mixed-port: 7890
allow-lan: true
tcp-concurrent: true
enable-process: true
find-process-mode: always
mode: rule
log-level: error
ipv6: true
external-controller: 127.0.0.1:9090
experimental:
  ignore-resolve-fail: true
  sniff-tls-sni: true
  tracing: true
hosts:
  "localhost": 127.0.0.1
profile:
  store-selected: true
  store-fake-ip: true

sniffer:
  enable: true
  sniff:
    http: { ports: [1-442, 444-8442, 8444-65535], override-destination: true }
    tls: { ports: [1-79, 81-8079, 8081-65535], override-destination: true }
  force-domain:
      - "+.v2ex.com"
      - www.google.com
      - google.com
  skip-domain:
      - Mijia Cloud
      - dlg.io.mi.com
  sniffing:
    - tls
    - http
  port-whitelist:
    - "80"
    - "443"

tun:
  enable: true
  prefer-h3: true
  listen: 0.0.0.0:53
  stack: gvisor
  dns-hijack:
     - "any:53"
     - "tcp://any:53"
  auto-redir: true
  auto-route: true
  auto-detect-interface: true

dns:
  enable: true
  ipv6: true
  default-nameserver:
    - '1.1.1.1'
    - '8.8.8.8'
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - 'stun.*.*'
    - 'stun.*.*.*'
    - '+.stun.*.*'
    - '+.stun.*.*.*'
    - '+.stun.*.*.*.*'
    - '+.stun.*.*.*.*.*'
    - '*.lan'
    - '+.msftncsi.com'
    - msftconnecttest.com
    - 'time?.*.com'
    - 'time.*.com'
    - 'time.*.gov'
    - 'time.*.apple.com'
    - time-ios.apple.com
    - 'time1.*.com'
    - 'time2.*.com'
    - 'time3.*.com'
    - 'time4.*.com'
    - 'time5.*.com'
    - 'time6.*.com'
    - 'time7.*.com'
    - 'ntp?.*.com'
    - 'ntp.*.com'
    - 'ntp1.*.com'
    - 'ntp2.*.com'
    - 'ntp3.*.com'
    - 'ntp4.*.com'
    - 'ntp5.*.com'
    - 'ntp6.*.com'
    - 'ntp7.*.com'
    - '+.pool.ntp.org'
    - '+.ipv6.microsoft.com'
    - speedtest.cros.wr.pvp.net
    - network-test.debian.org
    - detectportal.firefox.com
    - cable.auth.com
    - miwifi.com
    - routerlogin.com
    - routerlogin.net
    - tendawifi.com
    - tendawifi.net
    - tplinklogin.net
    - tplinkwifi.net
    - '*.xiami.com'
    - tplinkrepeater.net
    - router.asus.com
    - '*.*.*.srv.nintendo.net'
    - '*.*.stun.playstation.net'
    - '*.openwrt.pool.ntp.org'
    - resolver1.opendns.com
    - 'GC._msDCS.*.*'
    - 'DC._msDCS.*.*'
    - 'PDC._msDCS.*.*'
  use-hosts: true
  nameserver:
    - '8.8.4.4'
    - '1.0.0.1'
    - "https://1.0.0.1/dns-query"
    - "https://8.8.4.4/dns-query"
  nameserver-policy:
    'RULE-SET:ir,ircidr,geoip:ir,+.ir,+.bonyan.co': ["217.218.155.155", "217.218.127.127", "https://dns.403.online/dns-query", "https://dns.shecan.ir/dns-query"]

proxies:
  - {"name":"🇧🇾BY | 🟢 | ss | @DeamNet_Proxy | 0","type":"ss","server":"45.87.219.110","port":51348,"password":"F4fChWGojIcmxuMROuVQIQKGKRdg09vKfGp2STzSrdzrUSwZ","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 0","type":"ss","server":"77.83.246.74","port":33320,"password":"4Zwn5rmrUddm1PcGThN114","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 1","type":"ss","server":"51.77.53.200","port":8881,"password":"kDWvXYZoTBcGkC4","cipher":"aes-256-gcm"}
  - {"name":"🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 2","type":"ss","server":"167.71.77.212","port":62062,"password":"UeCtaK8vx4M5UfYOXzCXt5","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇬🇧GB | 🟢 | ss | @OutlineVpnOfficial | 3","type":"ss","server":"142.202.51.58","port":8080,"password":"KixLvKzwjekG00rm","cipher":"aes-256-gcm"}
  - {"name":"🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 4","type":"ss","server":"149.202.82.172","port":8008,"password":"XKFKl2rULjIp74","cipher":"aes-256-gcm"}
  - {"name":"🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 5","type":"ss","server":"81.19.141.45","port":52873,"password":"BXkeUSabwj1rRTj4cLT3O5","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇨🇦CA | 🟢 | ss | @OutlineVpnOfficial | 6","type":"ss","server":"23.162.200.28","port":3389,"password":"Y6R9pAtvxxzmGC","cipher":"aes-256-gcm"}
  - {"name":"🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 7","type":"ss","server":"185.65.202.99","port":49318,"password":"cNnrPBakDwICGyoxsDcLy5","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 8","type":"ss","server":"193.29.139.162","port":8080,"password":"a8bt9fY0QsLS6eLnXUe0Ym","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 9","type":"ss","server":"69.50.95.53","port":5498,"password":"lGqs95QkFHo2NV","cipher":"aes-256-gcm"}
  - {"name":"🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 10","type":"ss","server":"193.29.139.237","port":8080,"password":"a8bt9fY0QsLS6eLnXUe0Ym","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 11","type":"ss","server":"92.243.27.51","port":9802,"password":"aSsoG8kTeefvH0s5A7tchH","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇦🇹AT | 🟢 | ss | @OutlineVpnOfficial | 12","type":"ss","server":"212.113.106.76","port":61992,"password":"pQt1USGLOWskIGPoVX5lKE","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 13","type":"ss","server":"69.50.95.53","port":8091,"password":"PCnnH6SQSnfoS27","cipher":"aes-256-gcm"}
  - {"name":"🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 14","type":"ss","server":"45.158.171.148","port":8080,"password":"a8bt9fY0QsLS6eLnXUe0Ym","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 15","type":"ss","server":"69.50.95.53","port":8118,"password":"cdBIDV42DCwnfIN","cipher":"aes-256-gcm"}
  - {"name":"🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 16","type":"ss","server":"paris.telegavpn.com","port":9802,"password":"RWs00WOsemhUiPV0q9wFIZ","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇦🇪AE | 🟢 | ss | @OutlineVpnOfficial | 17","type":"ss","server":"irancell.xn--g28h.dns-dynamic.net.cdn.cloudflare.net","port":443,"password":"u17T3BvpYaaiuW2c","cipher":"chacha20-ietf-poly1305"}
  - {"name":"🇧🇭BH | 🟢 | ss | @OutlineVpnOfficial | 19","type":"ss","server":"15.184.18.52","port":443,"password":"Bog0ELmMM9DSxDdQ","cipher":"chacha20-ietf-poly1305"}
proxy-groups:
  - name: MANUAL
    type: select
    proxies:
      - URL-TEST
      - FALLBACK
      - '🇧🇾BY | 🟢 | ss | @DeamNet_Proxy | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 1'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 2'
      - '🇬🇧GB | 🟢 | ss | @OutlineVpnOfficial | 3'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 4'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 5'
      - '🇨🇦CA | 🟢 | ss | @OutlineVpnOfficial | 6'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 7'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 8'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 9'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 10'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 11'
      - '🇦🇹AT | 🟢 | ss | @OutlineVpnOfficial | 12'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 13'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 14'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 15'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 16'
      - '🇦🇪AE | 🟢 | ss | @OutlineVpnOfficial | 17'
      - '🇧🇭BH | 🟢 | ss | @OutlineVpnOfficial | 19'
  - name: URL-TEST
    type: url-test
    url: http://www.gstatic.com/generate_204
    interval: 60
    tolerance: 50
    proxies:
      - '🇧🇾BY | 🟢 | ss | @DeamNet_Proxy | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 1'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 2'
      - '🇬🇧GB | 🟢 | ss | @OutlineVpnOfficial | 3'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 4'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 5'
      - '🇨🇦CA | 🟢 | ss | @OutlineVpnOfficial | 6'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 7'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 8'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 9'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 10'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 11'
      - '🇦🇹AT | 🟢 | ss | @OutlineVpnOfficial | 12'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 13'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 14'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 15'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 16'
      - '🇦🇪AE | 🟢 | ss | @OutlineVpnOfficial | 17'
      - '🇧🇭BH | 🟢 | ss | @OutlineVpnOfficial | 19'
  - name: FALLBACK
    type: fallback
    url: http://www.gstatic.com/generate_204
    interval: 60
    proxies:
      - '🇧🇾BY | 🟢 | ss | @DeamNet_Proxy | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 0'
      - '🇵🇱PL | 🟢 | ss | @OutlineVpnOfficial | 1'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 2'
      - '🇬🇧GB | 🟢 | ss | @OutlineVpnOfficial | 3'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 4'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 5'
      - '🇨🇦CA | 🟢 | ss | @OutlineVpnOfficial | 6'
      - '🇩🇪DE | 🟢 | ss | @OutlineVpnOfficial | 7'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 8'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 9'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 10'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 11'
      - '🇦🇹AT | 🟢 | ss | @OutlineVpnOfficial | 12'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 13'
      - '🇳🇱NL | 🟢 | ss | @OutlineVpnOfficial | 14'
      - '🇺🇸US | 🟢 | ss | @OutlineVpnOfficial | 15'
      - '🇫🇷FR | 🟢 | ss | @OutlineVpnOfficial | 16'
      - '🇦🇪AE | 🟢 | ss | @OutlineVpnOfficial | 17'
      - '🇧🇭BH | 🟢 | ss | @OutlineVpnOfficial | 19'
rule-providers:
  ir: {type: http, format: text, behavior: domain, path: ./ruleset/ir.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/ir.txt, interval: 86400}
  ads: {type: http, format: text, behavior: domain, path: ./ruleset/ads.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/ads.txt, interval: 86400}
  ircidr: {type: http, format: text, behavior: ipcidr, path: ./ruleset/ircidr.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/ircidr.txt, interval: 86400}
  private: {type: http, format: text, behavior: ipcidr, path: ./ruleset/private.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/private.txt, interval: 86400}
  apps: {type: http, format: text, behavior: domain, path: ./ruleset/apps.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/apps.txt, interval: 86400}
  malware: {type: http, format: text, behavior: domain, path: ./ruleset/malware.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/malware.txt, interval: 86400}
  phishing: {type: http, format: text, behavior: domain, path: ./ruleset/phishing.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/phishing.txt, interval: 86400}
  cryptominers: {type: http, format: text, behavior: domain, path: ./ruleset/cryptominers.txt, url: https://github.com/chocolate4u/Iran-clash-rules/releases/latest/download/cryptominers.txt, interval: 86400}
rules:
  - IP-CIDR,127.0.0.1/32,DIRECT,no-resolve
  - IP-CIDR,198.18.0.1/16,DIRECT,no-resolve
  - IP-CIDR,28.0.0.1/8,DIRECT,no-resolve
  - IP-CIDR6,::1/128,DIRECT,no-resolve
  - DOMAIN-SUFFIX,local,DIRECT
  - DOMAIN-SUFFIX,ip6-localhost,DIRECT
  - DOMAIN-SUFFIX,ip6-loopback,DIRECT
  - DOMAIN-SUFFIX,lan,DIRECT
  - DOMAIN-SUFFIX,localhost,DIRECT
  - DOMAIN-SUFFIX,ir,DIRECT
  - DOMAIN,clash.razord.top,DIRECT
  - DOMAIN,yacd.haishan.me,DIRECT
  - DOMAIN,yacd.metacubex.one,DIRECT
  - DOMAIN,clash.metacubex.one,DIRECT
  - RULE-SET,ads,REJECT
  - RULE-SET,malware,REJECT
  - RULE-SET,phishing,REJECT
  - RULE-SET,cryptominers,REJECT
  - RULE-SET,private,DIRECT
  - RULE-SET,apps,DIRECT
  - RULE-SET,ir,DIRECT
  - RULE-SET,ircidr,DIRECT
  - MATCH,MANUAL