2023-08-01 14:20:13 +08:00
|
|
|
### Structure
|
|
|
|
|
|
|
|
|
|
```json
|
|
|
|
|
{
|
|
|
|
|
"type": "tuic",
|
|
|
|
|
"tag": "tuic-in",
|
|
|
|
|
|
|
|
|
|
... // Listen Fields
|
|
|
|
|
|
|
|
|
|
"users": [
|
|
|
|
|
{
|
|
|
|
|
"name": "sekai",
|
|
|
|
|
"uuid": "059032A9-7D40-4A96-9BB1-36823D848068",
|
|
|
|
|
"password": "hello"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"congestion_control": "cubic",
|
|
|
|
|
"auth_timeout": "3s",
|
|
|
|
|
"zero_rtt_handshake": false,
|
|
|
|
|
"heartbeat": "10s",
|
|
|
|
|
"tls": {}
|
|
|
|
|
}
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
!!! warning ""
|
|
|
|
|
|
2023-11-09 17:04:08 +08:00
|
|
|
QUIC, which is required by TUIC is not included by default, see [Installation](./#installation).
|
2023-08-01 14:20:13 +08:00
|
|
|
|
|
|
|
|
### Listen Fields
|
|
|
|
|
|
|
|
|
|
See [Listen Fields](/configuration/shared/listen) for details.
|
|
|
|
|
|
|
|
|
|
### Fields
|
|
|
|
|
|
|
|
|
|
#### users
|
|
|
|
|
|
|
|
|
|
TUIC users
|
|
|
|
|
|
|
|
|
|
#### users.uuid
|
|
|
|
|
|
|
|
|
|
==Required==
|
|
|
|
|
|
|
|
|
|
TUIC user uuid
|
|
|
|
|
|
|
|
|
|
#### users.password
|
|
|
|
|
|
|
|
|
|
TUIC user password
|
|
|
|
|
|
|
|
|
|
#### congestion_control
|
|
|
|
|
|
|
|
|
|
QUIC congestion control algorithm
|
|
|
|
|
|
|
|
|
|
One of: `cubic`, `new_reno`, `bbr`
|
|
|
|
|
|
|
|
|
|
`cubic` is used by default.
|
|
|
|
|
|
|
|
|
|
#### auth_timeout
|
|
|
|
|
|
|
|
|
|
How long the server should wait for the client to send the authentication command
|
|
|
|
|
|
|
|
|
|
`3s` is used by default.
|
|
|
|
|
|
|
|
|
|
#### zero_rtt_handshake
|
|
|
|
|
|
|
|
|
|
Enable 0-RTT QUIC connection handshake on the client side
|
|
|
|
|
This is not impacting much on the performance, as the protocol is fully multiplexed
|
|
|
|
|
|
|
|
|
|
!!! warning ""
|
|
|
|
|
Disabling this is highly recommended, as it is vulnerable to replay attacks.
|
|
|
|
|
See [Attack of the clones](https://blog.cloudflare.com/even-faster-connection-establishment-with-quic-0-rtt-resumption/#attack-of-the-clones)
|
|
|
|
|
|
|
|
|
|
#### heartbeat
|
|
|
|
|
|
|
|
|
|
Interval for sending heartbeat packets for keeping the connection alive
|
|
|
|
|
|
|
|
|
|
`10s` is used by default.
|
|
|
|
|
|
|
|
|
|
#### tls
|
|
|
|
|
|
|
|
|
|
==Required==
|
|
|
|
|
|
|
|
|
|
TLS configuration, see [TLS](/configuration/shared/tls/#inbound).
|
