Add DC9 HAProxy TLS front door

2026-09-02 22:54:05 -07:00
parent 7ea4515b27
commit 787a1128c1
8 changed files with 142 additions and 72 deletions
@@ -0,0 +1,37 @@
+global
+    log stdout format raw local0
+    maxconn 4096
+
+defaults
+    log global
+    mode tcp
+    option tcplog
+    timeout connect 5s
+    timeout client 24h
+    timeout server 24h
+
+frontend tls_443
+    bind 0.0.0.0:8443
+    tcp-request inspect-delay 5s
+    tcp-request content accept if { req.ssl_hello_type 1 }
+
+    acl sni_trojan req.ssl_sni -i dc9-tls-e2f48b.opfo.xyz
+    acl sni_anytls req.ssl_sni -i sb-dd65a3.kais.cloud
+    acl sni_arcane req.ssl_sni -i dc9.kais.cloud
+
+    use_backend singbox_trojan if sni_trojan
+    use_backend singbox_anytls if sni_anytls
+    use_backend arcane_agent if sni_arcane
+    default_backend decoy_https
+
+backend singbox_trojan
+    server trojan host.docker.internal:22591
+
+backend singbox_anytls
+    server anytls host.docker.internal:43824
+
+backend arcane_agent
+    server arcane arcane-agent-caddy:443
+
+backend decoy_https
+    server caddy decoy-caddy:443