mirror of https://github.com/bol-van/zapret/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
92 lines
1.6 KiB
92 lines
1.6 KiB
# Zapret eBPF Configuration
|
|
# DPI evasion and packet filtering settings
|
|
|
|
[general]
|
|
# Enable/disable core features
|
|
enable_tls_randomization=1
|
|
enable_quic_filtering=1
|
|
enable_packet_fragmentation=1
|
|
enable_sni_encryption=1
|
|
enable_performance_monitoring=1
|
|
|
|
# eBPF specific settings
|
|
ebpf_enabled=1
|
|
ebpf_xdp_mode=1
|
|
ebpf_tc_mode=1
|
|
|
|
[performance]
|
|
# Connection and performance limits
|
|
max_connections=10000
|
|
connection_timeout=300
|
|
fragment_threshold=1200
|
|
processing_threads=4
|
|
|
|
# Memory and resource limits
|
|
max_memory_mb=512
|
|
map_size_connections=65536
|
|
map_size_rules=1024
|
|
|
|
[tls]
|
|
# TLS fingerprint randomization
|
|
randomize_cipher_order=1
|
|
use_browser_fingerprints=1
|
|
min_cipher_suites=8
|
|
max_cipher_suites=16
|
|
|
|
# JA3 fingerprint settings
|
|
ja3_randomization=1
|
|
ja3_database_size=1000
|
|
|
|
[quic]
|
|
# QUIC/HTTP3 filtering
|
|
randomize_connection_id=1
|
|
fake_retry_packets=1
|
|
support_0rtt=1
|
|
|
|
# DNS over QUIC settings
|
|
doq_filtering=1
|
|
doq_port=853
|
|
|
|
[fragmentation]
|
|
# Packet fragmentation strategies
|
|
min_fragment_size=64
|
|
max_fragment_size=1200
|
|
random_fragment_order=1
|
|
fragment_strategy=tcp_seg
|
|
|
|
# TCP segmentation
|
|
tcp_segment_size=536
|
|
tcp_random_window=1
|
|
|
|
[sni_encryption]
|
|
# SNI encryption (ECH/ESNI)
|
|
ech_enabled=1
|
|
esni_fallback=1
|
|
encryption_key_rotation=3600
|
|
|
|
[monitoring]
|
|
# Performance monitoring
|
|
stats_interval=1
|
|
history_size=3600
|
|
export_csv=1
|
|
|
|
# Alert thresholds
|
|
cpu_alert_threshold=80
|
|
memory_alert_threshold=90
|
|
latency_alert_threshold=10
|
|
|
|
[logging]
|
|
# Debug and logging
|
|
log_level=info
|
|
debug_mode=0
|
|
log_file=/var/log/zapret_ebpf.log
|
|
|
|
[network]
|
|
# Network interface settings
|
|
default_interface=eth0
|
|
monitor_interfaces=eth0,wlan0
|
|
|
|
# Protocol ports
|
|
https_ports=443,8443
|
|
quic_ports=443,80
|
|
dns_ports=53,853
|