tcptun

Examples

Configuration catalog, native first.

Browse every worked server/client pair for tcptun 0.5.0: Reality carriers, reverse publish, and topology patterns. Keys and tokens are generated in your browser on each visit. Copy JSON, validate, start the server first.

carrier.mode=autoGenerate pairConfig reference

Catalog

Browse every worked config.

Native stacks first. Pick a configuration from the menu, then copy the matching server / client JSON. Reality keys, short IDs, tokens, and UUIDs are generated in your browser for this page load — refresh to get a new set. Run tcptun config check, start the server, then the client.

native · recommended

REALITY · carrier.mode=auto (recommended)

v0.5.0 default: native + raw + mux + security.type=reality + carrier.mode=auto. TCP and QUIC on one address; outbound carrier.prefer defaults to adaptive.

When: Both ends run tcptun v0.5.0 and you want automatic dual carriers without certs or a second port.

  1. Generate with --server-name and --dest (HTTPS + HTTP/3 capable camouflage).
  2. Ensure mux.enabled and carrier.mode=auto so automatic carriers activate.
  3. Pair private_key / public_key and short ids; open TCP and UDP on the listen port.
  4. Optional: set mux.resume=true on both peers for resumable TCP streams.
tcptun config native --server proxy.example.com --port 9443 --server-name example.com --dest example.com:443
tcptun config check --config server.json
tcptun --config server.json
tcptun --config client.json
Open generatorConfig referenceNative protocol
server-native-reality-auto.json
Generating Reality keys and credentials…