---

log: journal

stat:
  target:
    udp: 127.0.0.1:8125

resolver:
  - name: default
    type: c-ares
    server:
      - 127.0.0.1

escaper:
  - name: default
    type: direct_fixed
    resolver: default
    egress_net_filter:
      default: allow
      allow: 127.0.0.1

user-group:
  - name: default
    static_users:
      - name: t1
        token:
          salt: 4e8f8a4e37f0fa1b
          md5: d9d963915b9815d4cc39c196c2868900
          sha1: c28640e7b1a3d9db98187632aeba99c0cff0ffd4

server:
  - name: rss
    type: http_rproxy
    listen: 127.0.0.1:9443
    escaper: default
    enable_tls_server: true
    global_tls_server:
      cert_pairs:
        certificate: httpbin.local.pem
        private-key: httpbin.local-key.pem
    hosts:
      - exact_match: httpbin.local
        upstream: 127.0.0.1:80
        tls_server:
          cert_pairs:
            certificate: httpbin.local.pem
            private-key: httpbin.local-key.pem
  - name: http
    type: http_proxy
    listen: 127.0.0.1:8080
    escaper: default
    user-group: default
    tls-client:
      ca-certificate: rootCA.pem
  - name: tls
    type: native_tls_port
    listen: 127.0.0.1:8443
    server: http
    tls_server:
      cert_pairs:
        certificate: g3proxy.local.pem
        private-key: g3proxy.local-key.pem
  - name: socks
    type: socks_proxy
    listen: 127.0.0.1:1080
    escaper: default
    user-group: default