Protocol guide

What is AnyTLS? TLS proxy configuration and compatibility

AnyTLS is a TLS-based proxy protocol with a deliberately simple client profile. It is distinct from VLESS and Trojan even when all three use TLS and port 443.

Technical review: 2026-09-03 · PublicVPNList Editorial Team

Connection model

An AnyTLS client establishes TLS to the configured server name, authenticates with a password and multiplexes proxy traffic. TLS provides the encrypted outer channel; the exact session and padding behavior belongs to the AnyTLS implementation.

Required configuration

A profile needs a public host, port, password and TLS server name. Certificate validation should remain enabled. Optional ALPN or implementation settings must match the server, and anytls:// links should be imported only by clients that document AnyTLS support.

Availability on PublicVPNList

The validator recognizes AnyTLS links now, but PublicVPNList does not publish an indexable live list until a dedicated full-tunnel checker and repeatable inventory meet the central data gate. A TCP or TLS handshake by itself is not proof of an AnyTLS tunnel.

Decision reference

Decision point	What to verify
Connection model	Validate the link locally without uploading its password.
Required configuration	Use a current client with explicit AnyTLS support.
Availability on PublicVPNList	Keep SNI and certificate validation enabled.

Practical checklist

Validate the link locally without uploading its password.
Use a current client with explicit AnyTLS support.
Keep SNI and certificate validation enabled.
Require HTTPS-through-tunnel and changed exit IP evidence.

Limitations

Client support is newer and less universal.
Generic TLS probes cannot authenticate the proxy.
No indexable live catalog exists until the data gate passes.

Privacy and interpretation

A successful configuration or connectivity result proves only the tested technical behavior at that time. It does not prove a no-logging policy, legal status, operator identity or safety for sensitive accounts. Public profiles should be used for low-risk testing with end-to-end HTTPS.

Technical source: AnyTLS Go implementation.

Continue with a relevant check

Frequently asked questions

What should I verify first for “What is AnyTLS? TLS proxy configuration and compatibility”?: Validate the link locally without uploading its password.
What is the main limitation of this protocol guide?: Client support is newer and less universal.
Where is the underlying behavior for this page documented?: Use the linked AnyTLS Go implementation as the primary technical reference, then confirm fields against the client version you run.