connections {
  bypass-ipsec {
    remote_addrs = 127.0.0.1
    children {
      bypass-isakmp-v4 {
        local_ts = 0.0.0.0/0[udp/isakmp]
        remote_ts = 0.0.0.0/0[udp/isakmp]
        mode = pass
        start_action = trap
      }
      bypass-isakmp-v6 {
        local_ts = ::/0[udp/isakmp]
        remote_ts = ::/0[udp/isakmp]
        mode = pass
        start_action = trap
      }
    }
  }
  m_labs {
    version = 2
    encap = no
    mobike = no
    send_certreq = no
    proposals = aes128gcm128-sha256-prfsha256-curve25519,aes128gcm128-sha256-prfsha256-ecp256
    local_addrs = 103.206.98.1
    remote_addrs = 94.190.212.123
    local {
      auth = pubkey
      id = fqdn:igw0.hkg.as150788.net
      pubkeys = igw0.hkg.as150788.net
    }
    remote {
      auth = pubkey
      id = fqdn:m-labs.hk
      pubkeys = m-labs.hk
    }
    children {
      con1 {
        mode = transport
        ah_proposals = sha256-curve25519,sha256-ecp256
        esp_proposals =
        local_ts = 103.206.98.1[gre]
        remote_ts = 94.190.212.123[gre]
        start_action = none
        close_action = none
      }
    }
  }
}