This seems really cool! Although, if I already use a VPN, the packets would've already exited the VPN node before they were routed to a hysteria insrance. If the normal route without a proxy is:

MyVPNRouter[WireGuardInterface -> WAN] -> VPNServer/Node -> "clearnet" -> destination host (and back in reverse)

Then I don't understand where and how I could place a proxy in a meaningful way. If I for instance ran in on my public facing, non VPN router, the decrypted traffic would be visible during the "hop" from the VPN to my router:

MyVPNRouter[WireGuardInterface -> WAN] -> VPNServer/Node -> "clearnet" -> MyHysteriaRouter[WAN -> http/3 masq -> WAN] -> "clearnet" -> destination host (and back in reverse)

Unless I use hysteria to obfuscate right here in my LAN before even sending it out to my VPN router? Because then the protocol footprint/fingerprint wouldn't be that of a torrenting protocol, but that of http traffic?

Torrenting client -> MyHysteriaServer[http/3 masq] -> MyVPNRouter[WireGuardInterface -> WAN] -> VPNServer/Node -> "clearnet" -> destination host (and back in reverse)

And also perhaps for traffic that does not already use a VPN hysteria is a good obfuscator?

Please do forgive and correct any wrong assumptions on my part! 😊