winget install --id apernet.HysteriaAbout Hysteria
Hysteria is a powerful, lightning fast and censorship resistant proxy. 🛠️ Jack of all trades Wide range of modes including SOCKS5, HTTP Proxy, TCP/UDP Forwarding, Linux TProxy, TUN - with more features being added constantly. ⚡ Blazing fast Powered by a customized QUIC protocol, Hysteria is designed to deliver unparalleled performance over unreliable and lossy networks. ✊ Censorship resistant The protocol masquerades as standard HTTP/3 traffic, making it very difficult for censors to detect and block without widesp...
What's new in 2.9.3
- Added Hysteria Realms UPnP/NAT-PMP port mapping support for easier NAT traversal - Added a Hysteria Realms ipMode option to restrict connections to IPv4 or IPv6 only - Updated quic-go to v0.60.0 - Fixed + in the authentication credentials being corrupted to a space when parsing hysteria2:// sharing links - Fixed the HTTP proxy rejecting valid Basic authentication credentials - Fixed the HTTPS proxy outbound using host:port instead of the hostname as the TLS SNI - Fixed a data race in the client's HTTP/SOCKS5 listener multiplexer - Fixed nftables redirect failure when the server binds to a specific IPv6 address - DNS resolver now limits CNAME chain length to prevent unbounded recursion
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.9.3 | Unknown | - Added Hysteria Realms UPnP/NAT-PMP port mapping support for easier NAT traversal - Added a Hysteria Realms ipMode option to restrict connections to IPv4 or IPv6 only - Updated quic-go to v0.60.0 - Fixed + in the authen... |
| 2.9.2 | Unknown | Release notes |
| 2.9.1 | Unknown | No public IP? No problem. Hysteria Realms punches through your NAT to let you host a Hysteria server from home, a cellular network, or even a coffee shop. Clients connect directly, peer-to-peer. No port forwarding, no re... |
| 2.9.0 | Unknown | - Added Hysteria Realms: No public IP? No problem. Punches through your NAT to let you host a Hysteria server from home, a cellular network, or even a coffee shop. Clients connect directly, peer-to-peer. No port forwardi... |
| 2.8.2 | Unknown | This release contains important security fixes and we strongly encourage everyone to upgrade. - Fixed a security issue where, when sniff was enabled, an attacker could craft malicious QUIC packets to cause a server OOM c... |
| 2.8.1 | Unknown | This release contains important fixes and we strongly encourage everyone to upgrade. - Fixed an issue where client connections could cause the server to crash when using BBR/Reno as the congestion control algorithm - Fix... |
| 2.8.0 | Unknown | - Added configurable congestion control: select between BBR and Reno, with three BBR profiles (standard, conservative, aggressive) for fine-tuning congestion control behavior - Added server-side UDP port range listening... |
| 2.7.1 | Unknown | - Updated quic-go to v0.59.0, QUIC protocol level improvements - Speed test now defaults to time-based mode, testing download and upload for 10 seconds each. Use --duration to customize. The previous size-based behavior... |
| 2.7.0 | Unknown | This release contains important fixes and we strongly encourage everyone to upgrade. - Updated quic-go to v0.57.1 - Fixed a long-standing bug in BBR that caused the connection to send faster than the available bandwidth... |
| 2.6.5 | Unknown | This release contains important fixes and we strongly encourage everyone to upgrade. - Fixed a server-side memory leak issue that accumulates with each client connection |
| 2.6.4 | Unknown | This release contains important fixes and we strongly encourage everyone to upgrade. - Security fix & behavior change: tls.pinSHA256 now matches only the fingerprint of the leaf certificate, instead of any certificate in... |
| 2.6.3 | Unknown | - Added mTLS support for client certificate authentication - Fixed a memory leak issue in tun mode - Fixed an issue where DNS resolution failed in tun mode on Linux systems using systemd-resolved - Fixed a bug in the ACL... |
| 2.6.2 | Unknown | - Updated quic-go to v0.52.0 - ClientHello is now fragmented during TLS handshake, which can bypass some firewalls' SNI filtering. - The --qr option in client mode is deprecated; use the share subcommand to generate link... |