Hysteria2
Hysteria2ServerConfig and Hysteria2ClientConfig
Proto: protos/proto/vx/proxy/hysteria/hysteria.proto
Hysteria2 runs over QUIC. TLS is configured inside the protocol via tlsConfig (TlsConfig).
| Field | Description |
|---|
users | UserConfig[] — auth string in secret |
obfs | ObfsConfig (Salamander) |
bandwidth | maxTx / maxRx caps |
quic | QUIC window and timeout settings |
ignoreClientBandwidth | Ignore client bandwidth hints |
tlsConfig | Server TLS |
addresses | Listen / announce addresses |
| Field | Description |
|---|
auth | Auth password |
tlsConfig | Client TLS (SNI, pins, ECH, …) |
quic | QUIC tuning |
fastOpen | QUIC fast open |
bandwidth | Client upload/download limits |
obfs | Obfuscation |
| Field | Description |
|---|
initialStreamReceiveWindow, maxStreamReceiveWindow, … | Stream windows (MB or *Bytes variants) |
initialConnectionReceiveWindow, maxConnectionReceiveWindow, … | Connection windows |
maxIdleTimeout, keepAlivePeriod | QUIC timeouts |
disablePathMtuDiscovery | Disable PMTUD |
maxIncomingStreams | Server-only stream limit |
| Field | Description |
|---|
salamander | SalamanderConfig with password |
| Field | Description |
|---|
maxTx | Upload cap (client: upload) |
maxRx | Download cap (client: download) |
{
"@type": "type.googleapis.com/vx.proxy.hysteria.Hysteria2ServerConfig",
"users": [{ "secret": "auth-password" }],
"tlsConfig": {
"certificates": [{ "certificateFilepath": "/path/cert.pem", "keyFilepath": "/path/key.pem" }]
}
}