Add hysteria2 chrome parrot support

This commit is contained in:
世界
2026-08-30 17:41:45 +08:00
parent 10d37384f0
commit ec3e95935f
7 changed files with 51 additions and 6 deletions
+21
View File
@@ -2,6 +2,7 @@
:material-plus: [hop_interval_max](#hop_interval_max)
:material-plus: [bbr_profile](#bbr_profile)
:material-plus: [disable_chrome_parrot](#disable_chrome_parrot)
:material-plus: [realm](#realm)
:material-alert: [obfs](#obfstype)
@@ -38,6 +39,7 @@
"bbr_profile": "",
"brutal_debug": false,
"disable_chrome_parrot": false,
"realm": {
"server_url": "https://realm.example.com",
"token": "",
@@ -178,6 +180,25 @@ BBR congestion control algorithm profile, one of `conservative` `standard` `aggr
Enable debug information logging for Hysteria Brutal CC.
#### disable_chrome_parrot
!!! question "Since sing-box 1.14.0"
Disable Chrome QUIC fingerprint parroting.
If it is not disabled, the client's QUIC handshake is made to parrot Chrome's, so that Hysteria traffic
is harder to identify by handshake fingerprinting.
To match Chrome, the client uses Chrome's own QUIC parameters, which override some settings:
`idle_timeout` is fixed at 30 seconds, `max_concurrent_streams` and `initial_packet_size` are replaced by
Chrome's values, and the receive windows start at Chrome's initial values before growing to the configured
maximums.
!!! warning ""
Chrome does not declare support for Ed25519, so a server using an Ed25519 certificate will fail the
handshake. Use an ECDSA or RSA certificate instead; certificates issued by ACME are unaffected.
#### realm
!!! question "Since sing-box 1.14.0"
@@ -2,6 +2,7 @@
:material-plus: [hop_interval_max](#hop_interval_max)
:material-plus: [bbr_profile](#bbr_profile)
:material-plus: [disable_chrome_parrot](#disable_chrome_parrot)
:material-plus: [realm](#realm)
:material-alert: [obfs](#obfstype)
@@ -38,6 +39,7 @@
"bbr_profile": "",
"brutal_debug": false,
"disable_chrome_parrot": false,
"realm": {
"server_url": "https://realm.example.com",
"token": "",
@@ -176,6 +178,23 @@ BBR 拥塞控制算法配置,可选 `conservative` `standard` `aggressive`。
启用 Hysteria Brutal CC 的调试信息日志记录。
#### disable_chrome_parrot
!!! question "自 sing-box 1.14.0 起"
禁用 Chrome QUIC 指纹模仿。
如果没有禁用,客户端的 QUIC 握手将被构造为模仿 Chrome,使 Hysteria 流量更难通过握手指纹识别。
为了与 Chrome 一致,客户端使用 Chrome 自己的 QUIC 参数,其覆盖部分设置:
`idle_timeout` 固定为 30 秒,`max_concurrent_streams``initial_packet_size` 被替换为 Chrome 的值,
接收窗口从 Chrome 的初始值开始,再增长到配置的最大值。
!!! warning ""
Chrome 不声明支持 Ed25519,因此使用 Ed25519 证书的服务端将无法完成握手。
请改用 ECDSA 或 RSA 证书;由 ACME 签发的证书不受影响。
#### realm
!!! question "自 sing-box 1.14.0 起"
+3
View File
@@ -11612,6 +11612,9 @@
"brutal_debug": {
"type": "boolean"
},
"disable_chrome_parrot": {
"type": "boolean"
},
"realm": {
"$ref": "#/$defs/Hysteria2Realm"
}