Protocols

Four tunnel protocols, one topology.

Xray compatibility is for wire protocols, not config file format. Prefer native for tcptun-to-tcptun; use vless / vmess / trojan for interop.

Native guide All examples Compare table

rawwsh2h3

native

Token

Private low-overhead protocol. raw + group mux + reality automatically prefers QUIC and falls back to TCP; resumable streams can preserve eligible TCP flows across carrier replacement.

Interop: tcptun ↔ tcptun
Default security: REALITY auto / reality-tcp / reality-quic
Mux: Recommended when both ends match

tcptun config native --server proxy.example.com --port 9443

Native guide →

vless

UUID

Supports TCP/UDP. Generated configs default to Vision + REALITY and can interoperate with Xray.

Interop: Xray VLESS
Default security: raw + REALITY + Vision
Mux: Optional

tcptun config vless --server proxy.example.com --port 9443

Use cases →

vmess

UUID

VMess AEAD with TCP/UDP support and Xray interop.

Interop: Xray VMess AEAD
Default security: raw + REALITY
Mux: Optional

tcptun config vmess --server proxy.example.com --port 9443

Use cases →

trojan

Password

Password-authenticated Trojan tunnel with TCP/UDP support.

Interop: Xray Trojan
Default security: raw + REALITY
Mux: Optional

tcptun config trojan --server proxy.example.com --port 9443

Use cases →