https://tunnelhq.com/blog/ Product updates from the TunnelHQ team, and guides to monitoring WireGuard, OpenVPN and V2Ray servers. en-us Mon, 09 Nov 2026 00:00:00 GMT https://tunnelhq.com/blog/amneziawg-parameters-explained/ https://tunnelhq.com/blog/amneziawg-parameters-explained/ Mon, 09 Nov 2026 00:00:00 GMT Every AmneziaWG setting from Jc to HeaderProtectionKey: what it changes on the wire, which must match on both sides, the limits, and why handshakes fail. https://tunnelhq.com/blog/shadowsocks-sip003-plugins/ https://tunnelhq.com/blog/shadowsocks-sip003-plugins/ Sun, 08 Nov 2026 00:00:00 GMT SIP003 is the Shadowsocks plugin spec. The env vars a plugin gets, how ss:// links carry plugin options, which plugins are maintained, and how to test one. https://tunnelhq.com/blog/openvpn-certificate-has-expired/ https://tunnelhq.com/blog/openvpn-certificate-has-expired/ Sat, 07 Nov 2026 00:00:00 GMT What OpenVPN's 'VERIFY ERROR: certificate has expired' means, how to tell which certificate expired, and how to renew it with easy-rsa 3 without surprises. https://tunnelhq.com/blog/vless-protocol-explained/ https://tunnelhq.com/blog/vless-protocol-explained/ Fri, 06 Nov 2026 00:00:00 GMT What the VLESS protocol is: a stateless proxy with UUID auth and no encryption of its own. The wire format, VMess differences, Vision, REALITY and configs. https://tunnelhq.com/blog/wireguard-handshake-did-not-complete/ https://tunnelhq.com/blog/wireguard-handshake-did-not-complete/ Thu, 05 Nov 2026 00:00:00 GMT What the WireGuard log line means, the 5 and 120 second timers behind it, and the causes in order of likelihood, with the commands to check each one. https://tunnelhq.com/blog/how-to-check-vless-key/ https://tunnelhq.com/blog/how-to-check-vless-key/ Wed, 04 Nov 2026 00:00:00 GMT A VLESS key can pass a ping test and still fail. How to check a vless:// link layer by layer with Xray-core and curl, and what each failure looks like. https://tunnelhq.com/blog/vpn-server-monitoring-guide/ https://tunnelhq.com/blog/vpn-server-monitoring-guide/ Tue, 03 Nov 2026 00:00:00 GMT What to check on a VPN server (real handshake, latency, certificates, DNS, blocking, the host), how often to check it, from where, and when to page. https://tunnelhq.com/blog/hysteria2-protocol-explained/ https://tunnelhq.com/blog/hysteria2-protocol-explained/ Mon, 02 Nov 2026 00:00:00 GMT How Hysteria2 works, from the official docs: QUIC transport, HTTP/3 auth, Brutal vs BBR, Salamander, port hopping, the hysteria2:// URI and real checks. https://tunnelhq.com/blog/october-2026-update/ https://tunnelhq.com/blog/october-2026-update/ Tue, 20 Oct 2026 00:00:00 GMT Connect Claude, ChatGPT, Cursor or VS Code by signing in, sort tunnels into groups, and sign in with a code we email you. https://tunnelhq.com/blog/september-2026-update/ https://tunnelhq.com/blog/september-2026-update/ Mon, 28 Sep 2026 00:00:00 GMT Website, keyword, ping and port checks in beta, heartbeats for scheduled jobs, DNS checks, expiry alerts and new places to send alerts. https://tunnelhq.com/blog/summer-2026-update/ https://tunnelhq.com/blog/summer-2026-update/ Wed, 26 Aug 2026 00:00:00 GMT Ranked ⌘K search, health timelines up to 90 days, per-region results and live status counts above the tunnel list. https://tunnelhq.com/blog/why-wireguard-port-monitoring-fails/ https://tunnelhq.com/blog/why-wireguard-port-monitoring-fails/ Wed, 22 Apr 2026 00:00:00 GMT A WireGuard server on UDP/51820 looks healthy to port monitors even when every client fails. What's happening on the wire — and how to catch it. https://tunnelhq.com/blog/openvpn-tls-key-negotiation-failed/ https://tunnelhq.com/blog/openvpn-tls-key-negotiation-failed/ Wed, 22 Apr 2026 00:00:00 GMT You Googled the error. Monitoring says green. Users cannot connect. Eight things that actually cause it, ordered from most to least common. https://tunnelhq.com/blog/monitoring-v2ray-subscription-urls/ https://tunnelhq.com/blog/monitoring-v2ray-subscription-urls/ Wed, 22 Apr 2026 00:00:00 GMT Subscription URLs sound simple until you run a fleet. Stale caches, partial deliveries, dead servers in healthy bundles. A practical checklist.