Hysteria 2的Realm模式各种配置方法问题汇总

poctopus 2026-09-29 AM 207℃ 0条

在日本家宽网络下配置了2个Hysteria 2的主机，使用的是它最新的Realm模式，这个模式不需要公网IP，只要通过Stun打洞就可以完成用户有类似公网的体验。这里来总结一下服务端和客户端配置方法以及一些问题。

服务端可以使用Hysteria 2的官方安装方法进行直接安装。
```csharp
bash <(curl -fsSL https://get.hy2.sh/)
```
安装完毕后，按照各自需求调整配置文件。
以下是我自己的配置，大家可以自己参照以下：
```csharp
#Realm后面的id自己生成就可以，连接公共服务器的时候，最大长度64位
listen: realm://public@realm.hy2.io/04d9eb7755614177

bandwidth:
  up: 1 gbps
  down: 1 gbps

#可以配置多个用户
auth:
  type: userpass
  userpass:
    user001: password001
    user002: password002
    user003: password003

#修改password后面的密码
obfs:
  type: salamander
  salamander:
    password: password

masquerade:
  type: proxy
  proxy:
    url: "https://www.yahoo.com/"
    rewriteHost: true

tls:
  cert: /etc/hysteria/server.crt
  key: /etc/hysteria/server.key
  sniGuard: disable

resolver:
  type: tcp
  tcp:
    addr: 8.8.8.8:53
    timeout: 4s
  udp:
    addr: 8.8.4.4:53
    timeout: 4s

#流量统计 API，可以自己设置ip端口，以及密码
trafficStats:
  listen: :9999
  secret: password
```

Windows 10/11下直接使用Hysterical的客户端配置，需要使用Winsw之类把应用加载为系统服务，这样就可以通过浏览器的SmartProxy之类服务代理。
具体配置如下：
```csharp
<service>
	
    <id>Hysteria 2</id>
    
    <name>Hysteria Client</name>
    
    <description>HY2-客户端</description>
    
    <executable>D:\Software\hy2\hy.exe</executable>
    
    <arguments>-c D:\Software\hy2\config.yml</arguments>
    
    <onfailure action="restart" delay="60 sec"/>
    
    <onfailure action="restart" delay="120 sec"/>
    
    <logmode>append</logmode>
    
    <logpath>logs</logpath>
</service>
```

```csharp
#这里的Server和服务器配置的需要保持一致
server: realm://public@realm.hy2.io/04d9eb7755614177

auth: user001:password

#带宽配置看服务器端网络配置后适当调整，我在服务器端配置了1g，这里就配置900m，具体自己调整。
bandwidth:
  up: 900 mbps
  down: 900 mbps

obfs:
  type: salamander
  salamander:
    password: password   # 需与服务端 obfs 密码一致

#这里的pinsha256对应服务器上证书的sha256
tls:
  insecure: true
  pinSHA256: "e86508e98f19cd9c9af67d981615"

resolver:
  type: tcp
  tcp:
    addr: 8.8.8.8:53
    timeout: 4s
socks5:
  listen: 127.0.0.1:62001
  # username: user      # 可选，给本地 socks5 加账号密码
  # password: pass
  # disableUDP: false

http:
  listen: 127.0.0.1:62002
```

接下来就是Windows下Sing-Box客户端的配置：
```csharp
{
  "$schema": "https://sing-box.sagernet.org/schema.json",
  "dns": {
    "servers": [
      {"tag": "local", "type": "local", "prefer_go": true},
      {"tag": "ali", "type": "https", "server": "223.5.5.5"},
      {"tag": "tx", "type": "https", "server": "doh.pub", "domain_resolver": "hosts"},
      {"tag": "google", "type": "https", "server": "8.8.8.8", "detour": "默认代理"},
      {"tag": "fakeip", "type": "fakeip", "inet4_range": "198.19.0.0/16"},
      {"type": "hosts", "tag": "hosts", "predefined": {"doh.pub": ["1.12.12.21", "120.53.53.53"]}}
    ],
    "rules": [
      {"query_type": ["HTTPS", "SVCB"], "action": "reject"},
      {"clash_mode": "Direct", "server": "local"},
      {"clash_mode": "Global", "server": "fakeip"},
      {"rule_set": ["fakeipfilter-cn", "geosite-cn", "geosite-microsoft@cn", "geosite-apple@cn", "geosite-private"], "server": "local"},
      {"rule_set": "fakeipfilter-!cn", "server": "google"},
      {"type": "logical", "mode": "and", "rules": [{"query_type": ["A", "AAAA"]}, {"rule_set": "geosite-geolocation-!cn", "invert": true}], "action": "evaluate", "server": "google", "client_subnet": "223.5.5.0/24","timeout": "2s"},
      {"match_response": true, "rule_set": "geoip-cn", "server": "local"},
      {"query_type": ["A", "AAAA"], "server": "fakeip", "rewrite_ttl": 1}
    ],
    "final": "google",
    "strategy": "ipv4_only", 
    "cache_capacity": 8192,
    "optimistic": {"enabled": true},
    "reverse_mapping": true
  },
  "outbounds": [
    {
      "tag": "默认代理",
      "type": "selector",
      "outbounds": [
        "HY2-JP1",
        "HY2-JP2"
      ]
    },
    {
      "type": "hysteria2",
      "tag": "HY2-JP1",
      "server": "",
      "server_port": 0,
      "up_mbps": 1000,
      "down_mbps": 1000,
      "obfs": {
        "type": "salamander",
        "password": "password"
      },
      "password": "user001:password001",
      "tls": {
        "enabled": true,
        "insecure": true
      },
      "stream_receive_window": 0,
      "connection_receive_window": 0,
      "realm": {
        "server_url": "https://realm.hy2.io",
        "token": "public",
        "realm_id": "04d9eb7755614177",
        "stun_servers": [
          "stun.miwifi.com:3478"
        ],
        "ip_version": 4,
        "port_mapping": {
          "enabled": false
        }
      }
    },
    {
      "type": "hysteria2",
      "tag": "HY2-JP2",
      "server": "",
      "server_port": 0,
      "up_mbps": 1000,
      "down_mbps": 1000,
      "obfs": {
        "type": "salamander",
        "password": "password"
      },
      "password": "user001:password001",
      "tls": {
        "enabled": true,
        "insecure": true
      },
      "stream_receive_window": 0,
      "connection_receive_window": 0,
      "realm": {
        "server_url": "https://realm.hy2.io",
        "token": "public",
        "realm_id": "04d9eb7755614171",
        "stun_servers": [
          "stun.miwifi.com:3478"
        ],
        "ip_version": 4,
        "port_mapping": {
          "enabled": false
        }
      }
    },    
    {
      "tag": "直连",
      "type": "direct",
      "domain_resolver": "ali"
    }
  ],
  "http_clients": [
    {"tag": "直连下载", "detour": "直连"}
  ],
  "route": {
    "rules": [
      {"type": "logical", "mode": "and", "rules": [{"port": [53, 853], "invert": true}, {"clash_mode": "Global", "invert": true}, {"type": "logical", "mode": "or", "rules": [{"ip_is_private": true}, {"rule_set": "geoip-cn"}]}], "action": "bypass"},
      {"type": "logical", "mode": "or", "rules": [{"domain_suffix": "push.apple.com"}, {"rule_set": "geoip-telegram"}], "invert": true, "action": "sniff", "sniffer": ["http", "tls", "stun", "quic", "dns"], "timeout": "100ms"},
      {"type": "logical", "mode": "or", "rules": [{"port": 53}, {"protocol": "dns"}], "action": "hijack-dns"},
      {"ip_is_private": true, "outbound": "直连"},
      {"type": "logical", "mode": "or", "rules": [{"port": 853}], "action": "reject", "no_drop": true},
      {"network": "icmp", "action": "resolve"},
      {"network": "icmp", "outbound": "直连"},
      {"clash_mode": "Direct", "outbound": "直连"},
      {"clash_mode": "Global", "outbound": "默认代理"},
      {"rule_set": "geosite-private", "outbound": "直连"},
      {"rule_set": "geosite-category-ai-!cn", "outbound": "默认代理"},
      {"rule_set": "geosite-youtube", "outbound": "默认代理"},
      {"rule_set": "geosite-google", "outbound": "默认代理"},
      {"rule_set": "geosite-github", "outbound": "默认代理"},
      {"rule_set": "geosite-onedrive", "outbound": "默认代理"},
      {"rule_set": "geosite-microsoft@cn", "outbound": "直连"},
      {"rule_set": "geosite-microsoft", "outbound": "默认代理"},
      {"rule_set": "geosite-apple@cn", "outbound": "直连"},
      {"rule_set": "geosite-apple", "outbound": "默认代理"},
      {"rule_set": "geosite-telegram", "outbound": "默认代理"},
      {"rule_set": "geosite-tiktok", "outbound": "默认代理"},
      {"rule_set": "geosite-netflix", "outbound": "默认代理"},
      {"rule_set": "geosite-paypal", "outbound": "默认代理"},
      {"rule_set": "geosite-binance", "outbound": "默认代理"},
      {"rule_set": "geosite-okx", "outbound": "默认代理"},
      {"rule_set": "geosite-category-cryptocurrency", "outbound": "默认代理"},
      {"rule_set": "geosite-steam@cn", "outbound": "直连"},
      {"rule_set": "geosite-steam", "outbound": "默认代理"},
      {"rule_set": "geosite-geolocation-!cn", "outbound": "默认代理"},
      {"inbound": "mixed-in", "action": "resolve"},
      {"rule_set": "geoip-telegram", "outbound": "默认代理"},
      {"rule_set": "geoip-cn", "outbound": "直连"}
    ],
    "rule_set": [
      {"tag": ["fakeipfilter-cn", "fakeipfilter-!cn"], "type": "remote", "format": "source", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/qichiyuhub/rule/refs/heads/main/rules/{tag}.json"},
      {"tag": ["geosite-category-ai-!cn", "geosite-youtube", "geosite-google", "geosite-github", "geosite-onedrive", "geosite-microsoft", "geosite-microsoft@cn","geosite-apple", "geosite-apple@cn", "geosite-telegram", "geosite-tiktok", "geosite-netflix", "geosite-paypal", "geosite-binance", "geosite-okx", "geosite-category-cryptocurrency", "geosite-steam@cn", "geosite-steam", "geosite-geolocation-!cn", "geosite-cn", "geosite-private"], "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/{tag}.srs"},
      {"tag": "geoip-telegram", "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/sing/geo/geoip/telegram.srs"},
      {"tag": "geoip-cn", "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs"}
    ],
    "final": "默认代理",
    "default_http_client": "直连下载",
    "auto_detect_interface": true,
    "default_domain_resolver": {"server": "ali"}
  },
   "inbounds": [
        {
          "type": "tun",
          "tag": "tun-in",
          "interface_name": "tun0",
          "mtu": 1400,
          "address": "172.19.0.1/30",
          "auto_route": true,
          "strict_route": true,
          "stack": "system"
        },
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080
    }
  ],
  "certificate": {
    "store": "chrome"
  },
  "ntp": {
    "enabled": true,
    "server": "time.apple.com"
  },
  "log": {
    "disabled": false,
    "level": "info",
    "timestamp": true
  }
}

```

标签: realm, sing-box, hysteria 2, hysteria, mtu

非特殊说明，本博所有文章均为博主原创。

如若转载，请注明出处：https://aladown.com/archives/2603.html

上一篇 ntfsmac给 Apple Silicon Mac 用的 NTFS 读写方案

下一篇没有了

评论已关闭

一	二	三	四	五	六	日
◄ ►
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	31

RAW VIM reinstall hysteria 共享和光堂 LTSC 内网共享一条wifi HR tproxy ai WRT 中石化 JPG 未知设备 bootloader FAX 海外代购质量 V2RAY 开心版 debug 白金会员 SERVER 左旋肉碱百度云盘 port-forward NETWORK debian 9 DEBIAN 10 XLSX 洋码头 sqlserver ffmpeg 海淘 BACKUP 卸载 Cannot allocate memory openai dns 三聚氰胺测试版开源 LLM CAKE 优惠链接 WINDOWS STORE 百度网盘 CACHE WECHAT CSV iptv user agent 美国购物 IPTABLES Puritan's Pride UFW 可视化制作启动盘 TRACE GOOGLE CHROME client APP STORE 第二普瑞登儿童安装失败 Drugstore 中国大陆 http SQLSERVER TO CSV 不能访问 USPS mysqldump SMTP PASSWORD B2C 字体 ipcheck 双击无法打开我要购物轻量级 IOS 14.2 firefox ma c puff IT168 尿素 Cutter 敏感 screen 小内存电影剪辑搜索引擎 Actions Calendar 推流翻墙微信

Hysteria 2的Realm模式各种配置方法问题汇总

评论已关闭

博主动态 ~

日历

栏目分类

标签云

Hysteria 2的Realm模式各种配置方法问题汇总

评论已关闭

博主动态 ~

日历

 栏目分类

标签云

博主动态 ~

日历

栏目分类

标签云