Open_Beta.yaml

mixed-port: 5678
allow-lan: false
mode: rule
log-level: silent
external-controller: 127.0.0.1:1234
unified-delay: true
tcp-concurrent: true
ipv6: true

profile:
  store-selected: true
  store-fake-ip: true

tun:
  enable: true
  stack: system
  auto-route: true
  auto-detect-interface: true
  dns-hijack:
    - any:53
  mtu: 1492

dns:
  enable: true
  prefer-h3: true
  use-hosts: false
  listen: 127.0.0.1:5335
  ipv6: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.0/15
  fake-ip-filter-mode: blacklist
  nameserver-policy:
    "geosite: cn, private": [https://doh.pub/dns-query, tls://dns.alidns.com]
  default-nameserver: [https://120.53.53.53/dns-query, tls://223.5.5.5:853]
  nameserver: [https://1.1.1.1:443/dns-query, tls://8.8.4.4:853]
  fake-ip-filter:
    [
      "*.lan",
      "stun.*.*.*",
      "stun.*.*",
      time.windows.com,
      time.nist.gov,
      time.apple.com,
      time.asia.apple.com,
      "*.ntp.org.cn",
      "*.openwrt.pool.ntp.org",
      time1.cloud.tencent.com,
      time.ustc.edu.cn,
      pool.ntp.org,
      ntp.ubuntu.com,
      ntp.aliyun.com,
      ntp1.aliyun.com,
      ntp2.aliyun.com,
      ntp3.aliyun.com,
      ntp4.aliyun.com,
      ntp5.aliyun.com,
      ntp6.aliyun.com,
      ntp7.aliyun.com,
      time1.aliyun.com,
      time2.aliyun.com,
      time3.aliyun.com,
      time4.aliyun.com,
      time5.aliyun.com,
      time6.aliyun.com,
      time7.aliyun.com,
      "*.time.edu.cn",
      time1.apple.com,
      time2.apple.com,
      time3.apple.com,
      time4.apple.com,
      time5.apple.com,
      time6.apple.com,
      time7.apple.com,
      time1.google.com,
      time2.google.com,
      time3.google.com,
      time4.google.com,
      music.163.com,
      "*.music.163.com",
      "*.126.net",
      musicapi.taihe.com,
      music.taihe.com,
      songsearch.kugou.com,
      trackercdn.kugou.com,
      "*.kuwo.cn",
      api-jooxtt.sanook.com,
      api.joox.com,
      joox.com,
      y.qq.com,
      "*.y.qq.com",
      streamoc.music.tc.qq.com,
      mobileoc.music.tc.qq.com,
      isure.stream.qqmusic.qq.com,
      dl.stream.qqmusic.qq.com,
      aqqmusic.tc.qq.com,
      amobile.music.tc.qq.com,
      "*.xiami.com",
      "*.music.migu.cn",
      music.migu.cn,
      "*.msftconnecttest.com",
      "*.msftncsi.com",
      localhost.ptlogin2.qq.com,
      "*.*.*.srv.nintendo.net",
      "*.*.stun.playstation.net",
      "xbox.*.*.microsoft.com",
      "*.ipv6.microsoft.com",
      "*.*.xboxlive.com",
      speedtest.cros.wr.pvp.net,
    ]

proxies:
  - name: VLess+Vision+Reality
    type: vless
    server: 8.8.8.8 #server_ip
    port: 8888
    uuid: 7bf881ce-df07-4e62-abbe-19b02d0a89f3
    flow: xtls-rprx-vision
    packet-encoding: xudp
    udp: true
    tfo: true
    tls: true
    servername: www.yahoo.com #SNI
    client-fingerprint: chrome
    reality-opts: #reality_settings
      {
        public-key: TNLrMyAmg7MlC3q9ZF2fSj-evpu2-CzftwYcB2P-Ukc,
        short-id: d3,
        31821368,
        e701,
        6aed2e35e6,
        389d8794c092,
        6e590a,
        84a3be823ae055,
        39d258617fc09bb1,
      }

  - name: Shadowsocks1
    type: ss
    server: 1.1.1.1 #server_ip
    port: 6666
    cipher: aes-128-gcm
    password: your/password/here114514
    udp: true
    tfo: true

proxy-groups:
  - name: Proxy
    type: url-test
    proxies: [VLess+Vision+Reality, Shadowsocks]
    url: "https://www.gstatic.com/generate_204"
    interval: 400
    tolerance: 70
    timeout: 500

  - name: VLess
    type: select
    proxies: [VLess+Vision+Reality]

  - name: bilibili
    type: select
    proxies: [DIRECT, Proxy]
    url: "https://upos-hz-mirrorakam.akamaized.net"
    disable-udp: true

  - name: 广告
    type: select
    proxies: [REJECT, Proxy]

  - name: Shadowsocks
    type: select
    proxies: [Shadowsocks1]

rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml
    interval: 86400

  icloud:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
    path: ./ruleset/icloud.yaml
    interval: 86400

  apple:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
    path: ./ruleset/apple.yaml
    interval: 86400

  proxy:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
    path: ./ruleset/proxy.yaml
    interval: 86400

  direct:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
    path: ./ruleset/direct.yaml
    interval: 86400

  private:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    path: ./ruleset/private.yaml
    interval: 86400

  bilibili:
    type: http
    behavior: classical
    url: "https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/BiliBili/BiliBili_No_Resolve.yaml"
    path: ./ruleset/bilibili.yaml
    interval: 86400

  cncidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
    path: ./ruleset/cncidr.yaml
    interval: 86400

  lancidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
    path: ./ruleset/lancidr.yaml
    interval: 86400

  applications:
    type: http
    behavior: classical
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    path: ./ruleset/applications.yaml
    interval: 86400

rules:
  - DOMAIN,clash.razord.top,DIRECT
  - DOMAIN,yacd.haishan.me,DIRECT
  - RULE-SET,applications,DIRECT
  - RULE-SET,private,DIRECT,no-resolve
  - RULE-SET,reject,广告,no-resolve
  - RULE-SET,bilibili,bilibili,no-resolve
  - RULE-SET,proxy,Proxy,no-resolve
  - RULE-SET,icloud,DIRECT,no-resolve
  - RULE-SET,apple,DIRECT,no-resolve
  - RULE-SET,direct,DIRECT,no-resolve
  - RULE-SET,lancidr,DIRECT
  - RULE-SET,cncidr,DIRECT
  - GEOIP,LAN,DIRECT
  - GEOIP,CN,DIRECT
  - MATCH,Proxy