mirror of
https://github.com/shtorm-7/sing-box-extended.git
synced 2026-06-26 20:29:03 +03:00
MASQUE outbound previously hardcoded the TLS SNI to consumer-masque.cloudflareclient.com. Add a server_name field to the MASQUE outbound TLS options. When empty it falls back to the existing default (cloudflare.ConnectSNI), so existing configs are unaffected.
61 lines
1.3 KiB
JSON
61 lines
1.3 KiB
JSON
{
|
|
"log": {
|
|
"level": "error"
|
|
},
|
|
"dns": {
|
|
"servers": [
|
|
{
|
|
"type": "local",
|
|
"tag": "default"
|
|
}
|
|
]
|
|
},
|
|
"inbounds": [
|
|
{
|
|
"type": "mixed",
|
|
"tag": "mixed-in",
|
|
"listen_port": 7897
|
|
}
|
|
],
|
|
"outbounds": [
|
|
{
|
|
"type": "direct",
|
|
"tag": "direct"
|
|
},
|
|
{
|
|
"type": "masque",
|
|
"tag": "masque-out",
|
|
"system": false,
|
|
"name": "masque0",
|
|
"use_http2": false,
|
|
"use_ipv6": false,
|
|
"profile": {
|
|
"detour": "direct",
|
|
// For getting existing MASQUE device profile, else sing-box will create new profile
|
|
"id": "",
|
|
"auth_token": ""
|
|
},
|
|
"udp_timeout": "5m0s",
|
|
"udp_keepalive_period": "30s",
|
|
"udp_initial_packet_size": 0,
|
|
"reconnect_delay": "5s",
|
|
"tls": { // TLS fields for HTTP2
|
|
"server_name": "", // SNI; empty = default "consumer-masque.cloudflareclient.com"
|
|
"insecure": false,
|
|
"cipher_suites": [],
|
|
"curve_preferences": [],
|
|
"fragment": false,
|
|
"record_fragment": false,
|
|
"kernel_tx": false,
|
|
"kernel_rx": false
|
|
}
|
|
// Dial Fields
|
|
}
|
|
],
|
|
"route": {
|
|
"final": "masque-out",
|
|
"default_domain_resolver": "default",
|
|
"auto_detect_interface": true
|
|
}
|
|
}
|