mirror of
https://github.com/SagerNet/sing-box.git
synced 2024-11-26 18:41:31 +00:00
82 lines
1.5 KiB
Markdown
82 lines
1.5 KiB
Markdown
|
### Structure
|
||
|
|
||
|
```json
|
||
|
{
|
||
|
"type": "tuic",
|
||
|
"tag": "tuic-in",
|
||
|
|
||
|
... // Listen Fields
|
||
|
|
||
|
"users": [
|
||
|
{
|
||
|
"name": "sekai",
|
||
|
"uuid": "059032A9-7D40-4A96-9BB1-36823D848068",
|
||
|
"password": "hello"
|
||
|
}
|
||
|
],
|
||
|
"congestion_control": "cubic",
|
||
|
"auth_timeout": "3s",
|
||
|
"zero_rtt_handshake": false,
|
||
|
"heartbeat": "10s",
|
||
|
"tls": {}
|
||
|
}
|
||
|
```
|
||
|
|
||
|
!!! warning ""
|
||
|
|
||
|
QUIC, which is required by TUIC is not included by default, see [Installation](/#installation).
|
||
|
|
||
|
### Listen Fields
|
||
|
|
||
|
See [Listen Fields](/configuration/shared/listen) for details.
|
||
|
|
||
|
### Fields
|
||
|
|
||
|
#### users
|
||
|
|
||
|
TUIC users
|
||
|
|
||
|
#### users.uuid
|
||
|
|
||
|
==Required==
|
||
|
|
||
|
TUIC user uuid
|
||
|
|
||
|
#### users.password
|
||
|
|
||
|
TUIC user password
|
||
|
|
||
|
#### congestion_control
|
||
|
|
||
|
QUIC congestion control algorithm
|
||
|
|
||
|
One of: `cubic`, `new_reno`, `bbr`
|
||
|
|
||
|
`cubic` is used by default.
|
||
|
|
||
|
#### auth_timeout
|
||
|
|
||
|
How long the server should wait for the client to send the authentication command
|
||
|
|
||
|
`3s` is used by default.
|
||
|
|
||
|
#### zero_rtt_handshake
|
||
|
|
||
|
Enable 0-RTT QUIC connection handshake on the client side
|
||
|
This is not impacting much on the performance, as the protocol is fully multiplexed
|
||
|
|
||
|
!!! warning ""
|
||
|
Disabling this is highly recommended, as it is vulnerable to replay attacks.
|
||
|
See [Attack of the clones](https://blog.cloudflare.com/even-faster-connection-establishment-with-quic-0-rtt-resumption/#attack-of-the-clones)
|
||
|
|
||
|
#### heartbeat
|
||
|
|
||
|
Interval for sending heartbeat packets for keeping the connection alive
|
||
|
|
||
|
`10s` is used by default.
|
||
|
|
||
|
#### tls
|
||
|
|
||
|
==Required==
|
||
|
|
||
|
TLS configuration, see [TLS](/configuration/shared/tls/#inbound).
|