Skip to content

ShadowQUIC

listeners:
- name: shadowquic-in-1
type: shadowquic
port: 10822
listen: 0.0.0.0
# routing-mark: 0 # Sets routing-mark for the listening socket (Linux only)
# rule: sub-rule-name1
# proxy: proxy
users:
- username: username
password: password
jls-upstream:
addr: www.example.com:443
# sni: example.com
# proxy: proxy
# rate-limit: 0
# alpn:
# - h3
# quic-versions: [v1]
# zero-rtt: true
# congestion-controller: bbr
# up: 100 Mbps
# down: 100 Mbps
# ignore-client-bandwidth: false
# cwnd: 10
# bbr-profile: ""
# max-idle-time: 30000
# max-datagram-frame-size: 1400
# recv-window-conn: 0
# recv-window: 0
# disable-mtu-discovery: false

Common fields

ShadowQUIC authentication users.

Username.

Password.

Connections that do not pass JLS authentication are forwarded to this QUIC camouflage upstream.

Camouflage upstream address.

JLS camouflage target SNI. If empty, it is inferred from addr.

Proxy used for the camouflage upstream.

Forwarding rate limit in bit/s. 0 means unlimited.

Application-layer protocol negotiation list.

QUIC versions supported by the local host; supports v1 / v2.

Whether to enable 0-RTT.

Congestion control algorithm. Available values: cubic / new_reno / bbr. Default: bbr.

Brutal bandwidth negotiation. up is the server upload / client download cap, and down is the requested server download / client upload speed.

For Brutal. Ignore outbound down and use the listener down or automatic configuration.

Initial congestion window size. Default: 32.

BBR aggressiveness profile. Available values: standard / conservative / aggressive. Default: standard.

Maximum idle time in milliseconds.

Maximum UDP datagram frame size.

Stream-level receive window. 0 uses the internal default value.

Connection-level receive window. 0 uses the internal default value.

Whether to disable path MTU discovery.