VXVX Docs

Inbounds

ProxyInboundConfig and MultiProxyInboundConfig

Inbound settings live in ServerConfig.inbounds and ServerConfig.multiInbounds. Schema: protos/proto/vx/inbound/inbound.proto.

ProxyInboundConfig

One listener per inbound. Use when each port runs a single proxy protocol (optionally with a shared transport layer).

FieldTypeDescription
tagstringName referenced by router inboundTags
addressstringListen address; empty = all interfaces
portuint32Single port (combined with ports if both set)
portsuint32[]Ports to listen on
transportTransportConfigTLS, REALITY, WebSocket, gRPC, etc.
protocolAnyOne proxy server config (VMess, VLESS, Trojan, …)
protocolsAny[]Multiple protocols on the same listener
usersUserConfig[]Users for this inbound (see Users)

Example:

{
  "tag": "vmess",
  "ports": [10000],
  "protocol": {
    "@type": "type.googleapis.com/vx.proxy.vmess.VmessServerConfig",
    "secureEncryptionOnly": true
  }
}

Protocol @type values are documented under Proxy protocols. Transport and TLS/REALITY: Transport, Security.

MultiProxyInboundConfig

Use when one listener must accept several transports and security profiles (typical multi-protocol port behind TLS or REALITY).

FieldTypeDescription
tagstringInbound tag for routing
addressstringListen address; empty = all interfaces
portsuint32[]Listen ports
protocolsAny[]Proxy protocol configs (same Any types as above)
securityConfigsSecurity[]TLS or REALITY per SNI/domain/regex
transportProtocolsProtocol[]WebSocket, HTTP, gRPC, TCP, SplitHTTP, HTTPUpgrade
socketSocketConfigSocket-level options
usersUserConfig[]Users for all handlers on this inbound

Security (per entry in securityConfigs)

FieldDescription
tlsTlsConfig when this security block applies
realityRealityConfig when this security block applies
domainsSNI hostnames handled by this block
regularExpressionSNI regex match
alwaysUse this security for every connection

Transport protocol (per entry in transportProtocols)

FieldDescription
websocket, http, grpc, httpupgrade, splithttp, tcpTransport-specific config (oneof)
alpnMatch ALPN
sniMatch connection SNI
pathHTTP/1 path
h2Connection uses HTTP/2
alwaysUse this transport for every connection

See Transport and Security for field reference.

  • Outbounds — where routed traffic is sent
  • Router — match on inboundTags

Comments