VLESS
Lean protocol family commonly used with TLS, REALITY, WS, XHTTP, gRPC, and now V2K. Good default for most catalog routes and advanced manual setups.
In the app, a connection is assembled from multiple layers. The user-facing protocol may be VLESS, VMess, Trojan, Shadowsocks, or WireGuard. The transport may be TCP, WS, XHTTP, gRPC, Socket Custom, or V2K. Security may be `none`, `tls`, or `reality`, depending on the route.
| Input type | Accepted by app | Typical use | Notes |
|---|---|---|---|
| vless:// | Yes | Direct link import | Supports standard query fields and the custom type=v2k branch when present. |
| vmess:// | Yes | Direct link import | Imported as a personal/custom entry when used outside the official catalog. |
| trojan:// | Yes | Direct link import | Common with TLS and WS/gRPC style transports. |
| ss:// | Yes | Direct link import | Used for personal import and also for public server feeds exposed inside the app. |
| Xray JSON | Yes | Manual/custom mode | Imported as raw JSON for advanced use; the app then adapts manual fields where possible. |
| .v2k | Yes | Portable config package | Supports both plaintext and protected packages, preserving advanced Socket Custom and V2K fields. |
Lean protocol family commonly used with TLS, REALITY, WS, XHTTP, gRPC, and now V2K. Good default for most catalog routes and advanced manual setups.
Still accepted for compatibility and import workflows, especially where legacy subscriptions or older personal setups are involved.
Often used as a TLS-friendly route family with WebSocket or other HTTP-like transports. Supported both in manual flow and link import.
Supported for direct import and public server feeds. Especially relevant for public externally indexed servers surfaced by the app catalog.
Supported as a catalog/runtime family where the route defines WireGuard peer details. It is not handled through normal VLESS/VMess link parsing.
| Transport | What it does | Typical security | When to use it |
|---|---|---|---|
| TCP | Direct stream transport with optional HTTP header behavior. | `none`, `tls`, `reality` | Simple routes or REALITY/TCP setups. |
| WS | WebSocket transport with host/path routing. | `tls`, `none` | Common CDN and reverse-proxy setups. |
| HTTP / H2 | HTTP/2-style transport variants. | `tls` | Routes that are explicitly provisioned for HTTP/2 behavior. |
| gRPC | gRPC transport with service name and related knobs. | `tls` | Stable HTTP/2 deployments and CDN-friendly designs. |
| HTTPUpgrade | HTTP upgrade style flow with extra header control. | `tls`, `none` | Routes that explicitly expect HTTP upgrade semantics. |
| XHTTP | Xray HTTP transport with richer mode/XMUX controls. | `tls`, `reality`, `none` | Advanced HTTP-based deployments that need more control than standard WS/gRPC. |
| KCP | mKCP / UDP-based family. | `none` | Special cases only; less common in the app’s mainstream catalog flows. |
| Socket Custom | HTTP RAW payload branch implemented inside the app/runtime. | Usually `none` or `tls` depending on route | Carrier/firewall payload workflows similar to injector behavior. |
| V2K | Custom V2K transport family with `stream`, `poll`, and `carrier-poll` modes. | Own auth/AEAD model inside V2K settings | Advanced session tuning and carrier-sensitive fallbacks. |
Used when the route is intentionally plain, or when the outer disguise happens in another layer such as Socket Custom or specific HTTP-style behavior.
Most common security layer for standard routes. Works with SNI, fingerprint, ALPN, and mainstream CDN/proxy edges.
Used on routes provisioned for REALITY. Requires its own public key / short ID parameters and is not interchangeable with plain TLS routes.
If you are here for payload work, open Socket Custom. If you are here for carrier-sensitive session tuning, open V2K.