Home

Welcome to the mtg wiki — operator-focused guides for running an mtg MTProto proxy that stays unblocked.

The README covers what mtg is and how to install it. The wiki picks up where it leaves off: how to choose where to run it, how to deploy it so DPI doesn't notice, how to tell when it's healthy, and what to do when it isn't.

Start here

• Surviving Active Probing — the threat model. Why proxies get blocked, what active probing actually does, and the deployment patterns that make mtg look like an ordinary HTTPS server. Read this first.

Deployment

• Choosing a Domain and Hosting — picking a VPS provider and a domain so your proxy doesn't fail the first DPI sniff. Covers ASN reputation, domain selection, IPv4/IPv6 trade-offs, and a verified cost table.
• SNI Router Setup — step-by-step HAProxy / nginx-stream / sslh configs that route the magic SNI to mtg and everything else to a real web server on the same port 443. Cert strategy, pitfalls, and a zero-downtime migration playbook.
• Cloudflare and CDN Deployment — when (and when not) to put a CDN in front of mtg. Cloudflare Spectrum, AWS Global Accelerator, origin allowlisting, and the layer-7 vs layer-4 distinction that rules out most "CDN" products.

Operations

• Monitoring and Diagnostics — mtg doctor, startup warnings, active-probe simulation with openssl s_client, Prometheus metrics, log-based detection, and a forensic checklist for "my proxy suddenly stopped working."
• mtg FAQ — recurring questions and errors from the issue tracker, grouped by theme. Each entry links to the source issue.

Reference

• Alternatives — honest, source-verified comparison of the three MTProto-adjacent projects. Feature matrix with file:line citations, decision tree, migration notes.

---

Found something outdated or wrong? Open an issue on 9seconds/mtg.