Built for bad networks
Hotel Wi-Fi, oversubscribed mobile data, long international routes: this is where Hysteria2 visibly outruns everything else, holding HD streams without buffering.
Hysteria2 Explained: What It Is and How to Use It
Hysteria2 is a protocol built for speed on bad connections. Hotel Wi-Fi, crowded mobile networks, long routes to another continent: where a regular VPN slows to a crawl, Hysteria2 keeps going.
It’s one of VPNBaron’s two stealth protocols, next to VLESS Reality, and every VPNBaron plan includes it.
What is Hysteria2, in plain words?
Hysteria2 is an open-source proxy protocol that runs on QUIC, the modern transport behind HTTP/3, which big websites and video services use every day. To network equipment, a Hysteria2 connection looks like ordinary HTTP/3 web traffic.
Its speed comes from how it handles lost data. On a bad network, some data never arrives. Regular connections take every loss as a sign to slow down, so on a lossy line they end up far slower than the line allows. Hysteria2 keeps sending at the speed the connection can really carry, and resends only what went missing.
How does it work?
- Your app connects to the VPNBaron server over UDP port 443 using QUIC, encrypted with TLS 1.3.
- It signs in with the secret in your private link. Without it, the server doesn’t open a tunnel.
- Your traffic travels through the tunnel, and Hysteria2’s own congestion control decides how fast to send, instead of backing off at every lost packet.
Hysteria2 vs a regular VPN
| Regular VPN (OpenVPN, IKEv2) | Hysteria2 | |
|---|---|---|
| On a lossy or crowded network | Slows down sharply | Stays fast |
| What a firewall sees | Recognizable VPN traffic | HTTP/3 web traffic (QUIC) |
| Runs over | TCP or UDP | UDP (QUIC) |
| Where it can fail | Networks that block VPNs | Networks that block UDP |
When to use it
- Weak or crowded Wi-Fi (hotels, cafés, airports)
- Congested or throttled mobile networks
- Long-distance connections with packet loss
- Streaming in HD on any of the above
Its honest limit: it runs over UDP, and some strict networks block unfamiliar UDP entirely. When that happens, switch to VLESS Reality, which rides TCP 443 and passes where UDP can’t. The two protocols are complements, and every VPNBaron location offers both. Full comparison: Hysteria2 vs VLESS Reality: which one and when.
How to use it with VPNBaron
In the VPNBaron app (recommended): nothing to configure. Baron Pathfinder tests routes automatically and picks Hysteria2 when it’s the fastest working option. Install guides: Windows, macOS, iOS, Android.
In a free third-party app: your private link, on the Hysteria2 · VLESS page of your account, includes a Hysteria2 server for every location. Add it to:
- V2Box on iPhone, iPad, Mac and Android
- Hiddify on Windows and Linux, or on Android TV
- v2rayNG on Android
The servers without a (Reality) or (Trojan) tag are Hysteria2; most apps also show HYSTERIA2 under the name.
Which apps support Hysteria2?
Most modern apps built on sing-box or Xray: V2Box, Hiddify, v2rayNG, Shadowrocket, NekoBox and Clash Meta (mihomo) among them. The original Hysteria (version 1) apps don’t: the two versions aren’t compatible.
FAQ
Is Hysteria2 a VPN? It’s a proxy protocol rather than a classic VPN protocol. In practice, apps like V2Box and Hiddify use it to send all your device’s traffic through the server, so it does the same job as a VPN.
Is Hysteria2 safe? Yes. Connections are encrypted with TLS 1.3, and the server only opens a tunnel for apps holding your private link.
Why won’t it connect on some networks? Those networks block unfamiliar UDP traffic. Use the (Reality) server of the same location instead: it runs over TCP port 443, like any HTTPS website.
Hysteria or Hysteria2? Hysteria2 is the second version, a rewrite with a new, simpler protocol. The two aren’t compatible; VPNBaron uses Hysteria2.