clash_and_stash/clash.yaml

port: 7890
socks-port: 7891
redir-port: 7892
allow-lan: false
mode: rule
log-level: info
external-controller: '0.0.0.0:9090'
secret: ''
proxies:
  - name: "🇯🇵 WAP Hysteria2"
    type: hysteria2
    server: 103.238.129.85
    port: 8543
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: jpp.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇩🇪 NETCUP Hysteria2"
    type: hysteria2
    server: netcuphyw.812371.xyz
    port: 8849
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: netcuphyw.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇯🇵 KXY jp v6"
    type: hysteria2
    server: kxyjp.812371.xyz
    port: 8949
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: kxyjp.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇭🇰 KXY hk v6"
    type: hysteria2
    server: hxyhk.812371.xyz
    port: 9049
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: hxyhk.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇯🇵 soso家宽 Hysteria2 v6"
    type: hysteria2
    server: sososohy.812371.xyz
    port: 9149
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: sososohy.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇭🇰 阿里云 Hysteria2"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 9249
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: aliyunhk.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇸🇬 BV Hysteria2"
    type: hysteria2
    server: bvsgvv.812371.xyz
    port: 9449
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: bvsgvv.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇭🇰 Hytron Hysteria2"
    type: hysteria2
    server: hytronhkk.812371.xyz
    port: 9649
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: hytronhkk.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇮🇩 阿里印尼 Hysteria2"
    type: hysteria2
    server: yajiada.812371.xyz
    port: 9749
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: yajiada.812371.xyz
    skip-cert-verify: false
    alpn:
      - h3
  - name: "🇩🇪 HK转NC Hysteria2"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30002
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: netcuphy.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇭🇰 KXY hk v6转发"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30004
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: hxyhk.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇯🇵 KXY jp v6转发"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30005
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: kxyjp.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇸🇬 HK转SG Hysteria2"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30006
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: bvsgvv.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇭🇰 HK转hytron Hysteria2"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30009
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: hytronhkk.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇮🇩 HK转印尼 Hysteria2"
    type: hysteria2
    server: aliyunhk.812371.xyz
    port: 30010
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: yajiada.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇩🇪 9929转NC Hysteria2"
    type: hysteria2
    server: cu21.kuxueyun.com
    port: 13121
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: netcuphy.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇭🇰 9929转hytron Hysteria2"
    type: hysteria2
    server: cu21.kuxueyun.com
    port: 13122
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: hytronhkk.812371.xyz
    skip-cert-verify: true
    alpn:
      - h3
  - name: "🇺🇸 RackNerd Hysteria2"
    type: hysteria2
    server: racknerdus.122881.xyz
    port: 9849
    password: gGbxvQIGYnsd8KNv0DzwzA==
    sni: racknerdus.122881.xyz
    skip-cert-verify: false
    alpn:
      - h3
proxy-groups:
  -
    name: '🚀 节点选择'
    type: select
    proxies:
      - DIRECT
      - '🇯🇵 WAP Hysteria2'
      - '🇯🇵 KXY jp v6'
      - '🇯🇵 KXY jp v6转发'
      - '🇭🇰 阿里云 Hysteria2'
      - '🇭🇰 KXY hk v6转发'
      - '🇭🇰 Hytron Hysteria2'
      - '🇭🇰 HK转hytron Hysteria2'
      - '🇭🇰 9929转hytron Hysteria2'
      - '🇩🇪 NETCUP Hysteria2'
      - '🇩🇪 HK转NC Hysteria2'
      - '🇩🇪 9929转NC Hysteria2'
      - '🇸🇬 BV Hysteria2'
      - '🇸🇬 HK转SG Hysteria2'
      - '🇮🇩 HK转印尼 Hysteria2'
      - '🇺🇸 RackNerd Hysteria2'
  -
    name: 'Ⓜ️ 微软服务'
    type: select
    proxies:
      - '🎯 全球直连'
      - '🚀 节点选择'
  -
    name: '🍎 苹果服务'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🎯 全球直连'
  -
    name: '📢 谷歌FCM'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🎯 全球直连'
  -
    name: '🎯 全球直连'
    type: select
    proxies:
      - DIRECT
      - '🚀 节点选择'
  -
    name: '📽︎ PT 站点'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🇯🇵 WAP Hysteria2'
      - '🇩🇪 9929转NC Hysteria2'
  -
    name: '🐟 漏网之鱼'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🎯 全球直连'
  -
    name: '🤖 GPT'
    type: select
    proxies:
      - 🇯🇵 WAP Hysteria2
      - '🚀 节点选择'
  -
    name: '🍿 NETFLIX'
    type: select
    proxies:
      - '🇸🇬 HK转SG Hysteria2'
      - '🇯🇵 KXY jp v6'
      - '🇭🇰 9929转hytron Hysteria2'
      - '🚀 节点选择'
  -
    name: '🗄 VPS'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🇩🇪 9929转NC Hysteria2'
      - '🇩🇪 HK转NC Hysteria2'
      - '🇩🇪 NETCUP Hysteria2'
  -
    name: '🎮 Steam'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🇩🇪 9929转NC Hysteria2'
      - '🇩🇪 HK转NC Hysteria2'
      - '🇩🇪 NETCUP Hysteria2'
  -
    name: '🐧 Linux.do'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🇩🇪 9929转NC Hysteria2'
      - '🇩🇪 HK转NC Hysteria2'
      - '🇩🇪 NETCUP Hysteria2'
  -
    name: '🪙 OKX'
    type: select
    proxies:
      - '🚀 节点选择'
      - '🇩🇪 9929转NC Hysteria2'
      - '🇩🇪 HK转NC Hysteria2'
      - '🇩🇪 NETCUP Hysteria2'
  -
    name: '💚 NTRRR自动切换'
    type: select
    proxies:
      - 🇭🇰 阿里云 Hysteria2
      - 🇯🇵 WAP Hysteria2
      - 🇯🇵 KXY jp v6
      - 🇭🇰 Hytron Hysteria2
      - 🇭🇰 KXY hk v6
      - 🇯🇵 KXY jp v6转发
#  - name: "💚 NTRRR自动切换"
#    type: fallback
#    url: "https://stream.ntrrr.top"
#    interval: 200
#    tolerance: 1000
#    proxies:
#      - 🇭🇰 阿里云 Hysteria2
#      - 🇯🇵 WAP Hysteria2
#      - 🇯🇵 KXY jp v6
#      - 🇭🇰 Hytron Hysteria2
#      - 🇭🇰 KXY hk v6
#      - 🇯🇵 KXY jp v6转发
rules:
# PROXY
 - DOMAIN,www.nodeseek.com,🚀 节点选择
 - DOMAIN-SUFFIX,right.com.cn,🚀 节点选择
 - DOMAIN-KEYWORD,instagram,🚀 节点选择
 - DOMAIN-KEYWORD,pornhub,🚀 节点选择

# OKX欧易
 - DOMAIN-SUFFIX,okex.com,🪙 OKX
 - DOMAIN-SUFFIX,oklink.com,🪙 OKX
 - DOMAIN-SUFFIX,okx.com,🪙 OKX

# Steam
 - DOMAIN-SUFFIX,steam-chat.com,🎮 Steam
 - DOMAIN-SUFFIX,steamcommunity.com,🎮 Steam
 - DOMAIN-SUFFIX,steamdb.info,🎮 Steam
 - DOMAIN-SUFFIX,steampowered.com,🎮 Steam
 - DOMAIN-SUFFIX,steamstatic.com,DIRECT
 - DOMAIN-SUFFIX,steamserver.net,DIRECT

# OpenAI
 - GEOSITE,openai,🤖 GPT
 - DOMAIN-SUFFIX,chatgpt.com,🤖 GPT

# Claude
 - DOMAIN,cdn.usefathom.com,🤖 GPT
 - DOMAIN-SUFFIX,anthropic.com,🤖 GPT
 - DOMAIN-SUFFIX,claude.ai,🤖 GPT

# Deepseek
 - DOMAIN-SUFFIX,deepseek.com,🤖 GPT

# NETFLIX
 - RULE-SET,netflix,🍿 NETFLIX

# OZOO.TOP 

#linux.do
 - DOMAIN-KEYWORD,linux.do,🐧 Linux.do

# 强制代理
 - DOMAIN,stream.ntrrr.top,💚 NTRRR自动切换

 - DOMAIN-SUFFIX,ozoo.top,🗄 VPS

 - DOMAIN-KEYWORD,trading,🇸🇬 HK转SG Hysteria2

 - DOMAIN-KEYWORD,oracle,🇭🇰 HK转hytron Hysteria2
 - DOMAIN-KEYWORD,sososo,🇭🇰 HK转hytron Hysteria2

 - DOMAIN-KEYWORD,music.youtube.com,🇭🇰 阿里云 Hysteria2

 - DOMAIN-KEYWORD,133881.xyz,🇯🇵 WAP Hysteria2
 - DOMAIN-KEYWORD,cloudflare,🇯🇵 WAP Hysteria2

# PT站
 - DOMAIN-KEYWORD,hhanclub,📽︎ PT 站点
 - DOMAIN-KEYWORD,club.hares,📽︎ PT 站点
 - DOMAIN-KEYWORD,piggo.me,📽︎ PT 站点
 - DOMAIN-KEYWORD,leaves.red,📽︎ PT 站点
 

# Direct直连
 - IP-CIDR,13.113.147.158/8,🎯 全球直连
 - DOMAIN-SUFFIX,bsapce.cn,🎯 全球直连
 - DOMAIN-KEYWORD,yxvm.com,🎯 全球直连
 #- DOMAIN-KEYWORD,1password,🎯 全球直连

# 苹果服务
 - GEOSITE,icloud,🍎 苹果服务
 - GEOSITE,apple,🍎 苹果服务
 
# 谷歌服务
 - GEOSITE,google,🚀 节点选择
 - GEOIP,google,🚀 节点选择,no-resolve

# 微软服务
 - RULE-SET,Microsoft,Ⓜ️ 微软服务

# 最终规则
 - RULE-SET,applications,🎯 全球直连
 - DOMAIN,clash.razord.top,🎯 全球直连
 - DOMAIN,yacd.haishan.me,🎯 全球直连
 - RULE-SET,private,🎯 全球直连
 - RULE-SET,direct,🎯 全球直连
 - GEOIP,LAN,🎯 全球直连
 - GEOIP,CN,🎯 全球直连
 - GEOSITE,geolocation-cn,DIRECT
 - RULE-SET,proxy,🚀 节点选择
 - RULE-SET,reject,REJECT
 - MATCH,🐟 漏网之鱼

rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml
    interval: 86400

  Microsoft:
    type: http
    behavior: domain
    url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
    path: ./ruleset/Microsoft.yaml
    interval: 86400

  proxy:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
    path: ./ruleset/proxy.yaml
    interval: 86400

  direct:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
    path: ./ruleset/direct.yaml
    interval: 86400

  private:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    path: ./ruleset/private.yaml
    interval: 86400

  applications:
    type: http
    behavior: classical
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    path: ./ruleset/applications.yaml
    interval: 86400
  
  netflix:
    type: http
    behavior: classical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Netflix/Netflix.yaml"
    path: ./ruleset/netflix.yaml
    interval: 86400

# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
dns:
  enable: true
  listen: 0.0.0.0:53
  ipv6: true # 当此选项为 false 时, AAAA 请求将返回空

  # 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
  # 仅填写 DNS 服务器的 IP 地址
  default-nameserver:
    - 114.114.114.114
    - 223.5.5.5
    - 8.8.8.8
  enhanced-mode: fake-ip # 或 redir-host
  fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
  # use-hosts: true # 查询 hosts 并返回 IP 记录

  # 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
  fake-ip-filter:
    # 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
    - '*.lan'
    - '*.localdomain'
    - '*.example'
    - '*.invalid'
    - '*.localhost'
    - '*.test'
    - '*.local'
    - '*.home.arpa'
    - 'time.*.com'
    - 'time.*.gov'
    - 'time.*.edu.cn'
    - 'time.*.apple.com'
    - 'time1.*.com'
    - 'time2.*.com'
    - 'time3.*.com'
    - 'time4.*.com'
    - 'time5.*.com'
    - 'time6.*.com'
    - 'time7.*.com'
    - 'ntp.*.com'
    - 'ntp1.*.com'
    - 'ntp2.*.com'
    - 'ntp3.*.com'
    - 'ntp4.*.com'
    - 'ntp5.*.com'
    - 'ntp6.*.com'
    - 'ntp7.*.com'
    - '*.time.edu.cn'
    - '*.ntp.org.cn'
    - '+.pool.ntp.org'
    - 'time1.cloud.tencent.com'
    - 'music.163.com'
    - '*.music.163.com'
    - '*.126.net'
    - 'musicapi.taihe.com'
    - 'music.taihe.com'
    - 'songsearch.kugou.com'
    - 'trackercdn.kugou.com'
    - '*.kuwo.cn'
    - 'api-jooxtt.sanook.com'
    - 'api.joox.com'
    - 'joox.com'
    - 'y.qq.com'
    - '*.y.qq.com'
    - 'streamoc.music.tc.qq.com'
    - 'mobileoc.music.tc.qq.com'
    - 'isure.stream.qqmusic.qq.com'
    - 'dl.stream.qqmusic.qq.com'
    - 'aqqmusic.tc.qq.com'
    - 'amobile.music.tc.qq.com'
    - '*.xiami.com'
    - '*.music.migu.cn'
    - 'music.migu.cn'
    - '*.msftconnecttest.com'
    - '*.msftncsi.com'
    - 'msftconnecttest.com'
    - 'msftncsi.com'
    - 'localhost.ptlogin2.qq.com'
    - 'localhost.sec.qq.com'
    - '+.srv.nintendo.net'
    - '+.stun.playstation.net'
    - 'xbox.*.microsoft.com'
    - '*.*.xboxlive.com'
    - '+.battlenet.com.cn'
    - '+.wotgame.cn'
    - '+.wggames.cn'
    - '+.wowsgame.cn'
    - '+.wargaming.net'
    - 'proxy.golang.org'
    - 'stun.*.*'
    - 'stun.*.*.*'
    - '+.stun.*.*'
    - '+.stun.*.*.*'
    - '+.stun.*.*.*.*'
    - 'heartbeat.belkin.com'
    - '*.linksys.com'
    - '*.linksyssmartwifi.com'
    - '*.router.asus.com'
    - 'mesu.apple.com'
    - 'swscan.apple.com'
    - 'swquery.apple.com'
    - 'swdownload.apple.com'
    - 'swcdn.apple.com'
    - 'swdist.apple.com'
    - 'lens.l.google.com'
    - 'stun.l.google.com'
    - '+.nflxvideo.net'
    - '*.square-enix.com'
    - '*.finalfantasyxiv.com'
    - '*.ffxiv.com'
    - '*.mcdn.bilivideo.cn'
    - WORKGROUP

  # 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
  # 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
  # Clash 会使用最先获得的解析记录回复 DNS 请求
  nameserver:
    - https://doh.pub/dns-query
    - https://dns.alidns.com/dns-query

  # 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
  # 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
  # fallback:
  #   - https://dns.google/dns-query

  # 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
  # Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
  #
  # 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
  # Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
  #
  # 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
  # Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
  #
  # 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
  fallback-filter:
    geoip: false
    ipcidr:
      - 0.0.0.0/8
      - 10.0.0.0/8
      - 100.64.0.0/10
      - 127.0.0.0/8
      - 169.254.0.0/16
      - 172.16.0.0/12
      - 192.0.0.0/24
      - 192.0.2.0/24
      - 192.88.99.0/24
      - 192.168.0.0/16
      - 198.18.0.0/15
      - 198.51.100.0/24
      - 203.0.113.0/24
      - 224.0.0.0/4
      - 240.0.0.0/4
      - 255.255.255.255/32
    domain:
      - '+.google.com'
      - '+.facebook.com'
      - '+.youtube.com'
      - '+.githubusercontent.com'
      - '+.googlevideo.com'