tsunami

type Client struct {
	// contains filtered or unexported fields
}

type ClientConfig struct {
	// Password is the TSUNAMI user password; auth sends SHA-256(password).
	Password string
	// DialOut returns a transport connection ready for the TSUNAMI handshake:
	// plain TLS, or a fronting tunnel returned by fronting.NewClientConn.
	// Called by the session pool when it needs a new session.
	DialOut func(ctx context.Context) (net.Conn, error)
	// PaddingScheme is the initial scheme text; nil uses padding.DefaultScheme().
	PaddingScheme []byte
	// IdleSessionCheckInterval is how often the pool scans for idle sessions.
	// Default 30s.
	IdleSessionCheckInterval time.Duration
	// IdleSessionTimeout is the nominal idle timeout per session. The effective
	// deadline is jittered by [0.7, 1.3) on every check. Default 5m.
	IdleSessionTimeout time.Duration
	// MinIdleSession is the minimum number of idle sessions to keep alive.
	// Default 0: an idle client drains to zero sessions.
	MinIdleSession int
	// MaxStreams bounds concurrent streams per session. Defaults to 0
	// (unlimited): the client is the stream opener, while the server enforces
	// its own per-session limit. A positive value makes the client fail fast
	// with protocol.ErrTooManyStreams instead of over-subscribing a session.
	MaxStreams int
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceConfig struct {
	// Users is the static credential list. Passwords are hashed with SHA-256
	// at construction time.
	Users []User
	// PaddingScheme is the server's scheme text; nil uses
	// padding.DefaultScheme().
	PaddingScheme []byte
	// Handler runs once per opened stream, in its own goroutine. destination
	// is the SOCKS5 address the client wrote first ("host:port", IPv6 hosts
	// are bracketed unless the peer encoded a bare address; use
	// net.SplitHostPort-style consumers). The handler owns conn and must close
	// it.
	Handler func(ctx context.Context, conn net.Conn, source net.Addr, destination string)
	// MaxStreams bounds concurrent streams per session. Defaults to
	// protocol.DefaultMaxStreams. A malicious peer that opens streams without
	// using them cannot exhaust memory/goroutines beyond this bound.
	MaxStreams int
}

type User struct {
	Name     string
	Password string
}