# Shadowrocket · 内地：国内直连，海外代理
# 导入节点或订阅后，导入并启用本配置；全局路由使用「配置」。
# PROXY 沿用首页当前节点；ALL 手动选节点，AUTO 测速。
# 无脚本、重写或生效 MITM 主机列表；iOS 实机验收状态见验证记录。

[General]
skip-proxy = localhost,*.local,*.lan,captive.apple.com,sequoia.apple.com,seed-sequoia.siri.apple.com,*.ls.apple.com,10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.168.0.0/16,::1/128,fc00::/7,fe80::/10
# iOS TUN 排除路由，保留当前参数名与网段。
tun-excluded-routes = 10.0.0.0/8,100.64.0.0/10,127.0.0.0/8,169.254.0.0/16,172.16.0.0/12,192.0.0.0/24,192.0.2.0/24,192.88.99.0/24,192.168.0.0/16,198.18.0.0/15,198.51.100.0/24,203.0.113.0/24,224.0.0.0/4,233.252.0.0/24,255.255.255.255/32,::1/128,fc00::/7,fe80::/10,ff00::/8
# 国内 DoH + 明文主池；两个地区的 iOS 配置均沿用此池。
dns-server = https://doh.pub/dns-query,https://dns.alidns.com/dns-query,223.5.5.5,119.29.29.29
# 备用明文池；与港澳 YAML 的公共 DoH 实现有意不同。
fallback-dns-server = 223.6.6.6,119.28.28.28
ipv6 = false
dns-direct-system = false
# 直连解析失败允许经代理兜底；不能宣称所有直连查询都仅走直连。
dns-direct-fallback-proxy = true
private-ip-answer = true
icmp-auto-reply = true
hijack-dns = :53,8.8.8.8:53,8.8.4.4:53,1.1.1.1:53,1.0.0.1:53,9.9.9.9:53,149.112.112.112:53,208.67.222.222:53,208.67.220.220:53,114.114.114.114:53,223.5.5.5:53,223.6.6.6:53,119.29.29.29:53
# 局域网、Apple 推送、米家、NTP 和 QQ 登录等兼容项。
always-real-ip = *.lan,*.local,captive.apple.com,*.msftconnecttest.com,*.msftncsi.com,*.push.apple.com,*.market.xiaomi.com,localhost.ptlogin2.qq.com,pool.ntp.org,*.pool.ntp.org,time.*.com,time.*.gov,time.*.edu.cn,time.*.apple.com,*.ntp.org.cn
# 仅代理连接阻止 QUIC；直连不受此项影响。
block-quic = all-proxy
# 节点不支持 UDP 时拒绝，保留明确失败行为。
udp-policy-not-supported-behaviour = REJECT

[Proxy Group]
# AI 与流媒体默认 PROXY；内地 Microsoft/Apple 和港澳 AI_EXTRA 默认 DIRECT。
ALL = select,policy-regex-filter=^((?!(流量|到期|套餐|订阅|官网|剩余|Expire|expire|Traffic|traffic)).)*$
AUTO = url-test,policy-regex-filter=^((?!(流量|到期|套餐|订阅|官网|剩余|Expire|expire|Traffic|traffic)).)*$,interval=300,timeout=5,url=https://cp.cloudflare.com/generate_204
AI = select,PROXY,AUTO,ALL,DIRECT
Telegram = select,PROXY,AUTO,ALL,DIRECT
YouTube = select,PROXY,AUTO,ALL,DIRECT
Streaming = select,PROXY,AUTO,ALL,DIRECT
Microsoft = select,DIRECT,PROXY,AUTO,ALL
Apple = select,DIRECT,PROXY,AUTO,ALL

[Rule]
# 顺序与基线逐条一致：国内保护先于广告，专项服务先于宽泛规则和兜底。
# 自建清单通过线上 raw 读取，修改后须随主配置一起发布。
# force-remote-dns 仅保留在已有内联规则，不移到 RULE-SET。
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Lan/Lan.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/direct-supplement.list,DIRECT
DOMAIN-SUFFIX,dnsleaktest.com,PROXY,force-remote-dns
DOMAIN-SUFFIX,ipleak.net,PROXY,force-remote-dns
DOMAIN-SUFFIX,browserleaks.com,PROXY,force-remote-dns
DOMAIN-SUFFIX,browserleaks.org,PROXY,force-remote-dns
DOMAIN-SUFFIX,dnsleak.com,PROXY,force-remote-dns
DOMAIN-SUFFIX,dns.google,PROXY,force-remote-dns
DOMAIN-SUFFIX,cloudflare-dns.com,PROXY,force-remote-dns
DOMAIN-SUFFIX,dns.cloudflare.com,PROXY,force-remote-dns
DOMAIN-SUFFIX,one.one.one.one,PROXY,force-remote-dns
DOMAIN-SUFFIX,dns.quad9.net,PROXY,force-remote-dns
DOMAIN-SUFFIX,doh.opendns.com,PROXY,force-remote-dns
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/proxy-supplement.list,PROXY
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AdvertisingLite/AdvertisingLite.list,REJECT
# 与同名 RULE-SET 成对保留：上游域名表使用 DOMAIN-SET。
DOMAIN-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AdvertisingLite/AdvertisingLite_Domain.list,REJECT
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/telemetry.list,REJECT
DOMAIN,stun.l.google.com,AI,force-remote-dns
DOMAIN,stun1.l.google.com,AI,force-remote-dns
DOMAIN,stun.cloudflare.com,AI,force-remote-dns
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/OpenAI/OpenAI.list,AI
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Claude/Claude.list,AI
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Gemini/Gemini.list,AI
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/ai-supplement.list,AI
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Telegram/Telegram.list,Telegram
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/YouTube/YouTube.list,YouTube
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/GitHub/GitHub.list,PROXY
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Google/Google.list,PROXY
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Netflix/Netflix.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Disney/Disney.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/HBO/HBO.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Hulu/Hulu.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AmazonPrimeVideo/AmazonPrimeVideo.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Spotify/Spotify.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/TikTok/TikTok.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/AppleTV/AppleTV.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Bahamut/Bahamut.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/BiliBiliIntl/BiliBiliIntl.list,Streaming
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/streaming-supplement.list,Streaming
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Microsoft/Microsoft.list,Microsoft
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Apple/Apple.list,Apple
# 与同名 RULE-SET 成对保留：上游域名表使用 DOMAIN-SET。
DOMAIN-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/Apple/Apple_Domain.list,Apple
RULE-SET,https://raw.githubusercontent.com/UykiZhao/Clash-Party-Override-Rule/main/rules/shadowrocket/academic.list,PROXY
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/SteamCN/SteamCN.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/China/China.list,DIRECT
# 与同名 RULE-SET 成对保留：上游域名表使用 DOMAIN-SET。
DOMAIN-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/China/China_Domain.list,DIRECT
RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Shadowrocket/ChinaIPs/ChinaIPs.list,DIRECT,no-resolve
FINAL,PROXY

[Host]
localhost = 127.0.0.1

[MITM]
hostname =