REALITY
RealityConfig
Proto: protos/proto/vx/transport/security/reality/config.proto
Set on TransportConfig.reality or MultiProxyInboundConfig.securityConfigs[].reality.
Mutually exclusive with tls (only one per transport block).
RealityConfig
Server only
destFallback destination (e.g. www.microsoft.com:443)
xverPROXY protocol version sent to dest (0 = do not send)
serverNamesAllowed SNI server names
privateKeyX25519 private key
minClientVerMinimum allowed client version bytes
maxClientVerMaximum allowed client version bytes
maxTimeDiffMaximum client clock skew (milliseconds)
shortIdsAllowed short ID list (each entry up to 8 bytes)
Client
showDebug output
FingerprintuTLS fingerprint (e.g. chrome, firefox)
serverNamePresented SNI
publicKeyServer public key (bytes)
pbkPublic key (Base64 string; equivalent to publicKey)
shortIdClient short ID (bytes; must be 8 bytes)
sidShort ID hex string (8 bytes)
spiderXSpider X path
spiderYSpider Y value list
masterKeyLogKey log path (debugging)
{
"transport": {
"tcp": {},
"reality": {
"dest": "www.microsoft.com:443",
"serverNames": ["www.example.com"],
"privateKey": "base64-or-raw",
"shortIds": ["", "0123456789abcdef"]
}
},
"protocol": {
"@type": "type.googleapis.com/vx.proxy.vless.VlessServerConfig",
"users": [{ "id": "uuid", "flow": "" }]
}
}