mixed-port: 7890 tcp-concurrent: false allow-lan: true ipv6: true mode: Rule log-level: info global-client-fingerprint: chrome find-process-mode: strict external-controller: 0.0.0.0:9090 geodata-mode: true geo-auto-update: true geo-update-interval: 3 geox-url: geoip: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat geosite: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat mmdb: https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb asn: https://mirror.ghproxy.com/https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb profile: store-selected: true store-fake-ip: true sniffer: enable: true parse-pure-ip: true sniff: HTTP: ports: - 80 - 8080-8800 override-destination: true TLS: ports: - 443 - 8443 QUIC: ports: - 443 - 8443 skip-domain: - Mijia Cloud - dlg.io.mi.com - +.apple.com tun: enable: false stack: mixed dns-hijack: - any:53 auto-route: true auto-detect-interface: true dns: enable: true ipv6: true prefer-h3: true listen: 0.0.0.0:53 enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 fake-ip-filter: - '*.lan' - cable.auth.com - +.msftconnecttest.com - +.msftncsi.com - network-test.debian.org - detectportal.firefox.com - resolver1.opendns.com - +.srv.nintendo.net - +.stun.playstation.net - xbox.*.microsoft.com - +.xboxlive.com - stun.* - global.turn.twilio.com - global.stun.twilio.com - localhost.*.qq.com - +.logon.battlenet.com.cn - +.logon.battle.net - +.blzstatic.cn - +.cmpassport.com - id6.me - open.e.189.cn - mdn.open.wo.cn - opencloud.wostore.cn - auth.wosms.cn - +.jegotrip.com.cn - +.icitymobile.mobi - +.pingan.com.cn - +.cmbchina.com - +.cmbchina.com.cn - pool.ntp.org - +.pool.ntp.org - ntp.*.com - time.*.com - ntp?.*.com - time?.*.com - time.*.gov - time.*.edu.cn - +.ntp.org.cn - time.*.apple.com default-nameserver: - 223.5.5.5 - 119.29.29.29 nameserver-policy: www.baidu.com: 114.114.114.114 +.internal.crop.com: 10.0.0.1 www.baidu.com,+.google.cn: https://doh.pub/dns-query geosite:private,apple: https://dns.alidns.com/dns-query rule-set:google: 8.8.8.8 nameserver: - https://doh.pub/dns-query - https://dns.alidns.com/dns-query fallback: - https://1.1.1.2/dns-query - https://1.0.0.2/dns-query - https://208.67.222.222/dns-query - https://208.67.220.220/dns-query - https://9.9.9.9/dns-query fallback-filter: geoip: true geoip-code: CN geosite: - gfw ipcidr: - 240.0.0.0/4 - 0.0.0.0/32 domain: - +.google.com - +.github.com - +.facebook.com - +.twitter.com - +.youtube.com - +.google.cn - +.googleapis.cn - +.googleapis.com proxy-providers: SUB00: type: http interval: 86400 url: "https://anaer.github.io/Sub/proxies.yaml" path: ./proxies/SUB00.yaml proxy-groups: - name: PROXY type: select proxies: - LOAD-BALANCE - SELECT - FALLBACK - DIRECT - name: SELECT type: select include-all-providers: true - name: LOAD-BALANCE type: load-balance url: https://cp.cloudflare.com/generate_204 interval: 3600 strategy: consistent-hashing include-all-providers: true - name: FALLBACK type: fallback url: https://cp.cloudflare.com/generate_204 interval: 3600 include-all-providers: true - name: FINAL type: select proxies: - PROXY - DIRECT rule-providers: reject: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt path: ./ruleset/reject.yaml interval: 86400 icloud: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt path: ./ruleset/icloud.yaml interval: 86400 apple: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt path: ./ruleset/apple.yaml interval: 86400 google: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt path: ./ruleset/google.yaml interval: 86400 proxy: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt path: ./ruleset/proxy.yaml interval: 86400 direct: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt path: ./ruleset/direct.yaml interval: 86400 private: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt path: ./ruleset/private.yaml interval: 86400 gfw: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt path: ./ruleset/gfw.yaml interval: 86400 tld-not-cn: type: http behavior: domain url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt path: ./ruleset/tld-not-cn.yaml interval: 86400 telegramcidr: type: http behavior: ipcidr url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt path: ./ruleset/telegramcidr.yaml interval: 86400 cncidr: type: http behavior: ipcidr url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt path: ./ruleset/cncidr.yaml interval: 86400 lancidr: type: http behavior: ipcidr url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt path: ./ruleset/lancidr.yaml interval: 86400 applications: type: http behavior: classical url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt path: ./ruleset/applications.yaml interval: 86400 rules: - RULE-SET,reject,REJECT - RULE-SET,apple,DIRECT - RULE-SET,applications,DIRECT - RULE-SET,cncidr,DIRECT - RULE-SET,direct,DIRECT - RULE-SET,icloud,DIRECT - RULE-SET,lancidr,DIRECT - RULE-SET,private,DIRECT - RULE-SET,proxy,PROXY - RULE-SET,gfw,PROXY - RULE-SET,google,PROXY - RULE-SET,telegramcidr,PROXY - RULE-SET,tld-not-cn,PROXY - GEOIP,LAN,DIRECT - GEOIP,CN,DIRECT - MATCH,FINAL