`knotroute.json` configuration
Use knotroute doctor against the exact release you deploy; schema evolves with releases.
Identity and network
Section titled “Identity and network”{ "version": 3, "identity_file": "identity.json", "network_id": "kn_..."}Listen and advertise
Section titled “Listen and advertise”{ "listen": ["0.0.0.0:7447"], "advertise": ["relay.example.net:7447"]}Advertise only externally reachable addresses.
Discovery
Section titled “Discovery”Discovery can combine Beacon URLs, LAN multicast, peer exchange and a persistent peer cache.
Services
Section titled “Services”A published service specifies a target, service identity file, introduction-point count and metadata. Restricted hidden services should enforce application-layer authentication.
Proxy/dashboard
Section titled “Proxy/dashboard”Keep local proxy and management endpoints on loopback unless a deliberate additional security boundary protects them.