trojan_tls_through_socks.yaml

All examples

Change addresses, credentials, certificate paths, and other deployment-specific values before use. This is a complete source file, not a guarantee it can run unchanged on your machine. Read its comments for prerequisites, then run shoes check with the adapted file.

# A TLS Trojan server that selectively forwards.
- address: 127.0.0.1:15555
  transport: tcp
  protocol:
    type: tls
    # target for all SNIs
    default_target:
      # can be generated using openssl, eg: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365000 -nodes -subj "/CN=localhost"
      cert: cert.pem
      key: key.pem
      protocol:
        type: trojan
        password: helloworld
  rules:
    # For example.com, connect through a SOCKS proxy.
    - mask: example.com
      action: allow
      client_chain:
        address: 127.0.0.1:15556
        protocol:
          type: socks
          username: username
          password: password

    # Allow all other connections to connect directly.
    - mask: 0.0.0.0/0
      action: allow
      # client_chain: direct is optional - direct is the default when omitted
      client_chain: direct

View source at this revision