Shadowsocks

proxies:
- name: "ss1"
  type: ss
  server: server
  port: 443
  cipher: aes-128-gcm
  password: "password"
  udp: true
  udp-over-tcp: false
  udp-over-tcp-version: 2
  ip-version: ipv4
  plugin: obfs
  plugin-opts:
    mode: tls
  smux:
    enabled: false

Common fields

Cipher

Method
aes-128-ctr	aes-192-ctr	aes-256-ctr
aes-128-cfb	aes-192-cfb	aes-256-cfb
aes-128-gcm	aes-192-gcm	aes-256-gcm
aes-128-ccm	aes-192-ccm	aes-256-ccm
aes-128-gcm-siv		aes-256-gcm-siv

Method
chacha20-ietf
chacha20	xchacha20
chacha20-ietf-poly1305	xchacha20-ietf-poly1305
chacha8-ietf-poly1305	xchacha8-ietf-poly1305

Method
2022-blake3-aes-128-gcm
2022-blake3-aes-256-gcm
2022-blake3-chacha20-poly1305

Method
lea-128-gcm
lea-192-gcm
lea-256-gcm

Method
rabbit128-poly1305
aegis-128l
aegis-256
aez-384
deoxys-ii-256-128
rc4-md5
none

password

Shadowsocks password.

udp-over-tcp

Enables UDP over TCP. Default: false.

udp-over-tcp-version

Protocol version for UDP over TCP. Default: 1. Available values: 1/2.

Plugin

plugin

Plugin. Supports obfs/v2ray-plugin/gost-plugin/shadow-tls/restls/kcptun/jls.

plugin-opts

Plugin settings.

plugin: obfs
plugin-opts:
  mode: tls
  host: bing.com

  plugin: v2ray-plugin
  plugin-opts:
    mode: websocket # no QUIC now
      # tls: true # wss
      # You can get this with openssl x509 -noout -fingerprint -sha256 -inform pem -in yourcert.pem
      # Configuring a fingerprint enables SSL pinning
      # fingerprint: xxxx
      # skip-cert-verify: true
      # name-cert-verify: example.com
      # host: bing.com
      # path: "/"
      # mux: true
      # headers:
      #   custom: value
      # v2ray-http-upgrade: false

  plugin: gost-plugin
  plugin-opts:
    mode: websocket
      # tls: true # wss
      # You can get this with openssl x509 -noout -fingerprint -sha256 -inform pem -in yourcert.pem
      # Configuring a fingerprint enables SSL pinning
      # fingerprint: xxxx
      # skip-cert-verify: true
      # name-cert-verify: example.com
      # host: bing.com
      # path: "/"
      # mux: true
      # headers:
      #   custom: value

  plugin: shadow-tls
  client-fingerprint: chrome
  plugin-opts:
    host: "cloud.tencent.com"
    password: "shadow_tls_password"
    version: 2 # support 1/2/3

  plugin: restls
  client-fingerprint: chrome  # one of chrome, ios, firefox, safari
  plugin-opts:
    host: "www.microsoft.com" # should be a TLS 1.3 server
    password: [YOUR_RESTLS_PASSWORD]
    version-hint: "tls13"
    # Control your post-handshake traffic through restls-script
    # Hide proxy behaviors like "tls in tls".
    # see https://github.com/3andne/restls/blob/main/Restls-Script:%20Hide%20Your%20Proxy%20Traffic%20Behavior.md
    restls-script: "300?100<1,400~100,350~100,600~100,300~200,300~100"

  plugin: kcptun
  plugin-opts:
    key: it's a secrect # pre-shared secret between client and server
    crypt: aes # aes, aes-128, aes-128-gcm, aes-192, salsa20, blowfish, twofish, cast5, 3des, tea, xtea, xor, none, null
    mode: fast # profiles: fast3, fast2, fast, normal, manual
    conn: 1 # set num of UDP connections to server
    autoexpire: 0 # set auto expiration time(in seconds) for a single UDP connection, 0 to disable
    scavengettl: 600 # set how long an expired connection can live (in seconds)
    mtu: 1350 # set maximum transmission unit for UDP packets
    ratelimit: 0 # set maximum outgoing speed (in bytes per second) for a single KCP connection, 0 to disable. Also known as packet pacing
    sndwnd: 128 # set send window size(num of packets)
    rcvwnd: 512 # set receive window size(num of packets)
    datashard: 10 # set reed-solomon erasure coding - datashard
    parityshard: 3 # set reed-solomon erasure coding - parityshard
    dscp: 0 # set DSCP(6bit)
    nocomp: false # disable compression
    acknodelay: false # flush ack immediately when a packet is received
    nodelay: 0
    interval: 50
    resend: 0
    sockbuf: 4194304 # per-socket buffer in bytes
    smuxver: 1 # specify smux version, available 1,2
    smuxbuf: 4194304 # the overall de-mux buffer in bytes
    framesize: 8192 # smux max frame size
    streambuf: 2097152 # per stream receive buffer in bytes, smux v2+
    keepalive: 10 # seconds between heartbeats

plugin: jls
client-fingerprint: chrome
plugin-opts:
  host: "www.example.com"
  username: "jls-user"
  password: "jls-password"
  # alpn: [h2, http/1.1]