shadowtls_v3_local_handshake.yaml
使用前请修改地址、凭据、证书路径和其他部署相关的值。这是完整的源文件,但不保证未经修改即可在你的机器上运行。请阅读文件中的注释了解前置条件,然后对修改后的文件运行 shoes check。
- address: 127.0.0.1:44300 transport: tcp protocol: type: tls # specify different configs based on ShadowTLS SNI shadowtls_targets: example.com: password: asdf123 handshake: # provide a cert and key to handle the server handshake in-process, # without requiring a separate handshake server. # NOTE: most ShadowTLS clients require the cert to still be signed # by a known CA, so a self-signed cert will most likely fail. cert: example.com.pem key: example.com.pem protocol: type: socks username: socks-user password: socks-pass
rules: - mask: 0.0.0.0/0 action: allow # client_chain: direct is optional - direct is the default when omitted client_chain: direct