更新 loon/loon.conf

添加telegram规则

clash.yaml

@@ -0,0 +1,598 @@
+port: 7890
+socks-port: 7891
+redir-port: 7892
+allow-lan: false
+mode: rule
+log-level: info
+external-controller: '0.0.0.0:9090'
+secret: ''
+proxies:
+  - name: "🇯🇵 WAP Hysteria2"
+    type: hysteria2
+    server: 103.238.129.85
+    port: 8543
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: jpp.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇩🇪 NETCUP Hysteria2"
+    type: hysteria2
+    server: netcuphyw.812371.xyz
+    port: 8849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: netcuphyw.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇯🇵 KXY jp v6"
+    type: hysteria2
+    server: kxyjp.812371.xyz
+    port: 8949
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: kxyjp.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇭🇰 KXY hk v6"
+    type: hysteria2
+    server: hxyhk.812371.xyz
+    port: 9049
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hxyhk.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇯🇵 soso家宽 Hysteria2 v6"
+    type: hysteria2
+    server: sososohy.812371.xyz
+    port: 9149
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: sososohy.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇭🇰 阿里云 Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 9249
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: aliyunhk.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇸🇬 BV Hysteria2"
+    type: hysteria2
+    server: bvsgvv.812371.xyz
+    port: 9449
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: bvsgvv.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇭🇰 Hytron Hysteria2"
+    type: hysteria2
+    server: hytronhkk.812371.xyz
+    port: 9649
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hytronhkk.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇮🇩 阿里印尼 Hysteria2"
+    type: hysteria2
+    server: yajiada.812371.xyz
+    port: 9749
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: yajiada.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇩🇪 HK转NC Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30002
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: netcuphy.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇭🇰 KXY hk v6转发"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30004
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hxyhk.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇯🇵 KXY jp v6转发"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30005
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: kxyjp.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇸🇬 HK转SG Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30006
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: bvsgvv.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇭🇰 HK转hytron Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30009
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hytronhkk.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇮🇩 HK转印尼 Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 30010
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: yajiada.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇩🇪 9929转NC Hysteria2"
+    type: hysteria2
+    server: cu21.kuxueyun.com
+    port: 13121
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: netcuphy.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇭🇰 9929转hytron Hysteria2"
+    type: hysteria2
+    server: cu21.kuxueyun.com
+    port: 13122
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hytronhkk.812371.xyz
+    skip-cert-verify: true
+    alpn:
+      - h3
+  - name: "🇺🇸 RackNerd Hysteria2"
+    type: hysteria2
+    server: racknerdus.122881.xyz
+    port: 9849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: racknerdus.122881.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+proxy-groups:
+  -
+    name: '🚀 节点选择'
+    type: select
+    proxies:
+      - DIRECT
+      - '🇯🇵 WAP Hysteria2'
+      - '🇯🇵 KXY jp v6'
+      - '🇯🇵 KXY jp v6转发'
+      - '🇭🇰 阿里云 Hysteria2'
+      - '🇭🇰 KXY hk v6转发'
+      - '🇭🇰 Hytron Hysteria2'
+      - '🇭🇰 HK转hytron Hysteria2'
+      - '🇭🇰 9929转hytron Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+      - '🇩🇪 HK转NC Hysteria2'
+      - '🇩🇪 9929转NC Hysteria2'
+      - '🇸🇬 BV Hysteria2'
+      - '🇸🇬 HK转SG Hysteria2'
+      - '🇮🇩 HK转印尼 Hysteria2'
+      - '🇺🇸 RackNerd Hysteria2'
+  -
+    name: 'Ⓜ️ 微软服务'
+    type: select
+    proxies:
+      - '🎯 全球直连'
+      - '🚀 节点选择'
+  -
+    name: '🍎 苹果服务'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '📢 谷歌FCM'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '🎯 全球直连'
+    type: select
+    proxies:
+      - DIRECT
+      - '🚀 节点选择'
+  -
+    name: '📽︎ PT 站点'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🇯🇵 WAP Hysteria2'
+      - '🇩🇪 9929转NC Hysteria2'
+  -
+    name: '🐟 漏网之鱼'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '🤖 GPT'
+    type: select
+    proxies:
+      - 🇯🇵 WAP Hysteria2
+      - '🚀 节点选择'
+  -
+    name: '🍿 NETFLIX'
+    type: select
+    proxies:
+      - '🇸🇬 HK转SG Hysteria2'
+      - '🇯🇵 KXY jp v6'
+      - '🇭🇰 9929转hytron Hysteria2'
+      - '🚀 节点选择'
+  -
+    name: '🗄 VPS'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🇩🇪 9929转NC Hysteria2'
+      - '🇩🇪 HK转NC Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+  -
+    name: '🎮 Steam'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🇩🇪 9929转NC Hysteria2'
+      - '🇩🇪 HK转NC Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+  -
+    name: '🐧 Linux.do'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🇩🇪 9929转NC Hysteria2'
+      - '🇩🇪 HK转NC Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+  -
+    name: '🪙 OKX'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🇩🇪 9929转NC Hysteria2'
+      - '🇩🇪 HK转NC Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+  -
+    name: '💚 NTRRR自动切换'
+    type: select
+    proxies:
+      - 🇭🇰 阿里云 Hysteria2
+      - 🇯🇵 WAP Hysteria2
+      - 🇯🇵 KXY jp v6
+      - 🇭🇰 Hytron Hysteria2
+      - 🇭🇰 KXY hk v6
+      - 🇯🇵 KXY jp v6转发
+#  - name: "💚 NTRRR自动切换"
+#    type: fallback
+#    url: "https://stream.ntrrr.top"
+#    interval: 200
+#    tolerance: 1000
+#    proxies:
+#      - 🇭🇰 阿里云 Hysteria2
+#      - 🇯🇵 WAP Hysteria2
+#      - 🇯🇵 KXY jp v6
+#      - 🇭🇰 Hytron Hysteria2
+#      - 🇭🇰 KXY hk v6
+#      - 🇯🇵 KXY jp v6转发
+rules:
+# PROXY
+ - DOMAIN,www.nodeseek.com,🚀 节点选择
+ - DOMAIN-SUFFIX,right.com.cn,🚀 节点选择
+ - DOMAIN-KEYWORD,instagram,🚀 节点选择
+ - DOMAIN-KEYWORD,pornhub,🚀 节点选择
+
+# OKX欧易
+ - DOMAIN-SUFFIX,okex.com,🪙 OKX
+ - DOMAIN-SUFFIX,oklink.com,🪙 OKX
+ - DOMAIN-SUFFIX,okx.com,🪙 OKX
+
+# Steam
+ - DOMAIN-SUFFIX,steam-chat.com,🎮 Steam
+ - DOMAIN-SUFFIX,steamcommunity.com,🎮 Steam
+ - DOMAIN-SUFFIX,steamdb.info,🎮 Steam
+ - DOMAIN-SUFFIX,steampowered.com,🎮 Steam
+ - DOMAIN-SUFFIX,steamstatic.com,DIRECT
+ - DOMAIN-SUFFIX,steamserver.net,DIRECT
+
+# OpenAI
+ - GEOSITE,openai,🤖 GPT
+ - DOMAIN-SUFFIX,chatgpt.com,🤖 GPT
+
+# Claude
+ - DOMAIN,cdn.usefathom.com,🤖 GPT
+ - DOMAIN-SUFFIX,anthropic.com,🤖 GPT
+ - DOMAIN-SUFFIX,claude.ai,🤖 GPT
+
+# Deepseek
+ - DOMAIN-SUFFIX,deepseek.com,🤖 GPT
+
+# NETFLIX
+ - RULE-SET,netflix,🍿 NETFLIX
+
+# OZOO.TOP 
+
+#linux.do
+ - DOMAIN-KEYWORD,linux.do,🐧 Linux.do
+
+# 强制代理
+ - DOMAIN,stream.ntrrr.top,💚 NTRRR自动切换
+
+ - DOMAIN-SUFFIX,ozoo.top,🗄 VPS
+
+ - DOMAIN-KEYWORD,trading,🇸🇬 HK转SG Hysteria2
+
+ - DOMAIN-KEYWORD,oracle,🇭🇰 HK转hytron Hysteria2
+ - DOMAIN-KEYWORD,sososo,🇭🇰 HK转hytron Hysteria2
+
+ - DOMAIN-KEYWORD,music.youtube.com,🇭🇰 阿里云 Hysteria2
+
+ - DOMAIN-KEYWORD,133881.xyz,🇯🇵 WAP Hysteria2
+ - DOMAIN-KEYWORD,cloudflare,🇯🇵 WAP Hysteria2
+
+# PT站
+ - DOMAIN-KEYWORD,hhanclub,📽︎ PT 站点
+ - DOMAIN-KEYWORD,club.hares,📽︎ PT 站点
+ - DOMAIN-KEYWORD,piggo.me,📽︎ PT 站点
+ - DOMAIN-KEYWORD,leaves.red,📽︎ PT 站点
+ 
+
+# Direct直连
+ - IP-CIDR,13.113.147.158/8,🎯 全球直连
+ - DOMAIN-SUFFIX,bsapce.cn,🎯 全球直连
+ - DOMAIN-KEYWORD,yxvm.com,🎯 全球直连
+ #- DOMAIN-KEYWORD,1password,🎯 全球直连
+
+# 苹果服务
+ - GEOSITE,icloud,🍎 苹果服务
+ - GEOSITE,apple,🍎 苹果服务
+ 
+# 谷歌服务
+ - GEOSITE,google,🚀 节点选择
+ - GEOIP,google,🚀 节点选择,no-resolve
+
+# 微软服务
+ - RULE-SET,Microsoft,Ⓜ️ 微软服务
+
+# 最终规则
+ - RULE-SET,applications,🎯 全球直连
+ - DOMAIN,clash.razord.top,🎯 全球直连
+ - DOMAIN,yacd.haishan.me,🎯 全球直连
+ - RULE-SET,private,🎯 全球直连
+ - RULE-SET,direct,🎯 全球直连
+ - GEOIP,LAN,🎯 全球直连
+ - GEOIP,CN,🎯 全球直连
+ - GEOSITE,geolocation-cn,DIRECT
+ - RULE-SET,proxy,🚀 节点选择
+ - RULE-SET,reject,REJECT
+ - MATCH,🐟 漏网之鱼
+
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
+    path: ./ruleset/reject.yaml
+    interval: 86400
+
+  Microsoft:
+    type: http
+    behavior: domain
+    url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
+    path: ./ruleset/Microsoft.yaml
+    interval: 86400
+
+  proxy:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+
+  direct:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
+    path: ./ruleset/direct.yaml
+    interval: 86400
+
+  private:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
+    path: ./ruleset/private.yaml
+    interval: 86400
+
+  applications:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
+    path: ./ruleset/applications.yaml
+    interval: 86400
+  
+  netflix:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Netflix/Netflix.yaml"
+    path: ./ruleset/netflix.yaml
+    interval: 86400
+
+# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
+dns:
+  enable: true
+  listen: 0.0.0.0:53
+  ipv6: true # 当此选项为 false 时, AAAA 请求将返回空
+
+  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
+  # 仅填写 DNS 服务器的 IP 地址
+  default-nameserver:
+    - 114.114.114.114
+    - 223.5.5.5
+    - 8.8.8.8
+  enhanced-mode: fake-ip # 或 redir-host
+  fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
+  # use-hosts: true # 查询 hosts 并返回 IP 记录
+
+  # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
+  fake-ip-filter:
+    # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
+    - '*.lan'
+    - '*.localdomain'
+    - '*.example'
+    - '*.invalid'
+    - '*.localhost'
+    - '*.test'
+    - '*.local'
+    - '*.home.arpa'
+    - 'time.*.com'
+    - 'time.*.gov'
+    - 'time.*.edu.cn'
+    - 'time.*.apple.com'
+    - 'time1.*.com'
+    - 'time2.*.com'
+    - 'time3.*.com'
+    - 'time4.*.com'
+    - 'time5.*.com'
+    - 'time6.*.com'
+    - 'time7.*.com'
+    - 'ntp.*.com'
+    - 'ntp1.*.com'
+    - 'ntp2.*.com'
+    - 'ntp3.*.com'
+    - 'ntp4.*.com'
+    - 'ntp5.*.com'
+    - 'ntp6.*.com'
+    - 'ntp7.*.com'
+    - '*.time.edu.cn'
+    - '*.ntp.org.cn'
+    - '+.pool.ntp.org'
+    - 'time1.cloud.tencent.com'
+    - 'music.163.com'
+    - '*.music.163.com'
+    - '*.126.net'
+    - 'musicapi.taihe.com'
+    - 'music.taihe.com'
+    - 'songsearch.kugou.com'
+    - 'trackercdn.kugou.com'
+    - '*.kuwo.cn'
+    - 'api-jooxtt.sanook.com'
+    - 'api.joox.com'
+    - 'joox.com'
+    - 'y.qq.com'
+    - '*.y.qq.com'
+    - 'streamoc.music.tc.qq.com'
+    - 'mobileoc.music.tc.qq.com'
+    - 'isure.stream.qqmusic.qq.com'
+    - 'dl.stream.qqmusic.qq.com'
+    - 'aqqmusic.tc.qq.com'
+    - 'amobile.music.tc.qq.com'
+    - '*.xiami.com'
+    - '*.music.migu.cn'
+    - 'music.migu.cn'
+    - '*.msftconnecttest.com'
+    - '*.msftncsi.com'
+    - 'msftconnecttest.com'
+    - 'msftncsi.com'
+    - 'localhost.ptlogin2.qq.com'
+    - 'localhost.sec.qq.com'
+    - '+.srv.nintendo.net'
+    - '+.stun.playstation.net'
+    - 'xbox.*.microsoft.com'
+    - '*.*.xboxlive.com'
+    - '+.battlenet.com.cn'
+    - '+.wotgame.cn'
+    - '+.wggames.cn'
+    - '+.wowsgame.cn'
+    - '+.wargaming.net'
+    - 'proxy.golang.org'
+    - 'stun.*.*'
+    - 'stun.*.*.*'
+    - '+.stun.*.*'
+    - '+.stun.*.*.*'
+    - '+.stun.*.*.*.*'
+    - 'heartbeat.belkin.com'
+    - '*.linksys.com'
+    - '*.linksyssmartwifi.com'
+    - '*.router.asus.com'
+    - 'mesu.apple.com'
+    - 'swscan.apple.com'
+    - 'swquery.apple.com'
+    - 'swdownload.apple.com'
+    - 'swcdn.apple.com'
+    - 'swdist.apple.com'
+    - 'lens.l.google.com'
+    - 'stun.l.google.com'
+    - '+.nflxvideo.net'
+    - '*.square-enix.com'
+    - '*.finalfantasyxiv.com'
+    - '*.ffxiv.com'
+    - '*.mcdn.bilivideo.cn'
+    - WORKGROUP
+
+  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
+  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
+  # Clash 会使用最先获得的解析记录回复 DNS 请求
+  nameserver:
+    - https://doh.pub/dns-query
+    - https://dns.alidns.com/dns-query
+
+  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
+  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
+  # fallback:
+  #   - https://dns.google/dns-query
+
+  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
+  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
+  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
+  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
+  fallback-filter:
+    geoip: false
+    ipcidr:
+      - 0.0.0.0/8
+      - 10.0.0.0/8
+      - 100.64.0.0/10
+      - 127.0.0.0/8
+      - 169.254.0.0/16
+      - 172.16.0.0/12
+      - 192.0.0.0/24
+      - 192.0.2.0/24
+      - 192.88.99.0/24
+      - 192.168.0.0/16
+      - 198.18.0.0/15
+      - 198.51.100.0/24
+      - 203.0.113.0/24
+      - 224.0.0.0/4
+      - 240.0.0.0/4
+      - 255.255.255.255/32
+    domain:
+      - '+.google.com'
+      - '+.facebook.com'
+      - '+.youtube.com'
+      - '+.githubusercontent.com'
+      - '+.googlevideo.com'

clash_share.yaml

@@ -0,0 +1,320 @@
+port: 7890
+socks-port: 7891
+redir-port: 7892
+allow-lan: false
+mode: rule
+log-level: info
+external-controller: '0.0.0.0:9090'
+secret: ''
+proxies:
+  - name: "🇭🇰 阿里云 Hysteria2"
+    type: hysteria2
+    server: aliyunhk.812371.xyz
+    port: 9249
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: aliyunhk.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇺🇸 RackNerd Hysteria2"
+    type: hysteria2
+    server: racknerdus.122881.xyz
+    port: 9849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: racknerdus.122881.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+  - name: "🇩🇪 NETCUP Hysteria2"
+    type: hysteria2
+    server: netcuphyw.812371.xyz
+    port: 8849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: netcuphyw.812371.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+proxy-groups:
+  -
+    name: '🚀 节点选择'
+    type: select
+    proxies:
+      - DIRECT
+      - '🇭🇰 阿里云 Hysteria2'
+      - '🇺🇸 RackNerd Hysteria2'
+  -
+    name: '📻 TIKTOK'
+    type: select
+    proxies:
+      - DIRECT
+      - '🚀 节点选择'
+      - '🇺🇸 RackNerd Hysteria2'
+      - '🇩🇪 NETCUP Hysteria2'
+  -
+    name: 'Ⓜ️ 微软服务'
+    type: select
+    proxies:
+      - '🎯 全球直连'
+      - '🚀 节点选择'
+  -
+    name: '🍎 苹果服务'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '📢 谷歌FCM'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '🎯 全球直连'
+    type: select
+    proxies:
+      - DIRECT
+      - '🚀 节点选择'
+  -
+    name: '🐟 漏网之鱼'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+
+rules:
+# TIKTOK
+ - RULE-SET,tiktok,📻 TIKTOK
+
+# 苹果服务
+ - GEOSITE,icloud,🍎 苹果服务
+ - GEOSITE,apple,🍎 苹果服务
+ 
+# 谷歌服务
+ - GEOSITE,google,🚀 节点选择
+ - GEOIP,google,🚀 节点选择,no-resolve
+
+# 微软服务
+ - RULE-SET,Microsoft,Ⓜ️ 微软服务
+
+# 最终规则
+ - RULE-SET,applications,🎯 全球直连
+ - DOMAIN,clash.razord.top,🎯 全球直连
+ - DOMAIN,yacd.haishan.me,🎯 全球直连
+ - RULE-SET,private,🎯 全球直连
+ - RULE-SET,direct,🎯 全球直连
+ - GEOIP,LAN,🎯 全球直连
+ - GEOIP,CN,🎯 全球直连
+ - GEOSITE,geolocation-cn,DIRECT
+ - RULE-SET,proxy,🚀 节点选择
+ - RULE-SET,reject,REJECT
+ - MATCH,🐟 漏网之鱼
+
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
+    path: ./ruleset/reject.yaml
+    interval: 86400
+
+  Microsoft:
+    type: http
+    behavior: domain
+    url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
+    path: ./ruleset/Microsoft.yaml
+    interval: 86400
+
+  proxy:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+
+  direct:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
+    path: ./ruleset/direct.yaml
+    interval: 86400
+
+  private:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
+    path: ./ruleset/private.yaml
+    interval: 86400
+
+  applications:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
+    path: ./ruleset/applications.yaml
+    interval: 86400
+  
+  tiktok:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/TikTok/TikTok.yaml"
+    path: ./ruleset/tiktok.yaml
+    interval: 86400
+    
+# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
+dns:
+  enable: true
+  listen: 0.0.0.0:53
+  ipv6: true # 当此选项为 false 时, AAAA 请求将返回空
+
+  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
+  # 仅填写 DNS 服务器的 IP 地址
+  default-nameserver:
+    - 114.114.114.114
+    - 223.5.5.5
+    - 8.8.8.8
+  enhanced-mode: fake-ip # 或 redir-host
+  fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
+  # use-hosts: true # 查询 hosts 并返回 IP 记录
+
+  # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
+  fake-ip-filter:
+    # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
+    - '*.lan'
+    - '*.localdomain'
+    - '*.example'
+    - '*.invalid'
+    - '*.localhost'
+    - '*.test'
+    - '*.local'
+    - '*.home.arpa'
+    - 'time.*.com'
+    - 'time.*.gov'
+    - 'time.*.edu.cn'
+    - 'time.*.apple.com'
+    - 'time1.*.com'
+    - 'time2.*.com'
+    - 'time3.*.com'
+    - 'time4.*.com'
+    - 'time5.*.com'
+    - 'time6.*.com'
+    - 'time7.*.com'
+    - 'ntp.*.com'
+    - 'ntp1.*.com'
+    - 'ntp2.*.com'
+    - 'ntp3.*.com'
+    - 'ntp4.*.com'
+    - 'ntp5.*.com'
+    - 'ntp6.*.com'
+    - 'ntp7.*.com'
+    - '*.time.edu.cn'
+    - '*.ntp.org.cn'
+    - '+.pool.ntp.org'
+    - 'time1.cloud.tencent.com'
+    - 'music.163.com'
+    - '*.music.163.com'
+    - '*.126.net'
+    - 'musicapi.taihe.com'
+    - 'music.taihe.com'
+    - 'songsearch.kugou.com'
+    - 'trackercdn.kugou.com'
+    - '*.kuwo.cn'
+    - 'api-jooxtt.sanook.com'
+    - 'api.joox.com'
+    - 'joox.com'
+    - 'y.qq.com'
+    - '*.y.qq.com'
+    - 'streamoc.music.tc.qq.com'
+    - 'mobileoc.music.tc.qq.com'
+    - 'isure.stream.qqmusic.qq.com'
+    - 'dl.stream.qqmusic.qq.com'
+    - 'aqqmusic.tc.qq.com'
+    - 'amobile.music.tc.qq.com'
+    - '*.xiami.com'
+    - '*.music.migu.cn'
+    - 'music.migu.cn'
+    - '*.msftconnecttest.com'
+    - '*.msftncsi.com'
+    - 'msftconnecttest.com'
+    - 'msftncsi.com'
+    - 'localhost.ptlogin2.qq.com'
+    - 'localhost.sec.qq.com'
+    - '+.srv.nintendo.net'
+    - '+.stun.playstation.net'
+    - 'xbox.*.microsoft.com'
+    - '*.*.xboxlive.com'
+    - '+.battlenet.com.cn'
+    - '+.wotgame.cn'
+    - '+.wggames.cn'
+    - '+.wowsgame.cn'
+    - '+.wargaming.net'
+    - 'proxy.golang.org'
+    - 'stun.*.*'
+    - 'stun.*.*.*'
+    - '+.stun.*.*'
+    - '+.stun.*.*.*'
+    - '+.stun.*.*.*.*'
+    - 'heartbeat.belkin.com'
+    - '*.linksys.com'
+    - '*.linksyssmartwifi.com'
+    - '*.router.asus.com'
+    - 'mesu.apple.com'
+    - 'swscan.apple.com'
+    - 'swquery.apple.com'
+    - 'swdownload.apple.com'
+    - 'swcdn.apple.com'
+    - 'swdist.apple.com'
+    - 'lens.l.google.com'
+    - 'stun.l.google.com'
+    - '+.nflxvideo.net'
+    - '*.square-enix.com'
+    - '*.finalfantasyxiv.com'
+    - '*.ffxiv.com'
+    - '*.mcdn.bilivideo.cn'
+    - WORKGROUP
+
+  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
+  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
+  # Clash 会使用最先获得的解析记录回复 DNS 请求
+  nameserver:
+    - https://doh.pub/dns-query
+    - https://dns.alidns.com/dns-query
+
+  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
+  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
+  # fallback:
+  #   - https://dns.google/dns-query
+
+  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
+  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
+  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
+  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
+  fallback-filter:
+    geoip: false
+    ipcidr:
+      - 0.0.0.0/8
+      - 10.0.0.0/8
+      - 100.64.0.0/10
+      - 127.0.0.0/8
+      - 169.254.0.0/16
+      - 172.16.0.0/12
+      - 192.0.0.0/24
+      - 192.0.2.0/24
+      - 192.88.99.0/24
+      - 192.168.0.0/16
+      - 198.18.0.0/15
+      - 198.51.100.0/24
+      - 203.0.113.0/24
+      - 224.0.0.0/4
+      - 240.0.0.0/4
+      - 255.255.255.255/32
+    domain:
+      - '+.google.com'
+      - '+.facebook.com'
+      - '+.youtube.com'
+      - '+.githubusercontent.com'
+      - '+.googlevideo.com'

clash_vless.yaml

@@ -1,677 +0,0 @@
-port: 7890
-socks-port: 7891
-redir-port: 7892
-allow-lan: false
-mode: rule
-log-level: info
-external-controller: '0.0.0.0:9090'
-secret: ''
-
-ipv6: false
-# 启用 geodata 模式和自定义 geoip 数据库
-geodata-mode: true
-geodata-loader: standard
-# 自动更新 GEO
-geo-auto-update: true
-
-# 更新间隔，单位为小时
-geo-update-interval: 24
-
-# 自定 GEO 下载地址
-geox-url:
-  geoip: 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat/'
-  geosite: 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat/'
-  mmdb: 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.metadb/'
-  asn: 'https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/GeoLite2-ASN.mmdb/'
-
-# 【Meta专属】TCP连接并发，如果域名解析结果对应多个IP，并发所有IP，选择握手最快的IP进行连接
-tcp-concurrent: true
-
-# geox-url:
-#   geoip: "https://cdn.jsdelivr.net/gh/Loyalsoldier/geoip@release/geoip.dat"
-
-# 添加远端节点链接
-proxy-providers:
-  isif18r:
-    type: http
-    url: http://152.53.33.92:50004/hatGZgTX6VUe2T2EwZJjf4PY3sr7/download/isif18r?target=ClashMeta&includeUnsupportedProxy=true
-    interval: 3600
-    path: ./profiles/isif18r.yaml
-    health-check:
-      enable: true
-      interval: 600
-      url: http://www.gstatic.com/generate_204
-
-proxies:
-  - name: "🇯🇵 WAP Vless"
-    type: vless
-    server: 103.238.129.85
-    port: 8549
-    uuid: d7d341eb-5818-4ac7-9ee7-83ab0042f729
-    network: tcp
-    udp: true
-    tls: true
-    flow: xtls-rprx-vision
-    servername: www.lovelive-anime.jp
-    client-fingerprint: chrome
-    reality-opts:
-      public-key: "iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0"
-      short-id: "73ffdce4e65638ea"
-  - name: "🇯🇵 WAP SS"
-    type: ss
-    server: 103.238.129.85
-    port: 8546
-    tfo: true
-    udp: true
-    udp-over-tcp: true
-    udp-over-tcp-version: 2
-    mptcp: true
-    cipher: 2022-blake3-aes-128-gcm
-    password: "gGbxvQIGYnsd8KNv0DzwzA=="
-    smux:
-      enabled: true
-      padding: true
-  - name: "🇯🇵 橙子云 SS"
-    type: ss
-    server: 74.113.96.208
-    port: 21001
-    tfo: true
-    udp: true
-    udp-over-tcp: true
-    udp-over-tcp-version: 2
-    mptcp: true
-    cipher: 2022-blake3-aes-128-gcm
-    password: "gGbxvQIGYnsd8KNv0DzwzA=="
-    smux:
-      enabled: true
-      padding: true
-  - name: "🇩🇪 NETCUP Hysteria2"
-    type: hysteria2
-    server: netcuphyw.812371.xyz
-    port: 8849
-    password: gGbxvQIGYnsd8KNv0DzwzA==
-    sni: netcuphyw.812371.xyz
-    skip-cert-verify: false
-    alpn:
-      - h3
-  - name: "🇩🇪 9929-NETCUP SS"
-    type: ss
-    server: fastu.kxy.ovh
-    port: 13121
-    tfo: true
-    udp: true
-    udp-over-tcp: true
-    udp-over-tcp-version: 2
-    mptcp: true
-    cipher: 2022-blake3-aes-128-gcm
-    password: "gGbxvQIGYnsd8KNv0DzwzA=="
-    smux:
-      enabled: true
-      padding: true
-  - name: "🇺🇸 CNFaster CN2GIA Vless"
-    type: vless
-    server: cnfus.812371.xyz
-    port: 8943
-    uuid: d7d341eb-5818-4ac7-9ee7-83ab0042f729
-    network: tcp
-    udp: true
-    tls: true
-    flow: xtls-rprx-vision
-    servername: www.lovelive-anime.jp
-    client-fingerprint: chrome
-    reality-opts:
-      public-key: "iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0"
-      short-id: "73ffdce4e65638ea"
-  - name: "🇺🇸 CNFaster CN2GIA SS"
-    type: ss
-    server: cnfus.812371.xyz
-    port: 8946
-    tfo: true
-    udp: true
-    udp-over-tcp: true
-    udp-over-tcp-version: 2
-    mptcp: true
-    cipher: 2022-blake3-aes-128-gcm
-    password: "gGbxvQIGYnsd8KNv0DzwzA=="
-    smux:
-      enabled: true
-      padding: true
-  - name: "🇭🇰 KXY hk v6"
-    type: hysteria2
-    server: hxyhk.812371.xyz
-    port: 9049
-    password: gGbxvQIGYnsd8KNv0DzwzA==
-    sni: hxyhk.812371.xyz
-    skip-cert-verify: false
-    alpn:
-      - h3
-  - name: "🇺🇸 RackNerd Reality"
-    type: vless
-    server: racknerdus.812371.xyz
-    port: 9843
-    uuid: bf000d23-0752-40b4-affe-68f7707a9661
-    network: tcp
-    udp: true
-    tls: true
-    flow: xtls-rprx-vision
-    servername: gamedownloads-rockstargames-com.akamaized.net
-    client-fingerprint: chrome
-    reality-opts:
-      public-key: "cVoqcDbBIWrRCrKn2gI_VHFTbyjMOj4ovDE2jKjvJgA"
-      short-id: "b2c86d5449d237fa"
-  - name: "🇹🇼 IEPL-Lain SS"
-    type: ss
-    server: 103.216.253.110
-    port: 62016
-    cipher: aes-128-gcm
-    password: 8eLTxLWml4weLT9KW2x9ig==
-    udp: true
-  - name: "🇹🇼 IEPL-Lain SS CMI"
-    type: ss
-    server: 120.232.217.115
-    port: 62016
-    cipher: aes-128-gcm
-    password: 8eLTxLWml4weLT9KW2x9ig==
-    udp: true
-  - name: "🇹🇼 IEPL-CNF SS CMI"
-    type: ss
-    server: 103.216.253.110
-    port: 62017
-    cipher: aes-128-gcm
-    password: 8eLTxLWml4weLT9KW2x9ig==
-    udp: true
-  - name: "🇹🇼 LOC-Lain Hysteria2"
-    type: hysteria2
-    server: locvpshk.812371.xyz
-    port: 10001
-    password: gGbxvQIGYnsd8KNv0DzwzA==
-    sni: laintw.812371.xyz
-    skip-cert-verify: false
-    alpn:
-      - h3
-  - name: "🇹🇼 LOC-Lain Reality"
-    type: vless
-    server: locvpshk.812371.xyz
-    port: 10002
-    uuid: d7d341eb-5818-4ac7-9ee7-83ab0042f729
-    network: tcp
-    udp: true
-    tls: true
-    flow: xtls-rprx-vision
-    servername: www.lovelive-anime.jp
-    client-fingerprint: chrome
-    reality-opts:
-      public-key: "iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0"
-      short-id: "73ffdce4e65638ea"
-  - name: "🇹🇼 LOC-Lain SS"
-    type: ss
-    server: locvpshk.812371.xyz
-    port: 10008
-    tfo: true
-    udp: true
-    udp-over-tcp: true
-    udp-over-tcp-version: 2
-    mptcp: true
-    cipher: 2022-blake3-aes-128-gcm
-    password: "gGbxvQIGYnsd8KNv0DzwzA=="
-    smux:
-      enabled: true
-      padding: true
-  - name: "🇭🇰 LOC-KXYHK Reality"
-    type: vless
-    server: locvpshk.812371.xyz
-    port: 10003
-    uuid: bf000d23-0752-40b4-affe-68f7707a9661
-    network: tcp
-    udp: true
-    tls: true
-    flow: xtls-rprx-vision
-    servername: www.amd.com
-    client-fingerprint: chrome
-    reality-opts:
-      public-key: "cVoqcDbBIWrRCrKn2gI_VHFTbyjMOj4ovDE2jKjvJgA"
-      short-id: "b2c86d5449d237fa"
-  - name: "🇮🇩 HK转印尼 Hysteria2"
-    type: hysteria2
-    server: aliyunhk.812371.xyz
-    port: 30010
-    password: gGbxvQIGYnsd8KNv0DzwzA==
-    sni: yajiada.812371.xyz
-    skip-cert-verify: true
-    alpn:
-      - h3
-  - name: 🇸🇬 BegaVM-AWS_Hy2
-    type: hysteria2
-    server: aswgs.xxop.de
-    port: 30575
-    password: 7f1a51ce-d5df-4bd5-951a-a51c6535b488
-    alpn:
-        - h3
-    sni: bsgg.xxop.de
-    up: "2000 Mbps"
-    down: "2000 Mbps"
-proxy-groups:
-  -
-    name: '🚀 节点选择'
-    type: select
-    proxies:
-      - DIRECT
-      - '🇯🇵 WAP Vless'
-      - '🇯🇵 橙子云 SS'
-      - '🇹🇼 LOC-Lain Reality'
-      - '🇹🇼 IEPL-Lain SS'
-      - '🇹🇼 IEPL-Lain SS CMI'
-      - '🇹🇼 IEPL-CNF SS CMI'
-      - '🇹🇼 LOC-Lain SS'
-      - '🇺🇸 CNFaster CN2GIA SS'
-      - '🇺🇸 CNFaster CN2GIA Vless'
-      - '🇺🇸 RackNerd Reality'
-      - '🇩🇪 9929-NETCUP SS'
-    use:
-      - isif18r
-  -
-    name: 'Ⓜ️ 微软服务'
-    type: select
-    proxies:
-      - '🎯 全球直连'
-      - '🚀 节点选择'
-  -
-    name: '🍎 苹果服务'
-    type: select
-    proxies:
-      - '🚀 节点选择'
-      - '🎯 全球直连'
-  -
-    name: '📢 谷歌FCM'
-    type: select
-    proxies:
-      - '🚀 节点选择'
-      - '🎯 全球直连'
-  -
-    name: '🎯 全球直连'
-    type: select
-    proxies:
-      - DIRECT
-      - '🚀 节点选择'
-  -
-    name: '📽︎ PT 站点'
-    type: select
-    proxies:
-      - '🚀 节点选择'
-      - '🇯🇵 WAP Vless'
-  -
-    name: '🐟 漏网之鱼'
-    type: select
-    proxies:
-      - '🚀 节点选择'
-      - '🎯 全球直连'
-  -
-    name: '🤖 GPT'
-    type: select
-    proxies:
-      - '🇹🇼 LOC-Lain SS'
-      - '🇯🇵 WAP SS'
-      - '🇯🇵 WAP Vless'
-      - '🚀 节点选择'
-  -
-    name: '🤖 Gemini'
-    type: select
-    proxies:
-      - '🇺🇸 CNFaster CN2GIA SS'
-      - '🇺🇸 CNFaster CN2GIA Vless'
-      - '🇺🇸 RackNerd Reality'
-  -
-    name: '🍿 NETFLIX'
-    type: select
-    proxies:
-      - '🇸🇬 BegaVM-AWS_Hy2'
-      - '🚀 节点选择'
-  -
-    name: '🎮 Steam'
-    type: select
-    proxies:
-      - '🇺🇸 CNFaster CN2GIA SS'
-      - '🇺🇸 CNFaster CN2GIA Vless'
-      - '🚀 节点选择'
-  -
-    name: '🐧 论坛'
-    type: select
-    proxies:
-      - '🇺🇸 CNFaster CN2GIA SS'
-      - '🔄 故障转移'
-      - '🚀 节点选择'
-      - '🇭🇰 LOC-KXYHK Reality'
-      - '🇺🇸 CNFaster CN2GIA Vless'
-      - '🇺🇸 RackNerd Reality'
-      - '🇯🇵 WAP Vless'
-  - name: "💚 NTRRR自动切换"
-    type: select
-    #url: "https://stream.ntrrr.top"
-    #interval: 200
-    #tolerance: 1000
-    proxies:
-      - '🇯🇵 WAP SS'
-      - '🇯🇵 WAP Vless'
-      - '🚀 节点选择'
-      - '🇺🇸 CNFaster CN2GIA SS'
-  - name: "🔄 故障转移"
-    type: fallback
-    url: "http://www.gstatic.com/generate_204"
-    interval: 30
-    tolerance: 50
-    proxies:
-      - '🇯🇵 WAP SS'
-      - '🇯🇵 WAP Vless'
-      - '🇺🇸 RackNerd Reality'
-      - '🇸🇬 BegaVM-AWS_Hy2'
-rules:
-# PROXY
-
-# Steam
- - DOMAIN-SUFFIX,steam-chat.com,🎮 Steam
- - DOMAIN-SUFFIX,steamcommunity.com,🎮 Steam
- - DOMAIN-SUFFIX,steamdb.info,🎮 Steam
- - DOMAIN-SUFFIX,steampowered.com,🎮 Steam
- - DOMAIN-SUFFIX,steamstatic.com,DIRECT
- - DOMAIN-SUFFIX,steamserver.net,DIRECT
-
-# OpenAI
- - GEOSITE,openai,🤖 GPT
- - DOMAIN-SUFFIX,chatgpt.com,🤖 GPT
-
-# Claude
- - DOMAIN,cdn.usefathom.com,🤖 GPT
- - DOMAIN-SUFFIX,anthropic.com,🤖 GPT
- - DOMAIN-SUFFIX,claude.ai,🤖 GPT
-
-# Deepseek
- - DOMAIN-SUFFIX,deepseek.com,🤖 GPT
-
-# Gemini
- - RULE-SET,gemini,🤖 Gemini
-
-# NETFLIX
- - RULE-SET,netflix,🍿 NETFLIX
-
-# OZOO.TOP 
- - DOMAIN-KEYWORD,ozoo.top,🐧 论坛
-#论坛
- - DOMAIN,www.nodeseek.com,🐧 论坛
- - DOMAIN,www.nodehatch.com,🐧 论坛
- - DOMAIN-KEYWORD,linux.do,🐧 论坛
- - DOMAIN-SUFFIX,right.com.cn,🐧 论坛
- - DOMAIN-KEYWORD,gmail678.cc,🐧 论坛 #gmail发卡网
-# 强制代理
- - DOMAIN,stream.ntrrr.top,💚 NTRRR自动切换
- 
-# PT站
- - DOMAIN-KEYWORD,hhanclub,📽︎ PT 站点
- - DOMAIN-KEYWORD,club.hares,📽︎ PT 站点
- - DOMAIN-KEYWORD,piggo.me,📽︎ PT 站点
- - DOMAIN-KEYWORD,leaves.red,📽︎ PT 站点
- 
-
-# Direct直连
- - IP-CIDR,13.113.147.158/8,🎯 全球直连
- - DOMAIN-KEYWORD,1password,🎯 全球直连
-
-# 苹果服务
- - GEOSITE,icloud,🍎 苹果服务
- - GEOSITE,apple,🍎 苹果服务
- 
-# 谷歌服务
- - GEOSITE,google,🚀 节点选择
- - GEOIP,google,🚀 节点选择,no-resolve
-
-# 微软服务
- - RULE-SET,Microsoft,Ⓜ️ 微软服务
-
-# 微信
- - RULE-SET,wechat,🎯 全球直连
-
- # 最终规则
- - RULE-SET,reject,REJECT
- - RULE-SET,applications,🎯 全球直连
- - DOMAIN,clash.razord.top,🎯 全球直连
- - DOMAIN,yacd.haishan.me,🎯 全球直连
- - RULE-SET,proxy,🚀 节点选择
- - RULE-SET,private,🎯 全球直连
- - RULE-SET,direct,🎯 全球直连
- - GEOIP,LAN,🎯 全球直连
- - GEOSITE,geolocation-cn,DIRECT
- - GEOIP,CN,🎯 全球直连
- - MATCH,🐟 漏网之鱼
-
-
-
-rule-providers:
-  reject:
-    type: http
-    behavior: domain
-    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
-    path: ./ruleset/reject.yaml
-    interval: 86400
-
-  Microsoft:
-    type: http
-    behavior: domain
-    url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
-    path: ./ruleset/Microsoft.yaml
-    interval: 86400
-
-  proxy:
-    type: http
-    behavior: domain
-    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
-    path: ./ruleset/proxy.yaml
-    interval: 86400
-
-  direct:
-    type: http
-    behavior: domain
-    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
-    path: ./ruleset/direct.yaml
-    interval: 86400
-
-  private:
-    type: http
-    behavior: domain
-    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
-    path: ./ruleset/private.yaml
-    interval: 86400
-
-  applications:
-    type: http
-    behavior: classical
-    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
-    path: ./ruleset/applications.yaml
-    interval: 86400
-  
-  netflix:
-    type: http
-    behavior: classical
-    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Netflix/Netflix.yaml"
-    path: ./ruleset/netflix.yaml
-    interval: 86400
-
-  gemini:
-    type: http
-    behavior: classical
-    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Gemini/Gemini.yaml"
-    path: ./ruleset/gemini.yaml
-    interval: 86400
-
-  wechat:
-    type: http
-    behavior: classical
-    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/WeChat/WeChat.list"
-    path: ./ruleset/wechat.yaml
-    interval: 86400
-
-# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
-dns:
-  enable: true
-  listen: :53
-  ipv6: false # 当此选项为 false 时, AAAA 请求将返回空
-  prefer-h3: false
-  respect-rules: true
-  enhanced-mode: redir-host
-  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
-  # 仅填写 DNS 服务器的 IP 地址
-  default-nameserver:
-    - 119.29.29.29
-    - 223.6.6.6
-  # enhanced-mode: fake-ip # 或 redir-host
-  # fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
-  # # use-hosts: true # 查询 hosts 并返回 IP 记录
-
-  # # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
-  # fake-ip-filter:
-  #   # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
-  #   - '*.lan'
-  #   - '*.localdomain'
-  #   - '*.example'
-  #   - '*.invalid'
-  #   - '*.localhost'
-  #   - '*.test'
-  #   - '*.local'
-  #   - '*.home.arpa'
-  #   - 'time.*.com'
-  #   - 'time.*.gov'
-  #   - 'time.*.edu.cn'
-  #   - 'time.*.apple.com'
-  #   - 'time1.*.com'
-  #   - 'time2.*.com'
-  #   - 'time3.*.com'
-  #   - 'time4.*.com'
-  #   - 'time5.*.com'
-  #   - 'time6.*.com'
-  #   - 'time7.*.com'
-  #   - 'ntp.*.com'
-  #   - 'ntp1.*.com'
-  #   - 'ntp2.*.com'
-  #   - 'ntp3.*.com'
-  #   - 'ntp4.*.com'
-  #   - 'ntp5.*.com'
-  #   - 'ntp6.*.com'
-  #   - 'ntp7.*.com'
-  #   - '*.time.edu.cn'
-  #   - '*.ntp.org.cn'
-  #   - '+.pool.ntp.org'
-  #   - 'time1.cloud.tencent.com'
-  #   - 'music.163.com'
-  #   - '*.music.163.com'
-  #   - '*.126.net'
-  #   - 'musicapi.taihe.com'
-  #   - 'music.taihe.com'
-  #   - 'songsearch.kugou.com'
-  #   - 'trackercdn.kugou.com'
-  #   - '*.kuwo.cn'
-  #   - 'api-jooxtt.sanook.com'
-  #   - 'api.joox.com'
-  #   - 'joox.com'
-  #   - 'y.qq.com'
-  #   - '*.y.qq.com'
-  #   - 'streamoc.music.tc.qq.com'
-  #   - 'mobileoc.music.tc.qq.com'
-  #   - 'isure.stream.qqmusic.qq.com'
-  #   - 'dl.stream.qqmusic.qq.com'
-  #   - 'aqqmusic.tc.qq.com'
-  #   - 'amobile.music.tc.qq.com'
-  #   - '*.xiami.com'
-  #   - '*.music.migu.cn'
-  #   - 'music.migu.cn'
-  #   - '*.msftconnecttest.com'
-  #   - '*.msftncsi.com'
-  #   - 'msftconnecttest.com'
-  #   - 'msftncsi.com'
-  #   - 'localhost.ptlogin2.qq.com'
-  #   - 'localhost.sec.qq.com'
-  #   - '+.srv.nintendo.net'
-  #   - '+.stun.playstation.net'
-  #   - 'xbox.*.microsoft.com'
-  #   - '*.*.xboxlive.com'
-  #   - '+.battlenet.com.cn'
-  #   - '+.wotgame.cn'
-  #   - '+.wggames.cn'
-  #   - '+.wowsgame.cn'
-  #   - '+.wargaming.net'
-  #   - 'proxy.golang.org'
-  #   - 'stun.*.*'
-  #   - 'stun.*.*.*'
-  #   - '+.stun.*.*'
-  #   - '+.stun.*.*.*'
-  #   - '+.stun.*.*.*.*'
-  #   - 'heartbeat.belkin.com'
-  #   - '*.linksys.com'
-  #   - '*.linksyssmartwifi.com'
-  #   - '*.router.asus.com'
-  #   - 'mesu.apple.com'
-  #   - 'swscan.apple.com'
-  #   - 'swquery.apple.com'
-  #   - 'swdownload.apple.com'
-  #   - 'swcdn.apple.com'
-  #   - 'swdist.apple.com'
-  #   - 'lens.l.google.com'
-  #   - 'stun.l.google.com'
-  #   - '+.nflxvideo.net'
-  #   - '*.square-enix.com'
-  #   - '*.finalfantasyxiv.com'
-  #   - '*.ffxiv.com'
-  #   - '*.mcdn.bilivideo.cn'
-  #   - WORKGROUP
-
-  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
-  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
-  # Clash 会使用最先获得的解析记录回复 DNS 请求
-  nameserver-policy:
-    "geosite:cn,private,geolocation-cn": [https://1.12.12.12/dns-query, https://223.5.5.5/dns-query]
-
-  nameserver:
-    - https://8.8.8.8/dns-query
-    - https://1.1.1.1/dns-query
-
-  proxy-server-nameserver: 
-    - https://1.12.12.12/dns-query
-    - https://223.5.5.5/dns-query
-
-  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
-  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
-  # fallback:
-  #   - https://dns.google/dns-query
-
-  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
-  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
-  #
-  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
-  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
-  #
-  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
-  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
-  #
-  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
-  # fallback-filter:
-  #   geoip: false
-  #   ipcidr:
-  #     - 0.0.0.0/8
-  #     - 10.0.0.0/8
-  #     - 100.64.0.0/10
-  #     - 127.0.0.0/8
-  #     - 169.254.0.0/16
-  #     - 172.16.0.0/12
-  #     - 192.0.0.0/24
-  #     - 192.0.2.0/24
-  #     - 192.88.99.0/24
-  #     - 192.168.0.0/16
-  #     - 198.18.0.0/15
-  #     - 198.51.100.0/24
-  #     - 203.0.113.0/24
-  #     - 224.0.0.0/4
-  #     - 240.0.0.0/4
-  #     - 255.255.255.255/32
-  #   domain:
-  #     - '+.google.com'
-  #     - '+.facebook.com'
-  #     - '+.youtube.com'
-  #     - '+.githubusercontent.com'
-  #     - '+.googlevideo.com'

loon/loon.conf

@@ -0,0 +1,194 @@
+# Loon 最小配置
+# Date: 2025-02-28 20:43:37
+# Author: https://t.me/iKeLee
+# 更多的插件可以前往此处安装 https://github.com/luestr/ProxyResource/blob/main/README.md
+
+[General]
+ip-mode = dual
+ipv6-vif = off
+dns-server = system
+sni-sniffing = true
+disable-stun = true
+dns-reject-mode = LoopbackIP
+domain-reject-mode = DNS
+udp-fallback-mode = REJECT
+wifi-access-http-port = 7222
+wifi-access-socks5-port = 7221
+allow-wifi-access = true
+interface-mode = auto
+test-timeout = 2
+disconnect-on-policy-change = true
+switch-node-after-failure-times = 3
+internet-test-url = http://connectivitycheck.platform.hicloud.com/generate_204
+proxy-test-url = http://www.gstatic.com/generate_204
+resource-parser = https://raw.githubusercontent.com/sub-store-org/Sub-Store/release/sub-store-parser.loon.min.js
+ipasn-url = https://geodata.kelee.one/GeoLite2-ASN-P3TERX.mmdb
+geoip-url = https://cdn.jsdelivr.net/gh/Loyalsoldier/geoip@release/geoip.dat
+skip-proxy = 192.168.0.0/16,10.0.0.0/8,172.16.0.0/12,localhost,*.local,e.crashlynatics.com
+bypass-tun = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.0.0/24,192.0.2.0/24,192.88.99.0/24,192.168.0.0/16,198.51.100.0/24,203.0.113.0/24,224.0.0.0/4,255.255.255.255/32
+
+[Proxy]
+🇯🇵 WAP Vless = vless,103.238.129.85,8549,"d7d341eb-5818-4ac7-9ee7-83ab0042f729",transport=tcp,flow=xtls-rprx-vision,public-key="iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0",short-id=73ffdce4e65638ea,udp=true,block-quic=false,over-tls=true,sni=www.lovelive-anime.jp
+🇯🇵 WAP SS = shadowsocks,103.238.129.85,8546,2022-blake3-aes-128-gcm,"gGbxvQIGYnsd8KNv0DzwzA==",fast-open=true,udp=true,block-quic=false
+🇩🇪 NETCUP Hysteria2 = Hysteria2,netcuphyw.812371.xyz,8849,"gGbxvQIGYnsd8KNv0DzwzA==",sni=netcuphyw.812371.xyz
+🇺🇸 CNFaster CN2GIA Vless = vless,cnfus.812371.xyz,8943,"d7d341eb-5818-4ac7-9ee7-83ab0042f729",transport=tcp,flow=xtls-rprx-vision,public-key="iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0",short-id=73ffdce4e65638ea,udp=true,block-quic=false,over-tls=true,sni=www.lovelive-anime.jp
+🇺🇸 CNFaster CN2GIA SS = shadowsocks,cnfus.812371.xyz,8946,2022-blake3-aes-128-gcm,"gGbxvQIGYnsd8KNv0DzwzA==",fast-open=true,udp=true,block-quic=false
+🇭🇰 KXY hk v6 = Hysteria2,hxyhk.812371.xyz,9049,"gGbxvQIGYnsd8KNv0DzwzA==",sni=hxyhk.812371.xyz
+🇺🇸 RackNerd Reality = vless,racknerdus.812371.xyz,9843,"bf000d23-0752-40b4-affe-68f7707a9661",transport=tcp,flow=xtls-rprx-vision,public-key="cVoqcDbBIWrRCrKn2gI_VHFTbyjMOj4ovDE2jKjvJgA",short-id=b2c86d5449d237fa,udp=true,block-quic=false,over-tls=true,sni=gamedownloads-rockstargames-com.akamaized.net
+🇹🇼 IEPL-Lain SS = shadowsocks,45.251.10.243,62016,aes-128-gcm,"8eLTxLWml4weLT9KW2x9ig==",fast-open=false,udp=true,block-quic=false
+🇹🇼 LOC-Lain Reality = vless,locvpshk.812371.xyz,10002,"d7d341eb-5818-4ac7-9ee7-83ab0042f729",transport=tcp,flow=xtls-rprx-vision,public-key="iGb6lCFLaqV2HfLMrLNhh1Zyc0z3tRStN5cnhLIyFg0",short-id=73ffdce4e65638ea,udp=true,block-quic=false,over-tls=true,sni=www.lovelive-anime.jp
+🇹🇼 LOC-Lain SS = shadowsocks,locvpshk.812371.xyz,10004,2022-blake3-aes-128-gcm,"gGbxvQIGYnsd8KNv0DzwzA==",fast-open=true,udp=true,block-quic=false
+🇭🇰 LOC-KXYHK Reality = vless,locvpshk.812371.xyz,10003,"bf000d23-0752-40b4-affe-68f7707a9661",transport=tcp,flow=xtls-rprx-vision,public-key="cVoqcDbBIWrRCrKn2gI_VHFTbyjMOj4ovDE2jKjvJgA",short-id=b2c86d5449d237fa,udp=true,block-quic=false,over-tls=true,sni=www.amd.com
+🇮🇩 HK转印尼 Hysteria2 = Hysteria2,aliyunhk.812371.xyz,30010,"gGbxvQIGYnsd8KNv0DzwzA==",sni=yajiada.812371.xyz,skip-cert-verify=true
+🇸🇬 BegaVM-AWS_Hy2 = Hysteria2,aswgs.xxop.de,30575,"7f1a51ce-d5df-4bd5-951a-a51c6535b488",sni=bsgg.xxop.de,download-bandwidth=2000
+[Remote Proxy]
+isif = http://152.53.33.92:50004/hatGZgTX6VUe2T2EwZJjf4PY3sr7/download/isif18r?target=Loon&includeUnsupportedProxy=true,udp=true,block-quic=false,fast-open=default,vmess-aead=true,skip-cert-verify=true,enabled=true,flexible-sni=false
+
+
+[Remote Filter]
+
+
+[Proxy Group]
+🚀 节点选择 = select,DIRECT,🇯🇵 WAP Vless,🇯🇵 WAP SS,🇩🇪 NETCUP Hysteria2,🇺🇸 CNFaster CN2GIA Vless,🇺🇸 CNFaster CN2GIA SS,🇭🇰 KXY hk v6,🇺🇸 RackNerd Reality,🇹🇼 IEPL-Lain SS,🇹🇼 LOC-Lain Reality,🇹🇼 LOC-Lain SS,🇭🇰 LOC-KXYHK Reality
+
+Ⓜ️ 微软服务 = select,🎯 全球直连,🚀 节点选择
+
+🍎 苹果服务 = select,🚀 节点选择,🎯 全球直连
+
+📢 谷歌FCM = select,🚀 节点选择,🎯 全球直连
+
+🎯 全球直连 = select,DIRECT,🚀 节点选择
+
+📽︎ PT 站点 = select,🚀 节点选择,🇯🇵 WAP Vless,🇯🇵 WAP SS
+
+🐟 漏网之鱼 = select,🚀 节点选择,🎯 全球直连
+
+🤖 GPT = select,🇹🇼 LOC-Lain SS,🇯🇵 WAP SS,🇯🇵 WAP Vless,🚀 节点选择
+
+🤖 Gemini = select,🇺🇸 CNFaster CN2GIA SS,🇺🇸 RackNerd Reality
+
+🍿 NETFLIX = select,🇸🇬 BegaVM-AWS_Hy2,🚀 节点选择
+
+🐧 论坛 = select,🇺🇸 CNFaster CN2GIA SS,🇭🇰 LOC-KXYHK Reality,🇺🇸 CNFaster CN2GIA Vless,🚀 节点选择,🇺🇸 RackNerd Reality
+
+🪙 交易所 = select,🇹🇼 LOC-Lain SS,🚀 节点选择,🎯 全球直连
+
+📱 小红书 = select,🎯 全球直连,🚀 节点选择,🇺🇸 CNFaster CN2GIA Vless
+
+🎵 抖音 = select,🎯 全球直连,🚀 节点选择,🇺🇸 CNFaster CN2GIA SS,🇺🇸 CNFaster CN2GIA Vless
+
+# 添加兜底策略组
+🔄 兜底策略 = fallback,🚀 节点选择,🇯🇵 WAP SS,🇩🇪 NETCUP Hysteria2,url = http://www.gstatic.com/generate_204,interval = 300,max-timeout = 3000
+
+[Proxy Chain]
+[Rule]
+
+# PROXY
+DOMAIN-KEYWORD,infini,🪙 交易所
+
+# Claude
+DOMAIN,cdn.usefathom.com,🤖 GPT
+DOMAIN-SUFFIX,anthropic.com,🤖 GPT
+DOMAIN-SUFFIX,claude.ai,🤖 GPT
+
+# Deepseek
+DOMAIN-SUFFIX,deepseek.com,🤖 GPT
+
+# 论坛
+DOMAIN-KEYWORD,nodeseek,🐧 论坛
+DOMAIN-KEYWORD,nodehatch,🐧 论坛
+DOMAIN-KEYWORD,linux.do,🐧 论坛
+
+# 强制代理
+
+# PT站
+DOMAIN-KEYWORD,hhanclub,📽︎ PT 站点
+DOMAIN-KEYWORD,club.hares,📽︎ PT 站点
+DOMAIN-KEYWORD,piggo.me,📽︎ PT 站点
+DOMAIN-KEYWORD,leaves.red,📽︎ PT 站点
+
+# Direct直连
+IP-CIDR,13.113.147.158/8,🎯 全球直连
+
+# 基础规则
+GEOIP,LAN,🎯 全球直连
+GEOIP,CN,🎯 全球直连
+
+# 最终规则
+FINAL,🐟 漏网之鱼
+
+[Remote Rule]
+# 从 clash 的 rule-providers 转换
+https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt, policy=REJECT, tag=广告拦截, enabled=true
+https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml, policy=Ⓜ️ 微软服务, tag=Microsoft, enabled=true
+https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt, policy=🚀 节点选择, tag=代理规则, enabled=true
+https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt, policy=🎯 全球直连, tag=直连规则, enabled=true
+https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt, policy=🎯 全球直连, tag=私有网络, enabled=true
+https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt, policy=🎯 全球直连, tag=应用规则, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Netflix/Netflix.yaml, policy=🍿 NETFLIX, tag=Netflix, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/XiaoHongShu/XiaoHongShu.list, policy=📱 小红书, tag=小红书, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/DouYin/DouYin.list, policy=🎵 抖音, tag=抖音, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/OpenAI/OpenAI.list, policy=🤖 GPT, tag=OpenAI, enabled=true
+https://gitea.ozoo.top/public/rule/raw/branch/main/bybit.txt, policy=🪙 交易所, tag=Bybit, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Binance/Binance.list, policy=🪙 交易所, tag=Binance, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/OKX/OKX.list, policy=🪙 交易所, tag=OKX, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/Gemini/Gemini.list, policy=🤖 Gemini, tag=Gemini, enabled=true
+https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Loon/WeChat/WeChat.list, policy=🎯 全球直连, tag=WeChat, enabled=true
+[Host]
+
+[Rewrite]
+
+[Script]
+
+[Plugin]
+https://kelee.one/Tool/Loon/Plugin/Block_HTTPDNS.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/BlockAdvertisers.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Remove_ads_by_keli.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/LuckinCoffee_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/12306_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Spotify_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Umetrip_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Weibo_remove_ads.plugin, enabled=true
+https://raw.githubusercontent.com/sooyaaabo/Loon/main/Plugin/iTunes.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/FC_Box_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Soul_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/RedPaper_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/NeteaseCloudMusic_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Bilibili_remove_ads.plugin, enabled=true
+https://github.com/NSRingo/GeoServices/releases/latest/download/iRingo.Maps.plugin, enabled=true
+https://github.com/NSRingo/GeoServices/releases/latest/download/iRingo.Location.plugin, enabled=true
+https://raw.githubusercontent.com/deezertidal/private/master/plugallery/WPS.plugin, enabled=true
+https://raw.githubusercontent.com/deezertidal/private/master/plugallery/doc.plugin, enabled=true
+https://raw.githubusercontent.com/deezertidal/private/master/plugallery/keep.plugin, enabled=true
+https://raw.githubusercontent.com/deezertidal/private/master/plugallery/meituxx.plugin, enabled=true
+https://raw.githubusercontent.com/deezertidal/private/master/plugallery/bdwk.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/JD_Price.plugin, enabled=true
+https://whatshub.top/plugin/CamScanner.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Amap_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/AutoHome_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/TikTok_redirect.plugin, policy=🚀 节点选择, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Google.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/DouBan_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/PinDuoDuo_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/FleaMarket_remove_ads.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/QQKSong_remove_ads.plugin, enabled=true
+https://raw.githubusercontent.com/ClydeTime/BiliBili/master/modules/BiliBiliDailyBonus.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/AppleWeatherEnhancer.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Cainiao_remove_ads.plugin, enabled=true
+https://raw.githubusercontent.com/app2smile/rules/master/plugin/tieba.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/LoonGallery.plugin, policy=兜底后备策略, enabled=true
+https://kelee.one/Tool/Loon/Plugin/QuickSearch.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Prevent_DNS_Leaks.plugin, policy=兜底后备策略, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Node_detection_tool.plugin, enabled=true
+https://kelee.one/Tool/Loon/Plugin/TestFlightRegionUnlock.plugin, policy=DIRECT, enabled=true
+https://kelee.one/Tool/Loon/Plugin/BoxJs.plugin, policy=兜底后备策略, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Sub-Store.plugin, policy=兜底后备策略, enabled=true
+https://kelee.one/Tool/Loon/Plugin/Script-Hub.plugin, policy=兜底后备策略, enabled=true
+
+[Mitm]
+ca-p12 = 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
+ca-passphrase = 467GTK03
+hostname =
+ca-p12=
+ca-passphrase=
+skip-server-cert-verify = false

rack_one.yaml

@@ -0,0 +1,298 @@
+port: 7890
+socks-port: 7891
+redir-port: 7892
+allow-lan: false
+mode: rule
+log-level: info
+external-controller: '0.0.0.0:9090'
+secret: ''
+proxies:
+  - name: "🇺🇸 RackNerd Hysteria2"
+    type: hysteria2
+    server: racknerdus.122881.xyz
+    port: 9849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: racknerdus.122881.xyz
+    skip-cert-verify: false
+    alpn:
+      - h3
+proxy-groups:
+  -
+    name: '🚀 节点选择'
+    type: select
+    proxies:
+      - DIRECT
+      - '🇺🇸 RackNerd Hysteria2'
+  -
+    name: '📻 TIKTOK'
+    type: select
+    proxies:
+      - DIRECT
+      - '🚀 节点选择'
+      - '🇺🇸 RackNerd Hysteria2'
+  -
+    name: 'Ⓜ️ 微软服务'
+    type: select
+    proxies:
+      - '🎯 全球直连'
+      - '🚀 节点选择'
+  -
+    name: '🍎 苹果服务'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  -
+    name: '📢 谷歌FCM'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+  -
+    name: '🎯 全球直连'
+    type: select
+    proxies:
+      - DIRECT
+  -
+    name: '🐟 漏网之鱼'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+
+rules:
+# TIKTOK
+ - RULE-SET,tiktok,📻 TIKTOK
+
+# 苹果服务
+ - GEOSITE,icloud,🍎 苹果服务
+ - GEOSITE,apple,🍎 苹果服务
+ 
+# 谷歌服务
+ - GEOSITE,google,🚀 节点选择
+ - GEOIP,google,🚀 节点选择,no-resolve
+
+# 微软服务
+ - RULE-SET,Microsoft,Ⓜ️ 微软服务
+
+# 最终规则
+ - RULE-SET,applications,🎯 全球直连
+ - DOMAIN,clash.razord.top,🎯 全球直连
+ - DOMAIN,yacd.haishan.me,🎯 全球直连
+ - RULE-SET,private,🎯 全球直连
+ - RULE-SET,direct,🎯 全球直连
+ - GEOIP,LAN,🎯 全球直连
+ - GEOIP,CN,🎯 全球直连
+ - GEOSITE,geolocation-cn,DIRECT
+ - RULE-SET,proxy,🚀 节点选择
+ - RULE-SET,reject,REJECT
+ - MATCH,🐟 漏网之鱼
+
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
+    path: ./ruleset/reject.yaml
+    interval: 86400
+
+  Microsoft:
+    type: http
+    behavior: domain
+    url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
+    path: ./ruleset/Microsoft.yaml
+    interval: 86400
+
+  proxy:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+
+  direct:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
+    path: ./ruleset/direct.yaml
+    interval: 86400
+
+  private:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
+    path: ./ruleset/private.yaml
+    interval: 86400
+
+  applications:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
+    path: ./ruleset/applications.yaml
+    interval: 86400
+  
+  tiktok:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/TikTok/TikTok.yaml"
+    path: ./ruleset/tiktok.yaml
+    interval: 86400
+    
+# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
+dns:
+  enable: true
+  listen: 0.0.0.0:53
+  ipv6: true # 当此选项为 false 时, AAAA 请求将返回空
+
+  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
+  # 仅填写 DNS 服务器的 IP 地址
+  default-nameserver:
+    - 114.114.114.114
+    - 223.5.5.5
+    - 8.8.8.8
+  enhanced-mode: fake-ip # 或 redir-host
+  fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
+  # use-hosts: true # 查询 hosts 并返回 IP 记录
+
+  # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
+  fake-ip-filter:
+    # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
+    - '*.lan'
+    - '*.localdomain'
+    - '*.example'
+    - '*.invalid'
+    - '*.localhost'
+    - '*.test'
+    - '*.local'
+    - '*.home.arpa'
+    - 'time.*.com'
+    - 'time.*.gov'
+    - 'time.*.edu.cn'
+    - 'time.*.apple.com'
+    - 'time1.*.com'
+    - 'time2.*.com'
+    - 'time3.*.com'
+    - 'time4.*.com'
+    - 'time5.*.com'
+    - 'time6.*.com'
+    - 'time7.*.com'
+    - 'ntp.*.com'
+    - 'ntp1.*.com'
+    - 'ntp2.*.com'
+    - 'ntp3.*.com'
+    - 'ntp4.*.com'
+    - 'ntp5.*.com'
+    - 'ntp6.*.com'
+    - 'ntp7.*.com'
+    - '*.time.edu.cn'
+    - '*.ntp.org.cn'
+    - '+.pool.ntp.org'
+    - 'time1.cloud.tencent.com'
+    - 'music.163.com'
+    - '*.music.163.com'
+    - '*.126.net'
+    - 'musicapi.taihe.com'
+    - 'music.taihe.com'
+    - 'songsearch.kugou.com'
+    - 'trackercdn.kugou.com'
+    - '*.kuwo.cn'
+    - 'api-jooxtt.sanook.com'
+    - 'api.joox.com'
+    - 'joox.com'
+    - 'y.qq.com'
+    - '*.y.qq.com'
+    - 'streamoc.music.tc.qq.com'
+    - 'mobileoc.music.tc.qq.com'
+    - 'isure.stream.qqmusic.qq.com'
+    - 'dl.stream.qqmusic.qq.com'
+    - 'aqqmusic.tc.qq.com'
+    - 'amobile.music.tc.qq.com'
+    - '*.xiami.com'
+    - '*.music.migu.cn'
+    - 'music.migu.cn'
+    - '*.msftconnecttest.com'
+    - '*.msftncsi.com'
+    - 'msftconnecttest.com'
+    - 'msftncsi.com'
+    - 'localhost.ptlogin2.qq.com'
+    - 'localhost.sec.qq.com'
+    - '+.srv.nintendo.net'
+    - '+.stun.playstation.net'
+    - 'xbox.*.microsoft.com'
+    - '*.*.xboxlive.com'
+    - '+.battlenet.com.cn'
+    - '+.wotgame.cn'
+    - '+.wggames.cn'
+    - '+.wowsgame.cn'
+    - '+.wargaming.net'
+    - 'proxy.golang.org'
+    - 'stun.*.*'
+    - 'stun.*.*.*'
+    - '+.stun.*.*'
+    - '+.stun.*.*.*'
+    - '+.stun.*.*.*.*'
+    - 'heartbeat.belkin.com'
+    - '*.linksys.com'
+    - '*.linksyssmartwifi.com'
+    - '*.router.asus.com'
+    - 'mesu.apple.com'
+    - 'swscan.apple.com'
+    - 'swquery.apple.com'
+    - 'swdownload.apple.com'
+    - 'swcdn.apple.com'
+    - 'swdist.apple.com'
+    - 'lens.l.google.com'
+    - 'stun.l.google.com'
+    - '+.nflxvideo.net'
+    - '*.square-enix.com'
+    - '*.finalfantasyxiv.com'
+    - '*.ffxiv.com'
+    - '*.mcdn.bilivideo.cn'
+    - WORKGROUP
+
+  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
+  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
+  # Clash 会使用最先获得的解析记录回复 DNS 请求
+  nameserver:
+    - https://doh.pub/dns-query
+    - https://dns.alidns.com/dns-query
+
+  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
+  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
+  # fallback:
+  #   - https://dns.google/dns-query
+
+  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
+  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
+  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
+  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
+  fallback-filter:
+    geoip: false
+    ipcidr:
+      - 0.0.0.0/8
+      - 10.0.0.0/8
+      - 100.64.0.0/10
+      - 127.0.0.0/8
+      - 169.254.0.0/16
+      - 172.16.0.0/12
+      - 192.0.0.0/24
+      - 192.0.2.0/24
+      - 192.88.99.0/24
+      - 192.168.0.0/16
+      - 198.18.0.0/15
+      - 198.51.100.0/24
+      - 203.0.113.0/24
+      - 224.0.0.0/4
+      - 240.0.0.0/4
+      - 255.255.255.255/32
+    domain:
+      - '+.google.com'
+      - '+.facebook.com'
+      - '+.youtube.com'
+      - '+.githubusercontent.com'
+      - '+.googlevideo.com'

sing-box.json

@@ -1,71 +0,0 @@
-{
-  "log": {
-    "level": "info",
-    "timestamp": true
-  },
-  "dns": {
-    "servers": [
-      {
-        "tag": "google",
-        "address": "8.8.8.8"
-      },
-      {
-        "tag": "local",
-        "address": "223.5.5.5",
-        "detour": "direct"
-      }
-    ],
-    "rules": [
-      {
-        "domain": ["cn"],
-        "server": "local"
-      }
-    ],
-    "strategy": "prefer_ipv4"
-  },
-  "inbounds": [
-    {
-      "type": "mixed",
-      "tag": "mixed-in",
-      "listen": "::",
-      "listen_port": 1080
-    }
-  ],
-  "outbounds": [
-    {
-      "type": "vless",
-      "tag": "vless-out",
-      "server": "racknerdus.122881.xyz",
-      "server_port": 443,
-      "uuid": "bf000d23-0752-40b4-affe-68f7707a9661",
-      "flow": "xtls-rprx-vision",
-      "tls": {
-        "enabled": true,
-        "server_name": "gamedownloads-rockstargames-com.akamaized.net",
-        "utls": {
-          "enabled": true,
-          "fingerprint": "chrome"
-        },
-        "reality": {
-          "enabled": true,
-          "public_key": "cVoqcDbBIWrRCrKn2gI_VHFTbyjMOj4ovDE2jKjvJgA",
-          "short_id": "b2c86d5449d237fa"
-        }
-      }
-    },
-    {
-      "type": "direct",
-      "tag": "direct"
-    }
-  ],
-  "route": {
-    "rules": [
-      {
-        "geoip": "cn",
-        "geosite": "cn",
-        "outbound": "direct"
-      }
-    ],
-    "final": "vless-out"
-  }
-} 

stash.yaml

@@ -0,0 +1,412 @@
+port: 7890
+socks-port: 7891
+redir-port: 7892
+allow-lan: false
+mode: rule
+log-level: silent
+external-controller: '0.0.0.0:9090'
+secret: ''
+proxies:
+  - name: "🇩🇪 xTom Hysteria2"
+    type: hysteria2
+    server: 194.169.54.78
+    port: 8449
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: germany.domainbill.site
+    skip-cert-verify:
+    alpn:
+      - h3
+    auth: gGbxvQIGYnsd8KNv0DzwzA==
+    fast-open: false
+    servername: germany.domainbill.site
+  - name: "🇯🇵 WAP Hysteria2"
+    type: hysteria2
+    server: 103.238.129.85
+    port: 8543
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: jpp.domainbill.site
+    skip-cert-verify:
+    alpn:
+      - h3
+    auth: gGbxvQIGYnsd8KNv0DzwzA==
+    fast-open: false
+    servername: jpp.domainbill.site
+  - name: "🇹🇼 GCP Hysteria2"
+    type: hysteria2
+    server: 35.189.163.21
+    port: 8649
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: gcpaaaa.812371.xyz
+    skip-cert-verify:
+    alpn:
+      - h3
+    auth: gGbxvQIGYnsd8KNv0DzwzA==
+    fast-open: false
+    servername: gcpaaaa.812371.xyz
+  - name: "🇸🇬 AWS Hysteria2"
+    type: hysteria2
+    server: 13.228.3.82
+    port: 8749
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: lightsailxjp.812371.xyz
+    skip-cert-verify:
+    alpn:
+      - h3
+    auth: gGbxvQIGYnsd8KNv0DzwzA==
+    fast-open: false
+    servername: lightsailxjp.812371.xyz
+  - name: "🇭🇰 WAP Hysteria2"
+    type: hysteria2
+    server: 89.213.156.3
+    port: 8849
+    password: gGbxvQIGYnsd8KNv0DzwzA==
+    sni: hkp.812371.xyz
+    skip-cert-verify:
+    alpn:
+      - h3
+    auth: gGbxvQIGYnsd8KNv0DzwzA==
+    fast-open: false
+    servername: hkp.812371.xyz
+
+proxy-groups:
+  - name: '🚀 节点选择'
+    type: select
+    proxies:
+      - DIRECT
+      - '🇯🇵 WAP Hysteria2'
+      - '🇩🇪 xTom Hysteria2'
+      - '🇸🇬 AWS Hysteria2'
+      - '🇹🇼 GCP Hysteria2'
+      - '🇭🇰 WAP Hysteria2'
+  - name: "💚 NTRRR自动切换"
+    type: fallback
+    url: "https://stream.ntrrr.top"
+    interval: 200
+    tolerance: 1000
+    proxies:
+      - 🇹🇼 GCP Hysteria2
+      - 🇭🇰 WAP Hysteria2
+      - 🇯🇵 WAP Hysteria2
+  - name: '🌍 国外媒体'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  - name: '📲 电报信息'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  - name: 'Ⓜ️ 微软服务'
+    type: select
+    proxies:
+      - '🎯 全球直连'
+      - '🚀 节点选择'
+  - name: '🍎 苹果服务'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  - name: '📢 谷歌FCM'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+  - name: '🎯 全球直连'
+    type: select
+    proxies:
+      - DIRECT
+      - '🚀 节点选择'
+  - name: '🛑 全球拦截'
+    type: select
+    proxies:
+      - REJECT
+      - DIRECT
+  - name: '🍃 应用净化'
+    type: select
+    proxies:
+      - REJECT
+      - DIRECT
+  - name: '🤖 GPT'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - 🇩🇪 xTom Hysteria2
+      - 🇯🇵 WAP Hysteria2
+      - 🇹🇼 GCP Hysteria2
+  - name: '🐟 漏网之鱼'
+    type: select
+    proxies:
+      - '🚀 节点选择'
+      - '🎯 全球直连'
+rules:
+  - RULE-SET,OpenAI,🤖 GPT
+  - GEOSITE,openai,🤖 GPT
+  - DOMAIN-SUFFIX,chatgpt.com,🤖 GPT
+  - DOMAIN,stream.ntrrr.top,💚 NTRRR自动切换
+  - DOMAIN,emby2.misakaf.org ,🚀 节点选择
+  - IP-CIDR,194.169.54.78/8,🎯 全球直连
+  - IP-CIDR,13.113.147.158/8,🎯 全球直连
+  - DOMAIN-SUFFIX,bsapce.cn,🎯 全球直连
+  - RULE-SET,applications,🎯 全球直连
+  - DOMAIN,clash.razord.top,🎯 全球直连
+  - DOMAIN,yacd.haishan.me,🎯 全球直连
+  - RULE-SET,private,🎯 全球直连
+  - RULE-SET,reject,🍃 应用净化
+  - RULE-SET,icloud,🍎 苹果服务
+  - RULE-SET,apple,🍎 苹果服务
+  - RULE-SET,google,📢 谷歌FCM
+  - RULE-SET,proxy,🚀 节点选择
+  - RULE-SET,direct,🎯 全球直连
+  - RULE-SET,lancidr,🎯 全球直连
+  - RULE-SET,cncidr,🎯 全球直连
+  - RULE-SET,telegramcidr,📲 电报信息
+  - GEOIP,LAN,🎯 全球直连
+  - GEOIP,CN,🎯 全球直连
+  - MATCH,🐟 漏网之鱼
+
+rule-providers:
+  reject:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
+    path: ./ruleset/reject.yaml
+    interval: 86400
+  icloud:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
+    path: ./ruleset/icloud.yaml
+    interval: 86400
+  apple:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
+    path: ./ruleset/apple.yaml
+    interval: 86400
+  google:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
+    path: ./ruleset/google.yaml
+    interval: 86400
+  proxy:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
+    path: ./ruleset/proxy.yaml
+    interval: 86400
+  direct:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
+    path: ./ruleset/direct.yaml
+    interval: 86400
+  private:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
+    path: ./ruleset/private.yaml
+    interval: 86400
+  gfw:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
+    path: ./ruleset/gfw.yaml
+    interval: 86400
+  tld-not-cn:
+    type: http
+    behavior: domain
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
+    path: ./ruleset/tld-not-cn.yaml
+    interval: 86400
+  telegramcidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
+    path: ./ruleset/telegramcidr.yaml
+    interval: 86400
+  cncidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
+    path: ./ruleset/cncidr.yaml
+    interval: 86400
+  lancidr:
+    type: http
+    behavior: ipcidr
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
+    path: ./ruleset/lancidr.yaml
+    interval: 86400
+  applications:
+    type: http
+    behavior: classical
+    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
+    path: ./ruleset/applications.yaml
+    interval: 86400
+  OpenAI:
+    type: http
+    behavior: classical
+    format: text
+    # 由于安全问题，此路径将限制只允许在 HomeDir（有启动参数 -d 配置） 中，
+    # 如果想存储到任意位置配置环境变量 SKIP_SAFE_PATH_CHECK=1
+    # path可为空(仅限clash.meta 1.15.0以上版本)
+    path: ./Rules/OpenAI.list
+    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/OpenAI/OpenAI.yaml"
+    interval: 86400
+# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
+dns:
+  enable: true
+  listen: 0.0.0.0:53
+  ipv6: true # 当此选项为 false 时, AAAA 请求将返回空
+  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
+  # 仅填写 DNS 服务器的 IP 地址
+  default-nameserver:
+    - 114.114.114.114
+    - 223.5.5.5
+    - 8.8.8.8
+  enhanced-mode: fake-ip # 或 redir-host
+  fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
+  # use-hosts: true # 查询 hosts 并返回 IP 记录
+
+  # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
+  fake-ip-filter:
+    # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
+    - '*.lan'
+    - '*.localdomain'
+    - '*.example'
+    - '*.invalid'
+    - '*.localhost'
+    - '*.test'
+    - '*.local'
+    - '*.home.arpa'
+    - 'time.*.com'
+    - 'time.*.gov'
+    - 'time.*.edu.cn'
+    - 'time.*.apple.com'
+    - 'time1.*.com'
+    - 'time2.*.com'
+    - 'time3.*.com'
+    - 'time4.*.com'
+    - 'time5.*.com'
+    - 'time6.*.com'
+    - 'time7.*.com'
+    - 'ntp.*.com'
+    - 'ntp1.*.com'
+    - 'ntp2.*.com'
+    - 'ntp3.*.com'
+    - 'ntp4.*.com'
+    - 'ntp5.*.com'
+    - 'ntp6.*.com'
+    - 'ntp7.*.com'
+    - '*.time.edu.cn'
+    - '*.ntp.org.cn'
+    - '+.pool.ntp.org'
+    - 'time1.cloud.tencent.com'
+    - 'music.163.com'
+    - '*.music.163.com'
+    - '*.126.net'
+    - 'musicapi.taihe.com'
+    - 'music.taihe.com'
+    - 'songsearch.kugou.com'
+    - 'trackercdn.kugou.com'
+    - '*.kuwo.cn'
+    - 'api-jooxtt.sanook.com'
+    - 'api.joox.com'
+    - 'joox.com'
+    - 'y.qq.com'
+    - '*.y.qq.com'
+    - 'streamoc.music.tc.qq.com'
+    - 'mobileoc.music.tc.qq.com'
+    - 'isure.stream.qqmusic.qq.com'
+    - 'dl.stream.qqmusic.qq.com'
+    - 'aqqmusic.tc.qq.com'
+    - 'amobile.music.tc.qq.com'
+    - '*.xiami.com'
+    - '*.music.migu.cn'
+    - 'music.migu.cn'
+    - '*.msftconnecttest.com'
+    - '*.msftncsi.com'
+    - 'msftconnecttest.com'
+    - 'msftncsi.com'
+    - 'localhost.ptlogin2.qq.com'
+    - 'localhost.sec.qq.com'
+    - '+.srv.nintendo.net'
+    - '+.stun.playstation.net'
+    - 'xbox.*.microsoft.com'
+    - '*.*.xboxlive.com'
+    - '+.battlenet.com.cn'
+    - '+.wotgame.cn'
+    - '+.wggames.cn'
+    - '+.wowsgame.cn'
+    - '+.wargaming.net'
+    - 'proxy.golang.org'
+    - 'stun.*.*'
+    - 'stun.*.*.*'
+    - '+.stun.*.*'
+    - '+.stun.*.*.*'
+    - '+.stun.*.*.*.*'
+    - 'heartbeat.belkin.com'
+    - '*.linksys.com'
+    - '*.linksyssmartwifi.com'
+    - '*.router.asus.com'
+    - 'mesu.apple.com'
+    - 'swscan.apple.com'
+    - 'swquery.apple.com'
+    - 'swdownload.apple.com'
+    - 'swcdn.apple.com'
+    - 'swdist.apple.com'
+    - 'lens.l.google.com'
+    - 'stun.l.google.com'
+    - '+.nflxvideo.net'
+    - '*.square-enix.com'
+    - '*.finalfantasyxiv.com'
+    - '*.ffxiv.com'
+    - '*.mcdn.bilivideo.cn'
+    - WORKGROUP
+  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
+  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
+  # Clash 会使用最先获得的解析记录回复 DNS 请求
+  nameserver:
+    - https://doh.pub/dns-query
+    - https://dns.alidns.com/dns-query
+  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
+  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
+  # fallback:
+  #   - https://dns.google/dns-query
+
+  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
+  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
+  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
+  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
+  #
+  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
+  fallback-filter:
+    geoip: false
+    ipcidr:
+      - 0.0.0.0/8
+      - 10.0.0.0/8
+      - 100.64.0.0/10
+      - 127.0.0.0/8
+      - 169.254.0.0/16
+      - 172.16.0.0/12
+      - 192.0.0.0/24
+      - 192.0.2.0/24
+      - 192.88.99.0/24
+      - 192.168.0.0/16
+      - 198.18.0.0/15
+      - 198.51.100.0/24
+      - 203.0.113.0/24
+      - 224.0.0.0/4
+      - 240.0.0.0/4
+      - 255.255.255.255/32
+    domain:
+      - '+.google.com'
+      - '+.facebook.com'
+      - '+.youtube.com'
+      - '+.githubusercontent.com'
+      - '+.googlevideo.com'