What it does
Hysteria 2 provides self-hosted proxy connectivity with several client modes, including a TUN interface for redirecting system TCP and UDP traffic.
Hysteria's TUN mode creates a virtual interface and uses system routes to redirect traffic to a configured server. It works on Windows, Linux and macOS, alongside separate SOCKS, HTTP and forwarding modes. A technical user can choose whether applications use an explicit proxy or a broader routing configuration.
The TUN implementation has a concrete boundary: it carries TCP and UDP, while ICMP is not forwarded and ping replies are answered locally. A reply therefore does not establish that the remote destination is reachable. The documentation also requires route exclusions to prevent a routing loop. This is software for a server and client you configure, with hosting and access supplied separately.
Strengths
- Explicit proxy and system-routing modes
- Documented route and TLS configuration
Watch out for
- TUN mode does not forward ICMP or other non-TCP/UDP protocols
Best for
- Technical users configuring their own proxy-based tunnel
Sources
- Home - Hysteria 2 (Oct 26, 2026)
- Full Client Config - Hysteria 2 (Oct 26, 2026)