config.yaml

###############################################################
#prot: 7893
mixed-port: 7890
#socks-port: 7891
#redir-port: 7892
allow-lan: true
bind-address: "*"
tcp-concurrent: true
geodata-mode: true
find-process-mode: strict
global-client-fingerprint: random
keep-alive-interval: 15
mode: rule
log-level: info
ipv6: false
external-controller: "0.0.0.0:9091"
secret: ""
unified-delay: true

geox-url:
  geoip: "https://vruoiepxsk.swsixtwo.top/meta-rules-dat/geoip.dat"
  geosite: "https://vruoiepxsk.swsixtwo.top/meta-rules-dat/geosite.dat"
  mmdb: "https://vruoiepxsk.swsixtwo.top/meta-rules-dat/geoip.metadb"
geo-auto-update: true # 是否自动更新 geodata
geo-update-interval: 24 # 更新间隔，单位：小时

hosts:
  "dns.alidns.com": [223.5.5.5,223.6.6.6,'2400:3200::1','2400:3200:baba::1']
  "doh.pub": [120.53.53.53,1.12.12.12]
  "doh.360.cn": [36.99.170.86,180.163.249.75]
  "rules.ugigc.us.kg": rules.cloudflare.182682.xyz

dns:
  enable: false
  listen: 0.0.0.0:53
  ipv6: false
  default-nameserver:
    - 1.2.4.8
    - 223.5.5.5
    - 119.29.29.29
  enhanced-mode: redir-host
  fake-ip-range: 198.19.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.localdomain"
    - "*.example"
    - "*.invalid"
    - "*.localhost"
    - "*.test"
    - "*.local"
    - "*.home.arpa"
    - "time.*.com"
    - "time.*.gov"
    - "time.*.edu.cn"
    - "time.*.apple.com"
    - "time1.*.com"
    - "time2.*.com"
    - "time3.*.com"
    - "time4.*.com"
    - "time5.*.com"
    - "time6.*.com"
    - "time7.*.com"
    - "ntp.*.com"
    - "ntp1.*.com"
    - "ntp2.*.com"
    - "ntp3.*.com"
    - "ntp4.*.com"
    - "ntp5.*.com"
    - "ntp6.*.com"
    - "ntp7.*.com"
    - "*.time.edu.cn"
    - "*.ntp.org.cn"
    - "+.pool.ntp.org"
    - "time1.cloud.tencent.com"
    - "music.163.com"
    - "*.music.163.com"
    - "*.126.net"
    - "musicapi.taihe.com"
    - "music.taihe.com"
    - "songsearch.kugou.com"
    - "trackercdn.kugou.com"
    - "*.kuwo.cn"
    - "api-jooxtt.sanook.com"
    - "api.joox.com"
    - "joox.com"
    - "y.qq.com"
    - "*.y.qq.com"
    - "+.jd.com"
    - "streamoc.music.tc.qq.com"
    - "mobileoc.music.tc.qq.com"
    - "isure.stream.qqmusic.qq.com"
    - "dl.stream.qqmusic.qq.com"
    - "aqqmusic.tc.qq.com"
    - "amobile.music.tc.qq.com"
    - "*.xiami.com"
    - "*.music.migu.cn"
    - "music.migu.cn"
    - "*.msftconnecttest.com"
    - "*.msftncsi.com"
    - "msftconnecttest.com"
    - "msftncsi.com"
    - "localhost.ptlogin2.qq.com"
    - "localhost.sec.qq.com"
    - "+.srv.nintendo.net"
    - "+.stun.playstation.net"
    - "xbox.*.microsoft.com"
    - "xnotify.xboxlive.com"
    - "+.battlenet.com.cn"
    - "+.wotgame.cn"
    - "+.wggames.cn"
    - "+.wowsgame.cn"
    - "+.wargaming.net"
    - "proxy.golang.org"
    - "stun.*.*"
    - "stun.*.*.*"
    - "+.stun.*.*"
    - "+.stun.*.*.*"
    - "+.stun.*.*.*.*"
    - "heartbeat.belkin.com"
    - "*.linksys.com"
    - "*.linksyssmartwifi.com"
    - "*.router.asus.com"
    - "mesu.apple.com"
    - "swscan.apple.com"
    - "swquery.apple.com"
    - "swdownload.apple.com"
    - "swcdn.apple.com"
    - "swdist.apple.com"
    - "lens.l.google.com"
    - "stun.l.google.com"
    - "+.nflxvideo.net"
    - "*.square-enix.com"
    - "*.finalfantasyxiv.com"
    - "*.ffxiv.com"
    - "*.mcdn.bilivideo.cn"
    - "+.youdao.com"
    - "+.baidu.com"
    - "+.taobao.com"
    - "+.tmall.com"
    - "+.miwifi.com"
    - "+.360.cn"
    - "+.360safe.com"
  nameserver-policy:
    "geosite:cn,private,apple,icloud,geolocation-cn":
      - 1.2.4.8
      - 119.29.29.29
      - 223.5.5.5
      - tls://dns.rubyfish.cn:853
    "+.google.cn,+.cn":
      - 1.2.4.8
      - 119.29.29.29
      - 223.5.5.5
      - tls://dns.rubyfish.cn:853
    "geosite:geolocation-!cn,!cn,gfw":
      - "https://dns.google/dns-query"
      - "https://dns.cloudflare.com/dns-query"
      - "https://dns.quad9.net/dns-query"
  nameserver:
    - "https://dns.google/dns-query"
    - "https://dns.cloudflare.com/dns-query"
    - "https://dns.quad9.net/dns-query"
  # fallback:
  #   - 223.5.5.5
  #   - tls://1.0.0.1:853
  #   - tls://dns.google:853
  # fallback-filter:
  #   geoip: true
  #   geoip-code: CN
  #   ipcidr:
  #     - 240.0.0.0/4
  #     - 127.0.0.1/8
  #     - 0.0.0.0/32
  #   domain:
  #     - "+.google.com"
  #     - "+.facebook.com"
  #     - "+.youtube.com"
  #     - "+.githubusercontent.com"
  #     - "+.googlevideo.com"
  #     - "+.twitter.com"
  #     - "+.xn--ngstr-lra8j.com"
  #     - "msftconnecttest.com"

experimental:
  sniff-tls-sni: true

proxies:
  - name: "socks"
    type: socks5
    server: 127.0.0.1
    port: 1080

  - name: "http"
    type: http
    server: 127.0.0.1
    port: 1080

  - name: "ss"
    type: ss
    server: xxx.xxx.com
    port: 222
    cipher: chacha20-ietf-poly1305
    password: "password"
    udp: true

  - name: "ssr"
    type: ssr
    server: xxx.xxx.com
    port: 3396
    cipher: chacha20-ietf
    password: "password"
    obfs: tls1.2_ticket_auth
    protocol: auth_sha1_v4
    obfs-param: download.microsoft.com
    protocol-param: "31057:8wPxj2"
    udp: true

  - name: "vmess"
    type: vmess
    server: xxx.xxx.com
    port: 443
    uuid: 998272ec-6486-43ab-a450-86e6964be97f
    alterId: 0
    cipher: auto
    tls: true
    udp: true
    servername: xxx.xxx.com
    skip-cert-verify: true
    network: ws
    ws-opts:
      path: /apps
      headers:
        Host: xxx.xxx.com
      max-early-data: 4096
      early-data-header-name: Sec-WebSocket-Protocol

  - name: "trojan"
    type: trojan
    server: xxx.xxx.com
    port: 443
    password: password
    sni: xxx.xxx.com
    alpn:
      - h2
      - http/1.1
    skip-cert-verify: true

  - name: "snell"
    type: snell
    server: xxx.xxx.com
    port: 9443
    psk: password
    #version: 2
    obfs-opts:
      mode: http # or http
      host: xxx.xxx.com

  - name: trojan-grpc
    server: xxx.xxx.com
    port: 443
    type: trojan
    password: password
    network: grpc
    alpn:
      - h2
      - http/1.1
    sni: swsixtwo.top
    skip-cert-verify: true
    #udp: true
    grpc-opts:
      grpc-service-name: "trojan"

  - name: vmess-grpc
    server: xxx.xxx.com
    port: 443
    type: vmess
    uuid: d9e5d918-91f8-49ee-94a3-faswerqwe
    alterId: 0
    cipher: auto
    network: grpc
    tls: true
    servername: xxx.xxx.com
    skip-cert-verify: true
    grpc-opts:
      grpc-service-name: "sbwhgrpc"

  - name: "vmess-http"
    type: vmess
    server: xxx.xxx.com
    port: 20002
    uuid: 3785ed4b-ccf2-843f-c605-gafwqae
    alterId: 0
    cipher: auto
    network: http
    http-opts:
      method: "GET"
      path:
        - "/"
      headers:
        Host:
          - www.bing.com
          - www.cloudflare.com
          - www.amazon.com
        User-Agent:
          - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
            like Gecko) Chrome/84.0.4147.105 Safari/537.36 Edg/84.0.522.49
          - Mozilla/5.0 (iPhone; CPU iPhone OS 13_6 like Mac OS X)
            AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/84.0.4147.71
            Mobile/15E148 Safari/604.1
        Accept-Encoding:
          - gzip, deflate
        Connection:
          - keep-alive
    skip-cert-verify: false

  - name: trojan-ws
    server: xxx.xxx.com
    port: 443
    type: trojan
    password: password
    network: ws
    sni: xxx.xxx.com
    skip-cert-verify: true
    udp: true
    ws-opts:
      path: /
      headers:
        Host: xxx.xxx.com

proxy-groups:
  - name: ✈️ 墙外网站
    type: select
    proxies:
      - "负载均衡"
      #- ♻️ 自动选择
      - "socks"
      - "http"
      - "ss"
      - "ssr"
      - "trojan-ws"
      - "vmess"
      - "trojan"
      - "snell"
      - "vmess-http"
      - "vmess-grpc"
      - "trojan-grpc"
      - DIRECT
  - name: 🐟 其他网站
    type: select
    proxies:
      - DIRECT
      - ✈️ 墙外网站
  - name: 🎥 NETFLIX
    type: select
    proxies:
      - "socks"
      - "http"
      - "ss"
      - "ssr"
      - "vmess"
      - "trojan"
      - "snell"
      - "vmess-http"
      - "vmess-grpc"
      - "trojan-grpc"
      - DIRECT
  - name: tvbs
    type: select
    proxies:
      - "ss"
      - DIRECT
  - name: tvb
    type: select
    proxies:
      - tvbs
      - DIRECT
  - name: 🚫 以下不用动
    type: select
    proxies:
      - DIRECT
  - name: 🛑 广告拦截
    type: select
    proxies:
      - REJECT
      - DIRECT
  - name: 🍏 苹果
    type: select
    proxies:
      - DIRECT
      - ✈️ 墙外网站
  - name: Ⓜ️ 微软
    type: select
    proxies:
      - DIRECT
      - ✈️ 墙外网站
  - name: 🐓 谷歌
    type: select
    proxies:
      - DIRECT
      - ✈️ 墙外网站
  - name: 🌍 国外媒体
    type: select
    proxies:
      - ✈️ 墙外网站
      - DIRECT
  #- name: ♻️ 自动选择
  #  type: url-test
  #  url: http://www.gstatic.com/generate_204
  #  interval: 500
  #  proxies:
  #    - "socks"
  #    - "http"
  #    - "ss"
  #    - "ssr"
  #    - "vmess"
  #    - "trojan"
  #    - "snell"
  - name: "负载均衡"
    type: load-balance
    proxies:
      - "socks"
      - "http"
      - "ss"
      - "ssr"
      - "vmess"
      - "trojan"
      - "snell"
    url: "http://www.gstatic.com/generate_204"
    interval: 500

rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/reject.txt"
    path: ./profiles/rules/reject.yaml
    interval: 86400

  rejectcidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/rejectcidr.txt"
    path: ./profiles/rules/rejectcidr.yaml
    interval: 86400

  icloud:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/icloudcn.txt"
    path: ./profiles/rules/icloudcn.yaml
    interval: 86400

  apple:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/applecn.txt"
    path: ./profiles/rules/applecn.yaml
    interval: 86400

  win-spy:
    type: http
    behavior: domain
    format: text
    url: "https://rules.ugigc.us.kg/clash/Ruleset/win-spy.txt"
    path: ./profiles/rules/win-spy.txt
    interval: 86400

  win-update:
    type: http
    behavior: domain
    format: text
    url: "https://rules.ugigc.us.kg/clash/Ruleset/win-update.txt"
    path: ./profiles/rules/win-update.txt
    interval: 86400

  win-extra:
    type: http
    behavior: domain
    format: text
    url: "https://rules.ugigc.us.kg/clash/Ruleset/win-extra.txt"
    path: ./profiles/rules/win-extra.txt
    interval: 86400

  googlel:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/google.txt"
    path: ./profiles/rules/google.yaml
    interval: 86400

  proxy:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/proxy.txt"
    path: ./profiles/rules/proxy.yaml
    interval: 86400

  direct:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/direct.txt"
    path: ./profiles/rules/direct.yaml
    interval: 86400

  private:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/private.txt"
    path: ./profiles/rules/private.yaml
    interval: 86400

  privatecn:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/privatecn.txt"
    path: ./profiles/rules/privatecn.yaml
    interval: 86400

  gfw:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/gfw.txt"
    path: ./profiles/rules/gfw.yaml
    interval: 86400

  tld-not-cn:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/tld-not-cn.txt"
    path: ./profiles/rules/tld-not-cn.yaml
    interval: 86400

  Foreignmedia:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/Foreignmedia.txt"
    interval: 86400
    path: ./profiles/rules/Foreignmedia.yaml

  Netflix:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/Netflix.txt"
    interval: 86400
    path: ./profiles/rules/Netflix.yaml

  telegramcidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/telegramcidr.txt"
    path: ./profiles/rules/telegramcidr.yaml
    interval: 86400

  proxy-ip-cidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/proxy-ip-cidr.txt"
    path: ./profiles/rules/proxy-ip-cidr.yaml
    interval: 86400

  lancidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/lancidr.txt"
    path: ./profiles/rules/lancidr.yaml
    interval: 86400

  applications:
    type: http
    behavior: classical
    url: "https://rules.ugigc.us.kg/clash/Ruleset/applications.txt"
    path: ./profiles/rules/applications.yaml
    interval: 86400

  domain-proxy-cidr:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/domain-proxy-cidr.txt"
    path: ./profiles/rules/domain-proxy-cidr.yaml
    interval: 86400

  ip-proxy-cidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/ip-proxy-cidr.txt"
    path: ./profiles/rules/ip-proxy-cidr.yaml
    interval: 86400

  cncidr:
    type: http
    behavior: ipcidr
    url: "https://rules.ugigc.us.kg/clash/Ruleset/cncidr.txt"
    path: ./profiles/rules/cncidr.yaml
    interval: 86400

  allcidr:
    type: http
    behavior: ipcidr
    format: text
    url: "https://rules.ugigc.us.kg/clash/Ruleset/all_cn_cidr.txt"
    path: ./profiles/rules/all_cn_cidr.txt
    interval: 86400

  allipv6cidr:
    type: http
    behavior: ipcidr
    format: text
    url: "https://rules.ugigc.us.kg/clash/Ruleset/all_cn_ipv6.txt"
    path: ./profiles/rules/all_cn_ipv6.txt
    interval: 86400

  tvb:
    type: http
    behavior: domain
    url: "https://rules.ugigc.us.kg/clash/Ruleset/tvb.txt"
    path: ./profiles/rules/tvb.ymal
    interval: 86400
# 规则
rules:
  - RULE-SET,applications,DIRECT
  - RULE-SET,private,DIRECT
  - RULE-SET,privatecn,DIRECT
  - RULE-SET,reject,🛑 广告拦截
  - RULE-SET,rejectcidr,🛑 广告拦截
  - GEOSITE,category-ads-all,🛑 广告拦截
  - RULE-SET,lancidr,DIRECT,no-resolve
  - RULE-SET,allcidr,DIRECT,no-resolve
  - RULE-SET,allipv6cidr,DIRECT,no-resolve
  - RULE-SET,cncidr,DIRECT,no-resolve
  - RULE-SET,icloud,🍏 苹果
  - RULE-SET,apple,🍏 苹果
  - RULE-SET,win-spy,Ⓜ️ 微软
  - RULE-SET,win-update,Ⓜ️ 微软
  - RULE-SET,win-extra,Ⓜ️ 微软
  - RULE-SET,googlel,🐓 谷歌
  - RULE-SET,tvb,tvb
  - RULE-SET,Foreignmedia,🌍 国外媒体
  - RULE-SET,Netflix,🎥 NETFLIX
  - RULE-SET,proxy,✈️ 墙外网站
  - RULE-SET,gfw,✈️ 墙外网站
  - RULE-SET,tld-not-cn,✈️ 墙外网站
  - RULE-SET,telegramcidr,✈️ 墙外网站
  - GEOSITE,geolocation-!cn,✈️ 墙外网站
  - RULE-SET,domain-proxy-cidr,✈️ 墙外网站
  - RULE-SET,ip-proxy-cidr,✈️ 墙外网站,no-resolve
  - RULE-SET,direct,DIRECT
  - GEOSITE,cn,DIRECT
  - GEOIP,private,DIRECT
  - GEOIP,CN,DIRECT
  - RULE-SET,proxy-ip-cidr,✈️ 墙外网站,no-resolve
  - MATCH,🐟 其他网站