Avoiding double encryption

[adleksey]

I have two servers connected by an encrypted tunnel. The xray's outbounds section of the first server specifies the address of the second server, which also has xray installed.

What transport (configuration) should I use to avoid double encryption and ensure that this transport isn't deprecated? I'm currently using pure VLESS (over TCP without TLS, with a fallback to the web server), but the logs indicate that I should switch to the encrypted option, because this configuration will be removed in future versions.

The reason I use an encrypted tunnel between servers is that establishing a direct TCP connection for a regular VLESS configuration is impossible due to blocking the entire TCP protocol. However, I was able to create a tunnel using a different technology.