services.zapret.params

NixOS option

Specify the bypass parameters for Zapret binary. There are no universal parameters as they vary between different networks, so you’ll have to find them yourself. This can be done by running the blockcheck binary from zapret package, i.e. nix-shell -p nftables zapret --command blockcheck (or iptables instead of nftables if that is what your firewall is using). It’ll try different params and then tell you which params are working for your network.

type: list of string
Default
[ ]
Example
[
  "--dpi-desync=fake,disorder2"
  "--dpi-desync-ttl=1"
  "--dpi-desync-autottl=2"
]
declared in: nixos/modules/services/networking/zapret.nixView source on NixOS/nixpkgs →