config.docker.yaml

# moqx relay — docker runtime config template.
#
# entrypoint.sh resolves the ${MOQX_*} placeholders from environment
# variables (each with a default) via envsubst, then serves the result —
# unless a full config is mounted at /etc/moqx/config.yaml.
#
# The performance defaults below are inherited by the CI deploy (which sets
# no perf vars) and by the interop relay adapter. Override any value via its
# MOQX_* env var; the default for each lives in docker/entrypoint.sh.

threads: ${MOQX_THREADS}
use_local_forwarders: ${MOQX_LOCAL_FWD}
mvfst_bpf_steering: false

listener_defaults:
  mvfst:
    enable_gso: true
    max_conn_packets_sent_per_loop: ${MOQX_SEND_PKTS}
    max_server_recv_packets_per_loop: ${MOQX_RECV_PKTS}
    udp_socket_buffer_bytes: ${MOQX_UDP_BUFFER}
    ignore_path_mtu: ${MOQX_IGNORE_PATH_MTU}

# Two listeners: mvfst on MOQX_PORT and (when enabled) picoquic on
# MOQX_PICO_PORT — same cert/versions/endpoint, different stack + port.
# entrypoint.sh fills the MOQX_PICO_LISTENER placeholder below with the pico
# block, or leaves it empty when MOQX_PICO_ENABLE=false or MOQX_INSECURE=true
# (picoquic needs real TLS).
listeners:
  - name: relay-mvfst
    quic_stack: mvfst
    moqt_versions: ${MOQX_MOQT_VERSIONS}
    udp:
      socket:
        address: "${MOQX_BIND_ADDR}"
        port: ${MOQX_PORT}
    tls:
      cert_file: "${MOQX_CERT}"
      key_file: "${MOQX_KEY}"
      insecure: ${MOQX_INSECURE}
    endpoint: "${MOQX_ENDPOINT}"
${MOQX_PICO_LISTENER}

services:
  default:
    match:
      # Two rules so both listeners + both transports work:
      #   exact endpoint  → WebTransport on ${MOQX_ENDPOINT} (mvfst AND picoquic;
      #                     pico only registers WT endpoints for exact-path rules)
      #   prefix "/"      → raw QUIC (moqt://) on the base URL (mvfst). pico logs
      #                     an "unsupported prefix" warning and ignores this rule.
      - authority: {any: true}
        path: {exact: "${MOQX_ENDPOINT}"}
      - authority: {any: true}
        path: {prefix: "/"}
    cache:
      enabled: ${MOQX_CACHE}
      max_tracks: ${MOQX_MAX_TRACKS}
      max_groups_per_track: ${MOQX_MAX_GROUPS}

admin:
  port: ${MOQX_ADMIN_PORT}
  track_metrics_enabled: true
  address: "${MOQX_BIND_ADDR}"
  plaintext: true