ShadowSocks

listeners:
- name: ss-in
  type: shadowsocks
  port: 10001
  listen: 0.0.0.0
  # routing-mark: 0 # Sets the routing-mark for the listening socket (Linux only)
  cipher: 2022-blake3-aes-256-gcm
  password: vlmpIPSyHH6f4S8WVPdRIHIlzmB+GIRfoH3aNJ/t9Gg=
  udp: true
  # simple-obfs:
  #   enable: false # Set to true to enable
  #   mode: http # Available values: http, tls
  # shadow-tls:
  #   enable: false # Set to true to enable
  #   version: 3 # Supports v1/v2/v3
  #   password: password # v2 option
  #   users: # v3 option
  #     - name: 1
  #       password: password
  #   handshake:
  #     dest: test.com:443
  # res-tls:
  #   enable: false # Set to true to enable
  #   dest: test.com:443
  #   password: password
  #   restls-script: ""
  #   min-record-len: 0
  #   proxy: ""
  #   rate-limit: 0 # Bidirectional rate limit for fallback traffic, in bit/s. A value of 0 disables rate limiting.
  # jls-config: # Wraps TCP only; failed JLS authentication and regular TLS connections transparently fall back to dest
  #   enable: false
  #   users:
  #     - username: jls-user
  #       password: jls-password
  #   dest: www.example.com:443
  #   # sni: www.example.com # Inferred from dest when empty
  #   # alpn: [h2, http/1.1]
  #   # proxy: ""
  #   # rate-limit: 0 # Forwarding rate limit in bit/s; 0 means unlimited
  # kcp-tun:
  #   enable: false
  #   key: it's a secrect # pre-shared secret between client and server
  #   crypt: aes # aes, aes-128, aes-128-gcm, aes-192, salsa20, blowfish, twofish, cast5, 3des, tea, xtea, xor, none, null
  #   mode: fast # profiles: fast3, fast2, fast, normal, manual
  #   conn: 1 # set num of UDP connections to server
  #   autoexpire: 0 # set auto expiration time(in seconds) for a single UDP connection, 0 to disable
  #   scavengettl: 600 # set how long an expired connection can live (in seconds)
  #   ratelimit: 0 # set maximum outgoing speed (in bytes per second) for a single KCP connection, 0 to disable. Also known as packet pacing
  #   mtu: 1350 # set maximum transmission unit for UDP packets
  #   sndwnd: 128 # set send window size(num of packets)
  #   rcvwnd: 512 # set receive window size(num of packets)
  #   datashard: 10 # set reed-solomon erasure coding - datashard
  #   parityshard: 3 # set reed-solomon erasure coding - parityshard
  #   dscp: 0 # set DSCP(6bit)
  #   nocomp: false # disable compression
  #   acknodelay: false # flush ack immediately when a packet is received
  #   nodelay: 0
  #   interval: 50
  #   resend: 0
  #   sockbuf: 4194304 # per-socket buffer in bytes
  #   smuxver: 1 # specify smux version, available 1,2
  #   smuxbuf: 4194304 # the overall de-mux buffer in bytes
  #   framesize: 8192 # smux max frame size
  #   streambuf: 2097152 # per stream receive buffer in bytes, smux v2+
  #   keepalive: 10 # seconds between heartbeats
  # mux-option:
  #   padding: true
  #   brutal:
  #     enabled: true
  #     up: 1000 # Mbps by default
  #     down: 1000

General Fields

Protocol Configuration

cipher

Encryption method

Method	Password length
2022-blake3-aes-128-gcm	16
2022-blake3-aes-256-gcm	32
2022-blake3-chacha20-poly1305	32
none	/
aes-128-gcm	/
aes-192-gcm	/
aes-256-gcm	/
chacha20-ietf-poly1305	/
xchacha20-ietf-poly1305	/

password

Method	Password format
none	/
2022	openssl rand --base64 <password length>
Other	Any string

udp

Whether to listen for UDP