Hysteria2 VPN Providers, Clients and Panels Compared

Service, client or panel: what each entry gives you

Count the segments: 11 free or mobile apps, 10 consumer VPNs, 9 self-hosted tools and protocol clients, 5 tunnels and protocol cores, 2 decentralised VPNs. Thirty-one of 37 cost nothing, as free software or a free plan. The catch: a client alone connects nowhere. Servers come from a provider or from a VPS you manage yourself.

The three highest page scores

All three handle censorship well, with bypass sub-scores from 7.1 to 8.6. The gap sits elsewhere. StelsVPN claims no logging but does not publish an independent audit to back that claim, and sign-up requires an email, so privacy lands at 1.3. L×Box ships no servers at all (network sub-score 0) and being Android-only caps its platform reach at 1.5. Bypass weighs 40% of the score, privacy 21%, security 14%, price and terms 11%, network and apps and platforms 7% each.

How Hysteria2 behaves on a network

The protocol runs on QUIC over UDP. When a censor probes without knowing the password, responses look like those of any ordinary HTTP/3 website. Authentication is a single password string.

Speed comes from Brutal congestion control: it holds the bandwidth you configured and ignores random packet loss instead of backing off, which suits lossy LTE and hotel Wi-Fi. Against censors there are two levers. Salamander obfuscation hides QUIC fingerprints where a network filters QUIC or HTTP/3 specifically; port hopping handles ISPs that throttle one busy long-lived UDP port.

Hysteria2 clients by device

Every client imports a hysteria2:// URI or a subscription URL. The link carries server, port, password and SNI, and one wrong character in the password kills the handshake silently. With a self-signed certificate on the server, enable the insecure or pinned-certificate option, or TLS verification refuses to start. Check the VPS firewall opens the UDP port, not TCP. The official third-party app list groups clients by role.

When UDP is blocked: the fallback plan

A network that drops UDP stops Hysteria2 completely. Keep a TCP backup profile from the same provider or panel; VLESS with Reality is the standard pick, supported by 26 of these 37 entries. The Hysteria2 vs VLESS comparison covers which protocol to lean on per network. Note that old Hysteria (v1) configs do not work with Hysteria2 servers: it is a rewrite.

Hysteria2 FAQ

Which Hysteria2 option to choose

Running no VPS and holding no subscription: pay a provider. CitadelVPN (8.55) starts at €1.38 a month across 41 countries and 1000+ servers; StelsVPN (4.79) from €3.99 across 12 countries and 700+ servers. Already hold a server or subscription URL: Hiddify or v2rayN on desktop, L×Box or v2rayNG on Android. If managing things yourself sounds better, put 3X-UI on a VPS. Whichever route, keep a TCP fallback profile next to Hysteria2. Protocol basics are covered in the glossary entry.