midway/fly.toml at main · celzero/midway · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
app = "midway"

kill_signal = "SIGINT"
kill_timeout = 15
processes = []

[env]
  CONN_TIMEOUT_SEC = "5"
  NOPROXY_TIMEOUT_SEC = "20"
  MAX_INFLIGHT_DNS_QUERIES = 1024
  UPSTREAM_DOH = "https://dns.google/dns-query"
  PROXY_DISABLED = "true"
  # TLS_CERT_PATH = "./test/certs/server.crt"
  # TLS_KEY_PATH = "./test/certs/server.key"
  # TLS_CERTKEY = "key=b64(server.key)\ncrt=b64(server.crt)"

[experimental]
  allowed_public_ports = []
  auto_rollback = true

# echo tcp/udp svc on 5xxx
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 5000
  protocol = "udp"

  [[services.ports]]
    port = "5000"

[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 5000
  protocol = "tcp"

  [[services.ports]]
    port = "5000"

[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 5001
  protocol = "tcp"

  [[services.ports]]
    handlers = ["proxy_proto"]
    port = "5001"

# h1x on 80
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 80
  protocol = "tcp"

  [services.concurrency]
  hard_limit = 4096
  soft_limit = 2048
  type = "connections"

  [[services.tcp_checks]]
  grace_period = "5s"
  interval = "30s"
  restart_limit = 6
  timeout = "3s"

  [[services.ports]]
    handlers = ["proxy_proto"]
    port = "80"

# proxifier and doh svc on 80, 443
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 443
  protocol = "tcp"

  [services.concurrency]
  hard_limit = 4096
  soft_limit = 2048
  type = "connections"

  [[services.tcp_checks]]
  grace_period = "5s"
  interval = "30s"
  restart_limit = 6
  timeout = "3s"

  [[services.ports]]
    handlers = ["proxy_proto"]
    port = "443"

# dot svc on port 853
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 853
  protocol = "tcp"

  [services.concurrency]
  hard_limit = 512
  soft_limit = 256
  type = "connections"

  [[services.tcp_checks]]
  grace_period = "5s"
  interval = "30s"
  restart_limit = 6
  timeout = "3s"

  [[services.ports]]
    handlers = ["proxy_proto"]
    port = "853"

# doh with fly-terminated tls on 1443
# community.fly.io/t/4449
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 1443
  protocol = "tcp"

  [services.concurrency]
  hard_limit = 512
  soft_limit = 256
  type = "connections"

  [[services.tcp_checks]]
  grace_period = "5s"
  interval = "30s"
  restart_limit = 6
  timeout = "3s"

  [[services.ports]]
    handlers = ["tls", "proxy_proto"]
    tls_options = { alpn = ["h2", "http/1.1"] }
    port = "1443"

# dot with fly-terminated tls on port 1853
# community.fly.io/t/4495
[[services]]
  auto_stop_machines = true
  auto_start_machines = false
  internal_port = 1853
  protocol = "tcp"

  [services.concurrency]
  hard_limit = 512
  soft_limit = 256
  type = "connections"

  [[services.tcp_checks]]
  grace_period = "5s"
  interval = "30s"
  restart_limit = 6
  timeout = "3s"

  [[services.ports]]
    handlers = ["tls", "proxy_proto"]
    port = "1853"