config.example.json

{
  // Listen on host:port. Overrides listen_ip/listen_port when uncommented.
  // "listen": "127.0.0.1:8080",

  // Split listen knobs used when "listen" above is left unset.
  // "listen_ip": "127.0.0.1",
  // "listen_port": 8888,

  // Limit the number of concurrent downstream TCP connections (0 = unlimited).
  // "max_conns": 256,

  // Reuse an existing MITM root. Omit both fields to auto-generate alterego-ca.{crt,key}.
  // "ca_cert": "/path/to/alterego-ca.crt",
  // "ca_key": "/path/to/alterego-ca.key",

  // Pick an upstream fingerprint profile (see -list-fingerprints) or provide a captured ClientHello.
  // "upstream_fingerprint": "HelloFirefox_Auto",
  // "upstream_fingerprint_base64": "BASE64_ENCODED_CLIENT_HELLO",
  // "fallback_fingerprint": "HelloRandomizedALPN",

  // Tweaks that affect captured ClientHello parsing.
  // "fingerprint_allow_blunt_mimicry": false,
  // "fingerprint_add_padding": false,
  // "fingerprint_real_psk": false,

  // Tunnel upstream traffic through a SOCKS5 proxy (authentication optional).
  // "upstream_socks": "127.0.0.1:9050",
  // "upstream_socks_user": "username",
  // "upstream_socks_pass": "password",

  // Write proxied request/response pairs to a HAR file.
  // "har_path": "captures/traffic.har",

  // Skip upstream TLS verification (testing only), disable the TUI, or enable debug logging.
  // "insecure_skip_upstream_cert_verify": false,
  // "disable_tui": false,
  // "debug": false
}