# DC9 sing-box

The managed sing-box service runs Trojan, AnyTLS, Hysteria2, VLESS Reality,
and two Snell compatibility generations.

## Snell compatibility

- `SNELL_V4_PORT` renders a Snell inbound with `version: 5`. sing-box does not
  implement Snell v5 QUIC, so its v5 TCP wire protocol is compatible with
  clients configured as Snell v4.
- `SNELL_V6_PORT` renders a separate `version: 6` inbound. Snell v6 is not wire
  compatible with v4/v5 and therefore requires its own port and PSK.
- Keep the existing standalone `snell-managed` project running during the
  migration. Retire it only after the new v4-compatible inbound passes a
  sustained client test.
- Current Mihomo releases support Snell through v5, not v6. Use the v4-compatible
  endpoint from Mihomo and reserve the v6 endpoint for a sing-box 1.14 client.

The real PSKs live only in the Arcane Environment-local `.env`; never commit
them to this repository.