Hysteria2

Overview

Hysteria2 is based on QUIC (UDP), optimized for high-latency, high-packet-loss networks. Requires a TLS certificate.

Prerequisites

• TLS certificate required (can be auto-issued via certificate management)
• UDP port must be open
• Client must support Hysteria2 (mihomo/Clash.Meta supported)

Xray Configuration Notes

In Xray-core, Hysteria2 uses protocol: “hysteria” with version: 2. Authentication uses the auth field (not password).

Creating it in the wizard

In “Nodes → Add Node” with HYSTERIA2 selected, the security is always TLS, so the server needs a certificate covering its domain first (step 1 shows the “SSL configuration” prompt otherwise). Simple mode generates the port and auth password:

Hysteria2: auth password generated; the JSON preview shows protocol hysteria with version 2

Configuration Example

{
  "protocol": "hysteria",
  "settings": {
    "version": 2,
    "clients": [{ "auth": "your-password" }]
  },
  "streamSettings": {
    "network": "hysteria",
    "security": "tls",
    "tlsSettings": {
      "serverName": "example.com",
      "alpn": ["h3"],
      "certificates": [{
        "certificateFile": "/path/to/cert.pem",
        "keyFile": "/path/to/key.pem"
      }]
    }
  }
}