Usage
Settings
Edit or create new /etc/triode/appsettings.Production.json
if not present.
Domain rules
{
"Rules": {
"*.dev.domain": "Proxy",
"*.bad.domain": "Refuse"
}
}
Rule | Behavior |
---|---|
Pass (default) | responds original addresses to DNS query |
Proxy | proxies as is with self-signed certificate |
Refuse | responds REFUSED to DNS query |
Secure (experimental) | clinet -http-> Triode -https-> upstream |
Promiscuous mode
{
"Promiscuous": true or false,
}
Value | Behavior |
---|---|
true | displays requests from any addresses |
false (default) | displays requests only from same address |
Advanced Usage
When a target device does not accept self-signed certificates, some options are available:
- Install commercial CA or Let's Encrypt -issued certificates using triode-certs
- Use "Secure" rule (experimental) to upgrade http requests to https servers
Logging
triode-trace outputs logs to stdout in NCSA extended/combined log format.