-
Notifications
You must be signed in to change notification settings - Fork 5
/
fly.toml
144 lines (115 loc) · 2.57 KB
/
fly.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
app = ""
kill_signal = "SIGINT"
kill_timeout = 5
processes = []
[env]
CONN_TIMEOUT_SEC = "5"
NOPROXY_TIMEOUT_SEC = "20"
MAX_INFLIGHT_DNS_QUERIES = 1024
UPSTREAM_DOH = "https://dns.google/dns-query"
# TLS_CERT_PATH = "./test/certs/server.crt"
# TLS_KEY_PATH = "./test/certs/server.key"
# TLS_CERTKEY = "key=b64(server.key)\ncrt=b64(server.crt)"
[experimental]
allowed_public_ports = []
auto_rollback = true
# echo tcp/udp svc on 5xxx
[[services]]
internal_port = 5000
protocol = "udp"
[[services.ports]]
port = "5000"
[[services]]
internal_port = 5000
protocol = "tcp"
[[services.ports]]
port = "5000"
[[services]]
internal_port = 5001
protocol = "tcp"
[[services.ports]]
handlers = ["proxy_proto"]
port = "5001"
# h1x on 80
[[services]]
internal_port = 80
protocol = "tcp"
[services.concurrency]
hard_limit = 4096
soft_limit = 2048
type = "connections"
[[services.tcp_checks]]
grace_period = "5s"
interval = "30s"
restart_limit = 6
timeout = "3s"
[[services.ports]]
handlers = ["proxy_proto"]
port = "80"
# proxifier and doh svc on 80, 443
[[services]]
internal_port = 443
protocol = "tcp"
[services.concurrency]
hard_limit = 4096
soft_limit = 2048
type = "connections"
[[services.tcp_checks]]
grace_period = "5s"
interval = "30s"
restart_limit = 6
timeout = "3s"
[[services.ports]]
handlers = ["proxy_proto"]
port = "443"
# dot svc on port 853
[[services]]
internal_port = 853
protocol = "tcp"
[services.concurrency]
hard_limit = 512
soft_limit = 256
type = "connections"
[[services.tcp_checks]]
grace_period = "5s"
interval = "30s"
restart_limit = 6
timeout = "3s"
[[services.ports]]
handlers = ["proxy_proto"]
port = "853"
# doh with fly-terminated tls on 1443
# community.fly.io/t/4449
[[services]]
internal_port = 1443
protocol = "tcp"
[services.concurrency]
hard_limit = 512
soft_limit = 256
type = "connections"
[[services.tcp_checks]]
grace_period = "5s"
interval = "30s"
restart_limit = 6
timeout = "3s"
[[services.ports]]
handlers = ["tls", "proxy_proto"]
tls_options = { alpn = ["h2", "http/1.1"] }
port = "1443"
# dot with fly-terminated tls on port 1853
# community.fly.io/t/4495
[[services]]
internal_port = 1853
protocol = "tcp"
[services.concurrency]
hard_limit = 512
soft_limit = 256
type = "connections"
[[services.tcp_checks]]
grace_period = "5s"
interval = "30s"
restart_limit = 6
timeout = "3s"
[[services.ports]]
handlers = ["tls", "proxy_proto"]
port = "1853"