323 lines
6.6 KiB
YAML
323 lines
6.6 KiB
YAML
log:
|
|
output: stderr # none, stderr, stdout, /path/to/file
|
|
level: debug # debug, info, warn, error, fatal
|
|
format: json # text, json
|
|
|
|
services:
|
|
- name: http+tcp
|
|
url: "http://gost:gost@:8000"
|
|
addr: ":28000"
|
|
handler:
|
|
type: http
|
|
chain: chain01
|
|
# bypass: bypass01
|
|
metadata:
|
|
proxyAgent: "gost/3.0"
|
|
auths:
|
|
- user1:pass1
|
|
- user2:pass2
|
|
# probeResist: code:404 # code, web, host, file
|
|
# knock: example.com
|
|
listener:
|
|
type: tcp
|
|
metadata:
|
|
keepAlive: 15s
|
|
- name: ss
|
|
url: "ss://chacha20:gost@:8000"
|
|
addr: ":28338"
|
|
handler:
|
|
type: ss
|
|
# chain: chain01
|
|
# bypass: bypass01
|
|
metadata:
|
|
method: chacha20-ietf
|
|
password: gost
|
|
readTimeout: 5s
|
|
udp: true
|
|
bufferSize: 4096
|
|
listener:
|
|
type: tcp
|
|
metadata:
|
|
keepAlive: 15s
|
|
- name: socks5
|
|
url: "socks5://gost:gost@:1080"
|
|
addr: ":21080"
|
|
handler:
|
|
type: socks5
|
|
# chain: chain-ss
|
|
# bypass: bypass01
|
|
metadata:
|
|
auths:
|
|
- gost:gost
|
|
readTimeout: 5s
|
|
notls: true
|
|
bind: true
|
|
udp: true
|
|
# udpBufferSize: 4096 # range [512, 66560]
|
|
listener:
|
|
type: tcp
|
|
metadata:
|
|
keepAlive: 15s
|
|
- name: socks5+tcp
|
|
url: "socks5://gost:gost@:1080"
|
|
addr: ":21081"
|
|
handler:
|
|
type: socks5
|
|
metadata:
|
|
auths:
|
|
- gost:gost
|
|
readTimeout: 5s
|
|
notls: true
|
|
# udpBufferSize: 1024
|
|
listener:
|
|
type: tcp
|
|
metadata:
|
|
keepAlive: 15s
|
|
- name: forward
|
|
url: "socks5://gost:gost@:1080"
|
|
addr: ":10053"
|
|
forwarder:
|
|
targets:
|
|
- 192.168.8.8:53
|
|
- 192.168.8.1:53
|
|
- 1.1.1.1:53
|
|
selector:
|
|
strategy: fifo
|
|
maxFails: 1
|
|
failTimeout: 30s
|
|
handler:
|
|
type: forward
|
|
chain: chain-ss
|
|
metadata:
|
|
readTimeout: 5s
|
|
listener:
|
|
type: udp
|
|
metadata:
|
|
keepAlive: 15s
|
|
|
|
- name: kcp-forward-tunnel
|
|
addr: ":8388"
|
|
forwarder:
|
|
targets:
|
|
- 127.0.0.1:28338
|
|
handler:
|
|
type: forward
|
|
metadata:
|
|
readTimeout: 5s
|
|
listener:
|
|
type: kcp
|
|
metadata:
|
|
keepAlive: 15s
|
|
|
|
- name: rtcp
|
|
addr: ":28100"
|
|
forwarder:
|
|
targets:
|
|
- 192.168.8.8:80
|
|
handler:
|
|
type: forward
|
|
metadata:
|
|
readTimeout: 5s
|
|
listener:
|
|
type: rtcp
|
|
# chain: chain-socks5
|
|
metadata:
|
|
keepAlive: 15s
|
|
mux: true
|
|
- name: rudp
|
|
addr: ":1053"
|
|
forwarder:
|
|
targets:
|
|
- 192.168.8.8:53
|
|
- 192.168.8.1:53
|
|
selector:
|
|
strategy: round
|
|
maxFails: 1
|
|
failTimeout: 30s
|
|
handler:
|
|
type: forward
|
|
metadata:
|
|
readTimeout: 5s
|
|
listener:
|
|
type: rudp
|
|
chain: chain-socks5
|
|
metadata:
|
|
keepAlive: 15s
|
|
|
|
chains:
|
|
- name: chain01
|
|
# chain level selector
|
|
selector:
|
|
strategy: round
|
|
maxFails: 1
|
|
failTimeout: 30s
|
|
hops:
|
|
- name: hop01
|
|
# hop level selector
|
|
selector:
|
|
strategy: round
|
|
maxFails: 1
|
|
failTimeout: 30s
|
|
nodes:
|
|
- name: node01
|
|
addr: ":8081"
|
|
url: "http://gost:gost@:8081"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: http
|
|
metadata:
|
|
userAgent: "gost/3.0"
|
|
auth: user1:pass1
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
- name: node02
|
|
addr: ":8082"
|
|
url: "http://gost:gost@:8082"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: http
|
|
metadata:
|
|
userAgent: "gost/3.0"
|
|
auth: user2:pass2
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
- name: hop02
|
|
# hop level selector
|
|
selector:
|
|
strategy: round
|
|
maxFails: 1
|
|
failTimeout: 30s
|
|
nodes:
|
|
- name: node03
|
|
addr: ":8083"
|
|
url: "http://gost:gost@:8083"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: http
|
|
metadata:
|
|
userAgent: "gost/3.0"
|
|
auth: user3:pass3
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
- name: chain-socks4
|
|
hops:
|
|
- name: hop01
|
|
nodes:
|
|
- name: node01
|
|
addr: ":8081"
|
|
url: "http://gost:gost@:8081"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: socks4
|
|
metadata: {}
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
- name: chain-socks5
|
|
hops:
|
|
- name: hop01
|
|
nodes:
|
|
- name: node01
|
|
addr: ":21080"
|
|
url: "http://gost:gost@:8081"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: socks5
|
|
metadata:
|
|
notls: true
|
|
auth: gost:gost
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
- name: chain-ss
|
|
hops:
|
|
- name: hop01
|
|
nodes:
|
|
- name: node01
|
|
addr: ":28338"
|
|
url: "http://gost:gost@:8081"
|
|
# bypass: bypass01
|
|
connector:
|
|
type: ss
|
|
metadata:
|
|
method: chacha20-ietf
|
|
password: gost
|
|
readTimeout: 5s
|
|
nodelay: true
|
|
udp: true
|
|
bufferSize: 4096
|
|
dialer:
|
|
type: tcp
|
|
metadata: {}
|
|
|
|
bypasses:
|
|
- name: bypass-0
|
|
reverse: false
|
|
matchers:
|
|
- .baidu.com
|
|
- "*.example.com" # domain wildcard
|
|
- .example.org # will match example.org and *.example.org
|
|
|
|
# From IANA IPv4 Special-Purpose Address Registry
|
|
# http://www.iana.org/assignments/iana-ipv4-special-registry/iana-ipv4-special-registry.xhtml
|
|
- 0.0.0.0/8 # RFC1122: "This host on this network"
|
|
- 10.0.0.0/8 # RFC1918: Private-Use
|
|
- 100.64.0.0/10 # RFC6598: Shared Address Space
|
|
- 127.0.0.0/8 # RFC1122: Loopback
|
|
- 169.254.0.0/16 # RFC3927: Link Local
|
|
- 172.16.0.0/12 # RFC1918: Private-Use
|
|
- 192.0.0.0/24 # RFC6890: IETF Protocol Assignments
|
|
- 192.0.2.0/24 # RFC5737: Documentation (TEST-NET-1)
|
|
- 192.88.99.0/24 # RFC3068: 6to4 Relay Anycast
|
|
- 192.168.0.0/16 # RFC1918: Private-Use
|
|
- 198.18.0.0/15 # RFC2544: Benchmarking
|
|
- 198.51.100.0/24 # RFC5737: Documentation (TEST-NET-2)
|
|
- 203.0.113.0/24 # RFC5737: Documentation (TEST-NET-3)
|
|
- 240.0.0.0/4 # RFC1112: Reserved
|
|
- 255.255.255.255/32 # RFC0919: Limited Broadcast
|
|
|
|
# From IANA Multicast Address Space Registry
|
|
# http://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml
|
|
- 224.0.0.0/4 # RFC5771: Multicast/Reserved
|
|
|
|
tls:
|
|
cert: "cert.pem"
|
|
key: "key.pem"
|
|
# ca: "root.ca"
|
|
|
|
resolvers:
|
|
- name: resolver-0
|
|
nameservers:
|
|
- addr: udp://8.8.8.8:53
|
|
chain: chain-0
|
|
ttl: 60s
|
|
prefer: ipv4
|
|
clientIP: 1.2.3.4
|
|
timeout: 3s
|
|
- addr: tcp://1.1.1.1:53
|
|
- addr: tls://1.1.1.1:853
|
|
- addr: https://1.0.0.1/dns-query
|
|
hostname: cloudflare-dns.com
|
|
|
|
hosts:
|
|
- name: hosts-0
|
|
entries:
|
|
- ip: 127.0.0.1
|
|
hostname: localhost
|
|
- ip: 192.168.1.10
|
|
hostname: foo.mydomain.org
|
|
aliases:
|
|
- foo
|
|
- ip: 192.168.1.13
|
|
hostname: bar.mydomain.org
|
|
aliases:
|
|
- bar
|
|
- baz
|
|
|
|
profiling:
|
|
addr: ":6060"
|
|
enabled: true
|