VPN with VLESS and Hysteria in one subscription

Why VLESS + Hysteria is Lunaire's USP

Most VPN services pick one protocol and build the whole product around it. WireGuard-only services (Mullvad, Proton) are fast on stable networks but fall apart on mobile. VLESS-only services are stealthy but slow on long routes. Hysteria-only services are fast but break on networks that block UDP.

Lunaire is one of the few services where both protocols ride in the same subscription plus two more (xHTTP and WebSocket). The client receives all four configs on import and picks the best one on the fly.

How the multiprotocol approach works

On client launch (Hiddify, sing-box, NekoBox), a URL test runs: every available config gets a ping measurement via a test endpoint (usually Google or Cloudflare). The client sorts configs by ping and marks the best one as primary. The rest stay in standby.

If the active connection starts to degrade (rising ping, packet loss, dropping throughput), the client automatically switches to the next one. In sing-box — via an outbound_selector with a configured health-check interval. In Hiddify — through the built-in Auto group. In NekoBox — via URL Test Group. Switchover takes under a second, TCP sessions are preserved.

When VLESS is active, when Hysteria

VLESS Reality active: corporate networks that block UDP, public Wi-Fi with QUIC filtering, ISPs that throttle UDP at peak hours.

Hysteria 2 active: mobile internet (LTE/5G), networks with packet loss above 3%, long international routes with high RTT, stable home connections (where any protocol works, Hysteria gives more speed).

xHTTP active: middle-ground when Hysteria doesn't pass and Reality is unstable — typical for corporate VPN gateways with aggressive TLS inspection.

WebSocket active: networks with DPI that blocks anything not resembling real-time web traffic. Slowest of the four, most compatible.

Subscription

Open @lunairevpn_bot, get a subscription URL. Paste it into Hiddify/NekoBox/sing-box. Done — auto-switch runs itself. On Dusk (free) all four protocols are available; only traffic (500 MB/day) and device count (1) are capped. Paid tiers unlock more nodes and devices.

FAQ