mirror of
https://github.com/cfal/shoes.git
synced 2026-11-06 08:14:11 +00:00
cfal
76df520c34
Extend opt-in TCP sniffing to use cleartext HTTP/1.0 and HTTP/1.1 Host headers alongside TLS SNI for hostname-based routing. Preserve original destinations, byte replay, sniff limits, Fake DNS precedence, and one route per connection. Add strict parsing, transport and lifecycle coverage, documentation, and an authenticated example with local-address safeguards.
25 lines
676 B
YAML
25 lines
676 B
YAML
# Host selects the initial route, never a replacement destination or port.
|
|
# Later requests on the same stream keep that route, even if Host changes.
|
|
# Host is chosen by the client, not an authenticated destination identity.
|
|
- address: '0.0.0.0:1080'
|
|
protocol:
|
|
type: socks
|
|
username: "proxy-user"
|
|
password: "replace-this-password"
|
|
sniff: true
|
|
rules:
|
|
- masks:
|
|
- "0.0.0.0/8"
|
|
- "10.0.0.0/8"
|
|
- "172.16.0.0/12"
|
|
- "192.168.0.0/16"
|
|
- "127.0.0.0/8"
|
|
- "169.254.0.0/16"
|
|
- "::/128"
|
|
- "::1/128"
|
|
- "fc00::/7"
|
|
- "fe80::/10"
|
|
action: block
|
|
- masks: example.com
|
|
action: allow
|