Skip to content

Hysteria2

Configuration Reference

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
proxies:
- name: "hysteria2"
  type: hysteria2
  server: server.com
  port: 443
  ports: 443-8443
  hop-interval: 30
  password: yourpassword
  up: "30 Mbps"
  down: "200 Mbps"
  # bbr-profile: "" # Available: "standard", "conservative", "aggressive". Default: "standard"
  obfs: salamander # Defaults to empty. If filled, obfs will be enabled. Currently supports `salamander` and `gecko`.
  obfs-password: yourpassword
  # obfs-min-packet-size: 512
  # obfs-max-packet-size: 1200
  sni: server.com
  skip-cert-verify: false
  name-cert-verify: example.com
  fingerprint: xxxx # Configuring the fingerprint provides SSL pinning. Obtain it with: openssl x509 -noout -fingerprint -sha256 -inform pem -in yourcert.pem
  alpn:
    - h3
  # realm-opts:
  #   enable: true # Must be turned on manually
  #   server-url: https://realm.hy2.io
  #   token: public
  #   realm-id: my-cabin-1f3a8c2e9b
  #   stun-servers:
  #     - stun.nextcloud.com:3478
  #     - stun.sip.us:3478
  #     - global.stun.twilio.com:3478
  #   # The following supports entering TLS configuration for the server-url (sni, skip-cert-verify, name-cert-verify, fingerprint, certificate, private-key, alpn)
  #   # skip-cert-verify： false
  #   # name-cert-verify: example.com
  #   # ......
  # handshake-timeout: 30
  ###Special quic-go options. Do not modify them unless you know what you are doing.###
  # initial-stream-receive-window： 8388608
  # max-stream-receive-window： 8388608
  # initial-connection-receive-window： 20971520
  # max-connection-receive-window： 20971520

Common Fields

TLS Fields

ports

Configuring this enables port jumping, ignoring port. Refer to Port Range for format.

hop-interval

Port hop interval, in seconds, default is 30.

Entering "15-30" will randomly select one value as the switching interval each time. Only one range is supported (commas are not allowed).

password

Authentication password.

up/down

Brutal rate control; if no unit is specified, the default is Mbps.

obfs

QUIC traffic obfuscator type. Can be set to salamander or gecko. If left blank, obfuscation is disabled.

obfs-password

QUIC traffic obfuscator password.

obfs-min-packet-size

Minimum wire packet size (in bytes). Restricted to gecko only.

obfs-max-packet-size

Maximum wire packet size (in bytes). Restricted to gecko only.

realm-opts

handshake-timeout

Specified in seconds. When set, the handshake timeout is independent of the outer connection timeout. The default value is 0, meaning the handshake uses only the outer connection timeout.