01 /Beats behavioral DPI that plain Reality can trip
Reality hides the TLS handshake, but a raw Reality-TCP tunnel is one long constant bidirectional flow that L4 behavioral analysis can flag. XHTTP splits the upload and download into separate padded HTTP request and response transactions, so the traffic pattern looks like a browser loading a site instead of a continuous tunnel.