mirror of
https://github.com/bytedance/g3.git
synced 2026-05-07 17:22:17 +00:00
294 lines
6.3 KiB
Text
294 lines
6.3 KiB
Text
---
|
|
|
|
runtime:
|
|
thread_number: 2
|
|
|
|
worker:
|
|
sched_affinity: true
|
|
|
|
log: syslog
|
|
|
|
stat:
|
|
target:
|
|
udp: 127.0.0.1:8125
|
|
|
|
controller:
|
|
local:
|
|
recv_timeout: 30
|
|
send_timeout: 1
|
|
|
|
resolver:
|
|
- name: cares1
|
|
type: c-ares
|
|
server:
|
|
- 127.0.0.1
|
|
- name: cares2
|
|
type: c-ares
|
|
server: 127.0.0.1
|
|
- name: main
|
|
type: fail_over
|
|
primary: cares1
|
|
standby: cares2
|
|
- name: trust
|
|
type: trust-dns
|
|
server: 127.0.0.1
|
|
|
|
user-group:
|
|
- name: default
|
|
static_users:
|
|
- name: t1
|
|
token:
|
|
salt: 4e8f8a4e37f0fa1b
|
|
md5: d9d963915b9815d4cc39c196c2868900
|
|
sha1: c28640e7b1a3d9db98187632aeba99c0cff0ffd4
|
|
dst_host_filter_set:
|
|
exact_match:
|
|
default: allow
|
|
forbid: 192.168.1.1
|
|
allow:
|
|
- 127.0.0.1
|
|
subnet_match:
|
|
default: allow
|
|
forbid:
|
|
- 192.168.0.0/16
|
|
dst_port_filter:
|
|
default: allow
|
|
forbid:
|
|
- 22
|
|
- 100-200
|
|
tcp_conn_limit: 10M
|
|
udp_relay_limit: 1M
|
|
resolve_redirection:
|
|
- exact: httpbin.local
|
|
to: 127.0.0.1
|
|
source:
|
|
type: file
|
|
path: dynamic_users.json
|
|
|
|
escaper:
|
|
- name: direct
|
|
type: direct_fixed
|
|
resolver: main
|
|
resolve_strategy: IPv4First
|
|
egress_net_filter:
|
|
default: allow
|
|
allow: 127.0.0.1
|
|
- name: direct_lazy
|
|
type: direct_float
|
|
resolver: main
|
|
resolve_strategy: IPv4First
|
|
egress_net_filter:
|
|
default: allow
|
|
allow: 127.0.0.1
|
|
- name: proxy10080
|
|
type: proxy_http
|
|
proxy_addr: 127.0.0.1:10080
|
|
http_forward_capability:
|
|
forward_ftp: true
|
|
- name: proxy10443
|
|
type: proxy_https
|
|
proxy_addr: 127.0.0.1:10443
|
|
http_forward_capability:
|
|
forward_ftp: true
|
|
tls_client:
|
|
ca_certificate: rootCA.pem
|
|
tls_name: g3proxy.local
|
|
- name: proxy11080
|
|
type: proxy_socks5
|
|
proxy_addr: 127.0.0.1:11080
|
|
- name: float10080
|
|
type: proxy_float
|
|
source:
|
|
type: passive
|
|
- name: float10443
|
|
type: proxy_float
|
|
source:
|
|
type: passive
|
|
tls_client:
|
|
ca_certificate: rootCA.pem
|
|
- name: float11080
|
|
type: proxy_float
|
|
source:
|
|
type: passive
|
|
- name: route0
|
|
type: trick_float
|
|
next:
|
|
- direct
|
|
- direct_lazy
|
|
- name: route1
|
|
type: route_select
|
|
next_nodes:
|
|
- name: route0
|
|
weight: 1
|
|
- name: direct
|
|
weight: 0
|
|
- name: route2
|
|
type: route_resolved
|
|
resolver: main
|
|
lpm_match:
|
|
- next: route1
|
|
networks:
|
|
- 127.0.0.0/8
|
|
default_next: direct
|
|
- name: route3
|
|
type: route_upstream
|
|
exact_match:
|
|
- next: route2
|
|
hosts:
|
|
- httpbin.local
|
|
subnet_match:
|
|
- next: route2
|
|
subnets:
|
|
- 127.0.0.0/8
|
|
default_next: direct
|
|
- name: route4
|
|
type: route_query
|
|
query_allowed_next:
|
|
- route0
|
|
- route1
|
|
- route2
|
|
- route3
|
|
query_peer_addr: 127.0.0.1:10053
|
|
fallback_node: route3
|
|
|
|
server:
|
|
- name: http10080
|
|
type: http_proxy
|
|
listen: 127.0.0.1:10080
|
|
escaper: direct
|
|
- name: http10081
|
|
type: http_proxy
|
|
listen: 127.0.0.1:10081
|
|
escaper: direct_lazy
|
|
- name: http10082
|
|
type: http_proxy
|
|
listen: 127.0.0.1:10082
|
|
escaper: direct
|
|
user-group: default
|
|
- name: http10443
|
|
type: http_proxy
|
|
listen: 127.0.0.1:10443
|
|
escaper: direct
|
|
tls_server:
|
|
certificate: g3proxy.local.pem
|
|
private_key: g3proxy.local-key.pem
|
|
- name: socks11080
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:11080
|
|
escaper: direct
|
|
- name: socks11081
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:11081
|
|
escaper: direct
|
|
enable_udp_associate: true
|
|
- name: socks11082
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:11082
|
|
escaper: direct
|
|
user-group: default
|
|
- name: http20080
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20080
|
|
escaper: proxy10080
|
|
- name: http20081
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20081
|
|
escaper: proxy11080
|
|
- name: http20082
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20082
|
|
escaper: float10080
|
|
- name: http20083
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20083
|
|
escaper: float10443
|
|
- name: http20084
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20084
|
|
escaper: float11080
|
|
- name: http20443
|
|
type: http_proxy
|
|
listen: 127.0.0.1:20443
|
|
escaper: proxy10443
|
|
- name: socks21080
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:21080
|
|
escaper: proxy11080
|
|
- name: socks21081
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:21081
|
|
escaper: proxy11080
|
|
enable_udp_associate: true
|
|
- name: socks21082
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:21082
|
|
escaper: proxy10080
|
|
- name: socks21083
|
|
type: socks_proxy
|
|
listen: 127.0.0.1:21083
|
|
escaper: float11080
|
|
- name: httpbin8080
|
|
escaper: direct
|
|
type: http_rproxy
|
|
listen: 127.0.0.1:8080
|
|
hosts:
|
|
- exact_match: g3proxy.local
|
|
upstream: 127.0.0.1:9443
|
|
tls_client:
|
|
ca_certificate: rootCA.pem
|
|
tls_name: httpbin.local
|
|
- name: httpbin8443
|
|
escaper: direct
|
|
type: http_rproxy
|
|
listen: 127.0.0.1:8443
|
|
enable_tls_server: true
|
|
hosts:
|
|
- exact_match: g3proxy.local
|
|
tls_server:
|
|
certificate: g3proxy.local.pem
|
|
private_key: g3proxy.local-key.pem
|
|
upstream: 127.0.0.1:9443
|
|
tls_client:
|
|
ca_certificate: rootCA.pem
|
|
tls_name: httpbin.local
|
|
- name: tcp9080
|
|
escaper: direct
|
|
type: tcp_stream
|
|
listen: 127.0.0.1:9080
|
|
upstream: 127.0.0.1:80
|
|
- name: tls9443
|
|
escaper: direct
|
|
type: tls_stream
|
|
listen: 127.0.0.1:9443
|
|
tls_server:
|
|
certificate: httpbin.local.pem
|
|
private-key: httpbin.local-key.pem
|
|
upstream: 127.0.0.1:80
|
|
- name: sni9443
|
|
escaper: direct
|
|
type: sni_proxy
|
|
listen: "[::1]:9443"
|
|
- name: sni8080
|
|
escaper: direct
|
|
type: sni_proxy
|
|
listen: "[::1]:8080"
|
|
- name: tcpport9001
|
|
type: plain_tcp_port
|
|
listen: 127.0.0.1:9001
|
|
server: http10080
|
|
- name: tlsport9002
|
|
type: plain_tls_port
|
|
listen: 127.0.0.1:9002
|
|
server: http10080
|
|
tls_server:
|
|
certificate: g3proxy.local.pem
|
|
private_key: g3proxy.local-key.pem
|
|
- name: ppdpport9003
|
|
type: ppdp_tcp_port
|
|
listen: 127.0.0.1:9003
|
|
http_server: http10080
|
|
socks_server: socks11080
|
|
- name: http_route13128
|
|
type: http_proxy
|
|
listen: 127.0.0.1:13128
|
|
escaper: route4
|