Nginx to Xray vs Xray to Nginx SSL termination

[TheLordOfTheKings]

Hi guys,
I've been trying to figure out which reverse proxying method makes fingerprinting the Xray's traffic harder and provides obscure characteristics.

Method1:
Xray listens to 443 and I do SSL termination on Xray's side and then send the traffic to Nginx, like this example.

Method2:
Nginx, which listens to 443, does the SSL termination and passes the traffic to Xray's inbounds, like this.

Thanks a lot for all your efforts. @RPRX @yuhan6665

[Crowbar9319]

Method 2 (Nginx → Xray)