Hysteria 2的Realm模式各种配置方法问题汇总

poctopus 2026-09-29 AM 94℃ 0条

在日本家宽网络下配置了2个Hysteria 2的主机，使用的是它最新的Realm模式，这个模式不需要公网IP，只要通过Stun打洞就可以完成用户有类似公网的体验。这里来总结一下服务端和客户端配置方法以及一些问题。

服务端可以使用Hysteria 2的官方安装方法进行直接安装。
```csharp
bash <(curl -fsSL https://get.hy2.sh/)
```
安装完毕后，按照各自需求调整配置文件。
以下是我自己的配置，大家可以自己参照以下：
```csharp
#Realm后面的id自己生成就可以，连接公共服务器的时候，最大长度64位
listen: realm://public@realm.hy2.io/04d9eb7755614177

bandwidth:
  up: 1 gbps
  down: 1 gbps

#可以配置多个用户
auth:
  type: userpass
  userpass:
    user001: password001
    user002: password002
    user003: password003

#修改password后面的密码
obfs:
  type: salamander
  salamander:
    password: password

masquerade:
  type: proxy
  proxy:
    url: "https://www.yahoo.com/"
    rewriteHost: true

tls:
  cert: /etc/hysteria/server.crt
  key: /etc/hysteria/server.key
  sniGuard: disable

resolver:
  type: tcp
  tcp:
    addr: 8.8.8.8:53
    timeout: 4s
  udp:
    addr: 8.8.4.4:53
    timeout: 4s

#流量统计 API，可以自己设置ip端口，以及密码
trafficStats:
  listen: :9999
  secret: password
```

Windows 10/11下直接使用Hysterical的客户端配置，需要使用Winsw之类把应用加载为系统服务，这样就可以通过浏览器的SmartProxy之类服务代理。
具体配置如下：
```csharp
<service>
	
    <id>Hysteria 2</id>
    
    <name>Hysteria Client</name>
    
    <description>HY2-客户端</description>
    
    <executable>D:\Software\hy2\hy.exe</executable>
    
    <arguments>-c D:\Software\hy2\config.yml</arguments>
    
    <onfailure action="restart" delay="60 sec"/>
    
    <onfailure action="restart" delay="120 sec"/>
    
    <logmode>append</logmode>
    
    <logpath>logs</logpath>
</service>
```

```csharp
#这里的Server和服务器配置的需要保持一致
server: realm://public@realm.hy2.io/04d9eb7755614177

auth: user001:password

#带宽配置看服务器端网络配置后适当调整，我在服务器端配置了1g，这里就配置900m，具体自己调整。
bandwidth:
  up: 900 mbps
  down: 900 mbps

obfs:
  type: salamander
  salamander:
    password: password   # 需与服务端 obfs 密码一致

#这里的pinsha256对应服务器上证书的sha256
tls:
  insecure: true
  pinSHA256: "e86508e98f19cd9c9af67d981615"

resolver:
  type: tcp
  tcp:
    addr: 8.8.8.8:53
    timeout: 4s
socks5:
  listen: 127.0.0.1:62001
  # username: user      # 可选，给本地 socks5 加账号密码
  # password: pass
  # disableUDP: false

http:
  listen: 127.0.0.1:62002
```

接下来就是Windows下Sing-Box客户端的配置：
```csharp
{
  "$schema": "https://sing-box.sagernet.org/schema.json",
  "dns": {
    "servers": [
      {"tag": "local", "type": "local", "prefer_go": true},
      {"tag": "ali", "type": "https", "server": "223.5.5.5"},
      {"tag": "tx", "type": "https", "server": "doh.pub", "domain_resolver": "hosts"},
      {"tag": "google", "type": "https", "server": "8.8.8.8", "detour": "默认代理"},
      {"tag": "fakeip", "type": "fakeip", "inet4_range": "198.19.0.0/16"},
      {"type": "hosts", "tag": "hosts", "predefined": {"doh.pub": ["1.12.12.21", "120.53.53.53"]}}
    ],
    "rules": [
      {"query_type": ["HTTPS", "SVCB"], "action": "reject"},
      {"clash_mode": "Direct", "server": "local"},
      {"clash_mode": "Global", "server": "fakeip"},
      {"rule_set": ["fakeipfilter-cn", "geosite-cn", "geosite-microsoft@cn", "geosite-apple@cn", "geosite-private"], "server": "local"},
      {"rule_set": "fakeipfilter-!cn", "server": "google"},
      {"type": "logical", "mode": "and", "rules": [{"query_type": ["A", "AAAA"]}, {"rule_set": "geosite-geolocation-!cn", "invert": true}], "action": "evaluate", "server": "google", "client_subnet": "223.5.5.0/24","timeout": "2s"},
      {"match_response": true, "rule_set": "geoip-cn", "server": "local"},
      {"query_type": ["A", "AAAA"], "server": "fakeip", "rewrite_ttl": 1}
    ],
    "final": "google",
    "strategy": "ipv4_only", 
    "cache_capacity": 8192,
    "optimistic": {"enabled": true},
    "reverse_mapping": true
  },
  "outbounds": [
    {
      "tag": "默认代理",
      "type": "selector",
      "outbounds": [
        "HY2-JP1",
        "HY2-JP2"
      ]
    },
    {
      "type": "hysteria2",
      "tag": "HY2-JP1",
      "server": "",
      "server_port": 0,
      "up_mbps": 1000,
      "down_mbps": 1000,
      "obfs": {
        "type": "salamander",
        "password": "password"
      },
      "password": "user001:password001",
      "tls": {
        "enabled": true,
        "insecure": true
      },
      "stream_receive_window": 0,
      "connection_receive_window": 0,
      "realm": {
        "server_url": "https://realm.hy2.io",
        "token": "public",
        "realm_id": "04d9eb7755614177",
        "stun_servers": [
          "stun.miwifi.com:3478"
        ],
        "ip_version": 4,
        "port_mapping": {
          "enabled": false
        }
      }
    },
    {
      "type": "hysteria2",
      "tag": "HY2-JP2",
      "server": "",
      "server_port": 0,
      "up_mbps": 1000,
      "down_mbps": 1000,
      "obfs": {
        "type": "salamander",
        "password": "password"
      },
      "password": "user001:password001",
      "tls": {
        "enabled": true,
        "insecure": true
      },
      "stream_receive_window": 0,
      "connection_receive_window": 0,
      "realm": {
        "server_url": "https://realm.hy2.io",
        "token": "public",
        "realm_id": "04d9eb7755614171",
        "stun_servers": [
          "stun.miwifi.com:3478"
        ],
        "ip_version": 4,
        "port_mapping": {
          "enabled": false
        }
      }
    },    
    {
      "tag": "直连",
      "type": "direct",
      "domain_resolver": "ali"
    }
  ],
  "http_clients": [
    {"tag": "直连下载", "detour": "直连"}
  ],
  "route": {
    "rules": [
      {"type": "logical", "mode": "and", "rules": [{"port": [53, 853], "invert": true}, {"clash_mode": "Global", "invert": true}, {"type": "logical", "mode": "or", "rules": [{"ip_is_private": true}, {"rule_set": "geoip-cn"}]}], "action": "bypass"},
      {"type": "logical", "mode": "or", "rules": [{"domain_suffix": "push.apple.com"}, {"rule_set": "geoip-telegram"}], "invert": true, "action": "sniff", "sniffer": ["http", "tls", "stun", "quic", "dns"], "timeout": "100ms"},
      {"type": "logical", "mode": "or", "rules": [{"port": 53}, {"protocol": "dns"}], "action": "hijack-dns"},
      {"ip_is_private": true, "outbound": "直连"},
      {"type": "logical", "mode": "or", "rules": [{"port": 853}], "action": "reject", "no_drop": true},
      {"network": "icmp", "action": "resolve"},
      {"network": "icmp", "outbound": "直连"},
      {"clash_mode": "Direct", "outbound": "直连"},
      {"clash_mode": "Global", "outbound": "默认代理"},
      {"rule_set": "geosite-private", "outbound": "直连"},
      {"rule_set": "geosite-category-ai-!cn", "outbound": "默认代理"},
      {"rule_set": "geosite-youtube", "outbound": "默认代理"},
      {"rule_set": "geosite-google", "outbound": "默认代理"},
      {"rule_set": "geosite-github", "outbound": "默认代理"},
      {"rule_set": "geosite-onedrive", "outbound": "默认代理"},
      {"rule_set": "geosite-microsoft@cn", "outbound": "直连"},
      {"rule_set": "geosite-microsoft", "outbound": "默认代理"},
      {"rule_set": "geosite-apple@cn", "outbound": "直连"},
      {"rule_set": "geosite-apple", "outbound": "默认代理"},
      {"rule_set": "geosite-telegram", "outbound": "默认代理"},
      {"rule_set": "geosite-tiktok", "outbound": "默认代理"},
      {"rule_set": "geosite-netflix", "outbound": "默认代理"},
      {"rule_set": "geosite-paypal", "outbound": "默认代理"},
      {"rule_set": "geosite-binance", "outbound": "默认代理"},
      {"rule_set": "geosite-okx", "outbound": "默认代理"},
      {"rule_set": "geosite-category-cryptocurrency", "outbound": "默认代理"},
      {"rule_set": "geosite-steam@cn", "outbound": "直连"},
      {"rule_set": "geosite-steam", "outbound": "默认代理"},
      {"rule_set": "geosite-geolocation-!cn", "outbound": "默认代理"},
      {"inbound": "mixed-in", "action": "resolve"},
      {"rule_set": "geoip-telegram", "outbound": "默认代理"},
      {"rule_set": "geoip-cn", "outbound": "直连"}
    ],
    "rule_set": [
      {"tag": ["fakeipfilter-cn", "fakeipfilter-!cn"], "type": "remote", "format": "source", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/qichiyuhub/rule/refs/heads/main/rules/{tag}.json"},
      {"tag": ["geosite-category-ai-!cn", "geosite-youtube", "geosite-google", "geosite-github", "geosite-onedrive", "geosite-microsoft", "geosite-microsoft@cn","geosite-apple", "geosite-apple@cn", "geosite-telegram", "geosite-tiktok", "geosite-netflix", "geosite-paypal", "geosite-binance", "geosite-okx", "geosite-category-cryptocurrency", "geosite-steam@cn", "geosite-steam", "geosite-geolocation-!cn", "geosite-cn", "geosite-private"], "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/{tag}.srs"},
      {"tag": "geoip-telegram", "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/sing/geo/geoip/telegram.srs"},
      {"tag": "geoip-cn", "type": "remote", "format": "binary", "url": "https://gh-proxy.com/https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs"}
    ],
    "final": "默认代理",
    "default_http_client": "直连下载",
    "auto_detect_interface": true,
    "default_domain_resolver": {"server": "ali"}
  },
   "inbounds": [
        {
          "type": "tun",
          "tag": "tun-in",
          "interface_name": "tun0",
          "mtu": 1400,
          "address": "172.19.0.1/30",
          "auto_route": true,
          "strict_route": true,
          "stack": "system"
        },
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "127.0.0.1",
      "listen_port": 2080
    }
  ],
  "certificate": {
    "store": "chrome"
  },
  "ntp": {
    "enabled": true,
    "server": "time.apple.com"
  },
  "log": {
    "disabled": false,
    "level": "info",
    "timestamp": true
  }
}

```

标签: realm, sing-box, hysteria 2, hysteria, mtu

非特殊说明，本博所有文章均为博主原创。

如若转载，请注明出处：https://www.aladown.com/archives/2603.html

上一篇 ntfsmac给 Apple Silicon Mac 用的 NTFS 读写方案

下一篇没有了

评论已关闭

一	二	三	四	五	六	日
◄ ►
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29	30	31

Hysteria 2的Realm模式各种配置方法问题汇总

评论已关闭

博主动态 ~

日历

栏目分类

标签云

Hysteria 2的Realm模式各种配置方法问题汇总

评论已关闭

博主动态 ~

日历

 栏目分类

标签云

博主动态 ~

日历

栏目分类

标签云