#!name=Shane Surge - China Stable #!desc=iPhone / iPad / Mac 三端一致，中国大陆长期使用，稳定优先。节点由 Amy 非托管订阅提供。 #!MANAGED-CONFIG https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/By-Shane.conf interval=86400 strict=false [General] # 日常保持 notify；排障时可在 Surge UI 临时切换 info/verbose。 loglevel = notify # 主要在中国大陆使用：本地 DNS 只服务于直连和规则判断，代理请求默认由远端解析。 dns-server = system, 223.5.5.5, 119.29.29.29 ipv6 = false ipv6-vif = off # 局域网地址仅调整接管方式，真正的直连由 [Rule] 决定。 skip-proxy = 127.0.0.1, localhost, *.local, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 exclude-simple-hostnames = true # 语音/会议优先处理 UDP；节点不支持 UDP 时拒绝，绝不回退本地直连泄漏出口。 udp-priority = true udp-policy-not-supported-behaviour = REJECT proxy-test-udp = apple.com@1.0.0.1 # 节点 UDP 能力未确认前，代理流量的 QUIC 统一回退 HTTPS/TCP，优先稳定。 block-quic = all-proxy internet-test-url = http://captive.apple.com/hotspot-detect.html proxy-test-url = http://www.gstatic.com/generate_204 test-timeout = 5 show-error-page = true show-error-page-for-reject = true # iOS/iPadOS 稳定性设置；Mac 会忽略不适用项。 wifi-assist = true # 局域网代理默认关闭。临时共享时在 Surge UI 打开，不对公网暴露。 allow-wifi-access = false proxy-restricted-to-lan = true gateway-restricted-to-lan = true [Proxy Group] # ⚠️ 本机订阅填写说明 # ┌──────────────────────────────────────────────────────────────────────────┐ # │ 只替换 policy-path= 后面、第一个英文逗号 , 前面的整段网址 │ # │ 不要改动第一个逗号，以及逗号后面的任何内容 │ # │ 真实订阅网址只保存在本机，不要上传到 GitHub │ # └──────────────────────────────────────────────────────────────────────────┘ 全部节点 = select, policy-path=https://example.invalid/AMY_SUBSCRIPTION_URL, update-interval=21600, policy-regex-filter=^((?!流量|到期|重置|官网|套餐|剩余).)*$, hidden=true, no-alert=true # Smart Group 会按站点学习质量并在故障时自适应重试；地区锁定则由上层手动组控制。 香港节点 = smart, include-other-group=全部节点, policy-regex-filter=(香港|HK|Hong Kong), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/hong-kong.png 新加坡节点 = smart, include-other-group=全部节点, policy-regex-filter=(新加坡|SG|Singapore), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/singapore.png 日本节点 = smart, include-other-group=全部节点, policy-regex-filter=(日本|JP|Japan), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/japan.png 美国节点 = smart, include-other-group=全部节点, policy-regex-filter=(美国|US|United States), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/united-states.png 台湾节点 = smart, include-other-group=全部节点, policy-regex-filter=(台湾|TW|Taiwan), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/china.png 自动选择 = smart, include-other-group=全部节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/auto.png # 通话专用组在一次评估周期内只选择一个实际节点，避免 Smart Group 按不同目标站点切换出口。 # 250 ms tolerance + 1 小时评估周期：小幅延迟波动不触发换线，明显故障仍可自动恢复。 香港通话 = url-test, include-other-group=全部节点, policy-regex-filter=(香港|HK|Hong Kong), interval=3600, tolerance=250, evaluate-before-use=true, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/hong-kong-call.png 新加坡通话 = url-test, include-other-group=全部节点, policy-regex-filter=(新加坡|SG|Singapore), interval=3600, tolerance=250, evaluate-before-use=true, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/singapore-call.png # 平衡模式：日常仅需关注下列业务组。各组第一项是初始建议。 节点选择 = select, 香港节点, 新加坡节点, 日本节点, 美国节点, 台湾节点, 自动选择, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/route.png 人工智能 = select, 美国节点, 日本节点, 新加坡节点, 台湾节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/openai.png 谷歌服务 = select, 日本节点, 美国节点, 新加坡节点, 台湾节点, 香港节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/google.png 电报消息 = select, 新加坡通话, 香港通话, 日本节点, 节点选择, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/telegram.png 国际媒体 = select, 美国节点, 日本节点, 新加坡节点, 香港节点, 台湾节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/media.png # 账户型服务和 TikTok 直接选择真实节点，避免 Smart Group 在使用过程中更换出口 IP。 领英 = select, include-other-group=全部节点, policy-regex-filter=(香港|HK|Hong Kong|新加坡|SG|Singapore|美国|US|United States), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/linkedin.png TikTok日本固定 = select, include-other-group=全部节点, policy-regex-filter=(日本|JP|Japan), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/tiktok-japan.png TikTok美国固定 = select, include-other-group=全部节点, policy-regex-filter=(美国|US|United States), icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/tiktok-united-states.png TikTok = select, TikTok日本固定, TikTok美国固定, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/tiktok.png Zoom会议 = select, DIRECT, 香港通话, 新加坡通话, 日本节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/zoom.png 开发服务 = select, 香港节点, 新加坡节点, 日本节点, 美国节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/github.png PikPak = select, 新加坡节点, 香港节点, 日本节点, 节点选择, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/pikpak.png 苹果服务 = select, DIRECT, 美国节点, 节点选择, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/apple.png 微软服务 = select, DIRECT, 香港节点, 节点选择, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/microsoft.png 群晖办公 = select, DIRECT, 节点选择, 香港节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/nas.png 加密货币 = select, DIRECT, 新加坡节点, 日本节点, 台湾节点, 香港节点, icon-url=https://raw.githubusercontent.com/cheeseher/Shane-Surge-Config/main/assets/icons/crypto.png [Rule] # 金融 App 优先匹配，不依赖 skip-proxy。 # 这些关键规则直接内联，减少会议、金融等核心路径对外部规则服务的依赖。 DOMAIN-SUFFIX,bochk.com,DIRECT DOMAIN-SUFFIX,boc.cn,DIRECT DOMAIN-SUFFIX,hsbc.com.hk,DIRECT DOMAIN-SUFFIX,hsbc.com,DIRECT DOMAIN-SUFFIX,za.group,DIRECT DOMAIN-SUFFIX,citibank.com.hk,DIRECT DOMAIN-SUFFIX,sc.com,DIRECT DOMAIN-SUFFIX,futunn.com,DIRECT DOMAIN-SUFFIX,futu5.com,DIRECT DOMAIN-SUFFIX,futuhk.com,DIRECT DOMAIN-SUFFIX,fosun.com,DIRECT DOMAIN-SUFFIX,fosunwealth.com,DIRECT DOMAIN-SUFFIX,ylzq.com.hk,DIRECT DOMAIN-SUFFIX,yxzq.com,DIRECT DOMAIN-SUFFIX,u-smart.com.hk,DIRECT DOMAIN-SUFFIX,usmart.hk,DIRECT DOMAIN-SUFFIX,usmart.sg,DIRECT DOMAIN-SUFFIX,usmartsecurities.com,DIRECT # 加密货币平台：默认 DIRECT，不自动伪装地区。 DOMAIN-SUFFIX,binance.com,加密货币 DOMAIN-SUFFIX,binance.me,加密货币 DOMAIN-SUFFIX,binance.info,加密货币 DOMAIN-SUFFIX,bnbstatic.com,加密货币 DOMAIN-SUFFIX,bnappzh.co,加密货币 DOMAIN-SUFFIX,bnappzh.com,加密货币 DOMAIN-SUFFIX,bnappzh.mobi,加密货币 DOMAIN-SUFFIX,bntrace.com,加密货币 DOMAIN-SUFFIX,okx.com,加密货币 DOMAIN-SUFFIX,okx.com.cn,加密货币 DOMAIN-SUFFIX,okx-dns.com,加密货币 DOMAIN-SUFFIX,okex.com,加密货币 DOMAIN-SUFFIX,okg.com,加密货币 DOMAIN-SUFFIX,okcoin.com,加密货币 DOMAIN-SUFFIX,byabcde.com,加密货币 DOMAIN-SUFFIX,byapps.net,加密货币 DOMAIN-SUFFIX,bybdc6.com,加密货币 DOMAIN-SUFFIX,bybit-aws.com,加密货币 DOMAIN-SUFFIX,bybit.biz,加密货币 DOMAIN-SUFFIX,bybit.com,加密货币 DOMAIN-SUFFIX,bybitglobal.com,加密货币 DOMAIN-SUFFIX,byd3c3.com,加密货币 # OpenAI / Claude / Copilot；不包含 Stripe、Sentry、Auth0 等共享域名。 DOMAIN,api.openai.com,人工智能 DOMAIN,auth.openai.com,人工智能 DOMAIN,chat.openai.com,人工智能 DOMAIN,openai-api.arkoselabs.com,人工智能 DOMAIN,client-api.arkoselabs.com,人工智能 DOMAIN-SUFFIX,ai.com,人工智能 DOMAIN-SUFFIX,chatgpt.com,人工智能 DOMAIN-SUFFIX,chatgpt.livekit.cloud,人工智能 DOMAIN-SUFFIX,host.livekit.cloud,人工智能 DOMAIN-SUFFIX,oaistatic.com,人工智能 DOMAIN-SUFFIX,oaiusercontent.com,人工智能 DOMAIN-SUFFIX,openai.com,人工智能 DOMAIN-SUFFIX,openaiapi-site.azureedge.net,人工智能 DOMAIN-SUFFIX,turn.livekit.cloud,人工智能 DOMAIN-SUFFIX,anthropic.com,人工智能 DOMAIN-SUFFIX,claude.ai,人工智能 DOMAIN-SUFFIX,claude.com,人工智能 DOMAIN-SUFFIX,claudeusercontent.com,人工智能 DOMAIN-SUFFIX,grok.com,人工智能 DOMAIN-SUFFIX,x.ai,人工智能 DOMAIN,copilot.microsoft.com,人工智能 DOMAIN,sydney.bing.com,人工智能 DOMAIN-SUFFIX,bingapis.com,人工智能 DOMAIN-SUFFIX,edgeservices.bing.com,人工智能 # Gemini 与 Google 账户固定使用同一出口。 DOMAIN,ai.google.dev,谷歌服务 DOMAIN,alkalimakersuite-pa.clients6.google.com,谷歌服务 DOMAIN-KEYWORD,gemini,谷歌服务 DOMAIN-KEYWORD,generativelanguage,谷歌服务 DOMAIN-SUFFIX,bard.google.com,谷歌服务 DOMAIN-SUFFIX,gemini.google.com,谷歌服务 DOMAIN-SUFFIX,generativeai.google,谷歌服务 DOMAIN-SUFFIX,generativelanguage.googleapis.com,谷歌服务 DOMAIN-SUFFIX,deepmind.com,谷歌服务 DOMAIN-SUFFIX,deepmind.google,谷歌服务 DOMAIN-SUFFIX,proactivebackend-pa.googleapis.com,谷歌服务 # 通讯与会议。Zoom 的 TCP/UDP 使用同一策略，不再拆分出口。 PROCESS-NAME,Telegram,电报消息 #!MACOS-ONLY RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Telegram/Telegram.list,电报消息 PROCESS-NAME,zoom.us,Zoom会议 #!MACOS-ONLY DOMAIN-SUFFIX,zoom.us,Zoom会议 DOMAIN-SUFFIX,zoom.com,Zoom会议 DOMAIN-SUFFIX,zoom.com.cn,Zoom会议 DOMAIN-SUFFIX,zoom.cn,Zoom会议 DOMAIN-SUFFIX,zoomgov.com,Zoom会议 # Zoom Meetings/Webinars 当前官方媒体 IP 范围。 # 媒体常直接连接 IP，若只写域名会掉入 FINAL，再次造成音频/投屏分路。 IP-CIDR,3.7.35.0/25,Zoom会议,no-resolve IP-CIDR,3.235.82.0/23,Zoom会议,no-resolve IP-CIDR,3.235.96.0/23,Zoom会议,no-resolve IP-CIDR,15.220.80.0/24,Zoom会议,no-resolve IP-CIDR,15.220.81.0/25,Zoom会议,no-resolve IP-CIDR,18.254.23.128/25,Zoom会议,no-resolve IP-CIDR,18.254.61.0/25,Zoom会议,no-resolve IP-CIDR,20.203.158.80/28,Zoom会议,no-resolve IP-CIDR,20.203.190.192/26,Zoom会议,no-resolve IP-CIDR,52.61.100.128/25,Zoom会议,no-resolve IP-CIDR,64.211.144.0/24,Zoom会议,no-resolve IP-CIDR,64.224.32.0/19,Zoom会议,no-resolve IP-CIDR,69.174.108.0/22,Zoom会议,no-resolve IP-CIDR,101.36.167.0/24,Zoom会议,no-resolve IP-CIDR,101.36.170.0/23,Zoom会议,no-resolve IP-CIDR,103.122.166.0/23,Zoom会议,no-resolve IP-CIDR,111.33.115.0/25,Zoom会议,no-resolve IP-CIDR,111.33.181.0/25,Zoom会议,no-resolve IP-CIDR,115.110.154.192/26,Zoom会议,no-resolve IP-CIDR,115.114.56.192/26,Zoom会议,no-resolve IP-CIDR,115.114.115.0/26,Zoom会议,no-resolve IP-CIDR,115.114.131.0/26,Zoom会议,no-resolve IP-CIDR,121.244.146.0/27,Zoom会议,no-resolve IP-CIDR,134.224.0.0/16,Zoom会议,no-resolve IP-CIDR,137.66.128.0/17,Zoom会议,no-resolve IP-CIDR,144.195.0.0/16,Zoom会议,no-resolve IP-CIDR,147.124.96.0/19,Zoom会议,no-resolve IP-CIDR,149.137.0.0/17,Zoom会议,no-resolve IP-CIDR,156.45.0.0/17,Zoom会议,no-resolve IP-CIDR,159.124.0.0/16,Zoom会议,no-resolve IP-CIDR,160.1.56.128/25,Zoom会议,no-resolve IP-CIDR,161.199.136.0/22,Zoom会议,no-resolve IP-CIDR,162.12.232.0/22,Zoom会议,no-resolve IP-CIDR,162.255.36.0/22,Zoom会议,no-resolve IP-CIDR,166.108.64.0/18,Zoom会议,no-resolve IP-CIDR,168.140.0.0/17,Zoom会议,no-resolve IP-CIDR,170.114.0.0/16,Zoom会议,no-resolve IP-CIDR,173.231.80.0/20,Zoom会议,no-resolve IP-CIDR,192.204.12.0/22,Zoom会议,no-resolve IP-CIDR,198.251.128.0/17,Zoom会议,no-resolve IP-CIDR,203.200.219.128/27,Zoom会议,no-resolve IP-CIDR,204.80.104.0/21,Zoom会议,no-resolve IP-CIDR,206.247.0.0/16,Zoom会议,no-resolve IP-CIDR,221.122.63.0/24,Zoom会议,no-resolve IP-CIDR,221.122.64.0/24,Zoom会议,no-resolve IP-CIDR,221.122.88.64/27,Zoom会议,no-resolve IP-CIDR,221.122.88.128/25,Zoom会议,no-resolve IP-CIDR,221.122.89.128/25,Zoom会议,no-resolve IP-CIDR,221.123.139.192/27,Zoom会议,no-resolve IP-CIDR6,2407:30c0::/32,Zoom会议,no-resolve IP-CIDR6,2600:9000:2600::/48,Zoom会议,no-resolve IP-CIDR6,2620:123:2000::/40,Zoom会议,no-resolve # 开发、下载与存储。 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/GitHub/GitHub.list,开发服务 DOMAIN-SUFFIX,mypikpak.com,PikPak DOMAIN-SUFFIX,pikpak.net,PikPak DOMAIN-SUFFIX,pikpak.me,PikPak DOMAIN-SUFFIX,pikpakdrive.com,PikPak RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Synology/Synology.list,群晖办公 # 流媒体优先于 Apple/Google 通用规则，保持目标地区。 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/YouTube/YouTube.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Netflix/Netflix.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Disney/Disney.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/PrimeVideo/PrimeVideo.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/HBO/HBO.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Spotify/Spotify.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/AppleTV/AppleTV.list,国际媒体 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/TikTok/TikTok.list,TikTok RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Apple/Apple.list,苹果服务 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Microsoft/Microsoft.list,微软服务 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Google/Google.list,谷歌服务 # LinkedIn 核心域名内联，外部规则集作为补充；整个登录会话固定到同一真实节点。 DOMAIN-SUFFIX,linkedin.com,领英 DOMAIN-SUFFIX,licdn.com,领英 DOMAIN-SUFFIX,licdn.cn,领英 DOMAIN-SUFFIX,linkedin.cn,领英 DOMAIN-SUFFIX,linkedin.at,领英 DOMAIN-SUFFIX,lnkd.in,领英 DOMAIN-SUFFIX,bizographics.com,领英 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/LinkedIn/LinkedIn.list,领英 # 其他常用社交并入主策略，避免界面过度分组。 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Twitter/Twitter.list,节点选择 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Facebook/Facebook.list,节点选择 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/Instagram/Instagram.list,节点选择 # 轻量广告拦截：优先低误杀、低耗电，不开启 MITM。 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/AdvertisingLite/AdvertisingLite.list,REJECT # 中国大陆与局域网直连；其他流量最终进入主策略。 RULE-SET,https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Surge/ChinaMax/ChinaMax.list,DIRECT GEOIP,CN,DIRECT,no-resolve RULE-SET,LAN,DIRECT FINAL,节点选择,dns-failed # 默认不配置 MITM/Rewrite/Script。如后续确有抓包需求，只对最小 hostname 范围单独开启。