/usr/bin/sslocal

A fast tunnel proxy that helps you bypass firewalls. (https://shadowsocks.org)

Usage: sslocal [OPTIONS]

Options:
  -c, --config <CONFIG>
          Shadowsocks configuration file (https://shadowsocks.org/doc/configs.html)
  -b, --local-addr <LOCAL_ADDR>
          Local address, listen only to this address if specified
  -u
          Server mode UDP_ONLY
  -U
          Server mode TCP_AND_UDP
      --protocol <PROTOCOL>
          Protocol for communicating with clients (SOCKS5 by default) [possible values: socks, http,
          tunnel, redir, dns, tun]
      --udp-bind-addr <UDP_BIND_ADDR>
          UDP relay's bind address, default is the same as local-addr
      --udp-associate-addr <UDP_ASSOCIATE_ADDR>
          UDP relay's externally visible address return in UDP Associate responses
  -s, --server-addr <SERVER_ADDR>
          Server address
  -k, --password <PASSWORD>
          Server's password
  -m, --encrypt-method <ENCRYPT_METHOD>
          Server's encryption method [possible values: plain, none, table, rc4-md5, aes-128-ctr,
          aes-192-ctr, aes-256-ctr, aes-128-cfb, aes-128-cfb1, aes-128-cfb8, aes-128-cfb128,
          aes-192-cfb, aes-192-cfb1, aes-192-cfb8, aes-192-cfb128, aes-256-cfb, aes-256-cfb1,
          aes-256-cfb8, aes-256-cfb128, aes-128-ofb, aes-192-ofb, aes-256-ofb, camellia-128-ctr,
          camellia-192-ctr, camellia-256-ctr, camellia-128-cfb, camellia-128-cfb1,
          camellia-128-cfb8, camellia-128-cfb128, camellia-192-cfb, camellia-192-cfb1,
          camellia-192-cfb8, camellia-192-cfb128, camellia-256-cfb, camellia-256-cfb1,
          camellia-256-cfb8, camellia-256-cfb128, camellia-128-ofb, camellia-192-ofb,
          camellia-256-ofb, rc4, chacha20-ietf, aes-128-gcm, aes-256-gcm, chacha20-ietf-poly1305,
          2022-blake3-aes-128-gcm, 2022-blake3-aes-256-gcm, 2022-blake3-chacha20-poly1305]
      --timeout <TIMEOUT>
          Server's timeout seconds for TCP relay
      --plugin <PLUGIN>
          SIP003 (https://shadowsocks.org/doc/sip003.html) plugin
      --plugin-mode <PLUGIN_MODE>
          SIP003/SIP003u plugin mode, must be one of `tcp_only` (default), `udp_only` and
          `tcp_and_udp`
      --plugin-opts <PLUGIN_OPT>
          Set SIP003 plugin options
      --server-url <SERVER_URL>
          Server address in SIP002 (https://shadowsocks.org/doc/sip002.html) URL
      --acl <ACL>
          Path to ACL (Access Control List)
      --dns <DNS>
          DNS nameservers, formatted like [(tcp|udp)://]host[:port][,host[:port]]..., or
          unix:///path/to/dns, or predefined keys like "google", "cloudflare"
      --dns-cache-size <DNS_CACHE_SIZE>
          DNS cache size in number of records. Works when trust-dns DNS backend is enabled.
      --tcp-no-delay
          Set TCP_NODELAY option for sockets
      --tcp-fast-open
          Enable TCP Fast Open (TFO)
      --tcp-keep-alive <TCP_KEEP_ALIVE>
          Set TCP keep alive timeout seconds
      --tcp-multipath
          Enable Multipath-TCP (MPTCP)
      --udp-timeout <UDP_TIMEOUT>
          Timeout seconds for UDP relay
      --udp-max-associations <UDP_MAX_ASSOCIATIONS>
          Maximum associations to be kept simultaneously for UDP relay
      --inbound-send-buffer-size <INBOUND_SEND_BUFFER_SIZE>
          Set inbound sockets' SO_SNDBUF option
      --inbound-recv-buffer-size <INBOUND_RECV_BUFFER_SIZE>
          Set inbound sockets' SO_RCVBUF option
      --outbound-send-buffer-size <OUTBOUND_SEND_BUFFER_SIZE>
          Set outbound sockets' SO_SNDBUF option
      --outbound-recv-buffer-size <OUTBOUND_RECV_BUFFER_SIZE>
          Set outbound sockets' SO_RCVBUF option
      --outbound-bind-addr <OUTBOUND_BIND_ADDR>
          Bind address, outbound socket will bind this address
      --outbound-bind-interface <OUTBOUND_BIND_INTERFACE>
          Set SO_BINDTODEVICE / IP_BOUND_IF / IP_UNICAST_IF option for outbound socket
  -6
          Resolve hostname to IPv6 address first
  -v...
          Set log level
      --log-without-time
          Log without datetime prefix
  -f, --forward-addr <FORWARD_ADDR>
          Forwarding data directly to this address (for tunnel)
  -n, --nofile <NOFILE>
          Set RLIMIT_NOFILE with both soft and hard limit
      --outbound-fwmark <OUTBOUND_FWMARK>
          Set SO_MARK option for outbound sockets
      --tcp-redir <TCP_REDIR>
          TCP redir (transparent proxy) type [possible values: redirect, tproxy]
      --udp-redir <UDP_REDIR>
          UDP redir (transparent proxy) type [possible values: tproxy]
      --local-dns-addr <LOCAL_DNS_ADDR>
          Specify the address of local DNS server, send queries directly
      --remote-dns-addr <REMOTE_DNS_ADDR>
          Specify the address of remote DNS server, send queries through shadowsocks' tunnel
      --tun-interface-name <TUN_INTERFACE_NAME>
          Tun interface name, allocate one if not specify
      --tun-interface-address <TUN_INTERFACE_ADDRESS>
          Tun interface address (network)
      --tun-interface-destination <TUN_INTERFACE_DESTINATION>
          Tun interface destination address (network)
      --tun-device-fd-from-path <TUN_DEVICE_FD_FROM_PATH>
          Tun device file descriptor will be transferred from this unix domain socket path
  -d, --daemonize
          Daemonize
      --daemonize-pid <DAEMONIZE_PID_PATH>
          File path to store daemonized process's PID
      --single-threaded
          Run the program all in one thread
      --worker-threads <WORKER_THREADS>
          Sets the number of worker threads the `Runtime` will use
  -a, --user <USER>
          Run as another user
      --online-config-url <ONLINE_CONFIG_URL>
          SIP008 Online Configuration Delivery URL (https://shadowsocks.org/doc/sip008.html)
      --online-config-update-interval <ONLINE_CONFIG_UPDATE_INTERVAL>
          SIP008 Online Configuration Delivery update interval in seconds, 3600 by default
      --online-config-allowed-plugin <ONLINE_CONFIG_ALLOWED_PLUGIN>
          SIP008 Online Configuration Delivery allowed plugin list
  -h, --help
          Print help
  -V, --version
          Print version