feat(masque): make TLS SNI configurable via server_name

MASQUE outbound previously hardcoded the TLS SNI to consumer-masque.cloudflareclient.com. Add a server_name field to the MASQUE outbound TLS options. When empty it falls back to the existing default (cloudflare.ConnectSNI), so existing configs are unaffected.
This commit is contained in:
v14d4n
2026-06-22 14:12:40 +04:00
parent 2cbc7691f0
commit 7bfad732e2
3 changed files with 7 additions and 1 deletions

View File

@@ -40,6 +40,7 @@
"udp_initial_packet_size": 0,
"reconnect_delay": "5s",
"tls": { // TLS fields for HTTP2
"server_name": "", // SNI; empty = default "consumer-masque.cloudflareclient.com"
"insecure": false,
"cipher_suites": [],
"curve_preferences": [],