sing-box/docs/configuration/outbound/naive.md

icon

icon
material/new-box

!!! question "Since sing-box 1.13.0"

Structure

{
  "type": "naive",
  "tag": "naive-out",

  "server": "127.0.0.1",
  "server_port": 443,
  "username": "sekai",
  "password": "password",
  "insecure_concurrency": 0,
  "extra_headers": {},
  "udp_over_tcp": false | {},
  "quic": false,
  "quic_congestion_control": "",
  "tls": {},

  ... // Dial Fields
}

!!! warning "Platform Support"

NaiveProxy outbound is only available on Apple platforms, Android, Windows and certain Linux builds.

**Official Release Build Variants:**

| Build Variant | Platforms | Description |
|---------------|-----------|-------------|
| (no suffix) | Linux amd64/arm64 | purego build, `libcronet.so` included |
| `-glibc` | Linux 386/amd64/arm/arm64/mipsle/mips64le/riscv64/loong64 | CGO build, dynamically linked with glibc, requires glibc >= 2.31 (loong64: >= 2.36) |
| `-musl` | Linux 386/amd64/arm/arm64/mipsle/riscv64/loong64 | CGO build, statically linked with musl |
| (no suffix) | Windows amd64/arm64 | purego build, `libcronet.dll` included |

For Linux, choose the glibc or musl variant based on your distribution's libc type.

**Runtime Requirements:**

- **Linux purego**: `libcronet.so` must be in the same directory as the sing-box binary or in system library path
- **Windows**: `libcronet.dll` must be in the same directory as `sing-box.exe` or in a directory listed in `PATH`

For self-built binaries, see [Build from source](/installation/build-from-source/#with_naive_outbound).

Fields

server

==Required==

The server address.

server_port

==Required==

The server port.

username

Authentication username.

password

Authentication password.

insecure_concurrency

Number of concurrent tunnel connections. Multiple connections make the tunneling easier to detect through traffic analysis, which defeats the purpose of NaiveProxy's design to resist traffic analysis.

extra_headers

Extra headers to send in HTTP requests.

udp_over_tcp

UDP over TCP protocol settings.

See UDP Over TCP for details.

quic

Use QUIC instead of HTTP/2.

quic_congestion_control

QUIC congestion control algorithm.

Algorithm	Description
bbr	BBR
bbr2	BBRv2
cubic	CUBIC
reno	New Reno

bbr is used by default (the default of QUICHE, used by Chromium which NaiveProxy is based on).

tls

==Required==

TLS configuration, see TLS.

Only server_name, certificate, certificate_path and ech are supported.

Self-signed certificates change traffic behavior significantly, which defeats the purpose of NaiveProxy's design to resist traffic analysis, and should not be used in production.

Dial Fields

See Dial Fields for details.