github.com/sagernet/sing-box@v1.9.0-rc.20/docs/configuration/inbound/tuic.md (about)

     1  ### Structure
     2  
     3  ```json
     4  {
     5    "type": "tuic",
     6    "tag": "tuic-in",
     7    
     8    ... // Listen Fields
     9  
    10    "users": [
    11      {
    12        "name": "sekai",
    13        "uuid": "059032A9-7D40-4A96-9BB1-36823D848068",
    14        "password": "hello"
    15      }
    16    ],
    17    "congestion_control": "cubic",
    18    "auth_timeout": "3s",
    19    "zero_rtt_handshake": false,
    20    "heartbeat": "10s",
    21    "tls": {}
    22  }
    23  ```
    24  
    25  ### Listen Fields
    26  
    27  See [Listen Fields](/configuration/shared/listen/) for details.
    28  
    29  ### Fields
    30  
    31  #### users
    32  
    33  TUIC users
    34  
    35  #### users.uuid
    36  
    37  ==Required==
    38  
    39  TUIC user uuid
    40  
    41  #### users.password
    42  
    43  TUIC user password
    44  
    45  #### congestion_control
    46  
    47  QUIC congestion control algorithm
    48  
    49  One of: `cubic`, `new_reno`, `bbr`
    50  
    51  `cubic` is used by default.
    52  
    53  #### auth_timeout
    54  
    55  How long the server should wait for the client to send the authentication command
    56  
    57  `3s` is used by default.
    58  
    59  #### zero_rtt_handshake
    60  
    61  Enable 0-RTT QUIC connection handshake on the client side  
    62  This is not impacting much on the performance, as the protocol is fully multiplexed  
    63  
    64  !!! warning ""
    65      Disabling this is highly recommended, as it is vulnerable to replay attacks.
    66      See [Attack of the clones](https://blog.cloudflare.com/even-faster-connection-establishment-with-quic-0-rtt-resumption/#attack-of-the-clones)
    67  
    68  #### heartbeat
    69  
    70  Interval for sending heartbeat packets for keeping the connection alive
    71  
    72  `10s` is used by default.
    73  
    74  #### tls
    75  
    76  ==Required==
    77  
    78  TLS configuration, see [TLS](/configuration/shared/tls/#inbound).