sni_sniffing.yaml

所有示例

使用前请修改地址、凭据、证书路径和其他部署相关的值。这是完整的源文件，但不保证未经修改即可在你的机器上运行。请阅读文件中的注释了解前置条件，然后对修改后的文件运行 shoes check。

examples/sni_sniffing.yaml

# SNI selects a route, never a replacement destination. Omission disables sniffing.
# The same setting also inspects cleartext HTTP/1 Host headers.
- address: "0.0.0.0:1080"
  protocol:
    type: mixed
    username: "proxy-user"
    password: "replace-this-password"
  sniff: true
  rules:
    # Block local/private destinations before client-controlled hostname rules.
    - masks:
        - "10.0.0.0/8"
        - "172.16.0.0/12"
        - "192.168.0.0/16"
        - "127.0.0.0/8"
        - "169.254.0.0/16"
        - "::1/128"
        - "fc00::/7"
        - "fe80::/10"
      action: block
    - masks: "example.com"
      action: allow
      client_chain:
        address: "127.0.0.1:1081"
        protocol:
          type: socks
    - masks: "0.0.0.0/0"
      action: allow

查看此修订版本的源文件