socks_through_wss_vmess.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# A SOCKS5 server that forwards connections through a VMess WSS proxy.
- address: 127.0.0.1:5443
  transport: tcp
  protocol:
    type: socks
    username: secretuser
    password: secretpass
  rules:
    # Directly connect to 192.168.*
    - mask: 192.168.0.0/16
      action: allow
      # client_chain: direct is optional - direct is the default when omitted
      client_chain: direct
    # Forward all other connection requests through a Vmess WSS server.
    - mask: 0.0.0.0/0
      action: allow
      client_chain:
        address: 127.0.0.1:1234
        protocol:
          type: tls
          # Set to false to disable TLS verification, if, for example, the upstream server
          # uses a self-signed certificate
          verify: true
          protocol:
            type: ws
            # The path to the websocket server
            matching_path: /ws
            protocol:
              type: vmess
              cipher: aes-128-gcm
              user_id: b0e80a62-8a51-47f0-91f1-f0f7faf8d9d4

View source at this revision