Sharing port 443 between a real website and a VLESS+Reality tunnel
A real public website and a VLESS+Reality tunnel on the same machine, the same address, the same TCP port. DPI cannot tell them apart, because neither of them is lying.
Networking
Public services from a residential line, without publishing the home IP
A tiny VPS, a WireGuard tunnel, and an OPNsense at home. The architecture that lets a residential IP host public services without ever being the public IP.