tlspr - Man Page

tlspr [-d][-a] [-l[[@]logfile]] [-plistening_port] [-Pdestination_port] [-ctls_check_level] [-iinternal_ip] [-eexternal_ip]

tlspr is an SNI gateway service (destination host is taken from TLS handshake). The destination port must be specified via the -P option (or it may be detected with the Transparent plugin).

-I

Inetd mode. Standalone service only.

-d

Daemonize. Detach service from console and run in the background.

-t

Be silenT. Do not log start/stop/accept error records.

-u

Never ask for username authentication

-e

External address. IP address of the interface the proxy should initiate connections from. By default, the system will decide which address to use in accordance with the routing table.

-i

Internal address. IP address the proxy accepts connections to. By default, connections to any interface are accepted. It´s usually unsafe.

-a

Anonymous. Hide information about client.

-a1

Anonymous. Show fake information about client.

-p

listening_port. Port proxy listens for incoming connections. Default is 1443.

-P

destination_port. Port to establish outgoing connections. Required unless the Transparent plugin is used, because the TLS handshake does not contain port information. Default is 443.

-c

TLS_CHECK_LEVEL. 0 (default) - allow non-TLS traffic to pass, 1 - require TLS, only check client HELLO packet, 2 - require TLS, check both client and server HELLO, 3 - require TLS, check that the server sends a certificate (not compatible with TLS 1.3), 4 - require mutual TLS, check that the server sends a certificate request and the client sends a certificate (not compatible with TLS 1.3)

-l

Log. By default logging is to stdout. If logfile is specified logging is to file. Under Unix, if ´@´ precedes logfile, syslog is used for logging.

-S

Increase or decrease stack size. You may want to try something like -S8192 if you experience 3proxy crashes.

You should use a client with TLS support or configure a router to redirect TLS traffic to the proxy (transparent proxy). Configure the client to connect to internal_ip and port. If you need to limit clients, use 3proxy(8) instead.

Report all bugs to 3proxy@3proxy.org

3proxy(8), ftppr(8), htproxy(8), socks(8), pop3p(8), smtpp(8), tcppm(8), udppm(8), syslogd(8),
https://3proxy.org/

3proxy is designed by Vladimir 3APA3A Dubrovin (3proxy@3proxy.org)

3proxy(8), 3proxy.cfg(3), ftppr(8), htproxy(8), pop3p(8), smtpp(8), socks(8), tcppm(8), udppm(8).