First Commmit

docs/configuration/dns/server/dhcp.md

@@ -0,0 +1,38 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# DHCP
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "dhcp",
+        "tag": "",
+
+        "interface": "",
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+### Fields
+
+#### interface
+
+Interface name to listen on. 
+
+Tge default interface will be used by default.
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details. 

docs/configuration/dns/server/dhcp.zh.md

@@ -0,0 +1,38 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# DHCP
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "dhcp",
+        "tag": "",
+
+        "interface": "",
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+### 字段
+
+#### interface
+
+要监听的网络接口名称。
+
+默认使用默认接口。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/fakeip.md

@@ -0,0 +1,35 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# Fake IP
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "fakeip",
+        "tag": "",
+
+        "inet4_range": "198.18.0.0/15",
+        "inet6_range": "fc00::/18"
+      }
+    ]
+  }
+}
+```
+
+### Fields
+
+#### inet4_range
+
+IPv4 address range for FakeIP.
+
+#### inet6_address
+
+IPv6 address range for FakeIP.

docs/configuration/dns/server/fakeip.zh.md

@@ -0,0 +1,35 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# Fake IP
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "fakeip",
+        "tag": "",
+
+        "inet4_range": "198.18.0.0/15",
+        "inet6_range": "fc00::/18"
+      }
+    ]
+  }
+}
+```
+
+### 字段
+
+#### inet4_range
+
+FakeIP 的 IPv4 地址范围。
+
+#### inet6_range
+
+FakeIP 的 IPv6 地址范围。

docs/configuration/dns/server/hosts.md

@@ -0,0 +1,127 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# Hosts
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "hosts",
+        "tag": "",
+
+        "path": [],
+        "predefined": {}
+      }
+    ]
+  }
+}
+```
+
+!!! note ""
+
+    You can ignore the JSON Array [] tag when the content is only one item
+
+### Fields
+
+#### path
+
+List of paths to hosts files.
+
+`/etc/hosts` is used by default.
+
+`C:\Windows\System32\Drivers\etc\hosts` is used by default on Windows.
+
+Example:
+
+```json
+{
+  // "path": "/etc/hosts"
+  
+  "path": [
+    "/etc/hosts",
+    "$HOME/.hosts"
+  ]
+}
+```
+
+#### predefined
+
+Predefined hosts.
+
+Example:
+
+```json
+{
+  "predefined": {
+    "www.google.com": "127.0.0.1",
+    "localhost": [
+      "127.0.0.1",
+      "::1"
+    ]
+  }
+}
+```
+
+### Examples
+
+=== "Use hosts if available"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                ...
+              },
+              {
+                "type": "hosts",
+                "tag": "hosts"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "hosts"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                ...
+              },
+              {
+                "type": "hosts",
+                "tag": "hosts"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "hosts"
+              }
+            ]
+          }
+        }
+        ```

docs/configuration/dns/server/hosts.zh.md

@@ -0,0 +1,127 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# Hosts
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "hosts",
+        "tag": "",
+
+        "path": [],
+        "predefined": {}
+      }
+    ]
+  }
+}
+```
+
+!!! note ""
+
+    当内容只有一项时，可以忽略 JSON 数组 [] 标签
+
+### 字段
+
+#### path
+
+hosts 文件路径列表。
+
+默认使用 `/etc/hosts`。
+
+在 Windows 上默认使用 `C:\Windows\System32\Drivers\etc\hosts`。
+
+示例：
+
+```json
+{
+  // "path": "/etc/hosts"
+
+  "path": [
+    "/etc/hosts",
+    "$HOME/.hosts"
+  ]
+}
+```
+
+#### predefined
+
+预定义的 hosts。
+
+示例：
+
+```json
+{
+  "predefined": {
+    "www.google.com": "127.0.0.1",
+    "localhost": [
+      "127.0.0.1",
+      "::1"
+    ]
+  }
+}
+```
+
+### 示例
+
+=== "如果可用则使用 hosts"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                ...
+              },
+              {
+                "type": "hosts",
+                "tag": "hosts"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "hosts"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                ...
+              },
+              {
+                "type": "hosts",
+                "tag": "hosts"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "hosts"
+              }
+            ]
+          }
+        }
+        ```

docs/configuration/dns/server/http3.md

@@ -0,0 +1,71 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# DNS over HTTP3 (DoH3)
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "h3",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 443,
+        
+        "path": "",
+        "headers": {},
+        
+        "tls": {},
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy H3 server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`443` will be used by default.
+
+#### path
+
+The path of the DNS server.
+
+`/dns-query` will be used by default.
+
+#### headers
+
+Additional headers to be sent to the DNS server.
+
+#### tls
+
+TLS configuration, see [TLS](/configuration/shared/tls/#outbound).
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/http3.zh.md

@@ -0,0 +1,71 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# DNS over HTTP3 (DoH3)
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "h3",
+        "tag": "",
+
+        "server": "",
+        "server_port": 443,
+
+        "path": "",
+        "headers": {},
+
+        "tls": {},
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 H3 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `443`。
+
+#### path
+
+DNS 服务器的路径。
+
+默认使用 `/dns-query`。
+
+#### headers
+
+发送到 DNS 服务器的额外标头。
+
+#### tls
+
+TLS 配置，参阅 [TLS](/zh/configuration/shared/tls/#出站)。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/https.md

@@ -0,0 +1,71 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# DNS over HTTPS (DoH)
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "https",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 443,
+        
+        "path": "",
+        "headers": {},
+        
+        "tls": {},
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy HTTPS server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`443` will be used by default.
+
+#### path
+
+The path of the DNS server.
+
+`/dns-query` will be used by default.
+
+#### headers
+
+Additional headers to be sent to the DNS server.
+
+#### tls
+
+TLS configuration, see [TLS](/configuration/shared/tls/#outbound).
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/https.zh.md

@@ -0,0 +1,71 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# DNS over HTTPS (DoH)
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "https",
+        "tag": "",
+
+        "server": "",
+        "server_port": 443,
+
+        "path": "",
+        "headers": {},
+
+        "tls": {},
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 HTTPS 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `443`。
+
+#### path
+
+DNS 服务器的路径。
+
+默认使用 `/dns-query`。
+
+#### headers
+
+发送到 DNS 服务器的额外标头。
+
+#### tls
+
+TLS 配置，参阅 [TLS](/zh/configuration/shared/tls/#出站)。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/index.md

@@ -0,0 +1,48 @@
+---
+icon: material/alert-decagram
+---
+
+!!! quote "Changes in sing-box 1.12.0"
+
+    :material-plus: [type](#type)
+
+# DNS Server
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "",
+        "tag": ""
+      }
+    ]
+  }
+}
+```
+
+#### type
+
+The type of the DNS server.
+
+| Type            | Format                    |
+|-----------------|---------------------------|
+| empty (default) | :material-note-remove: [Legacy](./legacy/) |
+| `local`         | [Local](./local/)         |
+| `hosts`         | [Hosts](./hosts/)         |
+| `tcp`           | [TCP](./tcp/)             |
+| `udp`           | [UDP](./udp/)             |
+| `tls`           | [TLS](./tls/)             |
+| `quic`          | [QUIC](./quic/)           |
+| `https`         | [HTTPS](./https/)         |
+| `h3`            | [HTTP/3](./http3/)        |
+| `dhcp`          | [DHCP](./dhcp/)           |
+| `fakeip`        | [Fake IP](./fakeip/)      |
+| `tailscale`     | [Tailscale](./tailscale/) |
+| `resolved`      | [Resolved](./resolved/)   |
+
+#### tag
+
+The tag of the DNS server.

docs/configuration/dns/server/index.zh.md

@@ -0,0 +1,48 @@
+---
+icon: material/alert-decagram
+---
+
+!!! quote "sing-box 1.12.0 中的更改"
+
+    :material-plus: [type](#type)
+
+# DNS Server
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "",
+        "tag": ""
+      }
+    ]
+  }
+}
+```
+
+#### type
+
+DNS 服务器的类型。
+
+| 类型              | 格式                        |
+|-----------------|---------------------------|
+| empty (default) | :material-note-remove: [Legacy](./legacy/) |
+| `local`         | [Local](./local/)         |
+| `hosts`         | [Hosts](./hosts/)         |
+| `tcp`           | [TCP](./tcp/)             |
+| `udp`           | [UDP](./udp/)             |
+| `tls`           | [TLS](./tls/)             |
+| `quic`          | [QUIC](./quic/)           |
+| `https`         | [HTTPS](./https/)         |
+| `h3`            | [HTTP/3](./http3/)        |
+| `dhcp`          | [DHCP](./dhcp/)           |
+| `fakeip`        | [Fake IP](./fakeip/)      |
+| `tailscale`     | [Tailscale](./tailscale/) |
+| `resolved`      | [Resolved](./resolved/)   |
+
+#### tag
+
+DNS 服务器的标签。

docs/configuration/dns/server/legacy.md

@@ -0,0 +1,113 @@
+---
+icon: material/note-remove
+---
+
+!!! failure "Removed in sing-box 1.14.0"
+
+    Legacy DNS servers are deprecated in sing-box 1.12.0 and removed in sing-box 1.14.0, check [Migration](/migration/#migrate-to-new-dns-server-formats).
+
+!!! quote "Changes in sing-box 1.9.0"
+
+    :material-plus: [client_subnet](#client_subnet)
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "tag": "",
+        "address": "",
+        "address_resolver": "",
+        "address_strategy": "",
+        "strategy": "",
+        "detour": "",
+        "client_subnet": ""
+      }
+    ]
+  }
+}
+```
+
+### Fields
+
+#### tag
+
+The tag of the dns server.
+
+#### address
+
+==Required==
+
+The address of the dns server.
+
+| Protocol                             | Format                        |
+|--------------------------------------|-------------------------------|
+| `System`                             | `local`                       |
+| `TCP`                                | `tcp://1.0.0.1`               |
+| `UDP`                                | `8.8.8.8` `udp://8.8.4.4`     |
+| `TLS`                                | `tls://dns.google`            |
+| `HTTPS`                              | `https://1.1.1.1/dns-query`   |
+| `QUIC`                               | `quic://dns.adguard.com`      |
+| `HTTP3`                              | `h3://8.8.8.8/dns-query`      |
+| `RCode`                              | `rcode://refused`             |
+| `DHCP`                               | `dhcp://auto` or `dhcp://en0` |
+| [FakeIP](/configuration/dns/fakeip/) | `fakeip`                      |
+
+!!! warning ""
+
+    To ensure that Android system DNS is in effect, rather than Go's built-in default resolver, enable CGO at compile time.
+
+!!! info ""
+
+    the RCode transport is often used to block queries. Use with rules and the `disable_cache` rule option.
+
+| RCode             | Description           | 
+|-------------------|-----------------------|
+| `success`         | `No error`            |
+| `format_error`    | `Format error`        |
+| `server_failure`  | `Server failure`      |
+| `name_error`      | `Non-existent domain` |
+| `not_implemented` | `Not implemented`     |
+| `refused`         | `Query refused`       |
+
+#### address_resolver
+
+==Required if address contains domain==
+
+Tag of a another server to resolve the domain name in the address.
+
+#### address_strategy
+
+The domain strategy for resolving the domain name in the address.
+
+One of `prefer_ipv4` `prefer_ipv6` `ipv4_only` `ipv6_only`.
+
+`dns.strategy` will be used if empty.
+
+#### strategy
+
+Default domain strategy for resolving the domain names.
+
+One of `prefer_ipv4` `prefer_ipv6` `ipv4_only` `ipv6_only`.
+
+Take no effect if overridden by other settings.
+
+#### detour
+
+Tag of an outbound for connecting to the dns server.
+
+Default outbound will be used if empty.
+
+#### client_subnet
+
+!!! question "Since sing-box 1.9.0"
+
+Append a `edns0-subnet` OPT extra record with the specified IP prefix to every query by default.
+
+If value is an IP address instead of prefix, `/32` or `/128` will be appended automatically.
+
+Can be overridden by `rules.[].client_subnet`.
+
+Will override `dns.client_subnet`.

docs/configuration/dns/server/legacy.zh.md

@@ -0,0 +1,113 @@
+---
+icon: material/note-remove
+---
+
+!!! failure "已在 sing-box 1.14.0 移除"
+
+    旧的 DNS 服务器配置已在 sing-box 1.12.0 废弃且已在 sing-box 1.14.0 中被移除，参阅 [迁移指南](/zh/migration/#迁移到新的-dns-服务器格式)。
+
+!!! quote "sing-box 1.9.0 中的更改"
+
+    :material-plus: [client_subnet](#client_subnet)
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "tag": "",
+        "address": "",
+        "address_resolver": "",
+        "address_strategy": "",
+        "strategy": "",
+        "detour": "",
+        "client_subnet": ""
+      }
+    ]
+  }
+}
+```
+
+### 字段
+
+#### tag
+
+DNS 服务器的标签。
+
+#### address
+
+==必填==
+
+DNS 服务器的地址。
+
+| 协议                                   | 格式                           |
+|--------------------------------------|------------------------------|
+| `System`                             | `local`                      |
+| `TCP`                                | `tcp://1.0.0.1`              |
+| `UDP`                                | `8.8.8.8` `udp://8.8.4.4`    |
+| `TLS`                                | `tls://dns.google`           |
+| `HTTPS`                              | `https://1.1.1.1/dns-query`  |
+| `QUIC`                               | `quic://dns.adguard.com`     |
+| `HTTP3`                              | `h3://8.8.8.8/dns-query`     |
+| `RCode`                              | `rcode://refused`            |
+| `DHCP`                               | `dhcp://auto` 或 `dhcp://en0` |
+| [FakeIP](/zh/configuration/dns/fakeip/) | `fakeip`                     |
+
+!!! warning ""
+
+    为了确保 Android 系统 DNS 生效，而不是 Go 的内置默认解析器，请在编译时启用 CGO。
+
+!!! info ""
+
+    RCode 传输层传输层常用于屏蔽请求. 与 DNS 规则和 `disable_cache` 规则选项一起使用。
+
+| RCode             | 描述       | 
+|-------------------|----------|
+| `success`         | `无错误`    |
+| `format_error`    | `请求格式错误` |
+| `server_failure`  | `服务器出错`  |
+| `name_error`      | `域名不存在`  |
+| `not_implemented` | `功能未实现`  |
+| `refused`         | `请求被拒绝`  |
+
+#### address_resolver
+
+==如果服务器地址包括域名则必须==
+
+用于解析本 DNS 服务器的域名的另一个 DNS 服务器的标签。
+
+#### address_strategy
+
+用于解析本 DNS 服务器的域名的策略。
+
+可选项：`prefer_ipv4` `prefer_ipv6` `ipv4_only` `ipv6_only`。
+
+默认使用 `dns.strategy`。
+
+#### strategy
+
+默认解析策略。
+
+可选项：`prefer_ipv4` `prefer_ipv6` `ipv4_only` `ipv6_only`。
+
+如果被其他设置覆盖则不生效。
+
+#### detour
+
+用于连接到 DNS 服务器的出站的标签。
+
+如果为空，将使用默认出站。
+
+#### client_subnet
+
+!!! question "自 sing-box 1.9.0 起"
+
+默认情况下，将带有指定 IP 前缀的 `edns0-subnet` OPT 附加记录附加到每个查询。
+
+如果值是 IP 地址而不是前缀，则会自动附加 `/32` 或 `/128`。
+
+可以被 `rules.[].client_subnet` 覆盖。
+
+将覆盖 `dns.client_subnet`。

docs/configuration/dns/server/local.md

@@ -0,0 +1,61 @@
+---
+icon: material/new-box
+---
+
+!!! quote "Changes in sing-box 1.13.0"
+
+    :material-plus: [prefer_go](#prefer_go)
+
+!!! question "Since sing-box 1.12.0"
+
+# Local
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "local",
+        "tag": "",
+        "prefer_go": false
+
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy local server"
+
+    * The old legacy local server only handles IP requests; the new one handles all types of requests and supports concurrent for IP requests.
+    * The old local server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+
+### Fields
+
+#### prefer_go
+
+!!! question "Since sing-box 1.13.0"
+
+When enabled, `local` DNS server will resolve DNS by dialing itself whenever possible.
+
+Specifically, it disables following behaviors which was added as features in sing-box 1.13.0:
+
+1. On Apple platforms: Attempt to resolve A/AAAA requests using `getaddrinfo` in NetworkExtension.
+2. On Linux: Resolve through `systemd-resolvd`'s DBus interface when available.
+
+As a sole exception, it cannot disable the following behavior:
+
+1. In the Android graphical client,
+`local` will always resolve DNS through the platform interface,
+as there is no other way to obtain upstream DNS servers;
+On devices running Android versions lower than 10, this interface can only resolve A/AAAA requests.
+
+2. On macOS, `local` will try DHCP first in Network Extension, since DHCP respects DIal Fields,
+it will not be disabled by `prefer_go`.
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/local.zh.md

@@ -0,0 +1,61 @@
+---
+icon: material/new-box
+---
+
+!!! quote "sing-box 1.13.0 中的更改"
+
+    :material-plus: [prefer_go](#prefer_go)
+
+!!! question "自 sing-box 1.12.0 起"
+
+# Local
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "local",
+        "tag": "",
+        "prefer_go": false,
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版本地服务器的区别"
+
+    * 旧的传统本地服务器只处理 IP 请求；新的服务器处理所有类型的请求，并支持 IP 请求的并发处理。
+    * 旧的本地服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+
+### 字段
+
+#### prefer_go
+
+!!! question "自 sing-box 1.13.0 起"
+
+启用后，`local` DNS 服务器将尽可能通过拨号自身来解析 DNS。
+
+具体来说，它禁用了在 sing-box 1.13.0 中作为功能添加的以下行为：
+
+1. 在 Apple 平台上：尝试在 NetworkExtension 中使用 `getaddrinfo` 解析 A/AAAA 请求。
+2. 在 Linux 上：当可用时通过 `systemd-resolvd` 的 DBus 接口进行解析。
+
+作为唯一的例外，它无法禁用以下行为：
+
+1. 在 Android 图形客户端中，
+`local` 将始终通过平台接口解析 DNS，
+因为没有其他方法来获取上游 DNS 服务器；
+在运行 Android 10 以下版本的设备上，此接口只能解析 A/AAAA 请求。
+
+2. 在 macOS 上，`local` 会在 Network Extension 中首先尝试 DHCP，由于 DHCP 遵循拨号字段，
+它不会被 `prefer_go` 禁用。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/quic.md

@@ -0,0 +1,58 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# DNS over QUIC (DoQ)
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "quic",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 853,
+        
+        "tls": {},
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy QUIC server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`853` will be used by default.
+
+#### tls
+
+TLS configuration, see [TLS](/configuration/shared/tls/#outbound).
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/quic.zh.md

@@ -0,0 +1,58 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# DNS over QUIC (DoQ)
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "quic",
+        "tag": "",
+
+        "server": "",
+        "server_port": 853,
+
+        "tls": {},
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 QUIC 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `853`。
+
+#### tls
+
+TLS 配置，参阅 [TLS](/zh/configuration/shared/tls/#出站)。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/resolved.md

@@ -0,0 +1,117 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# Resolved
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "resolved",
+        "tag": "",
+
+        "service": "resolved",
+        "accept_default_resolvers": false
+      }
+    ]
+  }
+}
+```
+
+
+### Fields
+
+#### service
+
+==Required==
+
+The tag of the [Resolved Service](/configuration/service/resolved).
+
+#### accept_default_resolvers
+
+Indicates whether the default DNS resolvers should be accepted for fallback queries in addition to matching domains.
+
+Specifically, default DNS resolvers are DNS servers that have `SetLinkDefaultRoute` or `SetLinkDomains ~.` set.
+
+If not enabled, `NXDOMAIN` will be returned for requests that do not match search or match domains.
+
+### Examples
+
+=== "Split DNS only"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "resolved",
+                "tag": "resolved",
+                "service": "resolved"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "resolved"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "resolved",
+                "tag": "resolved",
+                "service": "resolved"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "resolved"
+              }
+            ]
+          }
+        }
+        ```
+
+=== "Use as global DNS"
+
+    ```json
+    {
+      "dns": {
+        "servers": [
+          {
+            "type": "resolved",
+            "service": "resolved",
+            "accept_default_resolvers": true
+          }
+        ]
+      }
+    }
+    ```

docs/configuration/dns/server/resolved.zh.md

@@ -0,0 +1,116 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# Resolved
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "resolved",
+        "tag": "",
+
+        "service": "resolved",
+        "accept_default_resolvers": false
+      }
+    ]
+  }
+}
+```
+
+### 字段
+
+#### service
+
+==必填==
+
+[Resolved 服务](/zh/configuration/service/resolved) 的标签。
+
+#### accept_default_resolvers
+
+指示是否除了匹配域名外，还应接受默认 DNS 解析器以进行回退查询。
+
+具体来说，默认 DNS 解析器是设置了 `SetLinkDefaultRoute` 或 `SetLinkDomains ~.` 的 DNS 服务器。
+
+如果未启用，对于不匹配搜索域或匹配域的请求，将返回 `NXDOMAIN`。
+
+### 示例
+
+=== "仅分割 DNS"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "resolved",
+                "tag": "resolved",
+                "service": "resolved"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "resolved"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "resolved",
+                "tag": "resolved",
+                "service": "resolved"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "resolved"
+              }
+            ]
+          }
+        }
+        ```
+
+=== "用作全局 DNS"
+
+    ```json
+    {
+      "dns": {
+        "servers": [
+          {
+            "type": "resolved",
+            "service": "resolved",
+            "accept_default_resolvers": true
+          }
+        ]
+      }
+    }
+    ```

docs/configuration/dns/server/tailscale.md

@@ -0,0 +1,116 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# Tailscale
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tailscale",
+        "tag": "",
+
+        "endpoint": "ts-ep",
+        "accept_default_resolvers": false
+      }
+    ]
+  }
+}
+```
+
+### Fields
+
+#### endpoint
+
+==Required==
+
+The tag of the [Tailscale Endpoint](/configuration/endpoint/tailscale).
+
+#### accept_default_resolvers
+
+Indicates whether default DNS resolvers should be accepted for fallback queries in addition to MagicDNS。
+
+if not enabled, `NXDOMAIN` will be returned for non-Tailscale domain queries.
+
+### Examples
+
+=== "MagicDNS only"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "tailscale",
+                "tag": "ts",
+                "endpoint": "ts-ep"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "ts"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "tailscale",
+                "tag": "ts",
+                "endpoint": "ts-ep"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "ts"
+              }
+            ]
+          }
+        }
+        ```
+
+=== "Use as global DNS"
+
+    ```json
+    {
+      "dns": {
+        "servers": [
+          {
+            "type": "tailscale",
+            "endpoint": "ts-ep",
+            "accept_default_resolvers": true
+          }
+        ]
+      }
+    }
+    ```

docs/configuration/dns/server/tailscale.zh.md

@@ -0,0 +1,116 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# Tailscale
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tailscale",
+        "tag": "",
+
+        "endpoint": "ts-ep",
+        "accept_default_resolvers": false
+      }
+    ]
+  }
+}
+```
+
+### 字段
+
+#### endpoint
+
+==必填==
+
+[Tailscale 端点](/zh/configuration/endpoint/tailscale) 的标签。
+
+#### accept_default_resolvers
+
+指示是否除了 MagicDNS 外，还应接受默认 DNS 解析器以进行回退查询。
+
+如果未启用，对于非 Tailscale 域名查询将返回 `NXDOMAIN`。
+
+### 示例
+
+=== "仅 MagicDNS"
+
+    === ":material-card-multiple: sing-box 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "tailscale",
+                "tag": "ts",
+                "endpoint": "ts-ep"
+              }
+            ],
+            "rules": [
+              {
+                "action": "evaluate",
+                "server": "ts"
+              },
+              {
+                "match_response": true,
+                "ip_accept_any": true,
+                "action": "respond"
+              }
+            ]
+          }
+        }
+        ```
+
+    === ":material-card-remove: sing-box < 1.14.0"
+
+        ```json
+        {
+          "dns": {
+            "servers": [
+              {
+                "type": "local",
+                "tag": "local"
+              },
+              {
+                "type": "tailscale",
+                "tag": "ts",
+                "endpoint": "ts-ep"
+              }
+            ],
+            "rules": [
+              {
+                "ip_accept_any": true,
+                "server": "ts"
+              }
+            ]
+          }
+        }
+        ```
+
+=== "用作全局 DNS"
+
+    ```json
+    {
+      "dns": {
+        "servers": [
+          {
+            "type": "tailscale",
+            "endpoint": "ts-ep",
+            "accept_default_resolvers": true
+          }
+        ]
+      }
+    }
+    ```

docs/configuration/dns/server/tcp.md

@@ -0,0 +1,52 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# TCP
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tcp",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 53,
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy TCP server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`53` will be used by default.
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/tcp.zh.md

@@ -0,0 +1,52 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# TCP
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tcp",
+        "tag": "",
+
+        "server": "",
+        "server_port": 53,
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 TCP 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `53`。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/tls.md

@@ -0,0 +1,58 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# DNS over TLS (DoT)
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tls",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 853,
+        
+        "tls": {},
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy TLS server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`853` will be used by default.
+
+#### tls
+
+TLS configuration, see [TLS](/configuration/shared/tls/#outbound).
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/tls.zh.md

@@ -0,0 +1,58 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# DNS over TLS (DoT)
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "tls",
+        "tag": "",
+
+        "server": "",
+        "server_port": 853,
+
+        "tls": {},
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 TLS 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `853`。
+
+#### tls
+
+TLS 配置，参阅 [TLS](/zh/configuration/shared/tls/#出站)。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。

docs/configuration/dns/server/udp.md

@@ -0,0 +1,52 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.12.0"
+
+# UDP
+
+### Structure
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "udp",
+        "tag": "",
+        
+        "server": "",
+        "server_port": 53,
+        
+        // Dial Fields
+      }
+    ]
+  }
+}
+```
+
+!!! info "Difference from legacy UDP server"
+
+    * The old server uses default outbound by default unless detour is specified; the new one uses dialer just like outbound, which is equivalent to using an empty direct outbound by default.
+    * The old server uses `address_resolver` and `address_strategy` to resolve the domain name in the server; the new one uses `domain_resolver` and `domain_strategy` in [Dial Fields](/configuration/shared/dial/) instead.
+
+### Fields
+
+#### server
+
+==Required==
+
+The address of the DNS server.
+
+If domain name is used, `domain_resolver` must also be set to resolve IP address.
+
+#### server_port
+
+The port of the DNS server.
+
+`53` will be used by default.
+
+### Dial Fields
+
+See [Dial Fields](/configuration/shared/dial/) for details.

docs/configuration/dns/server/udp.zh.md

@@ -0,0 +1,52 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.12.0 起"
+
+# UDP
+
+### 结构
+
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "type": "udp",
+        "tag": "",
+
+        "server": "",
+        "server_port": 53,
+
+        // 拨号字段
+      }
+    ]
+  }
+}
+```
+
+!!! info "与旧版 UDP 服务器的区别"
+
+    * 旧服务器默认使用默认出站，除非指定了绕行；新服务器像出站一样使用拨号器，相当于默认使用空的直连出站。
+    * 旧服务器使用 `address_resolver` 和 `address_strategy` 来解析服务器中的域名；新服务器改用 [拨号字段](/zh/configuration/shared/dial/) 中的 `domain_resolver` 和 `domain_strategy`。
+
+### 字段
+
+#### server
+
+==必填==
+
+DNS 服务器的地址。
+
+如果使用域名，还必须设置 `domain_resolver` 来解析 IP 地址。
+
+#### server_port
+
+DNS 服务器的端口。
+
+默认使用 `53`。
+
+### 拨号字段
+
+参阅 [拨号字段](/zh/configuration/shared/dial/) 了解详情。