# Blog What's new in TunnelHQ, and practical guides to keeping VPN servers up. AmneziaWG Guide, Nov 9, 2026 ### AmneziaWG parameters explained: Jc, S1 to S4, H1 to H4, I1 to I5 and 3.x Every AmneziaWG setting from Jc to HeaderProtectionKey: what it changes on the wire, which must match on both sides, the limits, and why handshakes fail. Tahir Mehmood, 11 min read More: https://tunnelhq.com/blog/amneziawg-parameters-explained/ Shadowsocks Guide, Nov 8, 2026 ### SIP003 explained: how Shadowsocks plugins work and how to test them SIP003 is the Shadowsocks plugin spec. The env vars a plugin gets, how ss:// links carry plugin options, which plugins are maintained, and how to test one. ST Muntaha, 11 min read More: https://tunnelhq.com/blog/shadowsocks-sip003-plugins/ OpenVPN Guide, Nov 7, 2026 ### OpenVPN certificate has expired: find it and renew it What OpenVPN's 'VERIFY ERROR: certificate has expired' means, how to tell which certificate expired, and how to renew it with easy-rsa 3 without surprises. Tahir Mehmood, 10 min read More: https://tunnelhq.com/blog/openvpn-certificate-has-expired/ VLESS Guide, Nov 6, 2026 ### VLESS protocol explained: how it works, Vision, REALITY, configs What the VLESS protocol is: a stateless proxy with UUID auth and no encryption of its own. The wire format, VMess differences, Vision, REALITY and configs. ST Muntaha, 10 min read More: https://tunnelhq.com/blog/vless-protocol-explained/ WireGuard Guide, Nov 5, 2026 ### WireGuard: Handshake did not complete after 5 seconds, retrying What the WireGuard log line means, the 5 and 120 second timers behind it, and the causes in order of likelihood, with the commands to check each one. Tahir Mehmood, 8 min read More: https://tunnelhq.com/blog/wireguard-handshake-did-not-complete/ VLESS Guide, Nov 4, 2026 ### VLESS key checker: how to test a vless:// link properly A VLESS key can pass a ping test and still fail. How to check a vless:// link layer by layer with Xray-core and curl, and what each failure looks like. ST Muntaha, 11 min read More: https://tunnelhq.com/blog/how-to-check-vless-key/ Monitoring Guide, Nov 3, 2026 ### VPN server monitoring: what to check, how often, from where What to check on a VPN server (real handshake, latency, certificates, DNS, blocking, the host), how often to check it, from where, and when to page. Tahir Mehmood, 7 min read More: https://tunnelhq.com/blog/vpn-server-monitoring-guide/ Hysteria2 Guide, Nov 2, 2026 ### Hysteria2 protocol explained: QUIC, auth, Brutal, Salamander How Hysteria2 works, from the official docs: QUIC transport, HTTP/3 auth, Brutal vs BBR, Salamander, port hopping, the hysteria2:// URI and real checks. ST Muntaha, 11 min read More: https://tunnelhq.com/blog/hysteria2-protocol-explained/ Product update, Oct 20, 2026 ### October 2026: AI assistants, tunnel groups and sign-in by email Connect Claude, ChatGPT, Cursor or VS Code by signing in, sort tunnels into groups, and sign in with a code we email you. TunnelHQ team, 3 min read More: https://tunnelhq.com/blog/october-2026-update/ Product update, Sep 28, 2026 ### September 2026: Uptime monitoring, heartbeats and 16 more alert channels Website, keyword, ping and port checks in beta, heartbeats for scheduled jobs, DNS checks, expiry alerts and new places to send alerts. TunnelHQ team, 3 min read More: https://tunnelhq.com/blog/september-2026-update/ Product update, Aug 26, 2026 ### July and August 2026: better search, longer timelines and status at a glance Ranked ⌘K search, health timelines up to 90 days, per-region results and live status counts above the tunnel list. TunnelHQ team, 2 min read More: https://tunnelhq.com/blog/summer-2026-update/ WireGuard Guide, Apr 22, 2026 ### Why WireGuard port monitoring misses real outages A WireGuard server on UDP/51820 looks healthy to port monitors even when every client fails. What's happening on the wire — and how to catch it. Mehmood Ali, 7 min read More: https://tunnelhq.com/blog/why-wireguard-port-monitoring-fails/ OpenVPN Guide, Apr 22, 2026 ### OpenVPN: TLS key negotiation failed to occur within 60 seconds You Googled the error. Monitoring says green. Users cannot connect. Eight things that actually cause it, ordered from most to least common. Mehmood Ali, 7 min read More: https://tunnelhq.com/blog/openvpn-tls-key-negotiation-failed/ V2Ray Guide, Apr 22, 2026 ### Monitoring V2Ray subscription URLs in production Subscription URLs sound simple until you run a fleet. Stale caches, partial deliveries, dead servers in healthy bundles. A practical checklist. T. Hussian, 7 min read More: https://tunnelhq.com/blog/monitoring-v2ray-subscription-urls/ Source: https://tunnelhq.com/blog/