mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
external-controller: 127.0.0.1:9090
dns:
  cache-algorithm: arc
  default-nameserver:
  - 223.5.5.5
  - 119.29.29.29
  direct-nameserver:
  - https://doh.pub/dns-query
  - https://dns.alidns.com/dns-query
  direct-nameserver-follow-policy: false
  enable: true
  enhanced-mode: fake-ip
  fake-ip-filter:
  - '*.lan'
  - '*.local'
  - '*.direct'
  - '*.localhost'
  - time.*.com
  - ntp.*.com
  - time.*.gov
  - time.*.apple.com
  - time.windows.com
  - time.nist.gov
  - +.pool.ntp.org
  - '*.msftconnecttest.com'
  - '*.msftncsi.com'
  - localhost.ptlogin2.qq.com
  - '*.cmpassport.com'
  - '*.mcdn.bilivideo.cn'
  - '*.battlenet.com.cn'
  - +.wotgame.cn
  - +.wggames.cn
  - +.wowsgame.cn
  - id6.me
  - lens.l.google.com
  - captive.apple.com
  - connectivitycheck.gstatic.com
  fake-ip-range: 198.18.0.1/16
  ipv6: false
  nameserver:
  - https://dns.cloudflare.com/dns-query#节点选择
  - https://dns.google/dns-query#节点选择
  nameserver-policy:
    rule-set:category-ads-all,awavenue-ads: rcode://success
    rule-set:cn:
    - https://doh.pub/dns-query
    - https://dns.alidns.com/dns-query
  prefer-h3: false
  proxy-server-nameserver:
  - https://dns.alidns.com/dns-query
  - https://doh.pub/dns-query
  respect-rules: true
  use-system-hosts: false
proxies:
- name: 🇦🇱 剩余流量：1024 GB
  cipher: 2022-blake3-aes-256-gcm
  password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  udp: true
  type: ss
  server: us1.oh-node.top
  port: 443
- type: ss
  cipher: 2022-blake3-aes-256-gcm
  port: 443
  password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  udp: true
  name: 🇦🇱 套餐到期：2026-12-10
  server: us1.oh-node.top
- server: us1.oh-node.top
  password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  type: ss
  cipher: 2022-blake3-aes-256-gcm
  udp: true
  name: 🇦🇱 官网：matcha.ltd
  port: 443
- password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  udp: true
  server: us1.oh-node.top
  name: 🇺🇸US California 01
  port: 443
  type: ss
  cipher: 2022-blake3-aes-256-gcm
- name: 🇺🇸US California 02
  type: ss
  udp: true
  server: us2.oh-node.top
  password: ODZjOTJiOTZlMWIxMjc5NzgwZDkyOGUyZTAwZGU2NTg=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  port: 443
  cipher: 2022-blake3-aes-256-gcm
- port: 443
  udp: true
  server: sg1.oh-node.top
  type: ss
  cipher: 2022-blake3-aes-256-gcm
  password: Nzg5NDMzN2I5MDVhMDJkZTM5MDEyYmE3NmUxMzkxYTM=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  name: 🇸🇬SG Katong 01
- udp: true
  cipher: 2022-blake3-aes-256-gcm
  password: ZjZmNzg5YTRkYjEwY2UyMjE1YzU0YWUzOTBkODNhOTE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  server: sg2.oh-node.top
  port: 443
  name: 🇸🇬SG Katong 02
  type: ss
- server: jp1.oh-node.top
  type: ss
  password: MDg2MWM2ZmNhYjQwMTk3YjExYmRkODcwYjRlMGM0NmE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  name: 🇯🇵JP Tokyo 01
  cipher: 2022-blake3-aes-256-gcm
  port: 443
  udp: true
- type: ss
  server: jp2.oh-node.top
  udp: true
  password: ZDM0ZDI2ZmY5ODI5NjFmNTMxYjFhY2E0ZDFlODkzYTE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  port: 443
  cipher: 2022-blake3-aes-256-gcm
  name: 🇯🇵JP Tokyo 02
- port: 443
  cipher: 2022-blake3-aes-256-gcm
  password: ZGM2MDFiZTBiM2JhYzU5YjA0YzI2ODM5OGYzMzc5MmM=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  server: hk1.oh-node.top
  type: ss
  udp: true
  name: 🇭🇰HK Telecom 01
- port: 443
  udp: true
  name: 🇭🇰HK Telecom 02
  server: hk2.oh-node.top
  type: ss
  password: ODgzOGVlOTE3MjI2Y2FlYmYxYjdkNDE0OTdhOTEzZDI=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  cipher: 2022-blake3-aes-256-gcm
- cipher: 2022-blake3-aes-256-gcm
  port: 443
  name: 🇹🇼TW Chunghwa 01
  type: ss
  password: ODRjMWU1YzQyMjMyMjEwYzAwNWE3Y2U1OGI0YzFlYzA=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  server: tw1.oh-node.top
  udp: true
- server: tw2.oh-node.top
  port: 443
  udp: true
  type: ss
  password: OTUzZDZmOGU3N2M4MGIxNmFkZDU1NDQ4MzQ0ZDNiNDk=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
  name: 🇹🇼TW Chunghwa 02
  cipher: 2022-blake3-aes-256-gcm
proxy-groups:
- name: 节点选择
  type: select
  proxies:
  - 自动选择
  - DIRECT
  - 🇦🇱 剩余流量：1024 GB
  - 🇦🇱 套餐到期：2026-12-10
  - 🇦🇱 官网：matcha.ltd
  - 🇺🇸US California 01
  - 🇺🇸US California 02
  - 🇸🇬SG Katong 01
  - 🇸🇬SG Katong 02
  - 🇯🇵JP Tokyo 01
  - 🇯🇵JP Tokyo 02
  - 🇭🇰HK Telecom 01
  - 🇭🇰HK Telecom 02
  - 🇹🇼TW Chunghwa 01
  - 🇹🇼TW Chunghwa 02
- name: 自动选择
  type: url-test
  proxies:
  - 🇦🇱 剩余流量：1024 GB
  - 🇦🇱 套餐到期：2026-12-10
  - 🇦🇱 官网：matcha.ltd
  - 🇺🇸US California 01
  - 🇺🇸US California 02
  - 🇸🇬SG Katong 01
  - 🇸🇬SG Katong 02
  - 🇯🇵JP Tokyo 01
  - 🇯🇵JP Tokyo 02
  - 🇭🇰HK Telecom 01
  - 🇭🇰HK Telecom 02
  - 🇹🇼TW Chunghwa 01
  - 🇹🇼TW Chunghwa 02
  url: http://cp.cloudflare.com/generate_204
  interval: 300
  exclude-type: direct,reject
  lazy: true
  tolerance: 50
  timeout: 2000
  max-failed-times: 3
  expected-status: '204'
  hidden: true
  exclude-filter: \[Home\]
rules:
- DOMAIN,hey.oh-sub.top,DIRECT
- RULE-SET,private,DIRECT
- IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
- IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
- IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
- IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
- IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
- IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
- IP-CIDR6,::1/128,DIRECT,no-resolve
- IP-CIDR6,fc00::/7,DIRECT,no-resolve
- IP-CIDR6,fe80::/10,DIRECT,no-resolve
- RULE-SET,awavenue-ads,REJECT
- RULE-SET,category-ads-all,REJECT
- DOMAIN-SUFFIX,trace.qq.com,REJECT
- DOMAIN-SUFFIX,beacon.qq.com,REJECT
- DOMAIN-SUFFIX,report.qq.com,REJECT
- DOMAIN-SUFFIX,pingtas.qq.com,REJECT
- DOMAIN-SUFFIX,pingtcss.qq.com,REJECT
- DOMAIN-SUFFIX,stats.g.qq.com,REJECT
- DOMAIN-SUFFIX,isdspeed.qq.com,REJECT
- DOMAIN-SUFFIX,tp.linksgo.qq.com,REJECT
- DOMAIN-SUFFIX,webpush.wx.qq.com,REJECT
- DOMAIN-SUFFIX,mi.gdt.qq.com,REJECT
- DOMAIN-SUFFIX,t.gdt.qq.com,REJECT
- DOMAIN-SUFFIX,e.qq.com,REJECT
- DOMAIN-SUFFIX,l.qq.com,REJECT
- DOMAIN-SUFFIX,btrace.qq.com,REJECT
- DOMAIN-SUFFIX,gdt.qq.com,REJECT
- DOMAIN-SUFFIX,pgdt.gtimg.cn,REJECT
- DOMAIN-SUFFIX,adsmind.gdtimg.com,REJECT
- RULE-SET,overseas-ai,节点选择
- DOMAIN-SUFFIX,googleapis.cn,节点选择
- DOMAIN-SUFFIX,google.cn,节点选择
- DOMAIN-SUFFIX,xn--ngstr-lra8j.com,节点选择
- RULE-SET,google,节点选择
- RULE-SET,tiktok,节点选择
- RULE-SET,steam@cn,DIRECT
- RULE-SET,apple-cn,DIRECT
- RULE-SET,microsoft@cn,DIRECT
- RULE-SET,cn,DIRECT
- RULE-SET,cn-ip,DIRECT,no-resolve
- MATCH,节点选择
ipv6: false
find-process-mode: strict
geo-auto-update: false
keep-alive-interval: 600
profile:
  store-fake-ip: true
  store-selected: true
tcp-concurrent: true
rule-providers:
  apple-cn:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/apple-cn.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/apple-cn.mrs
  awavenue-ads:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/awavenue-ads.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/TG-Twilight/AWAvenue-Ads-Rule@main/Filters/AWAvenue-Ads-Rule-Clash.mrs
  category-ads-all:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/category-ads-all.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/category-ads-all.mrs
  cn:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/cn.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/cn.mrs
  cn-ip:
    behavior: ipcidr
    format: mrs
    interval: 86400
    path: ./ruleset/cn-ip.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geoip/cn.mrs
  google:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/google.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/google.mrs
  microsoft@cn:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/microsoft@cn.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/microsoft@cn.mrs
  overseas-ai:
    behavior: classical
    format: text
    interval: 86400
    path: ./ruleset/overseas-ai.list
    type: http
    url: https://raw.githubusercontent.com/viewer12/OverseasAI.list/main/rule/Clash/OverseasAI/OverseasAI.list
  private:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/private.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/private.mrs
  steam@cn:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/steam@cn.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/steam@cn.mrs
  tiktok:
    behavior: domain
    format: mrs
    interval: 86400
    path: ./ruleset/tiktok.mrs
    type: http
    url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/tiktok.mrs
sniffer:
  enable: true
  force-dns-mapping: true
  override-destination: true
  parse-pure-ip: true
  skip-domain:
  - Mijia Cloud
  - +.push.apple.com
  - +.apple.com
  - +.stun.*.*
  sniff:
    HTTP:
      override-destination: true
      ports:
      - 80
      - 8080-8880
    QUIC:
      ports:
      - 443
      - 8443
    TLS:
      ports:
      - 443
      - 8443
geox-url:
  asn: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/GeoLite2-ASN.mmdb
keep-alive-idle: 600
tun:
  auto-detect-interface: true
  auto-route: true
  dns-hijack:
  - any:53
  - tcp://any:53
  enable: false
  stack: gvisor
  strict-route: false
ntp:
  enable: true
  interval: 30
  port: 123
  server: time.apple.com
  write-to-system: false
unified-delay: true