367 lines
10 KiB
Plaintext
367 lines
10 KiB
Plaintext
mixed-port: 7890
|
||
allow-lan: false
|
||
mode: rule
|
||
log-level: info
|
||
external-controller: 127.0.0.1:9090
|
||
dns:
|
||
cache-algorithm: arc
|
||
default-nameserver:
|
||
- 223.5.5.5
|
||
- 119.29.29.29
|
||
direct-nameserver:
|
||
- https://doh.pub/dns-query
|
||
- https://dns.alidns.com/dns-query
|
||
direct-nameserver-follow-policy: false
|
||
enable: true
|
||
enhanced-mode: fake-ip
|
||
fake-ip-filter:
|
||
- '*.lan'
|
||
- '*.local'
|
||
- '*.direct'
|
||
- '*.localhost'
|
||
- time.*.com
|
||
- ntp.*.com
|
||
- time.*.gov
|
||
- time.*.apple.com
|
||
- time.windows.com
|
||
- time.nist.gov
|
||
- +.pool.ntp.org
|
||
- '*.msftconnecttest.com'
|
||
- '*.msftncsi.com'
|
||
- localhost.ptlogin2.qq.com
|
||
- '*.cmpassport.com'
|
||
- '*.mcdn.bilivideo.cn'
|
||
- '*.battlenet.com.cn'
|
||
- +.wotgame.cn
|
||
- +.wggames.cn
|
||
- +.wowsgame.cn
|
||
- id6.me
|
||
- lens.l.google.com
|
||
- captive.apple.com
|
||
- connectivitycheck.gstatic.com
|
||
fake-ip-range: 198.18.0.1/16
|
||
ipv6: false
|
||
nameserver:
|
||
- https://dns.cloudflare.com/dns-query#节点选择
|
||
- https://dns.google/dns-query#节点选择
|
||
nameserver-policy:
|
||
rule-set:category-ads-all,awavenue-ads: rcode://success
|
||
rule-set:cn:
|
||
- https://doh.pub/dns-query
|
||
- https://dns.alidns.com/dns-query
|
||
prefer-h3: false
|
||
proxy-server-nameserver:
|
||
- https://dns.alidns.com/dns-query
|
||
- https://doh.pub/dns-query
|
||
respect-rules: true
|
||
use-system-hosts: false
|
||
proxies:
|
||
- name: 🇦🇱 剩余流量：1024 GB
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
udp: true
|
||
type: ss
|
||
server: us1.oh-node.top
|
||
port: 443
|
||
- type: ss
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
port: 443
|
||
password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
udp: true
|
||
name: 🇦🇱 套餐到期：2026-12-10
|
||
server: us1.oh-node.top
|
||
- server: us1.oh-node.top
|
||
password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
type: ss
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
udp: true
|
||
name: 🇦🇱 官网：matcha.ltd
|
||
port: 443
|
||
- password: NTIxZDBkMDI0ZDQxZGIyZDU4NzU2MDA1OGNhNDdiYWU=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
udp: true
|
||
server: us1.oh-node.top
|
||
name: 🇺🇸US California 01
|
||
port: 443
|
||
type: ss
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
- name: 🇺🇸US California 02
|
||
type: ss
|
||
udp: true
|
||
server: us2.oh-node.top
|
||
password: ODZjOTJiOTZlMWIxMjc5NzgwZDkyOGUyZTAwZGU2NTg=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
port: 443
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
- port: 443
|
||
udp: true
|
||
server: sg1.oh-node.top
|
||
type: ss
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
password: Nzg5NDMzN2I5MDVhMDJkZTM5MDEyYmE3NmUxMzkxYTM=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
name: 🇸🇬SG Katong 01
|
||
- udp: true
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
password: ZjZmNzg5YTRkYjEwY2UyMjE1YzU0YWUzOTBkODNhOTE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
server: sg2.oh-node.top
|
||
port: 443
|
||
name: 🇸🇬SG Katong 02
|
||
type: ss
|
||
- server: jp1.oh-node.top
|
||
type: ss
|
||
password: MDg2MWM2ZmNhYjQwMTk3YjExYmRkODcwYjRlMGM0NmE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
name: 🇯🇵JP Tokyo 01
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
port: 443
|
||
udp: true
|
||
- type: ss
|
||
server: jp2.oh-node.top
|
||
udp: true
|
||
password: ZDM0ZDI2ZmY5ODI5NjFmNTMxYjFhY2E0ZDFlODkzYTE=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
port: 443
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
name: 🇯🇵JP Tokyo 02
|
||
- port: 443
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
password: ZGM2MDFiZTBiM2JhYzU5YjA0YzI2ODM5OGYzMzc5MmM=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
server: hk1.oh-node.top
|
||
type: ss
|
||
udp: true
|
||
name: 🇭🇰HK Telecom 01
|
||
- port: 443
|
||
udp: true
|
||
name: 🇭🇰HK Telecom 02
|
||
server: hk2.oh-node.top
|
||
type: ss
|
||
password: ODgzOGVlOTE3MjI2Y2FlYmYxYjdkNDE0OTdhOTEzZDI=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
- cipher: 2022-blake3-aes-256-gcm
|
||
port: 443
|
||
name: 🇹🇼TW Chunghwa 01
|
||
type: ss
|
||
password: ODRjMWU1YzQyMjMyMjEwYzAwNWE3Y2U1OGI0YzFlYzA=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
server: tw1.oh-node.top
|
||
udp: true
|
||
- server: tw2.oh-node.top
|
||
port: 443
|
||
udp: true
|
||
type: ss
|
||
password: OTUzZDZmOGU3N2M4MGIxNmFkZDU1NDQ4MzQ0ZDNiNDk=:NWY0Nzc0OTktMTM1ZS00YzhiLTg5OTYtZjc4ZjExMWM=
|
||
name: 🇹🇼TW Chunghwa 02
|
||
cipher: 2022-blake3-aes-256-gcm
|
||
proxy-groups:
|
||
- name: 节点选择
|
||
type: select
|
||
proxies:
|
||
- 自动选择
|
||
- DIRECT
|
||
- 🇦🇱 剩余流量：1024 GB
|
||
- 🇦🇱 套餐到期：2026-12-10
|
||
- 🇦🇱 官网：matcha.ltd
|
||
- 🇺🇸US California 01
|
||
- 🇺🇸US California 02
|
||
- 🇸🇬SG Katong 01
|
||
- 🇸🇬SG Katong 02
|
||
- 🇯🇵JP Tokyo 01
|
||
- 🇯🇵JP Tokyo 02
|
||
- 🇭🇰HK Telecom 01
|
||
- 🇭🇰HK Telecom 02
|
||
- 🇹🇼TW Chunghwa 01
|
||
- 🇹🇼TW Chunghwa 02
|
||
- name: 自动选择
|
||
type: url-test
|
||
proxies:
|
||
- 🇦🇱 剩余流量：1024 GB
|
||
- 🇦🇱 套餐到期：2026-12-10
|
||
- 🇦🇱 官网：matcha.ltd
|
||
- 🇺🇸US California 01
|
||
- 🇺🇸US California 02
|
||
- 🇸🇬SG Katong 01
|
||
- 🇸🇬SG Katong 02
|
||
- 🇯🇵JP Tokyo 01
|
||
- 🇯🇵JP Tokyo 02
|
||
- 🇭🇰HK Telecom 01
|
||
- 🇭🇰HK Telecom 02
|
||
- 🇹🇼TW Chunghwa 01
|
||
- 🇹🇼TW Chunghwa 02
|
||
url: http://cp.cloudflare.com/generate_204
|
||
interval: 300
|
||
exclude-type: direct,reject
|
||
lazy: true
|
||
tolerance: 50
|
||
timeout: 2000
|
||
max-failed-times: 3
|
||
expected-status: '204'
|
||
hidden: true
|
||
exclude-filter: \[Home\]
|
||
rules:
|
||
- DOMAIN,hey.oh-sub.top,DIRECT
|
||
- RULE-SET,private,DIRECT
|
||
- IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
|
||
- IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
|
||
- IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
|
||
- IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
|
||
- IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
|
||
- IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
|
||
- IP-CIDR6,::1/128,DIRECT,no-resolve
|
||
- IP-CIDR6,fc00::/7,DIRECT,no-resolve
|
||
- IP-CIDR6,fe80::/10,DIRECT,no-resolve
|
||
- RULE-SET,awavenue-ads,REJECT
|
||
- RULE-SET,category-ads-all,REJECT
|
||
- DOMAIN-SUFFIX,trace.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,beacon.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,report.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,pingtas.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,pingtcss.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,stats.g.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,isdspeed.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,tp.linksgo.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,webpush.wx.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,mi.gdt.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,t.gdt.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,e.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,l.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,btrace.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,gdt.qq.com,REJECT
|
||
- DOMAIN-SUFFIX,pgdt.gtimg.cn,REJECT
|
||
- DOMAIN-SUFFIX,adsmind.gdtimg.com,REJECT
|
||
- RULE-SET,overseas-ai,节点选择
|
||
- DOMAIN-SUFFIX,googleapis.cn,节点选择
|
||
- DOMAIN-SUFFIX,google.cn,节点选择
|
||
- DOMAIN-SUFFIX,xn--ngstr-lra8j.com,节点选择
|
||
- RULE-SET,google,节点选择
|
||
- RULE-SET,tiktok,节点选择
|
||
- RULE-SET,steam@cn,DIRECT
|
||
- RULE-SET,apple-cn,DIRECT
|
||
- RULE-SET,microsoft@cn,DIRECT
|
||
- RULE-SET,cn,DIRECT
|
||
- RULE-SET,cn-ip,DIRECT,no-resolve
|
||
- MATCH,节点选择
|
||
ipv6: false
|
||
find-process-mode: strict
|
||
geo-auto-update: false
|
||
keep-alive-interval: 600
|
||
profile:
|
||
store-fake-ip: true
|
||
store-selected: true
|
||
tcp-concurrent: true
|
||
rule-providers:
|
||
apple-cn:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/apple-cn.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/apple-cn.mrs
|
||
awavenue-ads:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/awavenue-ads.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/TG-Twilight/AWAvenue-Ads-Rule@main/Filters/AWAvenue-Ads-Rule-Clash.mrs
|
||
category-ads-all:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/category-ads-all.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/category-ads-all.mrs
|
||
cn:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/cn.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/cn.mrs
|
||
cn-ip:
|
||
behavior: ipcidr
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/cn-ip.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geoip/cn.mrs
|
||
google:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/google.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/google.mrs
|
||
microsoft@cn:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/microsoft@cn.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/microsoft@cn.mrs
|
||
overseas-ai:
|
||
behavior: classical
|
||
format: text
|
||
interval: 86400
|
||
path: ./ruleset/overseas-ai.list
|
||
type: http
|
||
url: https://raw.githubusercontent.com/viewer12/OverseasAI.list/main/rule/Clash/OverseasAI/OverseasAI.list
|
||
private:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/private.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/private.mrs
|
||
steam@cn:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/steam@cn.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/steam@cn.mrs
|
||
tiktok:
|
||
behavior: domain
|
||
format: mrs
|
||
interval: 86400
|
||
path: ./ruleset/tiktok.mrs
|
||
type: http
|
||
url: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@meta/geo/geosite/tiktok.mrs
|
||
sniffer:
|
||
enable: true
|
||
force-dns-mapping: true
|
||
override-destination: true
|
||
parse-pure-ip: true
|
||
skip-domain:
|
||
- Mijia Cloud
|
||
- +.push.apple.com
|
||
- +.apple.com
|
||
- +.stun.*.*
|
||
sniff:
|
||
HTTP:
|
||
override-destination: true
|
||
ports:
|
||
- 80
|
||
- 8080-8880
|
||
QUIC:
|
||
ports:
|
||
- 443
|
||
- 8443
|
||
TLS:
|
||
ports:
|
||
- 443
|
||
- 8443
|
||
geox-url:
|
||
asn: https://cdn.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/GeoLite2-ASN.mmdb
|
||
keep-alive-idle: 600
|
||
tun:
|
||
auto-detect-interface: true
|
||
auto-route: true
|
||
dns-hijack:
|
||
- any:53
|
||
- tcp://any:53
|
||
enable: false
|
||
stack: gvisor
|
||
strict-route: false
|
||
ntp:
|
||
enable: true
|
||
interval: 30
|
||
port: 123
|
||
server: time.apple.com
|
||
write-to-system: false
|
||
unified-delay: true
|