forked from hanselime/paqet
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathserver.yaml.example
More file actions
70 lines (57 loc) · 2.74 KB
/
Copy pathserver.yaml.example
File metadata and controls
70 lines (57 loc) · 2.74 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
# paqet Server Configuration Example
# Role must be explicitly set
role: "server"
# Logging configuration
log:
level: "info" # none, debug, info, warn, error, fatal
# Server listen configuration
listen:
addr: ":9999" # CHANGE ME: Server listen port (must match network.ipv4.addr port)
# Network interface settings
network:
interface: "eth0" # CHANGE ME: Network interface (eth0, ens3, en0, etc.)
# guid: "\Device\NPF_{...}" # Windows only (Npcap).
# IPv4 configuration
ipv4:
addr: "10.0.0.100:9999" # CHANGE ME: Server IPv4 and port (port must match listen.addr)
router_mac: "aa:bb:cc:dd:ee:ff" # CHANGE ME: Gateway/router MAC address
# IPv6 configuration (optional)
ipv6:
addr: "[::1]:9999" # CHANGE ME: Server IPv6 and port (or remove if not using IPv6)
router_mac: "aa:bb:cc:dd:ee:ff" # CHANGE ME: Gateway/router MAC address
# TCP flags for packet crafting (optional - will use defaults)
tcp:
local_flag: ["PA"] # Local TCP flags (Push+Ack default)
# PCAP settings (optional - will use defaults)
pcap:
sockbuf: 8388608 # 8MB buffer (default for server)
# Transport protocol configuration
transport:
protocol: "kcp" # Transport protocol (currently only "kcp" supported)
conn: 1 # Number of connections (1-256, default: 1)
# KCP protocol settings
kcp:
mode: "fast" # KCP mode: normal, fast, fast2, fast3
mtu: 1350 # Maximum transmission unit (50-1500)
rcvwnd: 1024 # Receive window size (default for server)
sndwnd: 1024 # Send window size (default for server)
# Encryption settings
block: "aes" # Encryption: aes, aes-128, aes-128-gcm, aes-192, salsa20, blowfish, twofish, cast5, 3des, tea, xtea, xor, sm4, none.
key: "your-secret-key-here" # CHANGE ME: Secret key (must match client)
# Buffer settings (optional)
smuxbuf: 4194304 # 4MB SMUX buffer
streambuf: 2097152 # 2MB stream buffer
# Optional Forward Error Correction (FEC) - currently disabled
# Use these only if you need FEC for very lossy networks:
# dshard: 10 # Data shards for FEC
# pshard: 3 # Parity shards for FEC
# Important: Server Firewall Configuration Required!
#
# Since paqet uses pcap to bypass standard firewalls, you MUST configure
# iptables on the server to prevent kernel interference:
#
# sudo iptables -t raw -A PREROUTING -p tcp --dport 9999 -j NOTRACK
# sudo iptables -t raw -A OUTPUT -p tcp --sport 9999 -j NOTRACK
# sudo iptables -t mangle -A OUTPUT -p tcp --sport 9999 --tcp-flags RST RST -j DROP
#
# Replace 9999 with your actual listen port.