Xray-core InternalsComplete Architecture Analysis

Every code path, every protocol, every packet — dissected for re-implementation.

Architecture

Instance lifecycle, feature system, dispatcher, routing engine, pipe/buffer abstractions, and the complete packet journey from inbound to outbound.

VLESS (Vision, XUDP, reverse), VMess (AEAD), Trojan, Shadowsocks 2022, SOCKS5, HTTP, Dokodemo-door, Freedom, WireGuard, Hysteria2, TUN, and more.

TCP, WebSocket, gRPC, HTTPUpgrade, SplitHTTP, mKCP, QUIC — plus TLS fingerprinting (uTLS) and REALITY authentication.

gVisor userspace TCP/IP stack, TUN interface management, Full-Cone NAT for UDP, and Fake-IP integration for transparent proxying.

Multi-server DNS with domain routing, UDP/TCP/DoH/DoQ backends, LRU-based Fake-IP pool, and sniffing-based domain recovery.

Wire format specifications, interface contracts, compatibility notes, and a step-by-step checklist for building a compatible implementation.