forked from lxhao61/integrated-examples
-
Notifications
You must be signed in to change notification settings - Fork 0
/
trojan_config.json
39 lines (39 loc) · 1.69 KB
/
trojan_config.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
{
"run_type": "server",
"local_addr": "127.0.0.1", //只监听本机,避免本机外的机器探测到下面端口。
"local_port": 6443, //监听端口
"remote_addr": "127.0.0.1",
"remote_port": 81, //http/1.1回落端口
"password": [
"diy443" //修改为自己的密码。密码可多组("password"),用逗号隔开。
],
"log_level": 2,
"ssl": {
"cert": "/home/tls/certificates/acme-v02.api.letsencrypt.org-directory/zt.xx.yy/zt.xx.yy.crt", //换成自己的证书,绝对路径。
"key": "/home/tls/certificates/acme-v02.api.letsencrypt.org-directory/zt.xx.yy/zt.xx.yy.key", //换成自己的密钥,绝对路径。
"key_password": "",
"cipher": "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CHACHA20-POLY1305", //若证书为RSA证书,所有ECDSA改为RSA。
"cipher_tls13": "TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256",
"curves": "",
"prefer_server_cipher": true,
"alpn": [
"h2", //启用h2连接需配置h2回落,否则不一致(裸奔)容易被墙探测出从而被封。
"http/1.1" //启用http/1.1连接需配置http/1.1回落,否则不一致(裸奔)容易被墙探测出从而被封。
],
"alpn_port_override": {
"h2": 82 //h2回落端口
},
"reuse_session": true,
"session_ticket": false,
"session_timeout": 600,
"plain_http_response": ""
},
"tcp": {
"prefer_ipv4": false,
"no_delay": true,
"keep_alive": true,
"reuse_port": false,
"fast_open": false,
"fast_open_qlen": 20
}
}