Hysteria2 — fast VPN protocol for unstable networks

Help

What Hysteria2 is — a QUIC-based protocol with aggressive congestion control. Benefits on unstable mobile networks, protection against filtering.

What is Hysteria2

Hysteria2 is a modern VPN protocol based on QUIC (HTTP/3 transport), designed specifically for networks with high packet loss and high latency. It uses the Brutal adaptive congestion control algorithm which aggressively utilises available bandwidth even on flaky channels — like mobile 4G/LTE or public Wi-Fi in cafés and airports.

How it differs from other protocols

Parameter	OpenVPN UDP	Hysteria2
Transport	custom UDP	QUIC (HTTP/3)
Congestion control	none at UDP layer	Brutal (aggressive)
Speed on 4G with 5%+ loss	drops to 20-30% of max	keeps 70-90% of max
Obfuscation	none (visible UDP session)	TLS masquerade as HTTPS
Handshake size	3-4 RTT	1 RTT (QUIC 0-RTT on reconnect)
Battery impact on mobile	medium (TCP retransmit storms)	low (QUIC efficient)

When to choose Hysteria2

Mobile Internet — 4G/LTE with variable signal. Hysteria2 maintains throughput even when cell towers switch and packets are lost.
Public Wi-Fi — cafés, airports, hotels. Congested low-SNR networks: Brutal congestion control adapts quickly.
Streaming / video calls — low jitter and stable latency keep Zoom/Telegram calls smooth.
Gaming — UDP + minimal overhead, best choice when latency matters.
Networks with active filtering — TLS masquerade as plain HTTPS bypasses DPI.

Compatible clients

Android: Hiddify, NekoBox
iOS: Hiddify (App Store)
Windows / macOS / Linux: Hiddify Desktop, v2rayN
CLI / Server: official hysteria binary

All clients import a ready-to-use YAML config — after purchasing a subscription on openvpn.pro you download client.yaml from the "Profile" section and connect with one click.

Security

Server certificate is self-signed (by design, for TLS masquerade as a popular site). Client config includes pinSHA256 — the exact certificate hash validated byte-by-byte at handshake. This is equivalent to CA validation — if an attacker swaps the cert, the client shows no certificate matches the pinned hash and refuses to connect.

Authentication uses a unique per-order token (128-bit CSPRNG) that you cannot share without losing your own access.

How to order

On the order page select type "Double" (two-server VPN chain), country (Luxembourg, Germany, Netherlands or USA) and protocol Hysteria2. After payment, in the "Profile" section a "Hysteria config" button becomes available — download client.yaml and import it into your chosen client.