Snell

Since sing-box 1.14.0

Structure

{
  "type": "snell",
  "tag": "snell-out",

  "server": "127.0.0.1",
  "server_port": 1080,
  "version": 4,
  "psk": "password",
  "userkey": "",
  "reuse": false,
  "network": "tcp",
  "obfs_mode": "",
  "obfs_host": "",

  ... // Dial Fields
}

Version 6 Structure

{
  "type": "snell",
  "tag": "snell-out",

  "server": "127.0.0.1",
  "server_port": 1080,
  "version": 6,
  "psk": "password",
  "userkey": "",
  "reuse": false,
  "network": "tcp",
  "mode": "",

  ... // Dial Fields
}

Fields

server

Required

The server address.

server_port

Required

The server port.

version

Required

The Snell protocol version, one of 4 6.

Version 4 supports HTTP obfuscation (obfs_mode / obfs_host); version 6 replaces it with traffic shaping (mode) and requires a psk of 12 to 255 bytes.

Note

Since we intentionally do not support the QUIC proxy mode of Snell v5, the v5 wire protocol is effectively identical to v4, so no separate v4 server or v5 client is provided.

psk

Required

The pre-shared key.

userkey

The user key, used to authenticate against a multi-user server.

reuse

Enable connection reuse (the Snell v2 CONNECT command).

network

Enabled network

One of tcp udp.

Both is enabled by default.

obfs_mode

Version 4 only

HTTP obfuscation mode, one of none http.

none is used by default.

obfs_host

Version 4 only

The HTTP Host header sent when obfs_mode is http.

bing.com is used by default.

mode

Version 6 only

Traffic shaping mode, one of default unshaped unsafe-raw.

default is used by default.

Dial Fields

See Dial Fields for details.