WebSocket for nginx + SoftEtherVPN

[Traxar15]

Hello every one. Help me please. I need to disguise the work of the VPN server (version - softether-vpnserver-v4.44-9807-rtm-2025.04.16-linux-x64-64bit.tar.gz | on Debian 12), so I decided to install a web server on port 443 with a fake website page so as not to arouse unnecessary suspicions because the standard output when accessing will say "Forbidden
You don't have permission to access / on this server. HTTP Server at xxx Port 443". I disabled listening on the VPN server on port 443 and hung the web server on it. I created a certificate and a configuration file for the web server with port forwarding from 443 to 5555.

/etc/nginx/sites-available/softether
conf nginx.txt (https://github.com/user-attachments/fil ... .nginx.txt)

I checked /var/log/nginx/error.log

errors.txt (https://github.com/user-attachments/fil ... errors.txt)

Chat Gpt said that it's a main trouble: upstream prematurely closed connection while reading response header from upstream. like This means that Nginx successfully connects to SoftEther on 5555, but SoftEther does not return the correct HTTP header as Nginx expects.

I would like to simulate the work of a web server, that is, for it to encrypt and decrypt data already encrypted by the VPN server, but if this is not possible to do, then it is enough for me to simply have the web server forward to port 5555. The main thing for me is for the provider to see that I am connecting to the web server on port 443 in order to simulate normal traffic. I hope that someone more experienced will help me with advice in which direction to move in order to implement this. Anyaway thanks for attention.

[solo]

Remove nginx and move your fake website to [SE]/hamcore/wwwroot/
viewtopic.php?t=64503
viewtopic.php?t=68115

[Traxar15]

Thanks for the answer, this is roughly what I was looking for, but it turns out that in such a scenario, with erroneous access to the VPN server, data leakage is possible and that the VPN server is used and the masking does not work properly?

[solo]

Look, this is as good as it gets, whereas the nginx proposition was never going to work.

[Traxar15]

anyway thank u comrade