mirror of https://github.com/TrustTunnel/TrustTunnel.git synced 2026-04-13 06:44:25 +00:00

Files

Alexander Novikov 77655d9ddf Split rules into [inbound] and [outbound] sections

Separate client filtering (TLS handshake) from destination filtering
(per-request) with independent default_action for each section,
so inbound defaults don't leak into outbound evaluation and vice versa.

2026-03-04 12:08:01 +07:00

src

Split rules into [inbound] and [outbound] sections

2026-03-04 12:08:01 +07:00

Cargo.toml

skipci: Automatic version increment by Bamboo

2026-03-02 21:44:40 +00:00

README.md

Pull request 94: Added auto-formatting and pre-commit hook

2025-12-21 20:54:46 +03:00

README.md

TrustTunnel Endpoint Binary

A standalone application that allows any user to easily set up their own VPN server.

Configuration

Configuration via TOML Files: The VPN endpoint binary utilizes TOML formatted files for configuration. The following files are used:
- Library Settings File: This file contains the configuration of the underlying library and reflects the Settings struct.
- TLS Hosts Settings File: This file defines the TLS hosts that the endpoint can represent to the client side. Different types of hosts are available, each serving a specific purpose. It reflects the TlsHostsSettings struct.
Additional Configuration Requirements: In addition to the TOML files, two additional items are required for configuration:
- Credentials File: This file contains user authentication data.
- Certificate Files: These files correspond to the TLS hosts defined in the TLS hosts settings.
Setup Wizard Tool: A setup wizard tool is provided within the repository, located in a separate directory. This tool simplifies the process of generating the required settings and files mentioned above. Refer to the usage instructions for quick setup instructions.
Command Line Configuration: The VPN endpoint binary supports additional configuration options through command line arguments. Users can customize the behavior of the endpoint according to their specific requirements. To view the available options, run the following command in the Terminal:
```
trusttunnel_endpoint -h
```

Additional Features

Dynamic Reloading of TLS Host Settings

The endpoint supports dynamic reloading of TLS host settings. When the SIGHUP signal is sent to the endpoint process, it will update and reload the TLS host settings on-the-fly without requiring a restart of the binary.