|
@@ -0,0 +1,82 @@
|
|
|
|
+### Structure
|
|
|
|
+
|
|
|
|
+```json
|
|
|
|
+{
|
|
|
|
+ "type": "tuic",
|
|
|
|
+ "tag": "tuic-in",
|
|
|
|
+
|
|
|
|
+ ... // Listen Fields
|
|
|
|
+
|
|
|
|
+ "users": [
|
|
|
|
+ {
|
|
|
|
+ "name": "sekai",
|
|
|
|
+ "uuid": "059032A9-7D40-4A96-9BB1-36823D848068",
|
|
|
|
+ "password": "hello"
|
|
|
|
+ }
|
|
|
|
+ ],
|
|
|
|
+ "congestion_control": "cubic",
|
|
|
|
+ "auth_timeout": "3s",
|
|
|
|
+ "zero_rtt_handshake": false,
|
|
|
|
+ "heartbeat": "10s",
|
|
|
|
+ "tls": {}
|
|
|
|
+}
|
|
|
|
+```
|
|
|
|
+
|
|
|
|
+!!! warning ""
|
|
|
|
+
|
|
|
|
+ QUIC, which is required by TUIC is not included by default, see [Installation](/#installation).
|
|
|
|
+
|
|
|
|
+### Listen Fields
|
|
|
|
+
|
|
|
|
+See [Listen Fields](/configuration/shared/listen) for details.
|
|
|
|
+
|
|
|
|
+### Fields
|
|
|
|
+
|
|
|
|
+#### users
|
|
|
|
+
|
|
|
|
+TUIC users
|
|
|
|
+
|
|
|
|
+#### users.uuid
|
|
|
|
+
|
|
|
|
+==Required==
|
|
|
|
+
|
|
|
|
+TUIC user uuid
|
|
|
|
+
|
|
|
|
+#### users.password
|
|
|
|
+
|
|
|
|
+TUIC user password
|
|
|
|
+
|
|
|
|
+#### congestion_control
|
|
|
|
+
|
|
|
|
+QUIC congestion control algorithm
|
|
|
|
+
|
|
|
|
+One of: `cubic`, `new_reno`, `bbr`
|
|
|
|
+
|
|
|
|
+`cubic` is used by default.
|
|
|
|
+
|
|
|
|
+#### auth_timeout
|
|
|
|
+
|
|
|
|
+How long the server should wait for the client to send the authentication command
|
|
|
|
+
|
|
|
|
+`3s` is used by default.
|
|
|
|
+
|
|
|
|
+#### zero_rtt_handshake
|
|
|
|
+
|
|
|
|
+Enable 0-RTT QUIC connection handshake on the client side
|
|
|
|
+This is not impacting much on the performance, as the protocol is fully multiplexed
|
|
|
|
+
|
|
|
|
+!!! warning ""
|
|
|
|
+ Disabling this is highly recommended, as it is vulnerable to replay attacks.
|
|
|
|
+ See [Attack of the clones](https://blog.cloudflare.com/even-faster-connection-establishment-with-quic-0-rtt-resumption/#attack-of-the-clones)
|
|
|
|
+
|
|
|
|
+#### heartbeat
|
|
|
|
+
|
|
|
|
+Interval for sending heartbeat packets for keeping the connection alive
|
|
|
|
+
|
|
|
|
+`10s` is used by default.
|
|
|
|
+
|
|
|
|
+#### tls
|
|
|
|
+
|
|
|
|
+==Required==
|
|
|
|
+
|
|
|
|
+TLS configuration, see [TLS](/configuration/shared/tls/#inbound).
|