Delicately-TUICed 0-RTT proxy protocol
10K+
本映像同时包含了 TUIC 的服务端与客户端,在容器内的命令为:
tuic-servertuic-client启动命令:
docker run -d -v "$(pwd)":/usr/local/etc/tuic/ -p 8443:443 --restart=always --name tuic connershua/tuic:latest server
或者使用使用 Compose:
version: '2.4'
services:
tuic:
image: connershua/tuic:latest
container_name: tuic
restart: always
network_mode: "host"
volumes:
- /usr/local/etc/tuic:/usr/local/etc/tuic
command: server
注:Compose 示例中使用 host 网络为示例,所以没有端口转发
server,如果你想要使用客户端将末尾的 server 改成 client 即可;host 网络;TUIC 服务端 config.json 配置文件示例:
{
"server": "[::]:443",
"users": {
"00000000-0000-0000-0000-000000000000": "PASSWORD_0",
"00000000-0000-0000-0000-000000000001": "PASSWORD_1"
},
"certificate": "/usr/local/etc/tuic/fullchain.pem",
"private_key": "/usr/local/etc/tuic/private.key",
"congestion_control": "bbr",
"alpn": ["h3", "spdy/3.1"],
"udp_relay_ipv6": true,
"zero_rtt_handshake": false,
"dual_stack": true,
"auth_timeout": "3s",
"task_negotiation_timeout": "3s",
"max_idle_time": "10s",
"max_external_packet_size": 1500,
"send_window": 16777216,
"receive_window": 8388608,
"gc_interval": "3s",
"gc_lifetime": "15s",
"log_level": "warn"
}
将宿主机上的配置文件命名为 config.json 以及证书文件(fullchain.pem 和 private.key)放在同一目录并绑定挂载到该目录即可,不用修改 config.json 里的证书路径,如果证书文件名不同只修改文件名即可,因为证书文件和 config.json 文件是放在一起挂载进容器里的 /usr/local/etc/tuic 目录;
Content type
Image
Digest
sha256:d60de3cd7…
Size
32.5 MB
Last updated
over 1 year ago
docker pull connershua/tuic