Xray-core, sing-box, Hiddify, Amnezia: who is responsible for what
In short: Xray-core and sing-box are server/client “cores” that implement the protocols themselves (VLESS, REALITY, Shadowsocks, Hysteria, and so on). They are powerful, but they have no graphical interface — they are tools for enthusiasts and admins. Hiddify and Amnezia are clients with a UI on top of these cores, plus their own service features.
The confusion comes from the way VPN names get mixed together in discussions: “try VLESS,” “install Hiddify,” “Amnezia has its own protocol,” “Xray is stronger than sing-box.” In reality, these are different layers of the stack. The core handles the protocol itself; the client lets a person use it without working with config files.
Below: what each part does, which combinations make sense, when a client is enough, and when it is useful to know about the core underneath it.
Short version
- Xray-core is the core from the XTLS project: it implements VLESS, REALITY, XTLS-Vision, Shadowsocks, Trojan, and others.
- sing-box is a modern universal core: the same protocols, plus Hysteria, TUIC, NaiveProxy.
- Hiddify is a UI client based on sing-box; it supports subscription links and multiple servers.
- Amnezia is a client plus a setup wizard for your own server, with its own obfuscated protocols (AmneziaWG, Cloak).
- A subscription link is a single format for importing a set of servers into any modern client.
- The specific protocol matters more than the specific client: VLESS+REALITY works the same way in Hiddify, NekoBox, and sing-box CLI.
Who is responsible for what
To choose deliberately, it is important to understand the layers. The stack usually looks like this: on the server and the client there is a shared core, on top of it there is a UI wrapper, and between them there is a configuration/subscription format.
Xray-core
An open core developed by the XTLS community. It implements modern protocols such as VLESS with REALITY (masking as someone else’s TLS certificate), XTLS-Vision (TLS handshake optimization), and the classic Shadowsocks/Trojan set. It is the de facto base for most modern “circumvention” VPN configs. Repository: github.com/xtls/xray-core.
sing-box
An alternative universal core from the SagerNet project. It supports almost all Xray protocols (VLESS, REALITY, Shadowsocks, Trojan) and, on top of that, modern UDP protocols such as Hysteria and TUIC. sing-box has a cleaner modular architecture, and many new clients are built on it. Repository: github.com/sagernet/sing-box.
Hiddify
A client wrapper with a clear UI, built on sing-box. Its main feature is support for subscription links: the user pastes one URL, and the client imports a set of servers with different protocols, updates them when they change, and selects the best one by ping. It is suitable when you need a convenient way to use ready-made infrastructure, either your own or a commercial provider’s. Repository: github.com/hiddify/hiddify-app.
Amnezia
A client plus a server wizard: it helps deploy your own VPN on a VPS almost by clicking through buttons. It focuses on self-hosted setups and offers its own obfuscated protocols — AmneziaWG (a modified WireGuard with masking) and Cloak. If you want your own VPN without manually editing configs, that is what Amnezia is for. Repository: github.com/amnezia-vpn/amnezia-client.
When to choose what
| Task | What fits | Why |
|---|---|---|
| Deploy your own VPN on a VPS without touching configs | Amnezia | Server setup wizard, obfuscated protocols out of the box |
| Use a ready-made subscription with a set of servers | Hiddify | Subscription links, automatic selection of the best server |
| You need VLESS+REALITY on Windows/macOS/Linux | Hiddify or a client based on sing-box | These cores support REALITY natively |
| You want maximum control and non-standard settings | Xray-core or sing-box directly | Full access to the config, no wrapper on top |
| You need one client for different protocols | Hiddify / NekoBox / sing-box CLI | One engine supports VLESS, Trojan, Shadowsocks, Hysteria |
| You want a cross-platform self-hosted VPN | Amnezia | One project: clients for all OSes plus a server |
How to check right now
The main thing to understand: if a protocol does not work for you, the problem is almost never the choice of client. VLESS+REALITY will behave the same way in Hiddify and in any other sing-box-based client, because the same code is under the hood. What changes is not the client, but the server, protocol, or transport.
Freedom Checker regularly checks which protocols and servers are available through which operators right now. This helps determine whether the specific protocol is at fault (which means you need to change the protocol) or the specific server is at fault (in which case switching to another node in the same subscription is enough).
Failure or blocking?
A client failure is when the app crashes, does not start, or does not see the config. It is fixed by reinstalling or rolling back to the previous version. It has nothing to do with the cores or protocols themselves.
Blocking is when the client works, the core is running, the config is correct, but the connection still does not go through. Then the problem is outside: either TSPU equipment is cutting off a specific protocol (you need to change the protocol, for example to VLESS+REALITY), or the server is blocked by IP (you need to change the server). Changing the client itself will not help in this case.
What to pay attention to
- The client and the core are different layers: changing the UI app does not change the protocol.
- If people in chats advise you to “try VLESS,” they mean the protocol, not a specific app.
- A subscription link works in most modern sing-box-based clients.
- Amnezia is convenient for your own server; Hiddify is convenient for a ready-made subscription.
- There are several good Android clients based on these cores; the choice here is a matter of preference.
- Do not confuse AmneziaWG (the protocol) with Amnezia (the client) — they are different things from the same team.
- “The core is more powerful than the client” is a myth: capabilities depend on the protocol, not on the wrapper.
Conclusion
The modern VPN ecosystem rests on two cores: Xray-core and sing-box. Everything else is client wrappers with different levels of convenience, plus their own service features. Hiddify is simpler for ready-made subscriptions, Amnezia is for your own server, and direct Xray or sing-box is for those who need full control.
Choose based on the task, not on a fashionable name. If you first understand which layer has the problem, the solution is found faster than by trying apps one by one.