MyNixOS website logo
option

services.zapret2.profiles

Defines DPI bypass profiles for Zapret2.

Note that each profile should have a unique --filter-* option. By default, a profile matches all traffic, and when a profile matches some traffic, no other profile is evaluated. Since profiles are matched in order they are passed on the command line, the ordering of profiles is important, and if a "fallback"/catch-all profile is defined, it should be defined with a high priority to make sure it is last in the list of profiles.

Each profile will be prepended with the --name option to set the name, and then joined together with --new between profiles to form the final command-line parameters that will be passed to Zapret2. Therefore, neither --name nor --new should be used in the values.

Declarations
Type
attribute set of (submodule)
Default
{ }
Example
{
  https = {
    parameters = [
      "--filter-tcp=443"
      "--payload=tls_client_hello"
      "--lua-desync=fake:blob=fake_default_tls:tcp_ts=-1000:repeats=1"
      "--lua-desync=fakedsplit:pos=1,midsld:tcp_ts=-1000"
    ];
  };
}