snell_forward_rules.yaml

所有示例

使用前请修改地址、凭据、证书路径和其他部署相关的值。这是完整的源文件，但不保证未经修改即可在你的机器上运行。请阅读文件中的注释了解前置条件，然后对修改后的文件运行 shoes check。

examples/snell_forward_rules.yaml

# Snell server that only allows requests to certain hostnames and IPs.
- address: 127.0.0.1:55555
  transport: tcp
  protocol:
    type: snell
    cipher: aes-128-gcm
    password: secretpass
  rules:
    # Clients trying to connect to hello.com on port 80 are allowed, but instead forwarded to
    # a local server on port 55556.
    - mask: hello.com:80
      action: allow
      override_address: 127.0.0.1:55556
      client_chain: direct
    # Clients can access 10.x addresses.
    - mask: 10.0.0.0/8
      action: allow
      client_chain: direct
    # Block all other addresses.
    - mask: 0.0.0.0/0
      action: block

查看此修订版本的源文件