VPN07

NekoBox & sing-box 2026: Complete Guide to VLESS Reality, Hysteria2 & TUIC Protocols

March 9, 2026 20 min read NekoBox sing-box Android / Windows

What you'll learn: NekoBox for Android (and NekoBox for PC / NekoRay on Windows) is one of the most advanced open-source proxy clients in 2026, powered by the sing-box core. This guide explains how to install it, configure the newest protocols (VLESS+Reality, Hysteria2, TUIC), import VPN subscriptions, set up routing rules, and resolve the most common errors users face.

NekoBox vs NekoRay vs sing-box: What's the Difference?

NekoBox for Android

Most Popular

Android GUI app powered by sing-box core. Supports all modern protocols, subscription import, and has a clean Material You interface. Available on GitHub.

NekoBox for PC (NekoRay)

Windows / Linux

The desktop companion (formerly known as NekoRay). Uses the same sing-box core with a Qt-based desktop UI. Supports Windows 10/11 and major Linux distributions.

sing-box (Core)

Universal Engine

The underlying proxy engine that powers NekoBox and many other clients (Hiddify, Karing, etc.). Can also run standalone via CLI. Supports the widest protocol range of any open-source proxy core.

Why VLESS Reality, Hysteria2 & TUIC in 2026?

Traditional protocols like VMess and Shadowsocks are increasingly detectable by deep packet inspection (DPI). The newer protocols in NekoBox's arsenal are designed to be fundamentally harder to block:

VLESS + Reality

  • • Borrows real domain TLS certificates
  • • Indistinguishable from real HTTPS
  • • No detectable VPN fingerprint
  • • Best for censored regions

Hysteria2

  • • Built on QUIC / UDP
  • • Congestion control optimized
  • • Ideal for lossy networks
  • • Fastest streaming speeds

TUIC v5

  • • TCP + UDP over QUIC
  • • Multiplexed connections
  • • Low latency, low CPU usage
  • • Excellent for mobile networks

Installing NekoBox on Android

1

Download the APK

Go to github.com/MatsuriDayo/NekoBoxForAndroid → Releases → download the latest NekoBox-x.x.x-arm64-v8a.apk (use armeabi-v7a for older 32-bit devices).

2

Allow unknown sources

Android Settings → Security → enable "Install unknown apps" for your file manager or browser. This is only needed once.

3

Install and grant permissions

Tap the APK to install. When prompted, allow NekoBox to create a VPN connection. This is required for the TUN mode that routes all device traffic.

4

First open

Open NekoBox → the main screen shows an empty proxy list. You can add nodes manually or import via subscription URL.

Installing NekoBox for PC on Windows

1

Download from GitHub

Visit github.com/MatsuriDayo/nekoray → Releases → download nekoray-x.x.x-windows64.zip.

2

Extract and run

Extract the ZIP to a folder (e.g., C:\nekobox\). Run nekoray.exe — no installation required, it's a portable app.

3

Select sing-box core

On first launch, go to Preferences → Core → select sing-box as the active core (this enables all new protocols including Hysteria2 and TUIC).

How to Import a Subscription in NekoBox

Android import steps

  1. 1. In NekoBox main screen → tap the menu icon (top right) → Groups.
  2. 2. Tap +New Group → enter a name → paste your subscription URL in the URL field.
  3. 3. Tap OK → in the Groups list, tap the refresh icon next to your new group.
  4. 4. NekoBox will fetch all nodes. Go back to the main screen → your nodes appear in the list.
  5. 5. Tap a node → tap the play button (▶) at the bottom to connect.

Windows PC import steps

  1. 1. Open NekoBox PC → Subscriptions menu → Add Subscription Group.
  2. 2. Enter subscription URL → check "Auto Update" → click OK.
  3. 3. Subscriptions → Update All Subscriptions to fetch nodes immediately.
  4. 4. Right-click a node → Start to connect.

Manual VLESS + Reality Configuration

If your provider gives you a VLESS+Reality link, you can add it manually. Here's the configuration breakdown:

# VLESS+Reality node example (sing-box format):
{
  "type": "vless",
  "tag": "VPN07-US-Reality",
  "server": "your.server.com",
  "server_port": 443,
  "uuid": "your-uuid-here",
  "flow": "xtls-rprx-vision",
  "tls": {
    "enabled": true,
    "server_name": "www.microsoft.com",  // borrowing real domain TLS
    "utls": {
      "enabled": true,
      "fingerprint": "chrome"
    },
    "reality": {
      "enabled": true,
      "public_key": "your-public-key",
      "short_id": "your-short-id"
    }
  }
}

In NekoBox Android, tap + on the main screen → Add Profile Manually → paste the vless:// URI directly, or use the QR code scanner.

Hysteria2 Configuration in NekoBox

Hysteria2 delivers the fastest speeds for streaming and downloading. Here's a sample configuration:

# Hysteria2 node configuration (sing-box format):
{
  "type": "hysteria2",
  "tag": "VPN07-HK-Hy2",
  "server": "your.server.com",
  "server_port": 443,
  "password": "your-password",
  "tls": {
    "enabled": true,
    "server_name": "your.server.com",
    "insecure": false
  },
  "up_mbps": 100,    // your upload speed in Mbps
  "down_mbps": 200   // your download speed in Mbps
}

Tip: Set correct speed values

Setting up_mbps and down_mbps too high can cause connection rejection on some servers. Start with realistic values matching your actual connection speed. With VPN07's 1000Mbps server bandwidth, you can safely set higher values if your local ISP supports it.

Setting Up Routing Rules

NekoBox's routing system determines which traffic goes through the proxy. For most users, the built-in modes work well:

Bypass Mode (Recommended)

Route only foreign traffic through the proxy. Local and domestic traffic uses direct connection. Fastest overall performance.

Android: Settings → Route → Bypass LAN & China

Global Mode

All traffic routes through the proxy. Maximum privacy and censorship bypass but slightly higher latency for local services.

Android: Settings → Route → Proxy All

Protocol Speed Comparison (NekoBox 2026)

Based on testing with VPN07 servers (1000Mbps bandwidth) using NekoBox on Android, here are typical results:

Hysteria2 ~850 Mbps

QUIC-based, best for high-bandwidth tasks

TUIC v5 ~780 Mbps

Excellent stability, great for mobile

VLESS + Reality ~650 Mbps

Best bypass rate, TCP-based

Trojan ~520 Mbps

Classic TLS, very stable

Common Issues & Fixes

Q: NekoBox connects but no internet access (Android)

Fix: Go to Settings → DNS → change to a public DNS like 8.8.8.8 or 1.1.1.1. Also check that the VPN permission is granted in Android system settings. Some MIUI/HyperOS devices require additional "Battery → No restrictions" setting to prevent the app from being killed.

Q: Hysteria2 connection refused / timeout

Fix 1: Confirm your up_mbps/down_mbps values are not set higher than your ISP's actual speed — this triggers server-side rejection. Fix 2: Ensure UDP traffic is not blocked by your network. Some corporate/school networks block UDP. In that case, switch to TCP-based protocols (VLESS/Trojan). Fix 3: Check that server-side Hysteria2 port is open.

Q: Subscription updated but nodes are old / not refreshing

Fix: Android — long-press the group → Update Group manually. If it still fails, check that the subscription URL is accessible (try opening in browser first). The URL must return valid sing-box JSON or Clash YAML format.

Q: VLESS Reality shows "TLS handshake failed"

Fix: The server_name in your Reality config must match what the server expects. Also verify the public_key and short_id are correct. Try setting utls fingerprint to safari or firefox if chrome doesn't work on your network.

Q: NekoBox PC won't start — "WinSock failed" or DLL error

Fix: Install the latest Visual C++ Redistributable from Microsoft. Also ensure Winsock is not corrupted — run netsh winsock reset in Administrator Command Prompt and reboot.

Q: Battery draining fast while NekoBox runs on Android

Fix: In Android Settings → Battery → NekoBox → set to "No restrictions" or "Don't optimize". Also reduce the URL test frequency in your profile groups. Avoid "Global" mode if not necessary — Bypass mode routes local traffic directly, reducing proxy processing load.

Get the Best NekoBox Subscription

VPN07 supports VLESS Reality, Hysteria2 & TUIC — fully compatible with NekoBox

VPN07 provides sing-box/NekoBox-compatible subscription links with all modern protocols pre-configured. Our 70+ country node network with 1000Mbps dedicated bandwidth per node ensures NekoBox's speed tests will consistently return excellent results. Operating since 2015 with 10 years of stability — and a 30-day money-back guarantee.

$1.5/mo
Best Value
1000Mbps
Per Node
70+
Countries
30-Day
Refund

Related Articles

$1.5/mo · 10 Years
Try VPN07 Free