320 lines
8.4 KiB
YAML
320 lines
8.4 KiB
YAML
port: 7890
|
||
socks-port: 7891
|
||
redir-port: 7892
|
||
allow-lan: false
|
||
mode: rule
|
||
log-level: info
|
||
external-controller: '0.0.0.0:9090'
|
||
secret: ''
|
||
proxies:
|
||
- name: "🇭🇰 阿里云 Hysteria2"
|
||
type: hysteria2
|
||
server: aliyunhk.812371.xyz
|
||
port: 9249
|
||
password: gGbxvQIGYnsd8KNv0DzwzA==
|
||
sni: aliyunhk.812371.xyz
|
||
skip-cert-verify: false
|
||
alpn:
|
||
- h3
|
||
- name: "🇺🇸 RackNerd Hysteria2"
|
||
type: hysteria2
|
||
server: racknerdus.122881.xyz
|
||
port: 9849
|
||
password: gGbxvQIGYnsd8KNv0DzwzA==
|
||
sni: racknerdus.122881.xyz
|
||
skip-cert-verify: false
|
||
alpn:
|
||
- h3
|
||
- name: "🇩🇪 NETCUP Hysteria2"
|
||
type: hysteria2
|
||
server: netcuphyw.812371.xyz
|
||
port: 8849
|
||
password: gGbxvQIGYnsd8KNv0DzwzA==
|
||
sni: netcuphyw.812371.xyz
|
||
skip-cert-verify: false
|
||
alpn:
|
||
- h3
|
||
proxy-groups:
|
||
-
|
||
name: '🚀 节点选择'
|
||
type: select
|
||
proxies:
|
||
- DIRECT
|
||
- '🇭🇰 阿里云 Hysteria2'
|
||
- '🇺🇸 RackNerd Hysteria2'
|
||
-
|
||
name: '📻 TIKTOK'
|
||
type: select
|
||
proxies:
|
||
- DIRECT
|
||
- '🚀 节点选择'
|
||
- '🇺🇸 RackNerd Hysteria2'
|
||
- '🇩🇪 NETCUP Hysteria2'
|
||
-
|
||
name: 'Ⓜ️ 微软服务'
|
||
type: select
|
||
proxies:
|
||
- '🎯 全球直连'
|
||
- '🚀 节点选择'
|
||
-
|
||
name: '🍎 苹果服务'
|
||
type: select
|
||
proxies:
|
||
- '🚀 节点选择'
|
||
- '🎯 全球直连'
|
||
-
|
||
name: '📢 谷歌FCM'
|
||
type: select
|
||
proxies:
|
||
- '🚀 节点选择'
|
||
- '🎯 全球直连'
|
||
-
|
||
name: '🎯 全球直连'
|
||
type: select
|
||
proxies:
|
||
- DIRECT
|
||
- '🚀 节点选择'
|
||
-
|
||
name: '🐟 漏网之鱼'
|
||
type: select
|
||
proxies:
|
||
- '🚀 节点选择'
|
||
- '🎯 全球直连'
|
||
|
||
rules:
|
||
# TIKTOK
|
||
- RULE-SET,tiktok,📻 TIKTOK
|
||
|
||
# 苹果服务
|
||
- GEOSITE,icloud,🍎 苹果服务
|
||
- GEOSITE,apple,🍎 苹果服务
|
||
|
||
# 谷歌服务
|
||
- GEOSITE,google,🚀 节点选择
|
||
- GEOIP,google,🚀 节点选择,no-resolve
|
||
|
||
# 微软服务
|
||
- RULE-SET,Microsoft,Ⓜ️ 微软服务
|
||
|
||
# 最终规则
|
||
- RULE-SET,applications,🎯 全球直连
|
||
- DOMAIN,clash.razord.top,🎯 全球直连
|
||
- DOMAIN,yacd.haishan.me,🎯 全球直连
|
||
- RULE-SET,private,🎯 全球直连
|
||
- RULE-SET,direct,🎯 全球直连
|
||
- GEOIP,LAN,🎯 全球直连
|
||
- GEOIP,CN,🎯 全球直连
|
||
- GEOSITE,geolocation-cn,DIRECT
|
||
- RULE-SET,proxy,🚀 节点选择
|
||
- RULE-SET,reject,REJECT
|
||
- MATCH,🐟 漏网之鱼
|
||
|
||
rule-providers:
|
||
reject:
|
||
type: http
|
||
behavior: domain
|
||
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
|
||
path: ./ruleset/reject.yaml
|
||
interval: 86400
|
||
|
||
Microsoft:
|
||
type: http
|
||
behavior: domain
|
||
url: "https://gitea.ozoo.top/public/rule/src/commit/13a014bdc2d40eca741dee407b99e32b800215ad/Microsoft.yaml"
|
||
path: ./ruleset/Microsoft.yaml
|
||
interval: 86400
|
||
|
||
proxy:
|
||
type: http
|
||
behavior: domain
|
||
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
|
||
path: ./ruleset/proxy.yaml
|
||
interval: 86400
|
||
|
||
direct:
|
||
type: http
|
||
behavior: domain
|
||
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
|
||
path: ./ruleset/direct.yaml
|
||
interval: 86400
|
||
|
||
private:
|
||
type: http
|
||
behavior: domain
|
||
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
|
||
path: ./ruleset/private.yaml
|
||
interval: 86400
|
||
|
||
applications:
|
||
type: http
|
||
behavior: classical
|
||
url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
|
||
path: ./ruleset/applications.yaml
|
||
interval: 86400
|
||
|
||
tiktok:
|
||
type: http
|
||
behavior: classical
|
||
url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/TikTok/TikTok.yaml"
|
||
path: ./ruleset/tiktok.yaml
|
||
interval: 86400
|
||
|
||
# DNS 服务器配置(可选；若不配置，程序内置的 DNS 服务会被关闭)
|
||
dns:
|
||
enable: true
|
||
listen: 0.0.0.0:53
|
||
ipv6: true # 当此选项为 false 时, AAAA 请求将返回空
|
||
|
||
# 以下填写的 DNS 服务器将会被用来解析 DNS 服务的域名
|
||
# 仅填写 DNS 服务器的 IP 地址
|
||
default-nameserver:
|
||
- 114.114.114.114
|
||
- 223.5.5.5
|
||
- 8.8.8.8
|
||
enhanced-mode: fake-ip # 或 redir-host
|
||
fake-ip-range: 198.18.0.1/16 # Fake IP 地址池 (CIDR 形式)
|
||
# use-hosts: true # 查询 hosts 并返回 IP 记录
|
||
|
||
# 在以下列表的域名将不会被解析为 fake ip，这些域名相关的解析请求将会返回它们真实的 IP 地址
|
||
fake-ip-filter:
|
||
# 以下域名列表参考自 vernesong/OpenClash 项目，并由 Hackl0us 整理补充
|
||
- '*.lan'
|
||
- '*.localdomain'
|
||
- '*.example'
|
||
- '*.invalid'
|
||
- '*.localhost'
|
||
- '*.test'
|
||
- '*.local'
|
||
- '*.home.arpa'
|
||
- 'time.*.com'
|
||
- 'time.*.gov'
|
||
- 'time.*.edu.cn'
|
||
- 'time.*.apple.com'
|
||
- 'time1.*.com'
|
||
- 'time2.*.com'
|
||
- 'time3.*.com'
|
||
- 'time4.*.com'
|
||
- 'time5.*.com'
|
||
- 'time6.*.com'
|
||
- 'time7.*.com'
|
||
- 'ntp.*.com'
|
||
- 'ntp1.*.com'
|
||
- 'ntp2.*.com'
|
||
- 'ntp3.*.com'
|
||
- 'ntp4.*.com'
|
||
- 'ntp5.*.com'
|
||
- 'ntp6.*.com'
|
||
- 'ntp7.*.com'
|
||
- '*.time.edu.cn'
|
||
- '*.ntp.org.cn'
|
||
- '+.pool.ntp.org'
|
||
- 'time1.cloud.tencent.com'
|
||
- 'music.163.com'
|
||
- '*.music.163.com'
|
||
- '*.126.net'
|
||
- 'musicapi.taihe.com'
|
||
- 'music.taihe.com'
|
||
- 'songsearch.kugou.com'
|
||
- 'trackercdn.kugou.com'
|
||
- '*.kuwo.cn'
|
||
- 'api-jooxtt.sanook.com'
|
||
- 'api.joox.com'
|
||
- 'joox.com'
|
||
- 'y.qq.com'
|
||
- '*.y.qq.com'
|
||
- 'streamoc.music.tc.qq.com'
|
||
- 'mobileoc.music.tc.qq.com'
|
||
- 'isure.stream.qqmusic.qq.com'
|
||
- 'dl.stream.qqmusic.qq.com'
|
||
- 'aqqmusic.tc.qq.com'
|
||
- 'amobile.music.tc.qq.com'
|
||
- '*.xiami.com'
|
||
- '*.music.migu.cn'
|
||
- 'music.migu.cn'
|
||
- '*.msftconnecttest.com'
|
||
- '*.msftncsi.com'
|
||
- 'msftconnecttest.com'
|
||
- 'msftncsi.com'
|
||
- 'localhost.ptlogin2.qq.com'
|
||
- 'localhost.sec.qq.com'
|
||
- '+.srv.nintendo.net'
|
||
- '+.stun.playstation.net'
|
||
- 'xbox.*.microsoft.com'
|
||
- '*.*.xboxlive.com'
|
||
- '+.battlenet.com.cn'
|
||
- '+.wotgame.cn'
|
||
- '+.wggames.cn'
|
||
- '+.wowsgame.cn'
|
||
- '+.wargaming.net'
|
||
- 'proxy.golang.org'
|
||
- 'stun.*.*'
|
||
- 'stun.*.*.*'
|
||
- '+.stun.*.*'
|
||
- '+.stun.*.*.*'
|
||
- '+.stun.*.*.*.*'
|
||
- 'heartbeat.belkin.com'
|
||
- '*.linksys.com'
|
||
- '*.linksyssmartwifi.com'
|
||
- '*.router.asus.com'
|
||
- 'mesu.apple.com'
|
||
- 'swscan.apple.com'
|
||
- 'swquery.apple.com'
|
||
- 'swdownload.apple.com'
|
||
- 'swcdn.apple.com'
|
||
- 'swdist.apple.com'
|
||
- 'lens.l.google.com'
|
||
- 'stun.l.google.com'
|
||
- '+.nflxvideo.net'
|
||
- '*.square-enix.com'
|
||
- '*.finalfantasyxiv.com'
|
||
- '*.ffxiv.com'
|
||
- '*.mcdn.bilivideo.cn'
|
||
- WORKGROUP
|
||
|
||
# 支持 UDP / TCP / DoT / DoH 协议的 DNS 服务，可以指明具体的连接端口号。
|
||
# 所有 DNS 请求将会直接发送到服务器，不经过任何代理。
|
||
# Clash 会使用最先获得的解析记录回复 DNS 请求
|
||
nameserver:
|
||
- https://doh.pub/dns-query
|
||
- https://dns.alidns.com/dns-query
|
||
|
||
# 当 fallback 参数被配置时, DNS 请求将同时发送至上方 nameserver 列表和下方 fallback 列表中配置的所有 DNS 服务器.
|
||
# 当解析得到的 IP 地址的地理位置不是 CN 时，clash 将会选用 fallback 中 DNS 服务器的解析结果。
|
||
# fallback:
|
||
# - https://dns.google/dns-query
|
||
|
||
# 如果使用 nameserver 列表中的服务器解析的 IP 地址在下方列表中的子网中，则它们被认为是无效的，
|
||
# Clash 会选用 fallback 列表中配置 DNS 服务器解析得到的结果。
|
||
#
|
||
# 当 fallback-filter.geoip 为 true 且 IP 地址的地理位置为 CN 时，
|
||
# Clash 会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
|
||
#
|
||
# 当 fallback-filter.geoip 为 false, 如果解析结果不在 fallback-filter.ipcidr 范围内，
|
||
# Clash 总会选用 nameserver 列表中配置 DNS 服务器解析得到的结果。
|
||
#
|
||
# 采取以上逻辑进行域名解析是为了对抗 DNS 投毒攻击。
|
||
fallback-filter:
|
||
geoip: false
|
||
ipcidr:
|
||
- 0.0.0.0/8
|
||
- 10.0.0.0/8
|
||
- 100.64.0.0/10
|
||
- 127.0.0.0/8
|
||
- 169.254.0.0/16
|
||
- 172.16.0.0/12
|
||
- 192.0.0.0/24
|
||
- 192.0.2.0/24
|
||
- 192.88.99.0/24
|
||
- 192.168.0.0/16
|
||
- 198.18.0.0/15
|
||
- 198.51.100.0/24
|
||
- 203.0.113.0/24
|
||
- 224.0.0.0/4
|
||
- 240.0.0.0/4
|
||
- 255.255.255.255/32
|
||
domain:
|
||
- '+.google.com'
|
||
- '+.facebook.com'
|
||
- '+.youtube.com'
|
||
- '+.githubusercontent.com'
|
||
- '+.googlevideo.com' |