Client Configuration

Command-Line Flags

Connection Flags

Flag	Default	Description
`-server`	`woho.frp.cesbo.com:9000`	Server address in `host:port` format
`-name`	System hostname	Display name shown in the admin panel
`-key`	Saved key, if present	Pre-shared authentication key (`XXXX-XXXX-XXXX` format). Saved locally after first use

Transport Flags

By default, the client uses TLS 1.3 and verifies the server certificate with the operating system trust store.

Flag	Default	Description
`-pin`	Saved pin, if present	Server certificate SPKI pin. Use it for self-signed or private certificates
`-insecure`	`false`	Connect without TLS. The server must be started with `-tunnel-insecure`

Other Flags

Flag	Description
`-v`	Enable verbose logging
`-version`	Print version information and exit
`-help`	Print help message and exit

Examples

# Basic connection with a publicly trusted server certificate
woho-client -server your-server.com:9000 -key ABCD-EFGH-JKMN

# Custom display name
woho-client -server your-server.com:9000 -name "Production-Web-01" -key ABCD-EFGH-JKMN

# Self-signed or private certificate
woho-client -server 10.0.0.5:9000 -key ABCD-EFGH-JKMN -pin sha256//K7yc5T2s0e1kQm0oXQ0Qb1n0v0k4vT9nQ2y8m1s6Xn0=

# Without TLS; server must use -tunnel-insecure
woho-client -server your-server.com:9000 -key ABCD-EFGH-JKMN -insecure

# With verbose logging (for troubleshooting)
woho-client -server your-server.com:9000 -name "Debug-Client" -key ABCD-EFGH-JKMN -v

Service Commands

Built-in service management for Linux (systemd) and Windows (SCM).

Command	Description
`install`	Copy binary and register as a system service
`uninstall`	Stop and remove the system service
`start`	Start the installed service
`stop`	Stop the installed service
`status`	Show current service status

Install

# Linux (requires root)
sudo woho-client install -server your-server.com:9000 -name "Client-01" -key ABCD-EFGH-JKMN

# Linux with a pinned certificate
sudo woho-client install -server 10.0.0.5:9000 -name "Client-01" -key ABCD-EFGH-JKMN -pin sha256//K7yc5T2s0e1kQm0oXQ0Qb1n0v0k4vT9nQ2y8m1s6Xn0=

# Linux without TLS; server must use -tunnel-insecure
sudo woho-client install -server your-server.com:9000 -name "Client-01" -key ABCD-EFGH-JKMN -insecure

# Windows (Administrator PowerShell)
.\woho-client.exe install -server your-server.com:9000 -name "Client-01" -key ABCD-EFGH-JKMN

What install does:

Platform	Actions
Linux	Copies binary to `/usr/local/bin/woho-client`, creates systemd unit, creates `/var/lib/woho/`
Windows	Copies binary to `C:\Program Files\woho\`, creates Windows service with auto-recovery

Uninstall

sudo woho-client uninstall         # Linux
.\woho-client.exe uninstall        # Windows (Admin PowerShell)

Stops the service and removes the service configuration. Data files (including the UUID) are not deleted — the same UUID is reused on reinstall.

Start / Stop / Status

# Linux
woho-client start
woho-client stop
woho-client status

# Or directly via systemctl
systemctl start woho-client
systemctl stop woho-client
systemctl status woho-client

# Windows
.\woho-client.exe start
.\woho-client.exe stop
.\woho-client.exe status

# Or via sc.exe
sc.exe start woho-client
sc.exe stop woho-client
sc.exe query woho-client

Agent Tunnel TLS

Use the same transport on both sides:

Server mode	Client option
`-tls-cert` + `-tls-key` with a public certificate	No extra option
`-tls-cert` + `-tls-key` with a self-signed/private certificate	`-pin sha256//...`
`-tunnel-insecure`	`-insecure`

There is no automatic fallback from TLS to plaintext. If certificate verification fails, the client refuses to connect and keeps retrying with the same configuration.

The install command saves -pin to spki_pin next to auth_key, so you only need to pass it during install or rotation.

Connection Behaviour

Reconnection / Backoff

The client uses exponential backoff when reconnecting after a lost connection:

Attempt	Delay
1	1 s
2	2 s
3	5 s
4	10 s
5	30 s
6+	60 s (max)

The backoff resets to 1 s after a successful connection.

Heartbeat

Parameter	Value
Heartbeat interval	30 s
Server idle timeout	120 s

If the server receives no data from a client for 120 seconds it treats the connection as stale.

System Statistics

Reported every 5 seconds:

CPU usage (%)
Memory usage and total
Disk usage and total
Network bytes in/out

Client Identity (UUID)

Each client generates a UUID on first run, persisted to disk and reused across restarts.

Platform	Config directory
Linux / macOS (root)	`/etc/woho/`
Linux / macOS (user)	`~/.woho/`
Windows	`%APPDATA%\woho\`

File name: client_id

Pre-Shared Key Storage

When a client connects with -key, the key is saved to the config directory as auth_key. On subsequent starts the client reads this file automatically.

Platform	File location
Linux / macOS (root)	`/etc/woho/auth_key`
Linux / macOS (user)	`~/.woho/auth_key`
Windows	`%APPDATA%\woho\auth_key`