/**
 * WireGuard outbound proxy configuration.
 *
 * @see https://xtls.github.io/en/config/outbounds/wireguard.html
 */
export interface WireGuardOutboundConfig {
    /** Disable kernel TUN (use userspace). */
    noKernelTun?: boolean;
    /** WireGuard private key (base64). */
    secretKey?: string;
    /** Local IP addresses with CIDR (e.g. ["10.0.0.2/32", "fd00::2/128"]). */
    address?: string[];
    /** Peer configurations. */
    peers?: WireGuardPeer[];
    /** MTU for the WireGuard interface (default: 1420). */
    mtu?: number;
    /** Number of worker threads. */
    workers?: number;
    /** Reserved bytes for WireGuard header (3 bytes as array). */
    reserved?: number[];
    /** Domain resolution strategy. */
    domainStrategy?: string;
}
export interface WireGuardPeer {
    /** Peer's public key (base64). */
    publicKey?: string;
    /** Pre-shared key for additional security (base64). */
    preSharedKey?: string;
    /** Peer endpoint (e.g. "engage.cloudflareclient.com:2408"). */
    endpoint?: string;
    /** Keep-alive interval in seconds (default: 0 = disabled). */
    keepAlive?: number;
    /** Allowed IP ranges (default: ["0.0.0.0/0", "::/0"]). */
    allowedIPs?: string[];
}
//# sourceMappingURL=wireguard.d.ts.map