port: 7890
socks-port: 7891
allow-lan: true
ipv6: true
bind-address: "*"
mode: Rule
log-level: info
external-controller: 127.0.0.1:9090
tcp-concurrent: true
find-process-mode: strict
geodata-mode: true #【Meta专属】使用geoip.dat数据库(默认：false使用mmdb数据库)
geodata-loader: standard
geo-auto-update: true
geo-update-interval: 24
geox-url:
  geoip: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat"
  geosite: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat"
  mmdb: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.metadb"
  asn: "https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb"
experimental:
  ignore-resolve-fail: true
dns:
  enable: true
  listen: 1053
  ipv6: false
  default-nameserver:
    - 1.1.1.1
    - 8.8.8.8
  nameserver:
    - https://1.1.1.1/dns-query    # Cloudflare（支持 H3）
    - https://dns.google/dns-query # Google（支持 H3）
    - 1.1.1.1                      # Cloudflare Public DNS (UDP)
    - 8.8.8.8                      # Google Public DNS (UDP)
  proxy-server-nameserver:
    - https://doh.pub/dns-query
    - 223.5.5.5
  nameserver-policy:
    "geosite:cn,private": # 国内域名和私有域名强制走国内 DNS
      - https://223.5.5.5/dns-query # 阿里
      - https://doh.pub/dns-query   # 腾讯
      - 223.5.5.5                   # 阿里 UDP
      - 119.29.29.29                # 腾讯 UDP
    "geo:cn":                       # 也可以用 geo:cn 匹配 IP
      - https://223.5.5.5/dns-query
      - https://doh.pub/dns-query
      - 223.5.5.5                   # 阿里 UDP
      - 119.29.29.29                # 腾讯 UDP
    "geosite:gfw":                  # 新增：GFW 列表域名强制走国外 DNS
      - https://cloudflare-dns.com/dns-query
      - https://dns.google/dns-query
      - 1.1.1.1
      - 8.8.8.8
    "geosite:geolocation-!cn":      # 新增：非中国大陆域名强制走国外 DNS
      - https://cloudflare-dns.com/dns-query
      - https://dns.google/dns-query
      - 1.1.1.1
      - 8.8.8.8
    "full-nameserver":              # 新增：最终兜底，所有未匹配的域名查询强制走国外 DNS
      - https://cloudflare-dns.com/dns-query
      - https://dns.google/dns-query
      - 1.1.1.1
      - 8.8.8.8
  fallback:
    - tls://8.8.4.4
    - tls://1.1.1.1  
  fallback-filter:
    geoip: true
    geoip-code: CN
    geosite:
      - gfw
    ipcidr:
      - 240.0.0.0/4
    domain:
      - +.google.com
      - +.facebook.com
      - +.youtube.com
      - +.githubusercontent.com
      - +.googlevideo.com
      - +.msftconnecttest.com
      - +.msftncsi.com
      - msftconnecttest.com
      - msftncsi.com
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
    - "*.lan"
    - "*.localdomain"
    - "*.example"
    - "*.invalid"
    - "*.localhost"
    - "*.test"
    - "*.local"
    - "*.home.arpa"
    - "*.direct"
    - "*.orb.local"
    - "*.ip6-localhost"
    - "*.ip6-loopback"
    - "time.*.com"
    - "time.*.gov"
    - "time.*.edu.cn"
    - "time.*.apple.com"
    - "time-ios.apple.com"
    - "time1.*.com"
    - "time2.*.com"
    - "time3.*.com"
    - "time4.*.com"
    - "time5.*.com"
    - "time6.*.com"
    - "time7.*.com"
    - "ntp.*.com"
    - "ntp1.*.com"
    - "ntp2.*.com"
    - "ntp3.*.com"
    - "ntp4.*.com"
    - "ntp5.*.com"
    - "ntp6.*.com"
    - "ntp7.*.com"
    - "*.time.edu.cn"
    - "*.ntp.org.cn"
    - "+.pool.ntp.org"
    - "time1.cloud.tencent.com"
    - "music.163.com"
    - "*.music.163.com"
    - "*.126.net"
    - "musicapi.taihe.com"
    - "music.taihe.com"
    - "songsearch.kugou.com"
    - "trackercdn.kugou.com"
    - "*.kuwo.cn"
    - "api-jooxtt.sanook.com"
    - "api.joox.com"
    - "joox.com"
    - "y.qq.com"
    - "*.y.qq.com"
    - "streamoc.music.tc.qq.com"
    - "mobileoc.music.tc.qq.com"
    - "isure.stream.qqmusic.qq.com"
    - "dl.stream.qqmusic.qq.com"
    - "aqqmusic.tc.qq.com"
    - "amobile.music.tc.qq.com"
    - "*.xiami.com"
    - "*.music.migu.cn"
    - "music.migu.cn"
    - "+.msftconnecttest.com"
    - "+.msftncsi.com"
    - "localhost.ptlogin2.qq.com"
    - "localhost.sec.qq.com"
    - "localhost.*.weixin.qq.com"
    - "+.steamcontent.com"
    - "+.srv.nintendo.net"
    - "*.n.n.srv.nintendo.net"
    - "+.cdn.nintendo.net"
    - "xbox.*.*.microsoft.com"
    - "*.*.xboxlive.com"
    - "xbox.*.microsoft.com"
    - "xnotify.xboxlive.com"
    - "+.battle.net"
    - "+.battlenet.com.cn"
    - "+.wotgame.cn"
    - "+.wggames.cn"
    - "+.wowsgame.cn"
    - "+.wargaming.net"
    - "proxy.golang.org"
    - "+.stun.*.*"
    - "+.stun.*.*.*"
    - "+.stun.*.*.*.*"
    - "+.stun.*.*.*.*.*"
    - "heartbeat.belkin.com"
    - "*.linksys.com"
    - "*.linksyssmartwifi.com"
    - "*.router.asus.com"
    - "mesu.apple.com"
    - "swscan.apple.com"
    - "swquery.apple.com"
    - "swdownload.apple.com"
    - "swcdn.apple.com"
    - "swdist.apple.com"
    - "lens.l.google.com"
    - "na.b.g-tun.com"
    - "+.nflxvideo.net"
    - "*.square-enix.com"
    - "*.finalfantasyxiv.com"
    - "*.ffxiv.com"
    - "*.ff14.sdo.com"
    - "ff.dorado.sdo.com"
    - "*.mcdn.bilivideo.cn"
    - "+.media.dssott.com"
    - "shark007.net"
    - "Mijia Cloud"
    - "+.market.xiaomi.com"
    - "+.cmbchina.com"
    - "+.cmbimg.com"
    - "adguardteam.github.io"
    - "adrules.top"
    - "anti-ad.net"
    - "local.adguard.org"
    - "static.adtidy.org"
    - "+.sandai.net"
    - "+.n0808.com"
    - "+.3gppnetwork.org"
    - "+.uu.163.com"
    - "ps.res.netease.com"
    - "+.pub.3gppnetwork.org"
    - "+.oray.com"
    - "+.orayimg.com"
    - "+.gcloudcs.com"
    - "+.gcloudsdk.com"
    - "+.instant.arubanetworks.com"
    - "+.setmeup.arubanetworks.com"
    - "+.router.asus.com"
    - "+.www.asusrouter.com"
    - "+.hiwifi.com"
    - "+.leike.cc"
    - "+.miwifi.com"
    - "+.my.router"
    - "+.p.to"
    - "+.peiluyou.com"
    - "+.phicomm.me"
    - "+.router.ctc"
    - "+.routerlogin.com"
    - "+.tendawifi.com"
    - "+.zte.home"
    - "+.tplogin.cn"
    - "+.wifi.cmcc"
tun:
  enable: true
  stack: system
  device: mochen
  auto-route: true
  endpoint-independent-nat: true
  auto-detect-interface: true
  endpoint-independents-hijack:
    - any:53
    - tcp://any:53
  strict-route: false
  mtu: 1500
  udp-timeout: 120
proxies: []

proxy-groups:
  - name: 🚀 默认代理
    type: select
    proxies:
      - ♻️ 自动选择
      - 🔯 故障转移
      - 🔮 负载均衡

  - name: 🎮 游戏
    type: select
    proxies: []

  - name: 🎮 steam
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择
      - DIRECT

  - name: 📹 YouTube
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🍀 Google
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 📺 Bilibili
    type: select
    proxies:
      - DIRECT
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🤖 ChatGPT
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 👨🏿‍💻 GitHub
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🐬 OneDrive
    type: select
    proxies:
      - DIRECT
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🪟 Microsoft
    type: select
    proxies:
      - DIRECT
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🎵 TikTok
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 📲 Telegram
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🎥 NETFLIX
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: ✈️ Speedtest
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择
      - DIRECT

  - name: 💶 PayPal
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🍎 Apple
    type: select
    proxies:
      - DIRECT
      - 🚀 默认代理
      - ♻️ 自动选择

  - name: 🐟 漏网之鱼
    type: select
    proxies:
      - 🚀 默认代理
      - ♻️ 自动选择
      - DIRECT

  - name: 🌏 国内网站
    type: select
    proxies:
      - DIRECT
      - 🚀 默认代理

  - name: ♻️ 自动选择
    type: url-test
    url: http://cp.cloudflare.com/
    interval: 300
    tolerance: 50
    timeout: 300
    max-failed-times: 3
    proxies: []

  - name: 🔯 故障转移
    type: fallback
    url: http://cp.cloudflare.com/
    interval: 300
    tolerance: 50
    timeout: 300
    max-failed-times: 3
    proxies: []

  - name: 🔮 负载均衡
    type: load-balance
    strategy: consistent-hashing
    url: http://cp.cloudflare.com/
    interval: 300
    tolerance: 50
    timeout: 300
    max-failed-times: 3
    proxies: []
     
rules:
  - GEOSITE,category-ads-all,REJECT
  - DOMAIN,instant.arubanetworks.com,DIRECT
  - DOMAIN,setmeup.arubanetworks.com,DIRECT
  - DOMAIN,router.asus.com,DIRECT
  - DOMAIN,www.asusrouter.com,DIRECT
  - DOMAIN-SUFFIX,hiwifi.com,DIRECT
  - DOMAIN-SUFFIX,leike.cc,DIRECT
  - DOMAIN-SUFFIX,miwifi.com,DIRECT
  - DOMAIN-SUFFIX,my.router,DIRECT
  - DOMAIN-SUFFIX,p.to,DIRECT
  - DOMAIN-SUFFIX,peiluyou.com,DIRECT
  - DOMAIN-SUFFIX,phicomm.me,DIRECT
  - DOMAIN-SUFFIX,router.ctc,DIRECT
  - DOMAIN-SUFFIX,routerlogin.com,DIRECT
  - DOMAIN-SUFFIX,tendawifi.com,DIRECT
  - DOMAIN-SUFFIX,zte.home,DIRECT
  - DOMAIN-SUFFIX,tplogin.cn,DIRECT
  - DOMAIN-SUFFIX,wifi.cmcc,DIRECT
  - DOMAIN-SUFFIX,bilibili.com, 📺 Bilibili
  - GEOSITE,bilibili, 📺 Bilibili
  - GEOSITE,biliintl, 📺 Bilibili
  - DOMAIN,ipinfo.littlediary.cn, 🚀 默认代理
  - DOMAIN-SUFFIX,browserleaks.com, 🚀 默认代理
  - DOMAIN-SUFFIX,ping.pe,🚀 默认代理
  - DOMAIN-SUFFIX,dgameglobal.com,🎮 游戏
  - DOMAIN-SUFFIX,wilds.monsterhunter.com,🎮 游戏
  - DOMAIN-SUFFIX,capcom.com,🎮 游戏
  - DOMAIN-SUFFIX,playfabapi.com,🎮 游戏
  - DOMAIN-SUFFIX,playfab.com,🎮 游戏
  - DOMAIN-SUFFIX,akamai.net,🎮 游戏
  - DOMAIN-SUFFIX,cloudapp.azure.com,🎮 游戏
  - PROCESS-NAME,CrashReport.exe,🎮 游戏
  - PROCESS-NAME,InstallerMessage.exe,🎮 游戏
  - PROCESS-NAME,MonsterHunterWilds.exe,🎮 游戏
  - PROCESS-NAME,SGuard64.exe,🎮 游戏
  - PROCESS-NAME,SGuardSvc64.exe,🎮 游戏
  - PROCESS-NAME,SGuardUpdate64.exe,🎮 游戏
  - PROCESS-NAME,Uninstall64.exe,🎮 游戏
  - PROCESS-NAME,ACE-Service64.exe,🎮 游戏
  - PROCESS-NAME,ACE-Setup64.exe,🎮 游戏
  - PROCESS-NAME,GeckoParser.exe,🎮 游戏
  - PROCESS-NAME,MetaperfCapturer.exe,🎮 游戏
  - PROCESS-NAME,profiler-symbol-server.exe,🎮 游戏
  - PROCESS-NAME,DownSysSymCache.exe,🎮 游戏
  - PROCESS-NAME,dumpbin.exe,🎮 游戏
  - PROCESS-NAME,Link.exe,🎮 游戏
  - PROCESS-NAME,SymCacheGen.exe,🎮 游戏
  - PROCESS-NAME,SymChk.exe,🎮 游戏
  - PROCESS-NAME,WevtUtil.exe,🎮 游戏
  - PROCESS-NAME,XPerf.exe,🎮 游戏
  - PROCESS-NAME,DeltaForceClient-Win64-Shipping.exe,🎮 游戏
  - PROCESS-NAME,INTLWebViewHelper.exe,🎮 游戏
  - PROCESS-NAME,pfbs.exe,🎮 游戏
  - PROCESS-NAME,UnrealCEFSubProcess.exe,🎮 游戏
  - PROCESS-NAME,UE4PrereqSetup_x64.exe,🎮 游戏
  - PROCESS-NAME,DeltaForceClient.exe,🎮 游戏
  - PROCESS-NAME,EAAntiCheat.Installer.exe,🎮 游戏
  - PROCESS-NAME,bf6.exe,🎮 游戏
  - PROCESS-NAME,bf6.exe,🎮 游戏
  - PROCESS-NAME,EAAntiCheat.GameServiceLauncher.exe,🎮 游戏
  - PROCESS-NAME,EAAntiCheat.GameService.exe,🎮 游戏
  - DOMAIN-SUFFIX,eaanticheat.ac.ea.com,🎮 游戏
  - GEOSITE,steam@cn,🌏 国内网站
  - GEOSITE,steam,🎮 steam
  - GEOSITE,apple,🍎 Apple
  - GEOSITE,private,🌏 国内网站
  - GEOSITE,openai,🤖 ChatGPT
  - GEOSITE,google-gemini,🤖 ChatGPT
  - GEOSITE,github,👨🏿‍💻 GitHub
  - GEOSITE,onedrive,🐬 OneDrive
  - GEOSITE,microsoft,🪟 Microsoft
  - GEOSITE,youtube,📹 YouTube
  - GEOSITE,google,🍀 Google
  - GEOSITE,tiktok,🎵 TikTok
  - GEOSITE,speedtest,✈️ Speedtest
  - GEOSITE,telegram,📲 Telegram
  - GEOSITE,netflix,🎥 NETFLIX
  - GEOSITE,paypal,💶 PayPal
  - GEOSITE,gfw,🚀 默认代理
  - GEOSITE,category-dev,🚀 默认代理
  - DOMAIN-SUFFIX,cloudflare-dns.com,🚀 默认代理
  - DOMAIN-SUFFIX,api.nn.ci,🚀 默认代理
  - DOMAIN-SUFFIX,api.ipify.org,🚀 默认代理
  - DOMAIN-SUFFIX,gsas.apple.com,🚀 默认代理
  - DOMAIN-SUFFIX,hotmail.com,🚀 默认代理
  - GEOSITE,CN,🌏 国内网站
  - GEOIP,private,🌏 国内网站,no-resolve
  - IP-CIDR,1.0.0.1/32,🚀 默认代理,no-resolve
  - IP-CIDR,1.1.1.1/32,🚀 默认代理,no-resolve
  - IP-CIDR,8.8.8.8/32,🚀 默认代理,no-resolve
  - IP-CIDR,8.8.4.4/32,🚀 默认代理,no-resolve
  - GEOIP,google,🍀 Google
  - GEOIP,netflix,🎥 NETFLIX
  - GEOIP,telegram,📲 Telegram
  - GEOIP,CN,🌏 国内网站
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,198.18.0.0/16,DIRECT,no-resolve
  - IP-CIDR,224.0.0.0/4,DIRECT,no-resolve
  - IP-CIDR6,::1/128,DIRECT,no-resolve
  - IP-CIDR6,fc00::/7,DIRECT,no-resolve
  - IP-CIDR6,fe80::/10,DIRECT,no-resolve
  - IP-CIDR6,fd00::/8,DIRECT,no-resolve
  - MATCH,🐟 漏网之鱼