mixed-port: 7890
allow-lan: true
tcp-concurrent: true
enable-process: true
find-process-mode: always
mode: rule
log-level: error
ipv6: true
external-controller: 127.0.0.1:9090
experimental:
  ignore-resolve-fail: true
  sniff-tls-sni: true
  tracing: true
hosts:
  "localhost": 127.0.0.1
profile:
  store-selected: true
  store-fake-ip: true

sniffer:
  enable: true
  sniff:
    http: { ports: [1-442, 444-8442, 8444-65535], override-destination: true }
    tls: { ports: [1-79, 81-8079, 8081-65535], override-destination: true }
  force-domain:
      - "+.v2ex.com"
      - www.google.com
      - google.com
  skip-domain:
      - Mijia Cloud
      - dlg.io.mi.com
  sniffing:
    - tls
    - http
  port-whitelist:
    - "80"
    - "443"

tun:
  enable: true
  prefer-h3: true
  listen: 0.0.0.0:53
  stack: gvisor
  dns-hijack:
     - "any:53"
     - "tcp://any:53"
  auto-redir: true
  auto-route: true
  auto-detect-interface: true

dns:
  enable: true
  ipv6: true
  default-nameserver:
    - '1.1.1.1'
    - '8.8.8.8'
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - 'stun.*.*'
    - 'stun.*.*.*'
    - '+.stun.*.*'
    - '+.stun.*.*.*'
    - '+.stun.*.*.*.*'
    - '+.stun.*.*.*.*.*'
    - '*.lan'
    - '+.msftncsi.com'
    - msftconnecttest.com
    - 'time?.*.com'
    - 'time.*.com'
    - 'time.*.gov'
    - 'time.*.apple.com'
    - time-ios.apple.com
    - 'time1.*.com'
    - 'time2.*.com'
    - 'time3.*.com'
    - 'time4.*.com'
    - 'time5.*.com'
    - 'time6.*.com'
    - 'time7.*.com'
    - 'ntp?.*.com'
    - 'ntp.*.com'
    - 'ntp1.*.com'
    - 'ntp2.*.com'
    - 'ntp3.*.com'
    - 'ntp4.*.com'
    - 'ntp5.*.com'
    - 'ntp6.*.com'
    - 'ntp7.*.com'
    - '+.pool.ntp.org'
    - '+.ipv6.microsoft.com'
    - speedtest.cros.wr.pvp.net
    - network-test.debian.org
    - detectportal.firefox.com
    - cable.auth.com
    - miwifi.com
    - routerlogin.com
    - routerlogin.net
    - tendawifi.com
    - tendawifi.net
    - tplinklogin.net
    - tplinkwifi.net
    - '*.xiami.com'
    - tplinkrepeater.net
    - router.asus.com
    - '*.*.*.srv.nintendo.net'
    - '*.*.stun.playstation.net'
    - '*.openwrt.pool.ntp.org'
    - resolver1.opendns.com
    - 'GC._msDCS.*.*'
    - 'DC._msDCS.*.*'
    - 'PDC._msDCS.*.*'
  use-hosts: true
  nameserver:
    - '8.8.4.4'
    - '1.0.0.1'
    - "https://1.0.0.1/dns-query"
    - "https://8.8.4.4/dns-query"

proxies:
  - {"name":"🇺🇸US | 🟢 | ss | @vmess_vless_v2rayng | 1","type":"ss","server":"45.87.175.171","port":8080,"password":"cvII85TrW6n0OGyfpHVS1u","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇹🇷TR | 🟢 | ss | @vmess_vless_v2rayng | 2","type":"ss","server":"193.46.56.185","port":6683,"password":"iw8GoN42dciNxDBd0RwAdL","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇫🇮FI | 🟢 | ss | @vmess_vless_v2rayng | 3","type":"ss","server":"83.147.216.70","port":64519,"password":"UlT89D0rvcr05tKft1NB5a","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇳🇱NL | 🟢 | ss | @iP_CF | 3","type":"ss","server":"164.92.156.41","port":24206,"password":"zI7kiNZ0UfV9cXB73a4nRD","cipher":"chacha20-ietf-poly1305"}
proxy-groups:
  - name: MANUAL
    type: select
    proxies:
      - URL-TEST
      - FALLBACK
      - '🇺🇸US | 🟢 | ss | @vmess_vless_v2rayng | 1'
      - '🇹🇷TR | 🟢 | ss | @vmess_vless_v2rayng | 2'
      - '🇫🇮FI | 🟢 | ss | @vmess_vless_v2rayng | 3'
      - '🇳🇱NL | 🟢 | ss | @iP_CF | 3'
  - name: URL-TEST
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 60
    tolerance: 50
    proxies:
      - '🇺🇸US | 🟢 | ss | @vmess_vless_v2rayng | 1'
      - '🇹🇷TR | 🟢 | ss | @vmess_vless_v2rayng | 2'
      - '🇫🇮FI | 🟢 | ss | @vmess_vless_v2rayng | 3'
      - '🇳🇱NL | 🟢 | ss | @iP_CF | 3'
  - name: FALLBACK
    type: fallback
    url: http://www.gstatic.com/generate_204
    interval: 60
    proxies:
      - '🇺🇸US | 🟢 | ss | @vmess_vless_v2rayng | 1'
      - '🇹🇷TR | 🟢 | ss | @vmess_vless_v2rayng | 2'
      - '🇫🇮FI | 🟢 | ss | @vmess_vless_v2rayng | 3'
      - '🇳🇱NL | 🟢 | ss | @iP_CF | 3'
rules:
  - IP-CIDR,127.0.0.1/32,DIRECT,no-resolve
  - IP-CIDR,198.18.0.1/16,DIRECT,no-resolve
  - IP-CIDR,28.0.0.1/8,DIRECT,no-resolve
  - IP-CIDR6,::1/128,DIRECT,no-resolve
  - DOMAIN-SUFFIX,local,DIRECT
  - DOMAIN-SUFFIX,ip6-localhost,DIRECT
  - DOMAIN-SUFFIX,ip6-loopback,DIRECT
  - DOMAIN-SUFFIX,lan,DIRECT
  - DOMAIN-SUFFIX,localhost,DIRECT
  - DOMAIN-SUFFIX,ir,DIRECT
  - DOMAIN,clash.razord.top,DIRECT
  - DOMAIN,yacd.haishan.me,DIRECT
  - DOMAIN,yacd.metacubex.one,DIRECT
  - DOMAIN,clash.metacubex.one,DIRECT
  - MATCH,MANUAL