Skip to content

How to correctly setup sing-box client with VLESS X25519 encryption #3599

Description

@Smosia

OS version: debian 13

sing-box version 1.13.0-alpha.27
Environment: go1.25.3 linux/amd64
Tags: with_gvisor,with_quic,with_dhcp,with_wireguard,with_utls,with_acme,with_clash_api,with_tailscale,with_ccm,badlinkname,tfogo_checklinkname0
Revision: 84ceb90
CGO: disabled

I have X-ray VLESS+uTLS+Reality VPN server on VPS.
I want to use sing-box as a client.

How to correctly setup sing-box in client mode with VLESS X25519 Encryption?
merge request to xray
xray wiki

Where I should write an encryption key? generated by xray on server?
mlkem768x25519plus.native.0xxx.lTxxxxxxxxxxxxxxxxoink
Is it a correct description? docs

Here is my config:

{
    "log": {
        "level": "info",
        "timestamp": true,
        "disabled": false
    },
    "dns": {
        "servers": [
            {
                "type": "https",
                "tag": "cloudflare-doh",
                "server": "1.1.1.1"
            }
        ],
        "final": "cloudflare-doh",
        "strategy": "ipv4_only"
    },
    "inbounds": [
        {
            "type": "tun",
            "interface_name": "xray0",
            "tag": "tun-in",
            "mtu": 1500,
            "auto_route": true,
            "auto_redirect": true,
            "stack": "system",
            "address": ["192.168.x.x/30"]
        }
    ],
    "outbounds": [
        {
            "type": "direct",
            "tag": "direct-out"
        },
        {
            "type": "vless",
            "tag": "vless-out",
            "server": "ip_server",
            "server_port": 443,
            "uuid": "uuid",
            "network": "tcp",
            "flow": "xtls-rprx-vision",
            "tls": {
                "enabled": true,
                "server_name": "website",
                "utls": {
                    "enabled": true,
                    "fingerprint": "chrome"
                },
                "curve_preferences": "x25519",
                "reality": {
                    "enabled": true,
                    "public_key": "pub_key",
                    "short_id": "short_id"
                }
            }
        }
    ],
    "route": {
        "default_domain_resolver": {
            "server": "cloudflare-doh"
        },
        "rules": [
            {
                "action": "sniff"
            },
            {
                "protocol": "dns",
                "action": "hijack-dns"
            },
            {
                "inbound": "tun-in",
                "domain_suffix": [
                    "ifconfig.me"
                ],
                "outbound": "vless-out",
                "action": "route"
            }
        ],
        "final": "direct-out"
    }
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions