Hysteria 2 (HY2) vs VLESS REALITY: Which Protocol Is Better for Speed, Stability, and Restricted Networks?
Technical Editorial Team · Published November 2, 2026
Choosing a VPN or proxy protocol is no longer just about finding the highest download speed. In countries where internet access is restricted, a fast connection is only useful if it can be established and maintained reliably.
Two technologies frequently discussed among advanced proxy users are Hysteria 2 (HY2) and VLESS with REALITY.
Both aim to provide efficient, encrypted communication, but they take fundamentally different approaches to network transport.
Hysteria 2 builds on QUIC and UDP, focusing on high-throughput connections and performance under challenging network conditions. VLESS with REALITY is commonly deployed over TCP, using a TLS-like handshake design intended to make proxy traffic harder to distinguish from legitimate encrypted connections.
This comparison covers ordinary HY2 over UDP and VLESS + REALITY over TCP, rather than every possible packet encapsulation.
So which one should you choose?
The answer depends on your network environment, especially whether UDP traffic is available, how much packet loss occurs, and how aggressively the network filters encrypted connections.
What Is Hysteria 2 (HY2)?
Hysteria 2 is an open-source proxy protocol built on top of QUIC, the transport technology used by HTTP/3.
Unlike traditional TCP-based proxy connections, HY2 uses UDP as its underlying transport.
QUIC provides several useful capabilities:
- Encrypted connections using TLS 1.3
- Multiplexing multiple streams over a single connection
- Avoiding TCP-style head-of-line blocking between independent streams
- Modern congestion control and loss recovery
- Support for connection migration in suitable environments
Hysteria 2 adds proxy-specific features, including authentication, UDP forwarding, and configurable congestion-control behavior.
One of its distinguishing features is Brutal, a congestion-control mechanism designed to pursue a configured transmission rate rather than relying entirely on conventional congestion feedback.
This can improve throughput in some lossy environments, especially when adequate bandwidth is available. It can also create unnecessary congestion or unfair bandwidth competition if configured too aggressively.
Why Can HY2 Be Fast?
TCP interprets packet loss as a possible indication of network congestion and typically reduces its sending rate accordingly.
On some networks, packet loss may instead result from wireless interference or other transmission problems.
Hysteria 2's congestion-control options can be advantageous in these situations.
For example, a connection with moderate packet loss but substantial available bandwidth may perform better with a carefully tuned HY2 configuration than with a conventional TCP connection.
Actual performance still depends on latency, available capacity, server configuration, competing traffic, and the type of packet loss.
HY2 is not automatically faster than TCP in every environment.
What Is VLESS REALITY?
VLESS is a lightweight proxy protocol commonly used with Xray-core.
REALITY is a security and handshake mechanism that can be combined with VLESS, commonly using an XTLS Vision-based configuration.
It is important to distinguish the components:
- VLESS handles proxy communication.
- REALITY provides a TLS-like handshake and authentication mechanism designed for traffic camouflage.
- TCP, in a common deployment, provides the underlying transport.
REALITY is designed to make certain proxy connections resemble ordinary TLS traffic, reducing reliance on conventional TLS certificates and domain-fronting arrangements.
Its purpose is not simply to encrypt data. It also aims to make protocol identification and active probing more difficult.
For background, see What Is VLESS? and How REALITY Works.
Why Is VLESS REALITY Popular?
VLESS REALITY is frequently used in environments where UDP connectivity is unreliable or restricted.
Because a common deployment operates over TCP port 443, it can take advantage of the broad availability of HTTPS-related TCP connectivity.
This does not make it invisible or unblockable.
Network operators can still use IP blocking, traffic analysis, connection interference, and other techniques to disrupt access.
Its practical value comes from combining a relatively lightweight proxy protocol with a handshake design intended for restrictive network environments.
Hysteria 2 vs VLESS REALITY: Key Differences
| Feature | Hysteria 2 (HY2) | VLESS REALITY |
|---|---|---|
| Typical transport | UDP / QUIC | TCP |
| Encryption | QUIC with TLS 1.3 | REALITY security mechanism |
| Performance focus | High throughput and congestion control | Reliable transport and traffic camouflage |
| Packet loss handling | QUIC recovery and configurable congestion control | TCP congestion control and retransmission |
| UDP dependency | Required for the HY2 transport | Not required in common TCP deployments |
| Traffic camouflage | QUIC / HTTP/3-related behavior | TLS-like handshake behavior |
| Restricted networks | Depends heavily on UDP accessibility | Often suitable where TCP 443 remains available |
| Configuration | Requires compatible HY2 client and server | Requires compatible VLESS/REALITY client and server |
These are architectural differences, not benchmark results. Performance must be measured on the same network with comparable servers and routing conditions.
1. Speed: Is HY2 Faster Than VLESS REALITY?
Hysteria 2 can deliver excellent throughput on networks where UDP is available and packet loss limits conventional TCP performance.
Its QUIC foundation and configurable congestion control can help sustain data transfer under certain conditions.
VLESS REALITY, meanwhile, benefits from mature TCP implementations and widespread network compatibility.
On a clean, low-latency connection with minimal packet loss, both approaches can provide excellent performance.
For streaming, browsing, gaming, and large downloads, the quality of the underlying server and network route may matter more than the protocol itself.
A well-routed VLESS REALITY server can easily outperform a poorly routed HY2 server, and vice versa.
The fastest protocol is the one that performs best on your actual network, not the one with the highest theoretical throughput.
2. Stability: What Happens When UDP Is Restricted?
This is one of the most important differences.
Hysteria 2 requires UDP connectivity to establish its QUIC-based connection.
Some networks restrict UDP traffic, apply rate limits, or interfere with traffic patterns associated with QUIC.
When the necessary UDP traffic is blocked, an ordinary HY2 UDP deployment cannot establish its transport connection.
There is a specialized exception: upstream documents Mimic encapsulation, which makes UDP packets appear as TCP on the wire. It requires Linux, an additional tool, and appropriate privileges at both ends. It does not turn QUIC into ordinary TCP and should not be assumed to work in mobile clients. The UDP comparison here excludes this specialized setup.
VLESS REALITY over TCP does not have this specific dependency.
TCP port 443 is widely used for HTTPS traffic, making TCP connectivity operationally important for many networks.
As a result, VLESS REALITY may be a more practical choice when UDP connectivity is blocked or inconsistent.
A TCP-based connection can still fail because of IP blocking, traffic identification, or other network restrictions.
The key is to identify which transport remains usable.
3. Censorship Resistance: HY2 vs REALITY
Internet filtering systems can inspect and interfere with traffic using several methods:
- IP address and port blocking
- DNS interference
- TLS handshake analysis
- Protocol fingerprinting
- Active probing
- Traffic pattern analysis
- UDP filtering or throttling
HY2 and VLESS REALITY approach these challenges differently.
HY2: QUIC-Based Communication
HY2 uses QUIC, which is also used by legitimate HTTP/3 applications.
This gives it a transport foundation that exists in ordinary internet traffic.
Hysteria 2 also supports mechanisms intended to make its traffic resemble HTTP/3 under certain configurations.
Such mechanisms should not be interpreted as a guarantee that HY2 traffic is indistinguishable from normal web browsing.
A network can restrict QUIC or UDP broadly without needing to identify HY2 specifically.
VLESS REALITY: TLS Handshake Camouflage
REALITY focuses on making connection establishment resemble legitimate TLS communication.
It includes authentication and handshake behavior intended to resist certain forms of probing and protocol identification.
In environments where TCP 443 remains available but proxy traffic is actively inspected, this design can offer practical advantages.
Its effectiveness depends on correct configuration, current implementations, and the filtering techniques deployed by the network operator.
Neither protocol guarantees permanent resistance to censorship.
4. Which Protocol Works Better in China, Russia, or Iran?
There is no single answer that applies to every ISP, mobile carrier, city, or period.
Filtering systems evolve, and network policies can differ significantly between fixed broadband, mobile networks, public Wi-Fi, and enterprise connections.
China
China operates a sophisticated internet filtering environment.
For users in China, transport accessibility and resistance to connection interference are often more important than maximum benchmark speed.
VLESS REALITY over TCP can be a practical option when UDP connectivity is inconsistent or restricted.
HY2 may also perform well on networks where UDP and QUIC traffic remain usable.
Actual availability should be tested on the user's specific connection.
Russia
Internet restrictions in Russia can vary by network operator and region.
Both TCP-based and UDP-based proxy connections may be affected by traffic filtering or blocking.
HY2 can be effective where UDP connectivity is reliable, while VLESS REALITY may be preferable where TCP transport provides better continuity.
Iran
Iran's internet environment has experienced periods of severe filtering and connectivity restrictions.
UDP availability may vary, and connection reliability can change rapidly.
For users operating under these conditions, maintaining access through a usable transport is more important than maximizing peak throughput.
VLESS REALITY over TCP may provide an alternative when QUIC-based connections cannot be established.
For all three countries, protocol selection should be based on current network measurements rather than permanent assumptions about which protocol works.
5. Is HY2 Better for Gaming and Streaming?
Hysteria 2 can be attractive for bandwidth-intensive applications when UDP connectivity is stable.
QUIC multiplexing and congestion-control behavior may help certain workloads.
However, HY2 is not automatically the best choice for gaming simply because it uses UDP.
Online games are sensitive to latency, jitter, packet loss, and route quality.
A proxy may also introduce additional encapsulation and routing overhead.
For streaming services, sustained throughput and connection stability are usually more important than short bursts of peak bandwidth.
A well-configured TCP-based proxy can provide excellent streaming performance.
Users should compare real application performance rather than relying exclusively on synthetic speed tests.
6. Why Automatic Server Selection Matters More Than Protocol Hype
Protocol comparisons often overlook a fundamental problem: the internet is not a uniform network.
A server that performs well from one country may perform poorly from another.
Even within the same country, performance can change depending on the ISP, international routing, congestion, and time of day.
Consider two connections:
- Server A uses HY2 but has a congested international route.
- Server B uses VLESS REALITY and has a shorter, less congested route.
Server B may provide a noticeably better experience despite using a different transport protocol.
This is why practical connection quality depends on more than protocol choice.
Important factors include server location, route quality, latency, packet loss, available bandwidth, and the ability to recover from failures.
For more context, see Smart Routing and Automatic Server Selection.
7. Should You Choose HY2 or VLESS REALITY?
Choose Hysteria 2 when:
- Your network allows stable UDP and QUIC connections.
- You want to experiment with throughput optimization.
- You have control over your server configuration.
- Your workload benefits from HY2's transport characteristics.
Choose VLESS REALITY when:
- UDP connectivity is restricted or unreliable.
- TCP connectivity is more consistently available.
- You need a protocol designed with TLS handshake camouflage in mind.
- You prioritize practical connectivity in restrictive network environments.
For most users, the better strategy is to evaluate actual connection success, latency, throughput, and stability.
The protocol is one part of the system. The server, network route, and configuration are equally important.
Frequently Asked Questions
Is Hysteria 2 the same as a VPN?
Not exactly. Hysteria 2 is a proxy protocol. It can be used by VPN-like applications to carry network traffic, but it is not itself a complete VPN service.
Does HY2 use TCP or UDP?
Hysteria 2 uses QUIC over UDP as its underlying transport.
Is HY2 faster than VLESS REALITY?
HY2 can outperform TCP-based configurations in some lossy environments, particularly when its congestion control is appropriately configured. There is no universal performance advantage.
Can HY2 work if UDP is blocked?
An ordinary HY2 QUIC-over-UDP deployment cannot connect through a blocked UDP path. Linux-only Mimic encapsulation requires additional setup at both ends; it is not a capability to assume in every HY2 client.
Is VLESS REALITY more secure than HY2?
Both technologies use cryptographic mechanisms, but their security properties and threat models differ. Security depends on implementation, configuration, authentication, and the threats being considered. Neither should be declared universally more secure.
Can HY2 be detected or blocked?
Yes. QUIC-based traffic can be filtered, throttled, or blocked. Traffic camouflage does not guarantee undetectability.
Which protocol should I use in a restricted network?
Start by determining whether TCP and UDP connectivity are available. Then compare connection success, stability, latency, and throughput on your actual network. Where UDP is unreliable, a TCP-based VLESS REALITY configuration may be more practical.
Final Thoughts
Hysteria 2 and VLESS REALITY represent two different approaches to modern proxy connectivity.
HY2 emphasizes QUIC-based transport, throughput optimization, and configurable congestion control.
VLESS REALITY emphasizes lightweight proxy communication combined with a TLS-like handshake design, commonly deployed over TCP.
Both can be effective when matched to suitable network conditions.
The most important question is not which protocol wins an abstract benchmark. It is which connection remains fast, stable, and usable on the network you actually have.