tls_sni_vmess_and_snell.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# A TLS vmess and snell server, forwarded to different protocols by SNI.
- address: 127.0.0.1:55555
  transport: tcp
  protocol:
    type: tls
    sni_targets:
      # Clients requesting SNI google.com will get forwarded to the vmess server
      google.com:
        cert: cert.pem
        key: key.pem
        protocol:
          type: vmess
          cipher: any
          user_id: b0e80a62-8a51-47f0-91f1-f0f7faf8d9d4
      # Clients requesting SNI yahoo.com will get forwarded to the snell server
      yahoo.com:
        cert: cert.pem
        key: key.com
        protocol:
          type: snell
          cipher: aes-128-gcm
          password: secretpass
  rules:
    # Allow connections to any IP.
    - mask: 0.0.0.0/0
      action: allow
      # client_chain: direct is optional - direct is the default when omitted
      client_chain: direct

View source at this revision