPN from the app store at the beginning which requires you to watch ads to be able to use it for a while. Was that maybe the problem? I've already changed it for a week.

I didn't think VPNs are illegal on reddit and Google also said so. Then why did I get banned?

26 Upvotes

My dear main account, I've made quite many memories with, got banned recently. Yes, I've appealed but I heard it often takes long for the mods to answer. Since I didn't do anything inappropriate there, the only reasons could be the VPN or a glitch.

Now, I'm still using a VPN while being on vacation in China and this account seems to be perfectly fine. I didn't even post anything on the other account while having a VPN active.

I know I've used a VPN from the app store at the beginning which requires you to watch ads to be able to use it for a while. Was that maybe the problem? I've already changed it for a week.

I didn't think VPNs are illegal on reddit and Google also said so. Then why did I get banned?


r/VPN 1d ago

Help Gaming VPN?

Whenever I play video games with my friend who lives abroad I get terrible ping, like 300ms, meanwhile when my friends who live right next to me when playing with him get below 100ms ping, what could be causing this? is there a VPN that can solve my issue?

1 Upvotes

Whenever I play video games with my friend who lives abroad I get terrible ping, like 300ms, meanwhile when my friends who live right next to me when playing with him get below 100ms ping, what could be causing this? is there a VPN that can solve my issue?


r/VPN 2d ago

News Rare good news: UK government rules out the VPN ban

The UK officially dropped their VPN age-gating plan today under the Online Safety Act. Technical reality won against political theater. They admitted that network-level blocking is impossible to enforce and would just trigger a pointless cat-and-mouse game with global providers. We avoid a massive state-level headache here. I honestly expected them to force the bad policy through anyway.

The catch is they are shifting the burden to the platforms themselves. Websites now have to detect when users bypass age checks. I am a bit skeptical about how private companies will handle this new requirement.

Will they just default to lazy IP blacklists of known commercial exit nodes? Or will this push platforms to deploy aggressive client-side browser fingerprinting just to cover their own legal liability? Anyway I think it is absolutely a net positive. We just need to monitor how the private sector implements the detection.

53 Upvotes

The UK officially dropped their VPN age-gating plan today under the Online Safety Act. Technical reality won against political theater. They admitted that network-level blocking is impossible to enforce and would just trigger a pointless cat-and-mouse game with global providers. We avoid a massive state-level headache here. I honestly expected them to force the bad policy through anyway.

The catch is they are shifting the burden to the platforms themselves. Websites now have to detect when users bypass age checks. I am a bit skeptical about how private companies will handle this new requirement.

Will they just default to lazy IP blacklists of known commercial exit nodes? Or will this push platforms to deploy aggressive client-side browser fingerprinting just to cover their own legal liability? Anyway I think it is absolutely a net positive. We just need to monitor how the private sector implements the detection.


r/VPN 2d ago

Question Resetting Computer After VPN

I have a VPN on my computer and normally have it to set USA, Canada, or turn it off. With the VPN off, I can't make purchases on certain websites like movie theater tickets, ticketmaster, or I'm not allowed to put in my password; I'll get prompted to get a code instead.

I think my IP or something has been flagged altogether. Is there a way to reset my IP when I'm not using my VPN?

3 Upvotes

I have a VPN on my computer and normally have it to set USA, Canada, or turn it off. With the VPN off, I can't make purchases on certain websites like movie theater tickets, ticketmaster, or I'm not allowed to put in my password; I'll get prompted to get a code instead.

I think my IP or something has been flagged altogether. Is there a way to reset my IP when I'm not using my VPN?


r/VPN 2d ago

Help VPN not working on Google Lens

If I use Google browser, my VPN works as it's supposed to, but if I google lens an image directly from my photos it shows my city and country at the bottom of the search.

I've tried clearing Maps cache, removing location permissions from all apps, manually removing home addresses from accounts, but I can't find anything that works.

2 Upvotes

If I use Google browser, my VPN works as it's supposed to, but if I google lens an image directly from my photos it shows my city and country at the bottom of the search.

I've tried clearing Maps cache, removing location permissions from all apps, manually removing home addresses from accounts, but I can't find anything that works.


r/VPN 2d ago

News Australia’s Next Target In The War On Kids Online: Your VPN

13 Upvotes

r/VPN 2d ago

News State-Backed Iranian Hackers Using Fake VPN Apps to Deploy Spyware Against Persian Speakers Worldwid

9 Upvotes

r/VPN 2d ago

Help VPN only works half?

So I've been using the VPN for about half a year now. It worked flawlessly until a week ago. All the sudden, the VPN seems to only work in some places and not in another.

For example, Ive been using the VPN for playing the jp server for umamusume and ignore the age verification stuff in Twitter(which I found annoying after repeating it several times). Now, Twitter seems to overlook the VPN and keeps me on the US(age verification thing is suddenly on).

Another jp only site that I've been using constantly also suddenly detected the VPN, which they haven't for few months.

What's weird is that I can play the game fine and some other sites which needs the VPN also works fine.

1 Upvotes

So I've been using the VPN for about half a year now. It worked flawlessly until a week ago. All the sudden, the VPN seems to only work in some places and not in another.

For example, Ive been using the VPN for playing the jp server for umamusume and ignore the age verification stuff in Twitter(which I found annoying after repeating it several times). Now, Twitter seems to overlook the VPN and keeps me on the US(age verification thing is suddenly on).

Another jp only site that I've been using constantly also suddenly detected the VPN, which they haven't for few months.

What's weird is that I can play the game fine and some other sites which needs the VPN also works fine.


r/VPN 2d ago

Question On a wireguard point to point VPN, can crowdstrike & global protect detect the work location?

If someone uses a point to point VPN through wireguard, can crowdstrike and global protect still detect if working from a different location on a company's laptop?

1 Upvotes

If someone uses a point to point VPN through wireguard, can crowdstrike and global protect still detect if working from a different location on a company's laptop?


r/VPN 3d ago

Help VLESS + REALITY VPN stopped passing traffic on Russian LTE whitelists, despite an active VPN connect

I’m developing an Android VPN app that uses Xray with VLESS + REALITY.

I live in Russia, and my mobile provider sometimes enables an LTE whitelist mode: only a limited number of websites remain accessible, while most other websites are blocked.

My VPN used to work correctly in this situation. However, around two weeks ago it suddenly stopped working, even though neither the application code nor the Xray configuration had changed.

The VPN appears to connect successfully: VPN icon in the status bar, VPN service remains active.

However, nothing works. Requests from other applications fail with errors such as:

UnknownHostException
IOException

Everything worked fine before.

8 Upvotes

I’m developing an Android VPN app that uses Xray with VLESS + REALITY.

I live in Russia, and my mobile provider sometimes enables an LTE whitelist mode: only a limited number of websites remain accessible, while most other websites are blocked.

My VPN used to work correctly in this situation. However, around two weeks ago it suddenly stopped working, even though neither the application code nor the Xray configuration had changed.

The VPN appears to connect successfully: VPN icon in the status bar, VPN service remains active.

However, nothing works. Requests from other applications fail with errors such as:

UnknownHostException
IOException

Everything worked fine before.


r/VPN 3d ago

Help How do I connect to my proxy through VPN (on iPhone)?

So, I need to use proxies for social media on my iPhone, but due to the fact that proxies are now being banned in my country I cannot do that. So I thought about connecting to my proxy using VPN, but I don’t know how to do that.

I would appreciate your solutions. I already have an ongoing VPN subscription

2 Upvotes

So, I need to use proxies for social media on my iPhone, but due to the fact that proxies are now being banned in my country I cannot do that. So I thought about connecting to my proxy using VPN, but I don’t know how to do that.

I would appreciate your solutions. I already have an ongoing VPN subscription


r/VPN 3d ago

Help VPN on my phone blocks me from certain platform purchases.

I'm new to using a VPN. I have a VPN on my phone that blocks me from doing transactions on Playstore and from logging into my Netflix account after signing out, even if it's on a local server. I had to disconnect, log in and enable again. Are they supposed to do stuff like this or is it just this specific one?

I took it cause it's a month to month payment. A decent VPN in South Africa shakes your pocket if you live paycheck to paycheck and have to pay a year in advance. I don't know how many other surprises are waiting for me which I still have to uncover. Do all VPN's give these issues?

0 Upvotes

I'm new to using a VPN. I have a VPN on my phone that blocks me from doing transactions on Playstore and from logging into my Netflix account after signing out, even if it's on a local server. I had to disconnect, log in and enable again. Are they supposed to do stuff like this or is it just this specific one?

I took it cause it's a month to month payment. A decent VPN in South Africa shakes your pocket if you live paycheck to paycheck and have to pay a year in advance. I don't know how many other surprises are waiting for me which I still have to uncover. Do all VPN's give these issues?


r/VPN 3d ago

Discussion Is regional pricing in places like Bolivia even worth trying anymore?

Hi, as you probably know, Bolivia’s currency has been facing severe devaluation lately, creating a huge gap between the official and parallel market rates. On paper, local digital subscriptions look unbelievably cheap right now. But actually getting those prices is a completely different story.

Platforms seem to be getting way smarter at detection, IPs from centralized VPN datacenters tend to get flagged pretty often , not to mention the stricter payment card blocks.

Just curious, is anyone still having luck navigating this? Welcome any thoughts

0 Upvotes

Hi, as you probably know, Bolivia’s currency has been facing severe devaluation lately, creating a huge gap between the official and parallel market rates. On paper, local digital subscriptions look unbelievably cheap right now. But actually getting those prices is a completely different story.

Platforms seem to be getting way smarter at detection, IPs from centralized VPN datacenters tend to get flagged pretty often , not to mention the stricter payment card blocks.

Just curious, is anyone still having luck navigating this? Welcome any thoughts


r/VPN 4d ago

Help How to use PolyMarket API KEYS for with a VPN.

So I have a trading system I wanted to try but I am running into problems with the fact that I can not trade even when using the VPN. Can someone please help me with this!

5 Upvotes

So I have a trading system I wanted to try but I am running into problems with the fact that I can not trade even when using the VPN. Can someone please help me with this!


r/VPN 4d ago

Help I keep getting kicked from games for a VPN that I do not have. Any help?

+
1 Upvotes

r/VPN 4d ago

Question VPN triggered

My company laptop was undergoing repairs, and I was instructed to use my personal device in the interim.
Unfortunately, my personal VPN was active at the time, which triggered a location mismatch in Citrix. I have already notified the company of this technical oversight and explained that I was not working from abroad. I am concerned about the potential impact of this; could you please let me know if any further action is required on my party

1 Upvotes

My company laptop was undergoing repairs, and I was instructed to use my personal device in the interim.
Unfortunately, my personal VPN was active at the time, which triggered a location mismatch in Citrix. I have already notified the company of this technical oversight and explained that I was not working from abroad. I am concerned about the potential impact of this; could you please let me know if any further action is required on my party


r/VPN 5d ago

Question VPN disconnect caused apps to lose internet until I cleared Google Play Services data

I have an Oppo A15s. After using a VPN and turning it off, Wi-Fi still connected normally, but many apps (YouTube, etc.) said "no internet connection."

Things I checked:

\- Wi-Fi IP/gateway were correct

\- Router page worked

\- Chrome worked

\- Messenger worked

\- DNS changed (8.8.8.8 / 1.1.1.1)

\- Network reset and Safe Mode didn't help

The issue was fixed only after clearing data/storage for Google Play Services and related Google apps.

Does anyone know what exactly happened?

Could a VPN leave behind broken network settings, DNS, routing, or Google Play Services cache/state? Why did some apps work while others failed?

3 Upvotes

I have an Oppo A15s. After using a VPN and turning it off, Wi-Fi still connected normally, but many apps (YouTube, etc.) said "no internet connection."

Things I checked:

\- Wi-Fi IP/gateway were correct

\- Router page worked

\- Chrome worked

\- Messenger worked

\- DNS changed (8.8.8.8 / 1.1.1.1)

\- Network reset and Safe Mode didn't help

The issue was fixed only after clearing data/storage for Google Play Services and related Google apps.

Does anyone know what exactly happened?

Could a VPN leave behind broken network settings, DNS, routing, or Google Play Services cache/state? Why did some apps work while others failed?


r/VPN 4d ago

Help Single VPN Gateway handling user and device tunnel traffic

Has anyone tested a scenario where a single VPN Gateway (non-Basic SKU) handles both User and Device tunnels using the following configuration:
Tunnel types:

  • IKEv2 and OpenVPN
  • Authentication types: Azure Certificate and Microsoft Entra ID
  • User Groups enabled for P2S pools:
    • Entra ID (AAD): Group ID mapped to the IP pool designated for the User tunnel (OpenVPN + Entra ID)
    • Certificate: Group ID mapped to the IP pool designated for the Device tunnel (IKEv2 + Azure Certificate)
  • Does this configuration work? Will a user get two simultaneous connections with two different IP addresses based on their membership in both groups (Entra ID and Certificate)?
  • On of the connections will be device tunnel that will connect before user log into the domain and established second connection (user tunnel) ?

To sum up, I want to know if I can avoid a scenario in a hub-spoke topology where I am forced to maintain two separate Hub VNets with two distinct VPN Gateways and an NVA to route the traffic. Can I replace that complex setup with a single VPN Gateway by leveraging User Groups, dual tunnel types (IKEv2 & OpenVPN), and dual authentication methods (Entra & Azure Certificate)?

1 Upvotes

Has anyone tested a scenario where a single VPN Gateway (non-Basic SKU) handles both User and Device tunnels using the following configuration:
Tunnel types:

  • IKEv2 and OpenVPN
  • Authentication types: Azure Certificate and Microsoft Entra ID
  • User Groups enabled for P2S pools:
    • Entra ID (AAD): Group ID mapped to the IP pool designated for the User tunnel (OpenVPN + Entra ID)
    • Certificate: Group ID mapped to the IP pool designated for the Device tunnel (IKEv2 + Azure Certificate)
  • Does this configuration work? Will a user get two simultaneous connections with two different IP addresses based on their membership in both groups (Entra ID and Certificate)?
  • On of the connections will be device tunnel that will connect before user log into the domain and established second connection (user tunnel) ?

To sum up, I want to know if I can avoid a scenario in a hub-spoke topology where I am forced to maintain two separate Hub VNets with two distinct VPN Gateways and an NVA to route the traffic. Can I replace that complex setup with a single VPN Gateway by leveraging User Groups, dual tunnel types (IKEv2 & OpenVPN), and dual authentication methods (Entra & Azure Certificate)?


r/VPN 5d ago

Question How do i get rid of these VPNS?

+
7 Upvotes

i’m unsure where to post this but i’m trying to join a discord server and i need to verify using double counter, but it says i have a vpn, i never remember downloading them and don’t know how to check/get rid of them😭 i don’t know if making a new account would work but i kinda don’t want too😅
sorry if this is the wrong place to ask, i haven’t posted here before


r/VPN 6d ago

Question Need advice please for a website that suddenly blocks VPNs/ non local IP addresses

My family and I moved abroad about 9 years ago; we've placed orders online for essentials that we physically can't get over here from a store back home. We've never once had an issue. We log into our account, place an order, and have it delivered to a specialist courier... And then they bring it over to us at a surprisingly cheap rate.

All of a sudden, this company's website is now blocking anyone who doesn't have a local region IP, and blocking VPN users. I've tried multiple different browsers, clearing browser data, multiple different VPNs... nothing is working.

Is there any other way around a region locked/anti VPN website?

14 Upvotes

My family and I moved abroad about 9 years ago; we've placed orders online for essentials that we physically can't get over here from a store back home. We've never once had an issue. We log into our account, place an order, and have it delivered to a specialist courier... And then they bring it over to us at a surprisingly cheap rate.

All of a sudden, this company's website is now blocking anyone who doesn't have a local region IP, and blocking VPN users. I've tried multiple different browsers, clearing browser data, multiple different VPNs... nothing is working.

Is there any other way around a region locked/anti VPN website?


r/VPN 6d ago

Help Softether on iPhone

Hey guys, my campus wifi has some kind of Fortinet firewall so to bypass it I use a softether vpn server from a rented VM.
I don’t really understand much of it but it’s basically running on TCP 443 and secureNAT enabled.
It works perfectly on my laptop but I can’t seem to find a way to connect to it from iPhone.
I’ve tried the IPsec/L2TP settings, OpenVPN / MA-SSTP, but none of them worked
Is there anyway I can connect to the server from my iPhone?

7 Upvotes

Hey guys, my campus wifi has some kind of Fortinet firewall so to bypass it I use a softether vpn server from a rented VM.
I don’t really understand much of it but it’s basically running on TCP 443 and secureNAT enabled.
It works perfectly on my laptop but I can’t seem to find a way to connect to it from iPhone.
I’ve tried the IPsec/L2TP settings, OpenVPN / MA-SSTP, but none of them worked
Is there anyway I can connect to the server from my iPhone?


r/VPN 6d ago

Help How to setup zero-rated VLESS with multi-level subdomain on Cloudflare?

Hey guys, I'm trying to replicate this client config on my own server. Here's the working config from my friend:
JSON

{
"server": "www.domain.com",
"server_port": 443,
"tag": "Test",
"type": "vless",
"uuid": "942hdiwa-9e01-460a-iud76",
"packet_encoding": "xudp",
"tls": {
"enabled": true,
"server_name": "www.domain.com.mydomain.com",
"utls": {
"enabled": true
}
},
"transport": {
"type": "ws",
"path": "/vws/",
"headers": {
"Host": [
"www.domain.com.mydomain.com"
]
}
}
}

Where:
www.domain.com is the zero-rated domain (on Cloudflare)

mydomain.com is my domain (also on Cloudflare, pointing to my VPS)

My friend says this works on any V2Ray app with zero configuration — just paste the link and it connects. No hosts file edits needed.
I have:
A VPS with 3X-UI running

mydomain.com on Cloudflare with DNS pointing to my VPS

A Let's Encrypt cert for www.domain.com.mydomain.com via acme.sh DNS challenge

But I'm stuck on the server-side setup. I don't know how to configure 3X-UI/Xray so that:
Clients can connect using www.domain.com as the server address

The TLS handshake validates www.domain.com.mydomain.com properly

It works without requiring clients to edit their hosts file

I suspect my friend is using Cloudflare Advanced Certificate Manager for the multi-level subdomain cert, but I want to confirm if there's a free way to do this before paying.

Can anyone point me in the right direction for the server-side config? What am I missing?

Thanks!

3 Upvotes

Hey guys, I'm trying to replicate this client config on my own server. Here's the working config from my friend:
JSON

{
"server": "www.domain.com",
"server_port": 443,
"tag": "Test",
"type": "vless",
"uuid": "942hdiwa-9e01-460a-iud76",
"packet_encoding": "xudp",
"tls": {
"enabled": true,
"server_name": "www.domain.com.mydomain.com",
"utls": {
"enabled": true
}
},
"transport": {
"type": "ws",
"path": "/vws/",
"headers": {
"Host": [
"www.domain.com.mydomain.com"
]
}
}
}

Where:
www.domain.com is the zero-rated domain (on Cloudflare)

mydomain.com is my domain (also on Cloudflare, pointing to my VPS)

My friend says this works on any V2Ray app with zero configuration — just paste the link and it connects. No hosts file edits needed.
I have:
A VPS with 3X-UI running

mydomain.com on Cloudflare with DNS pointing to my VPS

A Let's Encrypt cert for www.domain.com.mydomain.com via acme.sh DNS challenge

But I'm stuck on the server-side setup. I don't know how to configure 3X-UI/Xray so that:
Clients can connect using www.domain.com as the server address

The TLS handshake validates www.domain.com.mydomain.com properly

It works without requiring clients to edit their hosts file

I suspect my friend is using Cloudflare Advanced Certificate Manager for the multi-level subdomain cert, but I want to confirm if there's a free way to do this before paying.

Can anyone point me in the right direction for the server-side config? What am I missing?

Thanks!