mixed-port: 7890
redir-port: 7892
tproxy-port: 7895
allow-lan: true
bind-address: "*"
mode: rule
log-level: warning
ipv6: true
unified-delay: true
tcp-concurrent: true
profile:
  store-selected: true
  store-fake-ip: true
geodata-mode: true
geodata-loader: memconservative
geo-auto-update: true
geo-update-interval: 24
geox-url:
  geoip: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat
  geosite: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat
  mmdb: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: true
  sniff:
    TLS:
      ports:
      - 443
      - 8443
    HTTP:
      ports:
      - 80
      - 8080-8880
      override-destination: true
    QUIC:
      ports:
      - 443
      - 8443
  skip-domain:
  - Mijia Cloud
  - dlg.io.mi.com
  - "+.push.apple.com"
  - "+.googlevideo.com"
  - "+.qq.com"
  - "+.tencent.com"
  - "+.wechat.com"
  - "+.servicewechat.com"
  - "+.gtimg.com"
  - "+.gtimg.cn"
  - "+.qpic.cn"
  - "+.qlogo.cn"
  - "+.tenpay.com"
  - "+.myqcloud.com"
  - "+.qcloud.com"
  - "+.douyin.com"
  - "+.douyincdn.com"
  - "+.douyinpic.com"
  - "+.douyinstatic.com"
  - "+.douyinliving.com"
  - "+.iesdouyin.com"
  - "+.douyinvod.com"
  - "+.douyinvideo.net"
  - "+.amemv.com"
  - "+.snssdk.com"
  - "+.byteimg.com"
  - "+.bytecdn.cn"
  - "+.ibytedtos.com"
  - "+.zijieapi.com"
  - "+.pstatp.com"
  - "+.toutiao.com"
  - "+.toutiaovod.com"
  - "+.bytedance.net"
  - "+.xiaohongshu.com"
  - "+.xhscdn.com"
  - "+.xhscdn.net"
  - "+.xhslink.com"
  - "+.xhsimg.com"
  - "+.taobao.com"
  - "+.tmall.com"
  - "+.tbcdn.cn"
  - "+.alicdn.com"
  - "+.alibaba.com"
  - "+.alibabausercontent.com"
  - "+.alipay.com"
  - "+.alipayobjects.com"
  - "+.goofish.com"
  - "+.idlefish.com"
  - "+.aliyun.com"
  - "+.aliyuncs.com"
  - "+.mmstat.com"
  - "+.cainiao.com"
  - "+.amap.com"
  - "+.autonavi.com"
  - "+.115.com"
  - "+.115cdn.com"
  - "+.115cdn.net"
  - "+.115img.com"
  - "+.116cd.cn"
  - "+.116cd.com"
  - "+.116cd.net"
  - "+.anxia.com"
  - "+.sq.cc"
  - fhnfile.oss-cn-shenzhen.aliyuncs.com
tun:
  enable: false
  stack: mixed
  mtu: 1492
  dns-hijack:
  - any:53
  - tcp://any:53
  auto-route: true
  auto-detect-interface: true
  strict-route: true
proxies:
- name: 自建节点-1
  type: vless
  server: "修改为你的服务器IP或域名"
  port: 443
  ip-version: ipv4
  udp: true
  uuid: "修改为你的UUID"
  flow: xtls-rprx-vision
  packet-encoding: xudp
  encryption: none
  network: tcp
  tls: true
  servername: "修改为你的Reality伪装域名"
  client-fingerprint: chrome
  skip-cert-verify: false
  reality-opts:
    public-key: "修改为你的Reality公钥"
    short-id: "修改为你的Reality短ID"
proxy-groups:
- name: PROXY
  type: select
  proxies:
  - 自建节点-1
  - DIRECT
dns:
  enable: true
  listen: 127.0.0.1:1053
  cache-algorithm: arc
  ipv6: true
  prefer-ipv6: false
  prefer-h3: false
  use-hosts: true
  use-system-hosts: true
  respect-rules: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-range6: fdfe:dcba:9876::1/64
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
  - "*.lan"
  - "*.local"
  - "+.localdomain"
  - localhost.ptlogin2.qq.com
  - "+.qq.com"
  - "+.tencent.com"
  - "+.wechat.com"
  - "+.servicewechat.com"
  - "+.gtimg.com"
  - "+.gtimg.cn"
  - "+.qpic.cn"
  - "+.qlogo.cn"
  - "+.tenpay.com"
  - "+.myqcloud.com"
  - "+.qcloud.com"
  - "+.douyin.com"
  - "+.douyincdn.com"
  - "+.douyinpic.com"
  - "+.douyinstatic.com"
  - "+.douyinliving.com"
  - "+.iesdouyin.com"
  - "+.douyinvod.com"
  - "+.douyinvideo.net"
  - "+.amemv.com"
  - "+.snssdk.com"
  - "+.byteimg.com"
  - "+.bytecdn.cn"
  - "+.ibytedtos.com"
  - "+.zijieapi.com"
  - "+.pstatp.com"
  - "+.toutiao.com"
  - "+.toutiaovod.com"
  - "+.bytedance.net"
  - "+.xiaohongshu.com"
  - "+.xhscdn.com"
  - "+.xhscdn.net"
  - "+.xhslink.com"
  - "+.xhsimg.com"
  - time.windows.com
  - time.apple.com
  - time.android.com
  - "+.xn--ngstr-lra8j.com"
  - "+.ntp.org.cn"
  - "+.pool.ntp.org"
  default-nameserver:
  - 223.5.5.5
  - 119.29.29.29
  nameserver-policy:
    "geosite:private,cn,geolocation-cn,apple-cn,microsoft@cn,steam@cn":
    - 223.5.5.5
    - 119.29.29.29
    "geosite:microsoft":
    - 223.5.5.5
    - 119.29.29.29
    "+.speedtest.net":
    - 223.5.5.5
    - 119.29.29.29
    "+.ooklaserver.net":
    - 223.5.5.5
    - 119.29.29.29
    "+.speed.cloudflare.com":
    - 223.5.5.5
    - 119.29.29.29
    "+.measurementlab.net":
    - 223.5.5.5
    - 119.29.29.29
    "geosite:github,google,youtube,telegram,geolocation-!cn":
    - https://1.1.1.1/dns-query#PROXY
    - https://dns.google/dns-query#PROXY
  nameserver:
  - 223.5.5.5
  - 119.29.29.29
  - https://dns.alidns.com/dns-query
  fallback:
  - https://1.1.1.1/dns-query#PROXY
  - https://dns.google/dns-query#PROXY
  proxy-server-nameserver:
  - 223.5.5.5
  - 119.29.29.29
  direct-nameserver:
  - 223.5.5.5
  - 119.29.29.29
  - https://dns.alidns.com/dns-query
  - https://doh.pub/dns-query
  direct-nameserver-follow-policy: true
  fallback-filter:
    geoip: true
    geoip-code: CN
    geosite:
    - geolocation-!cn
    ipcidr:
    - 240.0.0.0/4
rules:
# 核心优化：强制阿里系应用放弃 QUIC (UDP 443)，瞬间回退 TCP 解决转圈慢的问题
- AND,((NETWORK,UDP),(DST-PORT,443),(GEOSITE,alibaba)),REJECT

# 局域网与私有 IP 放行
- IP-CIDR6,::1/128,DIRECT,no-resolve
- IP-CIDR6,fc00::/7,DIRECT,no-resolve
- IP-CIDR6,fe80::/10,DIRECT,no-resolve
- IP-CIDR6,ff00::/8,DIRECT,no-resolve
- IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
- IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
- IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
- IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
- IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
- IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
- IP-CIDR,224.0.0.0/4,DIRECT,no-resolve
- IP-CIDR,240.0.0.0/4,DIRECT,no-resolve

- GEOSITE,private,DIRECT

# 核心优化：阿里系服务直连 (替代原本冗长的 DOMAIN-SUFFIX，涵盖更全)
- GEOSITE,alibaba,DIRECT

# 国内 App 专属直连
- DOMAIN-SUFFIX,qq.com,DIRECT
- DOMAIN-SUFFIX,tencent.com,DIRECT
- DOMAIN-SUFFIX,wechat.com,DIRECT
- DOMAIN-SUFFIX,servicewechat.com,DIRECT
- DOMAIN-SUFFIX,gtimg.com,DIRECT
- DOMAIN-SUFFIX,gtimg.cn,DIRECT
- DOMAIN-SUFFIX,qpic.cn,DIRECT
- DOMAIN-SUFFIX,qlogo.cn,DIRECT
- DOMAIN-SUFFIX,tenpay.com,DIRECT
- DOMAIN-SUFFIX,myqcloud.com,DIRECT
- DOMAIN-SUFFIX,qcloud.com,DIRECT
- DOMAIN-SUFFIX,douyin.com,DIRECT
- DOMAIN-SUFFIX,douyincdn.com,DIRECT
- DOMAIN-SUFFIX,douyinpic.com,DIRECT
- DOMAIN-SUFFIX,douyinstatic.com,DIRECT
- DOMAIN-SUFFIX,douyinliving.com,DIRECT
- DOMAIN-SUFFIX,iesdouyin.com,DIRECT
- DOMAIN-SUFFIX,douyinvod.com,DIRECT
- DOMAIN-SUFFIX,douyinvideo.net,DIRECT
- DOMAIN-SUFFIX,amemv.com,DIRECT
- DOMAIN-SUFFIX,snssdk.com,DIRECT
- DOMAIN-SUFFIX,byteimg.com,DIRECT
- DOMAIN-SUFFIX,bytecdn.cn,DIRECT
- DOMAIN-SUFFIX,ibytedtos.com,DIRECT
- DOMAIN-SUFFIX,zijieapi.com,DIRECT
- DOMAIN-SUFFIX,pstatp.com,DIRECT
- DOMAIN-SUFFIX,toutiao.com,DIRECT
- DOMAIN-SUFFIX,toutiaovod.com,DIRECT
- DOMAIN-SUFFIX,bytedance.net,DIRECT
- DOMAIN-SUFFIX,xiaohongshu.com,DIRECT
- DOMAIN-SUFFIX,xhscdn.com,DIRECT
- DOMAIN-SUFFIX,xhscdn.net,DIRECT
- DOMAIN-SUFFIX,xhslink.com,DIRECT
- DOMAIN-SUFFIX,xhsimg.com,DIRECT

# 115 专属直连
- DOMAIN-SUFFIX,115.com,DIRECT
- DOMAIN-SUFFIX,115cdn.com,DIRECT
- DOMAIN-SUFFIX,115cdn.net,DIRECT
- DOMAIN-SUFFIX,115img.com,DIRECT
- DOMAIN-SUFFIX,116cd.cn,DIRECT
- DOMAIN-SUFFIX,116cd.com,DIRECT
- DOMAIN-SUFFIX,116cd.net,DIRECT
- DOMAIN-SUFFIX,anxia.com,DIRECT
- DOMAIN-SUFFIX,sq.cc,DIRECT
- DOMAIN,fhnfile.oss-cn-shenzhen.aliyuncs.com,DIRECT

# 测速与连通性检测直连，避免把宽带测速测成代理节点速度
- DOMAIN-SUFFIX,speedtest.net,DIRECT
- DOMAIN-SUFFIX,ooklaserver.net,DIRECT
- DOMAIN-SUFFIX,speedtestcustom.com,DIRECT
- DOMAIN-SUFFIX,speed.cloudflare.com,DIRECT
- DOMAIN-SUFFIX,measurementlab.net,DIRECT
- DOMAIN-SUFFIX,speedtest.cn,DIRECT

# GitHub 必须置于 Microsoft 直连规则之前，避免被 Microsoft 规则提前匹配
- GEOSITE,github,PROXY
- DOMAIN-SUFFIX,github.com,PROXY
- DOMAIN-SUFFIX,githubusercontent.com,PROXY
- DOMAIN-SUFFIX,githubassets.com,PROXY
- DOMAIN-SUFFIX,ghcr.io,PROXY
- DOMAIN-SUFFIX,github.io,PROXY
- DOMAIN-SUFFIX,githubapp.com,PROXY
- DOMAIN-SUFFIX,github.dev,PROXY
- DOMAIN-SUFFIX,githubcopilot.com,PROXY

# Microsoft/Office/Windows 服务直连，避免后台服务误走不稳定代理
- GEOSITE,microsoft,DIRECT
- DOMAIN-SUFFIX,microsoft.com,DIRECT
- DOMAIN-SUFFIX,msftconnecttest.com,DIRECT
- DOMAIN-SUFFIX,msftncsi.com,DIRECT
- DOMAIN-SUFFIX,windowsupdate.com,DIRECT
- DOMAIN-SUFFIX,office.com,DIRECT
- DOMAIN-SUFFIX,office.net,DIRECT
- DOMAIN-SUFFIX,office365.com,DIRECT
- DOMAIN-SUFFIX,live.com,DIRECT
- DOMAIN-SUFFIX,live.net,DIRECT
- DOMAIN-SUFFIX,outlook.com,DIRECT
- DOMAIN-SUFFIX,microsoftonline.com,DIRECT
- DOMAIN-SUFFIX,microsoftonline-p.com,DIRECT
- DOMAIN-SUFFIX,sharepoint.com,DIRECT
- DOMAIN-SUFFIX,sharepointonline.com,DIRECT
- DOMAIN-SUFFIX,onedrive.com,DIRECT
- DOMAIN-SUFFIX,skype.com,DIRECT
- DOMAIN-SUFFIX,azureedge.net,DIRECT
- DOMAIN-SUFFIX,msauth.net,DIRECT
- DOMAIN-SUFFIX,msauthimages.net,DIRECT
- DOMAIN-SUFFIX,msftauth.net,DIRECT
- DOMAIN-SUFFIX,msftauthimages.net,DIRECT

# 代理规则 (AI 品牌与 Google 核心服务)
- DOMAIN-SUFFIX,openai.com,PROXY
- DOMAIN-SUFFIX,chatgpt.com,PROXY
- DOMAIN-SUFFIX,anthropic.com,PROXY
- DOMAIN-SUFFIX,claude.ai,PROXY
- DOMAIN-SUFFIX,google.com,PROXY
- DOMAIN-SUFFIX,googleapis.com,PROXY
- DOMAIN-SUFFIX,googleapis.cn,PROXY
- DOMAIN-SUFFIX,gstatic.com,PROXY
- DOMAIN-SUFFIX,gvt1.com,PROXY
- DOMAIN-SUFFIX,gvt2.com,PROXY
- DOMAIN-SUFFIX,gvt3.com,PROXY
- DOMAIN-SUFFIX,googleusercontent.com,PROXY
- DOMAIN-SUFFIX,ggpht.com,PROXY
- DOMAIN-SUFFIX,android.com,PROXY
- DOMAIN-SUFFIX,android.clients.google.com,PROXY
- DOMAIN-SUFFIX,android.googleapis.com,PROXY
- DOMAIN-SUFFIX,dl.google.com,PROXY
- DOMAIN-SUFFIX,dl-ssl.google.com,PROXY
- DOMAIN-SUFFIX,play.googleapis.com,PROXY
- DOMAIN-SUFFIX,market.android.com,PROXY
- DOMAIN-SUFFIX,xn--ngstr-lra8j.com,PROXY

# 基础规则集匹配
- GEOSITE,google,PROXY
- GEOSITE,youtube,PROXY
- GEOSITE,telegram,PROXY
- GEOSITE,category-games@cn,DIRECT
- GEOSITE,apple-cn,DIRECT
- GEOSITE,apple,DIRECT
- GEOSITE,microsoft@cn,DIRECT
- GEOSITE,steam@cn,DIRECT
- DOMAIN-SUFFIX,cn,DIRECT
- DOMAIN-SUFFIX,中国,DIRECT
- DOMAIN-SUFFIX,公司,DIRECT
- DOMAIN-SUFFIX,网络,DIRECT

# 国内与国外保底分流规则
- GEOSITE,cn,DIRECT
- GEOSITE,geolocation-cn,DIRECT
- GEOIP,CN,DIRECT,no-resolve
- GEOSITE,geolocation-!cn,PROXY
- MATCH,PROXY