Realm Host V2 Ha Tunnel !!install!! Review

To set up HA Tunnel Plus using the Realm Host (v2) method, you typically need to configure the Custom SNI settings to bypass network restrictions.

[transport.tls]
cert = "/etc/realm/client.crt"
key = "/etc/realm/client.key"
ca = "/etc/realm/ca.crt"
verify_peer = true

Enable Realm Host (v2): Check the box for Use Realm Host (v2). This tells the app to use a newer method for masking your traffic. realm host v2 ha tunnel

If you need a specific configuration for a platform (e.g., Linux + FRRouting + WireGuard HA), or a deployment guide (including network diagrams), let me know and I can provide that next. To set up HA Tunnel Plus using the

Advanced HA Tunnel Configurations

Active-Active Load Balancing

Instead of simple failover, you can configure Realm Host V2 HA to use weighted round-robin across multiple backends. This is done by running multiple Realm processes locally, each pinned to a different backend, and using haproxy or nginx in front with a least_conn algorithm. Enable Realm Host (v2) : Check the box

• Both Realm servers share the same configuration and TLS certificates.
• The Active node (Realm-1) owns the VIP 203.0.113.10:8443.
• All clients connect to the VIP.
• Realm-2 constantly monitors Realm-1's /health endpoint (every 500ms).
• If Realm-1 fails, Realm-2 takes the VIP within 3–5 seconds and replays the latest session state from the distributed KV store (etcd).

Apply routing policy

realm host v2 route add 172.16.0.0/16 via ha-tunnel-1 priority=100