From d95e4420154f6c0b66772e23a001ef137faee4f0 Mon Sep 17 00:00:00 2001 From: Hypick Date: Mon, 3 Aug 2026 13:48:17 +0300 Subject: [PATCH] update configs --- README.md | 2 +- Remnawave/response_rule.sjson | 115 ++++++++++ Remnawave/templates/Singbox/client.json | 274 ++++++++++++++++++++++++ clash/README.md | 64 ++++-- clash/config/client.yaml | 241 ++++++++++++--------- clash/config/router.yaml | 188 ++++++++++------ singbox/config/client.json | 250 --------------------- 7 files changed, 694 insertions(+), 440 deletions(-) create mode 100644 Remnawave/response_rule.sjson create mode 100644 Remnawave/templates/Singbox/client.json delete mode 100644 singbox/config/client.json diff --git a/README.md b/README.md index c053ad6..19bac90 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,7 @@ * **`clash/config/`** * `client.yaml` — основной конфиг для десктопных и мобильных клиентов. * `router.yaml` — конфигурация для роутеров. - * `openwrt/` (`clashoo.yaml`) — профиль, адаптированный под OpenWRT. + * `openwrt/` (`clashoo.yaml`) — готовая настройка для утилиты **Clashoo** на OpenWRT. * `wl/` (`full.yaml`, `lite.yaml`) — конфигурации для обхода белых списков. * **`clash/rules/`** * Кастомные наборы правил для маршрутизации. diff --git a/Remnawave/response_rule.sjson b/Remnawave/response_rule.sjson new file mode 100644 index 0000000..bdf699e --- /dev/null +++ b/Remnawave/response_rule.sjson @@ -0,0 +1,115 @@ +{ + "version": "1", + "rules": [ + { + "name": "Browser Subscription", + "description": "System critical: do not delete or disable this rule.", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "accept", + "operator": "CONTAINS", + "value": "text/html", + "caseSensitive": true + } + ], + "responseType": "BROWSER" + }, + { + "name": "OpenWRT Mihomo Clients", + "description": "Response with generated YAML config (Mihomo Template)", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "user-agent", + "operator": "REGEX", + "value": "^(?:nikki)", + "caseSensitive": false + } + ], + "responseType": "MIHOMO", + "responseModifications": { + "subscriptionTemplate": "Router" + } + }, + { + "name": "Mihomo Clients", + "description": "Response with generated YAML config (Mihomo Template)", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "user-agent", + "operator": "REGEX", + "value": "^(?:flclash|flowvy|murge|mihomo|prizrak-box|koala-clash|clash(?:-verge|-nyanpasu|x meta|[-.]?meta))", + "caseSensitive": false + } + ], + "responseType": "MIHOMO", + "responseModifications": { + "subscriptionTemplate": "Client" + } + }, + { + "name": "Stash (iOS, macOS)", + "description": "Response with generated YAML config (Stash Template)", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "user-agent", + "operator": "REGEX", + "value": "^stash", + "caseSensitive": false + } + ], + "responseType": "STASH" + }, + { + "name": "Sing-box clients", + "description": "Response with generated JSON config (Singbox template)", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "user-agent", + "operator": "REGEX", + "value": "^sfa|sfi|sfm|sft|karing|singbox|inhive", + "caseSensitive": false + } + ], + "responseType": "SINGBOX", + "responseModifications": { + "subscriptionTemplate": "Client" + } + }, + { + "name": "Clash Core Clients", + "description": "Response with generated YAML config (Clash Template)", + "enabled": true, + "operator": "AND", + "conditions": [ + { + "headerName": "user-agent", + "operator": "REGEX", + "value": "^clash", + "caseSensitive": false + } + ], + "responseType": "CLASH", + "responseModifications": { + "subscriptionTemplate": "Client" + } + }, + { + "name": "Fallback Base64", + "description": "System critical: do not delete or disable this rule.", + "enabled": true, + "operator": "AND", + "conditions": [], + "responseType": "XRAY_BASE64" + } + ] +} diff --git a/Remnawave/templates/Singbox/client.json b/Remnawave/templates/Singbox/client.json new file mode 100644 index 0000000..a848057 --- /dev/null +++ b/Remnawave/templates/Singbox/client.json @@ -0,0 +1,274 @@ +{ + "dns": { + "rules": [ + { + "rule_set": "geosite-private", + "server": "dns-ru" + }, + { + "rule_set": "oisd-big", + "server": "dns-block" + }, + { + "rule_set": [ + "telegram", + "ru-bundle" + ], + "server": "dns-proxy" + }, + { + "query_type": [ + "A", + "AAAA" + ], + "server": "dns-fakeip" + } + ], + "fakeip": { + "enabled": true, + "inet4_range": "198.18.0.0/16" + }, + "servers": [ + { + "tag": "dns-ru", + "address": "https://77.88.8.8/dns-query", + "detour": "direct" + }, + { + "tag": "dns-proxy", + "address": "https://1.1.1.1/dns-query", + "detour": "VPN" + }, + { + "tag": "dns-block", + "address": "rcode://refused" + }, + { + "tag": "dns-fakeip", + "address": "fakeip" + } + ], + "independent_cache": true + }, + "log": { + "level": "warn", + "timestamp": true + }, + "route": { + "rules": [ + { + "action": "sniff" + }, + { + "mode": "or", + "type": "logical", + "rules": [ + { + "protocol": "dns" + }, + { + "port": 53 + } + ], + "action": "hijack-dns" + }, + { + "outbound": "direct", + "ip_is_private": true + }, + { + "domain_suffix": [ + "ipwho.is", + "ipapi.is", + "ipapi.co", + "api.ip.sb", + "ip-api.com" + ], + "outbound": "VPN" + }, + { + "outbound": "direct", + "rule_set": [ + "ru-app-list" + ] + }, + { + "geoip": [ + "telegram" + ], + "geosite": [ + "telegram" + ], + "outbound": "VPN" + }, + { + "geoip": [ + "cloudflare" + ], + "outbound": "VPN" + }, + { + "outbound": "VPN", + "rule_set": [ + "refilter_ipsum", + "refilter_domains" + ] + }, + { + "outbound": "Блокировки РФ", + "rule_set": [ + "rknasnblock", + "ru-bundle" + ] + } + ], + "rule_set": [ + { + "tag": "ru-app-list", + "url": "https://raw.githubusercontent.com/legiz-ru/sb-rule-sets/main/ru-app-list.srs", + "type": "remote", + "format": "binary", + "download_detour": "VPN" + }, + { + "tag": "refilter_domains", + "url": "https://github.com/1andrevich/Re-filter-lists/releases/latest/download/ruleset-domain-refilter_domains.srs", + "type": "remote", + "format": "binary", + "download_detour": "VPN" + }, + { + "tag": "refilter_ipsum", + "url": "https://github.com/1andrevich/Re-filter-lists/releases/latest/download/ruleset-ip-refilter_ipsum.srs", + "type": "remote", + "format": "binary", + "download_detour": "VPN" + }, + { + "tag": "rknasnblock", + "url": "https://github.com/legiz-ru/sb-rule-sets/raw/main/rknasnblock.srs", + "type": "remote", + "format": "binary", + "download_detour": "VPN" + }, + { + "tag": "ru-bundle", + "url": "https://github.com/legiz-ru/sb-rule-sets/raw/main/ru-bundle.srs", + "type": "remote", + "format": "binary", + "download_detour": "VPN" + } + ], + "override_android_vpn": true, + "auto_detect_interface": true, + "final": "Остальные сайты" + }, + "inbounds": [ + { + "mtu": 9000, + "tag": "tun-in", + "type": "tun", + "sniff": true, + "stack": "gvisor", + "platform": { + "http_proxy": { + "server": "127.0.0.1", + "enabled": true, + "server_port": 2412 + } + }, + "auto_route": true, + "strict_route": true, + "inet4_address": "172.19.0.1/30", + "inet6_address": "fdfe:dcba:9876::1/126", + "interface_name": "tun125", + "endpoint_independent_nat": true, + "exclude_package": [ + "az.vtb.android", "business.gid.hero", "business.gid.universe", "chat.strelka", "com.allgoritm.youla", "com.asmo.infometeos", "com.birzha_rt", "com.bogg.art.vkt", "com.dartit.mobileagent", "com.dartit.rtcabinet", "com.equeo.megafondraiv", "com.gmeteos.infometeos", "com.goodok.mts", "com.grotem.match", "com.horosho.tips", "com.indygomobi.detifm", "com.indygomobi.relaxfm", "com.indygomobi.zenit", "com.iwedia.ui.beeline.atv", "com.kazanexpress.ke_app", "com.lamoda.lite", "com.lenta.employee", "com.lenta.lentochka_service", "com.magnit.delivery.courier", "com.match.club", "com.matchtv.rustore", "com.mcd.superapp", "com.mcptt", "com.megafon.kk", "com.megafon.maps", "com.megafon.mcca.android.store", "com.megafon.rk", "com.mts.who_calls", "com.my.mygamesapp", "com.navplatform.navigator.public", "com.pobeda.anniversary", "com.pogoda.infometeos", "com.programmisty.emiasapp", "com.rostelecom.printservice", "com.rzd.eventsrzd", "com.sdkit.search.app", "com.spbtv.rosing", "com.vk.admin", "com.vk.calls", "com.vk.love", "com.vk.mail", "com.vk.tv", "com.vkusvill.courier", "com.vkusvill.vacancy", "com.wbextdelivery", "com.wbpoint.android.prod.release", "com.wbstream_app", "com.wildberries.consultations", "com.wildberries.wbkey", "com.wms_mm_point.mm_delivery_point", "com.yandex.aliceapp", "com.yandex.browser.lite", "com.yandex.shedevrus", "games.my.cloud", "games.my.cloud.tv", "intech.global.com.beeline", "me.membrana.kids.parent.app", "megafon.transport.mobile", "org.rtk.cleaning", "ru.beeline.beebookreader", "ru.beeline.dol", "ru.beeline.messengerx", "ru.beeline.mwpsapp", "ru.beeline.pro", "ru.cdek.courier", "ru.cdek.ek5", "ru.compass.tag", "ru.gazprompay.android", "ru.gid.app", "ru.gid.eventsapp", "ru.gid.most", "ru.gosuslugi.migrant", "ru.gosuslugi.volunteer", "ru.hh.android", "ru.hh.employer.android", "ru.ideast.championat", "ru.ideast.humor", "ru.ideast.nrj", "ru.ideast.romantika", "ru.ideast.ru101.rustore", "ru.imteleport.plp2", "ru.intech.lki", "ru.leroymerlin.employee", "ru.lifepay.pos.alfapos", "ru.lifepay.pos.vtb", "ru.litres.android", "ru.litres.android.readfree", "ru.litres.androidtv", "ru.livelib.client", "ru.m4bank.softpos.alfaru", "ru.m4bank.softpos.rshb", "ru.m4bank.softpos.vtbpos", "ru.magnit.hrtest.android", "ru.magnit.mesmag", "ru.magnit.tag", "ru.magnit.tms.armhde", "ru.magnit.vendorapp", "ru.mail.biz.avocado", "ru.mail.cloud", "ru.mail.horo.android", "ru.mail.intranet", "ru.mail.my", "ru.mail.search.electroscope", "ru.megafon.vn.client", "ru.megalabs.multifon", "ru.mgfoms.pandora", "ru.mntk.dostavka.prod", "ru.mts.books.droid", "ru.mts.live.app", "ru.mts.mtscode", "ru.mts.music.android", "ru.mts.pay", "ru.mts.twomem", "ru.mts.vdome.resident", "ru.mybook", "ru.netbynet.app.personal_cabinet", "ru.ntv.client", "ru.ntv.client.tv", "ru.ntv.today", "ru.ntvplus.service", "ru.ok.dating", "ru.onlime.my.app", "ru.ozon.chatzone", "ru.ozon.fintech.apvz", "ru.ozon.fintech.sme", "ru.ozon.flex", "ru.ozon.fresh", "ru.ozon.hire", "ru.ozon.magistral", "ru.ozon.maple_app", "ru.ozon.ozon_pvz", "ru.ozon.profit", "ru.ozon.select", "ru.ozon.seller_app", "ru.ozon.tv", "ru.pikabu.android", "ru.profmedia.avtoradio", "ru.profmedia.likefm", "ru.rambler.horoscopes.twa", "ru.ritmmedia.yappy", "ru.rostelecom.ideas", "ru.rostelecom.vatsmobilelk", "ru.rshb.dboul", "ru.rshb.digitalcoworkeroffice", "ru.rshb.ips_qr", "ru.rshb.privatebusiness", "ru.rshb.svoe_rodnoe", "ru.rshb.svoedom_android", "ru.rshb.svojfermer", "ru.rt.key", "ru.rt.life", "ru.rt.masterkey", "ru.rt.mb_installer", "ru.rt.mobileoffice", "ru.rt.ritm", "ru.rt.smarthome", "ru.rt.video.app.mobile", "ru.rt.video.app.mobile.b2b", "ru.rt.video.app.tv", "ru.rt.videocomfort", "ru.rt.wfm", "ru.rtdc.kakdela", "ru.russianpost.pechkin", "ru.rzd.cargolk", "ru.rzd.newsdo.skills", "ru.setka", "ru.systtech.megafon.mobile", "ru.tander.mobile_scout_flutter", "ru.tntmusic.tv", "ru.tutu.etrains", "ru.tutu.tutu_emp", "ru.utk.dostavka", "ru.vk.hrtek", "ru.vkpm.comedy", "ru.vtb.corporate.android.main_application", "ru.vtb.invest", "ru.vtb.smb", "ru.wb.courier", "ru.wb.go", "ru.wb.guru", "ru.wb.wband", "ru.wildberries.books", "ru.wildberries.manager", "ru.wildberries.team", "ru.wildberries.team2", "ru.wildberries.wbpayclient", "ru.wink.music", "ru.wink.music.tv", "ru.x5.foodru.rs", "ru.x5.key", "ru.x5.mfpnew", "ru.x5.mrm_android.personaldevice", "ru.x5.opermax.aura", "ru.x5.rooms", "ru.x5.wl.slata", "ru.x5.wrs2", "ru.x5.x5job", "ru.yandex.mobile.fmradio", "ru.yandex.searchplugin", "ru.yandex.telemost", "ru.yozhka", "ruagro.start.tech", "tech.clink.emias.emiasqrcode", "travel.ozon.mobile", "tv.ntvplus.app", "tv.ntvplus.app.tv", "wb.partners", "wildberries.business", "club.skllzz.fitness", "com.apegroup.mcdonaldsrussia", "com.bankffin.portfolio", "com.bastion", "com.bifit.rncbbeta", "ru.spb.parking", "com.whsd.whsdapp", "com.orgp.spbpodorozhnik", "ru.ftc.tc", "com.carshering", "com.citymobil", "com.taxsee.taxsee", "ru.yandex.uber", "ru.taxovichkof.android", "ru.rolf.rolf", "ru.russianhighways.mobile", "ru.mosparking.appnew", "centrida.neftmagistral", "ru.pichesky.rosneft", "ru.serebryakovas.lukoilmobileapp", "ru.tatneft.gasstations", "com.gpn.azs", "com.coolclever.app", "com.deliveryclub", "com.discover.moscow.lite", "com.edadeal.android", "com.gnivts.ausn", "com.gnivts.selfemployed", "com.icemobile.lenta.prod", "com.idamob.tinkoff.android", "com.keenetic.kn", "ru.netcraze.app", "com.moscowsport", "com.premiumbonus.jamm.ramen", "pro.arora.mobile.pizza_milana", "pro.arora.mobile.maradi", "com.punicapp.whoosh", "com.ru.dixy", "com.salute.smarthome.prod", "com.sberauto.mobile", "com.sberbank.sberpravo", "com.tdm.messenger", "com.tjuraniaapp", "com.uip.gosuslugi2", "com.vk.clips", "live.vkplay.app", "ru.mail.mailapp", "com.vk.im", "com.vk.vkvideo", "com.uma.musicvk", "com.wildberries.ru", "ru.zen.android", "com.yandex.browser", "com.yandex.bank", "com.yandex.bluecollars", "com.yandex.iot", "com.yandex.lavka", "com.yandex.mobile.drive", "com.yandex.mobile.realty", "com.yandex.plus.game.city", "com.yandex.searchapp", "com.yandex.shedevrus2", "com.yandex.tasks.androidapp", "com.yandex.yamb", "com.zvooq.openplay", "es.hol.ing.zagsr", "im.dlg.dialogx", "im.dlg.enterprise", "io.github.dovecoteescapee.byedpi", "io.itforces.android.timetable", "logo.com.mbanking", "org.orange.mobile", "pro.sber_zvuk", "ru.akbars.mobile", "ru.alfabank.mobile.android", "ru.alfabank.oavdo.amc", "ru.alfadirect.app", "ru.alfastrah.app", "ru.aliexpress.buyer", "ru.altarix.mos.pgu", "ru.auto.ara", "ru.aviasales", "ru.beru.android", "ru.bspb", "ru.burgerking", "ru.cardsmobile.mw3", "ru.crptech.b2bmark", "ru.crptech.mark", "ru.datapax.mosobl", "ru.diftechsvc", "ru.dit.smartstaff", "ru.dodopizza.app", "ru.domclick.mortgage", "ru.drclinics.app.sovcom", "ru.dublgis.dgismobile", "ru.dublgis.dgismobile4preview", "otello.dgis.ru", "ru.fanid", "ru.filit.mvideo.b2c", "ru.finassist", "ru.fns.billchecker", "ru.fns.billchecker.mobile.android", "ru.fns.lkfl", "ru.foodfox.client", "ru.gazprombank.android.mobilebank.app", "ru.getpharma.eapteka", "ru.gnivc.lkip", "ru.goods.marketplace", "ru.gosuslugi.auto", "ru.gosuslugi.culture", "ru.gosuslugi.goskey", "ru.gosuslugi.pos", "ru.gosuslugi.pos.executor", "ru.instamart", "ru.kfc.kfc_delivery", "ru.kinopoisk", "ru.letobank.prometheus", "ru.megafon.mlk", "ru.megamarket.marketplace", "ru.mes.sputnik", "ru.mes.dnevnik", "ru.more.play", "ru.mos.app", "ru.mos.ed", "ru.mos.gz", "ru.mos.myid", "ru.mos.ourcity", "ru.mos.polls", "ru.mos.um", "ru.mos.zaryadye", "ru.mosgorpass", "ru.mosmetro.metro", "ru.mosoblgaz", "ru.mosreg.easuz.portal", "ru.mosreg.ekjp", "ru.mosreg.mingos.mdp.app", "ru.mosreg.mo112", "ru.mosreg.uslugi.mobile.beta", "ru.mts.bank", "ru.mts.mtstv", "ru.mts.mymts", "ru.mvm.eldo", "ru.sportmaster.app", "ru.myspar", "ru.nalog.rmr.client", "ru.nspk.mir.loyalty", "ru.nspk.mirpay", "ru.okbmei.gosservice", "ru.ostrovok.android", "ru.ozon.app.android", "ru.ozon.fintech.finance", "ru.perekrestok.app", "club.chizhik", "ru.plus.bookmate", "ru.pyaterochka.app.browser", "ru.raiffeisennews", "ru.rambler.mail", "com.dartit.RTcabinet", "ru.rostel", "ru.rutube.app", "ru.rutube.RutubeKids", "ru.rutube.studio", "ru.rutube.app.tv", "gpm.tnt_premier", "one.premier.rustoretv", "ru.rzd.pass", "ru.salute.b2b.prod", "ru.sbcs.store", "ru.sber.csradar", "ru.sber.telecom", "ru.sberbank.investor", "ru.sberbank.onlineencashment", "ru.sberbank.sberkids", "ru.sberbank.sbersign", "ru.sberbank_sbbol", "ru.sberbankmobile", "ru.sberins.insureapp.android", "ru.sbermegamarket.pro", "ru.bankuralsib.mb.android", "ru.sovcombank.dms", "ru.sovcombank.investor", "ru.sovcomcard.halva.v1", "pro.rocketTech.rocket.rocketapp", "ru.oneme.app", "ru.start.androidmobile", "ru.bristol.bristol_app", "www.metro.com", "ru.tander.magnit", "ru.technokad.digitalkey", "ru.tii.lkcomu", "ru.tinkoff.bnpl", "ru.tinkoff.invest.course", "ru.tinkoff.investing", "ru.tinkoff.magent", "ru.tinkoff.mvno", "ru.tinkoff.posterminal", "ru.tinkoff.sme", "ru.troika.regional", "ru.urentbike.app", "com.vkontakte.android", "ru.vk.store", "ru.vk.video", "ru.vkmusic.audio", "ru.tbank.online", "ru.amina.moscow", "ru.lewis.dbo", "ru.gibdd_pay.app", "com.moex.finuslugi", "su.azure.paymaster", "ru.nspk.sbpay", "ru.gosuslugi.school", "ru.sigma.gisgkh", "ru.rshb.dbo", "ru.spb.iac.dnevnikspb_new", "ru.ues.users_personal_account", "com.leroymerlin.mobile", "ru.kari.android", "ru.sunlight.sunlight", "level.travel", "ru.abrr.gas", "com.maxxt.recordradio", "com.uchi.app", "ru.chitaigorod.mobile", "ru.usetech.velobike.v2", "ru.zolotoy585.customer", "com.onecwearable.keyboard.rustore", "com.gloriajeans.mobile", "ru.rabota.app2", "ru.domopult.mosobleirc.android", "ru.rgs.lk", "ru.dikidi", "ru.citilink", "ru.spb.dnevnik", "ru.sima_land.spb.market", "ru.ufanet.myufanet", "ru.bcs.bcsbank", "com.svoi.bank", "ru.vkusvill", "ru.detmir.dmbonus", "ru.lenta.lentochka", "goldapple.ru.goldapple.customers", "com.notissimus.allinstruments.android", "ru.vseapteki", "ru.leonardo.leonardoshop", "ru.leroymerlin.mobile", "ru.maxidom.ecomm", "air.ru.obi.mobile", "com.logistic.sdek", "ru.vtb24.mobilebanking.android", "ru.yandex.androidkeyboard", "ru.yandex.disk", "ru.yandex.games", "ru.yandex.key", "ru.yandex.mail", "ru.yandex.market.partner", "ru.yandex.metro", "ru.yandex.mobile.gasstations", "ru.yandex.music", "ru.yandex.practicum.flutter_practicum", "ru.yandex.subtitles", "ru.yandex.taxi", "ru.yandex.taximeter", "ru.yandex.translate", "ru.yandex.travel", "ru.yandex.weatherplugin", "ru.yandex.yandexmaps", "ru.yandex.yandexnavi", "ru.yandex_team.calendar_app", "ru.yoo.business", "ru.yoo.kassa", "ru.yoo.money", "ru.yoo.sdk.kassa.payments.example.release", "ru.yota.android", "ru.zhuck.webapp", "ru.ok.android", "team.rtds.checkcontrol", "tv.lfstrm.smotreshka", "com.apteka.sklad", "com.platfomni.gorzdrav", "com.invitro.app", "youdrive.today", "com.kms.free", "ru.paribet", "ru.rosbank.android.beta", "ru.beeline.services", "ru.beeline.cloud", "ru.beeline.tve.android", "ru.otpbank.mobile", "biz.growapp.winline", "com.national.lottery", "ru.stoloto.mobile", "ru.bkfon", "ru.cian.main", "ru.m2.squaremeter", "ru.winelab", "ru.smmd.superdelivery", "ru.aisa.android.ekpv2", "com.mobium12580.app", "ru.smclinic.app.lk", "com.teremok.keys", "ru.tokyocity.tokyocity", "com.tseh85", "ru.plazius.cofix", "com.avito.android", "ru.x5.omni", "ru.tele2.mytele2", "by.advasoft.android.troika.app", "com.octopod.russianpost.client.android", "ru.dahl.messenger", "ru.dns.shop.android", "com.evrasiar", "com.loyaltyplant.partner.subway", "ru.reksoft.okey" + ] + }, + { + "tag": "mixed-in", + "type": "mixed", + "sniff": true, + "users": [], + "listen": "127.0.0.1", + "listen_port": 2412, + "set_system_proxy": false + } + ], + "outbounds": [ + { + "tag": "→ Remnawave", + "type": "selector", + "outbounds": null, + "interrupt_exist_connections": true + }, + { + "tag": "⚡ Самый быстрый", + "url": "http://www.gstatic.com/generate_204", + "type": "urltest", + "interval": "30s", + "outbounds": [ + "→ Remnawave" + ], + "tolerance": 50 + }, + { + "tag": "VPN", + "type": "selector", + "outbounds": [ + "Fastest", + "→ Remnawave", + "direct" + ] + }, + { + "tag": "Блокировки РФ", + "type": "selector", + "outbounds": [ + "VPN", + "direct" + ] + }, + { + "tag": "Реклама", + "type": "selector", + "outbounds": [ + "block", + "direct" + ] + }, + { + "tag": "Остальные сайты", + "type": "selector", + "outbounds": [ + "direct", + "VPN" + ] + }, + { + "tag": "direct", + "type": "direct" + }, + { + "tag": "block", + "type": "block" + } + ], + "experimental": { + "clash_api": { + "external_ui": "metacubexd", + "default_mode": "rule", + "external_controller": "127.0.0.1:9090", + "external_ui_download_url": "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip", + "external_ui_download_detour": "direct" + }, + "cache_file": { + "path": "remnawave.db", + "enabled": true, + "cache_id": "remnawave", + "store_fakeip": true + } + } +} diff --git a/clash/README.md b/clash/README.md index b61e1b4..43f3405 100644 --- a/clash/README.md +++ b/clash/README.md @@ -1,24 +1,60 @@ -## 📱 Клиенты +# 📖 Руководство по выбору клиентов и настройке подписок + +> **В данном документе собрано всё необходимое для быстрой настройки подключения:** +> * **[Клиентские приложения](#-клиенты)** — подборка рекомендуемых программ для всех ОС. +> * **[Логика маршрутизации](#️-как-работает-белый-список)** — принцип работы маршрутизации конфига белого списка. +> * **[Файлы конфигураций](#-ссылки-на-конфигурации)** — прямые ссылки на шаблоны. +> * **[Инструкции по импорту](#-варианты-подключения)** — пошаговые гайды по подключению подписки через direct-ссылку или Override/Merge скрипты (FlClash, Clash Party, Clash Verge Rev). + +--- + +## 📑 Оглавление + +1. [📱 Клиенты](#-клиенты) + * [💻 Windows / Linux](#-windows--linux) + * [📱 Android](#-android) + * [🍎 iOS / macOS](#-ios--macos) + * [🌐 OpenWRT](#-openwrt) + * [⚠️ Важные особенности и ограничения клиентов](#️-важные-особенности-и-ограничения-клиентов) +2. [📡 Настройка профилей и подписок](#-настройка-профилей-и-подписок) + * [🛡️ Как работает «Белый список»?](#️-как-работает-белый-список) + * [🎛️ Инструкция для FlClashX: Выбор режимов и серверов](#️-инструкция-для-flclashx-белый-список-выбор-режимов-и-серверов) + * [🌐 Группа GLOBAL](#-группа-global-появляется-только-в-режиме-глобальный) + * [⚡ Группа PROXY](#-группа-proxy-выбор-основного-сервера) + * [🌐 Откуда берутся правила?](#-откуда-берутся-правила) + * [⚡ В чём разница между Full и Lite?](#-в-чём-разница-между-full-и-lite) +3. [🔗 Ссылки на конфигурации](#-ссылки-на-конфигурации) +4. [🚀 Варианты подключения](#-варианты-подключения) + * [Способ 1: Прямая ссылка (Рекомендуемый)](#способ-1-прямая-ссылка-рекомендуемый) + * [Способ 2: Через переопределение (Override / Merge)](#способ-2-через-переопределение-override--merge) + * [FLClash / FlClashX](#flclash--flclashx) + * [Clash Party](#clash-party) + * [Clash Verge Rev](#clash-verge-rev) + +--- + +## 📱 Клиенты [🔗 Все клиенты](https://docs.rw/clients) > 💡 **Рекомендуемые приложения:** > * **Android:** **FlClashX** -> * **iOS:** **Karing** -> * **Windows:** **Koala Clash** -> +> * **iOS:** **Rabbit Hole** +> * **Windows:** **FlClashX** или **Koala Clash** > > **Почему они?** Эти клиенты автоматически подтягивают лучшую конфигурацию с правильными правилами маршрутизации и поддерживают передачу **HWID** для корректной авторизации подписки. -### 💻 Windows +--- + +### 💻 [Windows](https://docs.rw/clients/#windows) • 🐧 [Linux](https://docs.rw/clients/#linux) | Клиент | Ядро | Ссылка | | --- | --- | --- | +| **FlClashX** | Mihomo | [GitHub](https://github.com/pluralplay/FlClashX/releases/latest) | | **Koala Clash** | Mihomo | [GitHub](https://github.com/coolcoala/koala-clash/releases/latest) | -| **FlClashX** | Mihomo | [GitHub](https://github.com/pluralplay/FlClashX/releases/latest) | | **Karing** | Universal | [GitHub](https://github.com/KaringX/karing/releases/latest) | --- -### 🤖 Android +### 📱 [Android](https://docs.rw/clients/#android) | Клиент | Ядро | Ссылка | | --- | --- | --- | @@ -27,11 +63,13 @@ --- -### 🍏 iOS / macOS +### 🍎 [iOS](https://docs.rw/clients/#ios) • 👛 [macOS](https://docs.rw/clients/#macos) | Клиент | Ядро | Ссылка | | --- | --- | --- | -| **Clash Mi** | Mihomo | [App Store](https://apps.apple.com/us/app/clash-mi/id6744321968) | +| **Rabbit Hole** | Mihomo | [App Store](https://apps.apple.com/app/rabbithole-vpn-client/id6683309629) | +| **FlClashX** | Mihomo | [GitHub](https://github.com/pluralplay/FlClashX/releases/latest) | +| **Koala Clash** | Mihomo | [GitHub](https://github.com/coolcoala/koala-clash/releases/latest) | | **Karing** | Universal | [App Store](https://apps.apple.com/app/karing/id6472431552) | --- @@ -48,15 +86,13 @@ ### ⚠️ Важные особенности и ограничения клиентов * **Clash Verge Rev / Clash Party**: -* ❌ **Не поддерживает передачу HWID** в заголовках запросов при получении подписки. - + * ❌ **Не поддерживает передачу HWID** в заголовках запросов при получении подписки. * **Karing**: -* ⚠️ **Поддерживает автоматическое подтягивание правил**, но они могут слегка отличаться от главного конфига Mihomo. - + * ⚠️ **Поддерживает автоматическое подтягивание правил**, но они могут слегка отличаться от главного конфига Mihomo. * **Koala Clash / FlClashX**: -* 🟢 Полноценные клиенты на базе ядра **Mihomo**, поддерживают все необходимое. + * 🟢 Полноценные клиенты на базе ядра **Mihomo**, поддерживают все необходимое. --- diff --git a/clash/config/client.yaml b/clash/config/client.yaml index b40655b..128e63e 100644 --- a/clash/config/client.yaml +++ b/clash/config/client.yaml @@ -1,18 +1,64 @@ +anchors: + reserved_ips: &reserved_ips + - 0.0.0.0/8 + - 10.0.0.0/8 + - 100.64.0.0/10 + - 127.0.0.0/8 + - 169.254.0.0/16 + - 172.16.0.0/12 + - 192.0.0.0/24 + - 192.0.2.0/24 + - 192.88.99.0/24 + - 192.168.0.0/16 + - 198.51.100.0/24 + - 203.0.113.0/24 + - 224.0.0.0/3 + + dns_ru: &dns_ru + - https://77.88.8.8/dns-query#DIRECT + - https://8.8.8.8/dns-query#DIRECT + + dns_proxy: &dns_proxy + - https://1.1.1.1/dns-query#VPN + - https://dns.google/dns-query#VPN + + pr_http: &pr_http + type: http + interval: 86400 + proxy: VPN + + rp_classical: &rp_classical + <<: *pr_http + behavior: classical + format: yaml + + rp_domain: &rp_domain + <<: *pr_http + behavior: domain + format: mrs + + rp_ipcidr: &rp_ipcidr + <<: *pr_http + behavior: ipcidr + format: mrs + mode: rule log-level: warning +ipv6: false unified-delay: true tcp-concurrent: true +enable-process: true +find-process-mode: strict +keep-alive-idle: 120 +keep-alive-interval: 30 external-controller: 127.0.0.1:9090 external-ui: ./ui external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip" -# geodata-mode: true -# geo-auto-update: true -# geo-update-interval: 24 -# geox-url: -# geoip: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat" -# geosite: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat" -# mmdb: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country.mmdb" +profile: + store-selected: true + store-fake-ip: true + tracing: false tun: enable: true @@ -24,8 +70,8 @@ tun: - any:53 - tcp://any:53 # endpoint-independent-nat: true - exclude-package: - - com.android.captiveportallogin + route-exclude-address: *reserved_ips + exclude-package: ["az.vtb.android", "business.gid.hero", "business.gid.universe", "chat.strelka", "com.allgoritm.youla", "com.asmo.infometeos", "com.birzha_rt", "com.bogg.art.vkt", "com.dartit.mobileagent", "com.dartit.rtcabinet", "com.equeo.megafondraiv", "com.gmeteos.infometeos", "com.goodok.mts", "com.grotem.match", "com.horosho.tips", "com.indygomobi.detifm", "com.indygomobi.relaxfm", "com.indygomobi.zenit", "com.iwedia.ui.beeline.atv", "com.kazanexpress.ke_app", "com.lamoda.lite", "com.lenta.employee", "com.lenta.lentochka_service", "com.magnit.delivery.courier", "com.match.club", "com.matchtv.rustore", "com.mcd.superapp", "com.mcptt", "com.megafon.kk", "com.megafon.maps", "com.megafon.mcca.android.store", "com.megafon.rk", "com.mts.who_calls", "com.my.mygamesapp", "com.navplatform.navigator.public", "com.pobeda.anniversary", "com.pogoda.infometeos", "com.programmisty.emiasapp", "com.rostelecom.printservice", "com.rzd.eventsrzd", "com.sdkit.search.app", "com.spbtv.rosing", "com.vk.admin", "com.vk.calls", "com.vk.love", "com.vk.mail", "com.vk.tv", "com.vkusvill.courier", "com.vkusvill.vacancy", "com.wbextdelivery", "com.wbpoint.android.prod.release", "com.wbstream_app", "com.wildberries.consultations", "com.wildberries.wbkey", "com.wms_mm_point.mm_delivery_point", "com.yandex.aliceapp", "com.yandex.browser.lite", "com.yandex.shedevrus", "games.my.cloud", "games.my.cloud.tv", "intech.global.com.beeline", "me.membrana.kids.parent.app", "megafon.transport.mobile", "org.rtk.cleaning", "ru.beeline.beebookreader", "ru.beeline.dol", "ru.beeline.messengerx", "ru.beeline.mwpsapp", "ru.beeline.pro", "ru.cdek.courier", "ru.cdek.ek5", "ru.compass.tag", "ru.gazprompay.android", "ru.gid.app", "ru.gid.eventsapp", "ru.gid.most", "ru.gosuslugi.migrant", "ru.gosuslugi.volunteer", "ru.hh.android", "ru.hh.employer.android", "ru.ideast.championat", "ru.ideast.humor", "ru.ideast.nrj", "ru.ideast.romantika", "ru.ideast.ru101.rustore", "ru.imteleport.plp2", "ru.intech.lki", "ru.leroymerlin.employee", "ru.lifepay.pos.alfapos", "ru.lifepay.pos.vtb", "ru.litres.android", "ru.litres.android.readfree", "ru.litres.androidtv", "ru.livelib.client", "ru.m4bank.softpos.alfaru", "ru.m4bank.softpos.rshb", "ru.m4bank.softpos.vtbpos", "ru.magnit.hrtest.android", "ru.magnit.mesmag", "ru.magnit.tag", "ru.magnit.tms.armhde", "ru.magnit.vendorapp", "ru.mail.biz.avocado", "ru.mail.cloud", "ru.mail.horo.android", "ru.mail.intranet", "ru.mail.my", "ru.mail.search.electroscope", "ru.megafon.vn.client", "ru.megalabs.multifon", "ru.mgfoms.pandora", "ru.mntk.dostavka.prod", "ru.mts.books.droid", "ru.mts.live.app", "ru.mts.mtscode", "ru.mts.music.android", "ru.mts.pay", "ru.mts.twomem", "ru.mts.vdome.resident", "ru.mybook", "ru.netbynet.app.personal_cabinet", "ru.ntv.client", "ru.ntv.client.tv", "ru.ntv.today", "ru.ntvplus.service", "ru.ok.dating", "ru.onlime.my.app", "ru.ozon.chatzone", "ru.ozon.fintech.apvz", "ru.ozon.fintech.sme", "ru.ozon.flex", "ru.ozon.fresh", "ru.ozon.hire", "ru.ozon.magistral", "ru.ozon.maple_app", "ru.ozon.ozon_pvz", "ru.ozon.profit", "ru.ozon.select", "ru.ozon.seller_app", "ru.ozon.tv", "ru.pikabu.android", "ru.profmedia.avtoradio", "ru.profmedia.likefm", "ru.rambler.horoscopes.twa", "ru.ritmmedia.yappy", "ru.rostelecom.ideas", "ru.rostelecom.vatsmobilelk", "ru.rshb.dboul", "ru.rshb.digitalcoworkeroffice", "ru.rshb.ips_qr", "ru.rshb.privatebusiness", "ru.rshb.svoe_rodnoe", "ru.rshb.svoedom_android", "ru.rshb.svojfermer", "ru.rt.key", "ru.rt.life", "ru.rt.masterkey", "ru.rt.mb_installer", "ru.rt.mobileoffice", "ru.rt.ritm", "ru.rt.smarthome", "ru.rt.video.app.mobile", "ru.rt.video.app.mobile.b2b", "ru.rt.video.app.tv", "ru.rt.videocomfort", "ru.rt.wfm", "ru.rtdc.kakdela", "ru.russianpost.pechkin", "ru.rzd.cargolk", "ru.rzd.newsdo.skills", "ru.setka", "ru.systtech.megafon.mobile", "ru.tander.mobile_scout_flutter", "ru.tntmusic.tv", "ru.tutu.etrains", "ru.tutu.tutu_emp", "ru.utk.dostavka", "ru.vk.hrtek", "ru.vkpm.comedy", "ru.vtb.corporate.android.main_application", "ru.vtb.invest", "ru.vtb.smb", "ru.wb.courier", "ru.wb.go", "ru.wb.guru", "ru.wb.wband", "ru.wildberries.books", "ru.wildberries.manager", "ru.wildberries.team", "ru.wildberries.team2", "ru.wildberries.wbpayclient", "ru.wink.music", "ru.wink.music.tv", "ru.x5.foodru.rs", "ru.x5.key", "ru.x5.mfpnew", "ru.x5.mrm_android.personaldevice", "ru.x5.opermax.aura", "ru.x5.rooms", "ru.x5.wl.slata", "ru.x5.wrs2", "ru.x5.x5job", "ru.yandex.mobile.fmradio", "ru.yandex.searchplugin", "ru.yandex.telemost", "ru.yozhka", "ruagro.start.tech", "tech.clink.emias.emiasqrcode", "travel.ozon.mobile", "tv.ntvplus.app", "tv.ntvplus.app.tv", "wb.partners", "wildberries.business", "club.skllzz.fitness", "com.apegroup.mcdonaldsrussia", "com.bankffin.portfolio", "com.bastion", "com.bifit.rncbbeta", "ru.spb.parking", "com.whsd.whsdapp", "com.orgp.spbpodorozhnik", "ru.ftc.tc", "com.carshering", "com.citymobil", "com.taxsee.taxsee", "ru.yandex.uber", "ru.taxovichkof.android", "ru.rolf.rolf", "ru.russianhighways.mobile", "ru.mosparking.appnew", "centrida.neftmagistral", "ru.pichesky.rosneft", "ru.serebryakovas.lukoilmobileapp", "ru.tatneft.gasstations", "com.gpn.azs", "com.coolclever.app", "com.deliveryclub", "com.discover.moscow.lite", "com.edadeal.android", "com.gnivts.ausn", "com.gnivts.selfemployed", "com.icemobile.lenta.prod", "com.idamob.tinkoff.android", "com.keenetic.kn", "ru.netcraze.app", "com.moscowsport", "com.premiumbonus.jamm.ramen", "pro.arora.mobile.pizza_milana", "pro.arora.mobile.maradi", "com.punicapp.whoosh", "com.ru.dixy", "com.salute.smarthome.prod", "com.sberauto.mobile", "com.sberbank.sberpravo", "com.tdm.messenger", "com.tjuraniaapp", "com.uip.gosuslugi2", "com.vk.clips", "live.vkplay.app", "ru.mail.mailapp", "com.vk.im", "com.vk.vkvideo", "com.uma.musicvk", "com.wildberries.ru", "ru.zen.android", "com.yandex.browser", "com.yandex.bank", "com.yandex.bluecollars", "com.yandex.iot", "com.yandex.lavka", "com.yandex.mobile.drive", "com.yandex.mobile.realty", "com.yandex.plus.game.city", "com.yandex.searchapp", "com.yandex.shedevrus2", "com.yandex.tasks.androidapp", "com.yandex.yamb", "com.zvooq.openplay", "es.hol.ing.zagsr", "im.dlg.dialogx", "im.dlg.enterprise", "io.github.dovecoteescapee.byedpi", "io.itforces.android.timetable", "logo.com.mbanking", "org.orange.mobile", "pro.sber_zvuk", "ru.akbars.mobile", "ru.alfabank.mobile.android", "ru.alfabank.oavdo.amc", "ru.alfadirect.app", "ru.alfastrah.app", "ru.aliexpress.buyer", "ru.altarix.mos.pgu", "ru.auto.ara", "ru.aviasales", "ru.beru.android", "ru.bspb", "ru.burgerking", "ru.cardsmobile.mw3", "ru.crptech.b2bmark", "ru.crptech.mark", "ru.datapax.mosobl", "ru.diftechsvc", "ru.dit.smartstaff", "ru.dodopizza.app", "ru.domclick.mortgage", "ru.drclinics.app.sovcom", "ru.dublgis.dgismobile", "ru.dublgis.dgismobile4preview", "otello.dgis.ru", "ru.fanid", "ru.filit.mvideo.b2c", "ru.finassist", "ru.fns.billchecker", "ru.fns.billchecker.mobile.android", "ru.fns.lkfl", "ru.foodfox.client", "ru.gazprombank.android.mobilebank.app", "ru.getpharma.eapteka", "ru.gnivc.lkip", "ru.goods.marketplace", "ru.gosuslugi.auto", "ru.gosuslugi.culture", "ru.gosuslugi.goskey", "ru.gosuslugi.pos", "ru.gosuslugi.pos.executor", "ru.instamart", "ru.kfc.kfc_delivery", "ru.kinopoisk", "ru.letobank.prometheus", "ru.megafon.mlk", "ru.megamarket.marketplace", "ru.mes.sputnik", "ru.mes.dnevnik", "ru.more.play", "ru.mos.app", "ru.mos.ed", "ru.mos.gz", "ru.mos.myid", "ru.mos.ourcity", "ru.mos.polls", "ru.mos.um", "ru.mos.zaryadye", "ru.mosgorpass", "ru.mosmetro.metro", "ru.mosoblgaz", "ru.mosreg.easuz.portal", "ru.mosreg.ekjp", "ru.mosreg.mingos.mdp.app", "ru.mosreg.mo112", "ru.mosreg.uslugi.mobile.beta", "ru.mts.bank", "ru.mts.mtstv", "ru.mts.mymts", "ru.mvm.eldo", "ru.sportmaster.app", "ru.myspar", "ru.nalog.rmr.client", "ru.nspk.mir.loyalty", "ru.nspk.mirpay", "ru.okbmei.gosservice", "ru.ostrovok.android", "ru.ozon.app.android", "ru.ozon.fintech.finance", "ru.perekrestok.app", "club.chizhik", "ru.plus.bookmate", "ru.pyaterochka.app.browser", "ru.raiffeisennews", "ru.rambler.mail", "com.dartit.RTcabinet", "ru.rostel", "ru.rutube.app", "ru.rutube.RutubeKids", "ru.rutube.studio", "ru.rutube.app.tv", "gpm.tnt_premier", "one.premier.rustoretv", "ru.rzd.pass", "ru.salute.b2b.prod", "ru.sbcs.store", "ru.sber.csradar", "ru.sber.telecom", "ru.sberbank.investor", "ru.sberbank.onlineencashment", "ru.sberbank.sberkids", "ru.sberbank.sbersign", "ru.sberbank_sbbol", "ru.sberbankmobile", "ru.sberins.insureapp.android", "ru.sbermegamarket.pro", "ru.bankuralsib.mb.android", "ru.sovcombank.dms", "ru.sovcombank.investor", "ru.sovcomcard.halva.v1", "pro.rocketTech.rocket.rocketapp", "ru.oneme.app", "ru.start.androidmobile", "ru.bristol.bristol_app", "www.metro.com", "ru.tander.magnit", "ru.technokad.digitalkey", "ru.tii.lkcomu", "ru.tinkoff.bnpl", "ru.tinkoff.invest.course", "ru.tinkoff.investing", "ru.tinkoff.magent", "ru.tinkoff.mvno", "ru.tinkoff.posterminal", "ru.tinkoff.sme", "ru.troika.regional", "ru.urentbike.app", "com.vkontakte.android", "ru.vk.store", "ru.vk.video", "ru.vkmusic.audio", "ru.tbank.online", "ru.amina.moscow", "ru.lewis.dbo", "ru.gibdd_pay.app", "com.moex.finuslugi", "su.azure.paymaster", "ru.nspk.sbpay", "ru.gosuslugi.school", "ru.sigma.gisgkh", "ru.rshb.dbo", "ru.spb.iac.dnevnikspb_new", "ru.ues.users_personal_account", "com.leroymerlin.mobile", "ru.kari.android", "ru.sunlight.sunlight", "level.travel", "ru.abrr.gas", "com.maxxt.recordradio", "com.uchi.app", "ru.chitaigorod.mobile", "ru.usetech.velobike.v2", "ru.zolotoy585.customer", "com.onecwearable.keyboard.rustore", "com.gloriajeans.mobile", "ru.rabota.app2", "ru.domopult.mosobleirc.android", "ru.rgs.lk", "ru.dikidi", "ru.citilink", "ru.spb.dnevnik", "ru.sima_land.spb.market", "ru.ufanet.myufanet", "ru.bcs.bcsbank", "com.svoi.bank", "ru.vkusvill", "ru.detmir.dmbonus", "ru.lenta.lentochka", "goldapple.ru.goldapple.customers", "com.notissimus.allinstruments.android", "ru.vseapteki", "ru.leonardo.leonardoshop", "ru.leroymerlin.mobile", "ru.maxidom.ecomm", "air.ru.obi.mobile", "com.logistic.sdek", "ru.vtb24.mobilebanking.android", "ru.yandex.androidkeyboard", "ru.yandex.disk", "ru.yandex.games", "ru.yandex.key", "ru.yandex.mail", "ru.yandex.market.partner", "ru.yandex.metro", "ru.yandex.mobile.gasstations", "ru.yandex.music", "ru.yandex.practicum.flutter_practicum", "ru.yandex.subtitles", "ru.yandex.taxi", "ru.yandex.taximeter", "ru.yandex.translate", "ru.yandex.travel", "ru.yandex.weatherplugin", "ru.yandex.yandexmaps", "ru.yandex.yandexnavi", "ru.yandex_team.calendar_app", "ru.yoo.business", "ru.yoo.kassa", "ru.yoo.money", "ru.yoo.sdk.kassa.payments.example.release", "ru.yota.android", "ru.zhuck.webapp", "ru.ok.android", "team.rtds.checkcontrol", "tv.lfstrm.smotreshka", "com.apteka.sklad", "com.platfomni.gorzdrav", "com.invitro.app", "youdrive.today", "com.kms.free", "ru.paribet", "ru.rosbank.android.beta", "ru.beeline.services", "ru.beeline.cloud", "ru.beeline.tve.android", "ru.otpbank.mobile", "biz.growapp.winline", "com.national.lottery", "ru.stoloto.mobile", "ru.bkfon", "ru.cian.main", "ru.m2.squaremeter", "ru.winelab", "ru.smmd.superdelivery", "ru.aisa.android.ekpv2", "com.mobium12580.app", "ru.smclinic.app.lk", "com.teremok.keys", "ru.tokyocity.tokyocity", "com.tseh85", "ru.plazius.cofix", "com.avito.android", "ru.x5.omni", "ru.tele2.mytele2", "by.advasoft.android.troika.app", "com.octopod.russianpost.client.android", "ru.dahl.messenger", "ru.dns.shop.android", "com.evrasiar", "com.loyaltyplant.partner.subway", "ru.reksoft.okey"] dns: enable: true @@ -37,20 +83,9 @@ dns: ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 - default-nameserver: - - 1.1.1.1 - - 1.0.0.1 - - 8.8.8.8 - - 8.8.4.4 - nameserver: - - https://dns10.quad9.net/dns-query - - https://dns.aa.net.uk/dns-query - proxy-server-nameserver: - - 1.1.1.1 - - 8.8.8.8 - # direct-nameserver: fake-ip-filter-mode: blacklist fake-ip-filter: + - rule-set:geosite-private - '+.lan' - '+.local' - '+.pool.ntp.org' @@ -61,23 +96,28 @@ dns: - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' - -find-process-mode: always - -keep-alive-idle: 120 -keep-alive-interval: 30 - -profile: - store-selected: true - store-fake-ip: true - tracing: false + direct-nameserver-follow-policy: true + default-nameserver: + - 1.1.1.1 + - 8.8.8.8 + nameserver: *dns_ru + proxy-server-nameserver: *dns_ru + direct-nameserver: *dns_ru + nameserver-policy: + rule-set:geosite-private: + - system + rule-set:oisd-big: + - rcode://refused + "rule-set:telegram,ru-bundle": *dns_proxy sniffer: enable: true + force-dns-mapping: true + parse-pure-ip: true + override-destination: false sniff: HTTP: ports: [80, 8080-8880] - override-destination: true TLS: ports: [443, 8443] QUIC: @@ -93,6 +133,7 @@ sniffer: - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' + skip-dst-address: *reserved_ips proxy-providers: remnawave: @@ -113,7 +154,7 @@ proxy-providers: udp-over-tcp: true proxy-groups: - - name: Fastest + - name: ⚡ Самый быстрый icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Auto.png type: url-test url: http://www.gstatic.com/generate_204 @@ -124,22 +165,24 @@ proxy-groups: use: - remnawave - - name: PROXY - icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png + - name: VPN + icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Hijacking.png type: select url: http://www.gstatic.com/generate_204 proxies: - - Fastest + - ⚡ Самый быстрый - DIRECT use: - remnawave - - name: RU-Banned + - name: Блокировки РФ icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png type: select proxies: - - PROXY + - VPN - DIRECT + use: + - remnawave - name: Реклама icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png @@ -148,87 +191,76 @@ proxy-groups: - REJECT - DIRECT + - name: Остальные сайты + icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Global.png + type: select + proxies: + - DIRECT + - VPN + use: + - remnawave + rule-providers: oisd-big: - type: http - behavior: domain - format: mrs + <<: *rp_domain url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs - interval: 86400 path: ./rules/oisd/big.mrs - # bld-agregator: - # type: http - # behavior: domain - # format: mrs - # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/bld-agregator.mrs - # interval: 86400 - # path: ./rules/oisd/bld-agregator.mrs + geosite-private: + <<: *rp_domain + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/private.mrs + path: ./rules/geo/geosite/private.mrs + + geoip-private: + <<: *rp_ipcidr + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/private.mrs + path: ./rules/geo/geoip/private.mrs # refilter_domains: - # type: http - # behavior: domain - # format: mrs + # <<: *rp_domain # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/domain-rule.mrs - # interval: 86400 - # path: ./re-filter/domain-rule.mrs + # path: ./rules/re-filter/domain-rule.mrs # refilter_ipsum: - # type: http - # behavior: ipcidr - # format: mrs + # <<: *rp_ipcidr # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/ip-rule.mrs - # interval: 86400 - # path: ./re-filter/ip-rule.mrs + # path: ./rules/re-filter/ip-rule.mrs cloudflare: - type: http - behavior: ipcidr - format: mrs - url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/cloudflare.mrs - interval: 86400 + <<: *rp_ipcidr + url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs path: ./rules/geoip/cloudflare.mrs - telegram-ip: - type: http - behavior: ipcidr - format: text - url: https://core.telegram.org/resources/cidr.txt - interval: 86400 - path: ./rules/services/telegram-ip.txt + telegram: + <<: *rp_domain + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/telegram.mrs + path: ./rules/geosite/telegram.mrs + + telegram-ips: + <<: *rp_ipcidr + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/telegram.mrs + path: ./rules/geoip/telegram.mrs games-direct: - type: http - behavior: classical - format: yaml + <<: *rp_classical url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/games-direct.yaml - interval: 86400 path: ./rules/services/games-direct.yaml ru-app-list: - type: http - behavior: classical - format: yaml + <<: *rp_classical url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/ru-app-list.yaml - interval: 86400 - path: ./rules/ru-bundle/ru-app-list.yaml + path: ./rules/ru/ru-app-list.yaml rknasnblock: - type: http - behavior: ipcidr - format: mrs + <<: *rp_ipcidr url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs - interval: 86400 - path: ./rules/ru-bundle/rknasnblock.mrs + path: ./rules/ru/rknasnblock.mrs # include: itdoginfo-inside-russia + no-russia-hosts + antifilter-community ru-bundle: - type: http - behavior: domain - format: mrs + <<: *rp_domain url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs - interval: 86400 - path: ./rules/ru-bundle/rule.mrs + path: ./rules/ru/ru-bundle.mrs apps_ipcheck: type: inline @@ -242,25 +274,20 @@ rule-providers: - DOMAIN,ip-api.com rules: - - RULE-SET,apps_ipcheck,PROXY - - # === REJECT === - - RULE-SET,oisd-big,Реклама - # - RULE-SET,bld-agregator,Реклама - + - RULE-SET,apps_ipcheck,VPN # === DIRECT (priority) === + - RULE-SET,geoip-private,DIRECT,no-resolve + - RULE-SET,geosite-private,DIRECT - RULE-SET,games-direct,DIRECT - RULE-SET,ru-app-list,DIRECT - + # === REJECT === + - RULE-SET,oisd-big,Реклама # === PROXY === - - RULE-SET,telegram-ip,PROXY,no-resolve - - - RULE-SET,cloudflare,PROXY - # - RULE-SET,refilter_ipsum,PROXY,no-resolve - # - RULE-SET,refilter_domains,PROXY - - - RULE-SET,rknasnblock,RU-Banned,no-resolve - - RULE-SET,ru-bundle,RU-Banned - + - OR,((RULE-SET,telegram),(RULE-SET,telegram-ips)),VPN + - RULE-SET,cloudflare,VPN + # - RULE-SET,refilter_ipsum,VPN,no-resolve + # - RULE-SET,refilter_domains,VPN + - RULE-SET,rknasnblock,Блокировки РФ,no-resolve + - RULE-SET,ru-bundle,Блокировки РФ # === DIRECT === - - MATCH,DIRECT + - MATCH,Остальные сайты diff --git a/clash/config/router.yaml b/clash/config/router.yaml index 902e392..140c24f 100644 --- a/clash/config/router.yaml +++ b/clash/config/router.yaml @@ -1,3 +1,27 @@ +anchors: + reserved_ips: &reserved_ips + - 0.0.0.0/8 + - 10.0.0.0/8 + - 100.64.0.0/10 + - 127.0.0.0/8 + - 169.254.0.0/16 + - 172.16.0.0/12 + - 192.0.0.0/24 + - 192.0.2.0/24 + - 192.88.99.0/24 + - 192.168.0.0/16 + - 198.51.100.0/24 + - 203.0.113.0/24 + - 224.0.0.0/3 + + dns_ru: &dns_ru + - https://77.88.8.8/dns-query#DIRECT + - https://8.8.8.8/dns-query#DIRECT + + dns_proxy: &dns_proxy + - https://1.1.1.1/dns-query#VPN + - https://dns.google/dns-query#VPN + mode: rule ipv6: false log-level: warning @@ -5,17 +29,19 @@ allow-lan: false tproxy-port: 7894 unified-delay: true tcp-concurrent: true +enable-process: false +find-process-mode: off +keep-alive-idle: 120 +keep-alive-interval: 30 +routing-mark: 2 external-controller: 0.0.0.0:9090 external-ui: ./ui external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip" -# geodata-mode: true -# geo-auto-update: true -# geo-update-interval: 24 -# geox-url: -# geoip: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat" -# geosite: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat" -# mmdb: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country.mmdb" +profile: + store-selected: true + store-fake-ip: true + tracing: false dns: enable: true @@ -27,20 +53,9 @@ dns: ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 - default-nameserver: - - 1.1.1.1 - - 1.0.0.1 - - 8.8.8.8 - - 8.8.4.4 - nameserver: - - https://dns10.quad9.net/dns-query - - https://dns.aa.net.uk/dns-query - proxy-server-nameserver: - - 1.1.1.1 - - 8.8.8.8 - # direct-nameserver: fake-ip-filter-mode: blacklist fake-ip-filter: + - rule-set:geosite-private - '+.lan' - '+.local' - '+.pool.ntp.org' @@ -51,25 +66,28 @@ dns: - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' - -find-process-mode: off - -keep-alive-idle: 120 -keep-alive-interval: 30 - -profile: - store-selected: true - store-fake-ip: true - tracing: false - -routing-mark: 2 + direct-nameserver-follow-policy: true + default-nameserver: + - 1.1.1.1 + - 8.8.8.8 + nameserver: *dns_ru + proxy-server-nameserver: *dns_ru + direct-nameserver: *dns_ru + nameserver-policy: + rule-set:geosite-private: + - system + # rule-set:oisd-big: + # - rcode://refused + "rule-set:telegram,ru-bundle": *dns_proxy sniffer: enable: true + force-dns-mapping: true + parse-pure-ip: true + override-destination: false sniff: HTTP: ports: [80, 8080-8880] - override-destination: true TLS: ports: [443, 8443] QUIC: @@ -85,6 +103,7 @@ sniffer: - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' + skip-dst-address: *reserved_ips proxy-providers: remnawave: @@ -105,7 +124,7 @@ proxy-providers: udp-over-tcp: true proxy-groups: - - name: Fastest + - name: ⚡ Самый быстрый icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Auto.png type: url-test url: http://www.gstatic.com/generate_204 @@ -116,22 +135,24 @@ proxy-groups: use: - remnawave - - name: PROXY - icon: https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png + - name: VPN + icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Hijacking.png type: select url: http://www.gstatic.com/generate_204 proxies: - - Fastest + - ⚡ Самый быстрый - DIRECT use: - remnawave - - name: RU-Banned + - name: Блокировки РФ icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png type: select proxies: - - PROXY + - VPN - DIRECT + use: + - remnawave # - name: Реклама # icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png @@ -140,62 +161,94 @@ proxy-groups: # - REJECT # - DIRECT + - name: Остальные сайты + icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Global.png + type: select + proxies: + - DIRECT + - VPN + use: + - remnawave + rule-providers: # oisd-big: # type: http # behavior: domain # format: mrs # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs - # interval: 86400 # path: ./rules/oisd/big.mrs - - # bld-agregator: - # type: http - # behavior: domain - # format: mrs - # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/bld-agregator.mrs # interval: 86400 - # path: ./rules/oisd/bld-agregator.mrs + # proxy: VPN + + geosite-private: + type: http + behavior: domain + format: mrs + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/private.mrs + path: ./rules/geo/geosite/private.mrs + interval: 86400 + proxy: VPN + + geoip-private: + type: http + behavior: ipcidr + format: mrs + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/private.mrs + path: ./rules/geo/geoip/private.mrs # refilter_domains: # type: http # behavior: domain # format: mrs # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/domain-rule.mrs + # path: ./rules/re-filter/domain-rule.mrs # interval: 86400 - # path: ./re-filter/domain-rule.mrs + # proxy: VPN # refilter_ipsum: # type: http # behavior: ipcidr # format: mrs # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/ip-rule.mrs + # path: ./rules/re-filter/ip-rule.mrs # interval: 86400 - # path: ./re-filter/ip-rule.mrs + # proxy: VPN cloudflare: type: http behavior: ipcidr format: mrs - url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/cloudflare.mrs - interval: 86400 + url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs path: ./rules/geoip/cloudflare.mrs + interval: 86400 + proxy: VPN - telegram-ip: + telegram: + type: http + behavior: domain + format: mrs + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/telegram.mrs + path: ./rules/geosite/telegram.mrs + interval: 86400 + proxy: VPN + + telegram-ips: type: http behavior: ipcidr - format: text - url: https://core.telegram.org/resources/cidr.txt + format: mrs + url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/telegram.mrs + path: ./rules/geoip/telegram.mrs interval: 86400 - path: ./rules/services/telegram-ip.txt + proxy: VPN rknasnblock: type: http behavior: ipcidr format: mrs url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs + path: ./rules/ru/rknasnblock.mrs interval: 86400 - path: ./rules/ru-bundle/rknasnblock.mrs + proxy: VPN # include: itdoginfo-inside-russia + no-russia-hosts + antifilter-community ru-bundle: @@ -203,23 +256,22 @@ rule-providers: behavior: domain format: mrs url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs + path: ./rules/ru/ru-bundle.mrs interval: 86400 - path: ./rules/ru-bundle/rule.mrs + proxy: VPN rules: + # === DIRECT (priority) === + - RULE-SET,geoip-private,DIRECT,no-resolve + - RULE-SET,geosite-private,DIRECT # === REJECT === # - RULE-SET,oisd-big,Реклама - # - RULE-SET,bld-agregator,Реклама - # === PROXY === - - RULE-SET,telegram-ip,PROXY,no-resolve - - - RULE-SET,cloudflare,PROXY - # - RULE-SET,refilter_ipsum,PROXY,no-resolve - # - RULE-SET,refilter_domains,PROXY - - - RULE-SET,rknasnblock,RU-Banned,no-resolve - - RULE-SET,ru-bundle,RU-Banned - + - OR,((RULE-SET,telegram),(RULE-SET,telegram-ips)),VPN + - RULE-SET,cloudflare,VPN + # - RULE-SET,refilter_ipsum,VPN,no-resolve + # - RULE-SET,refilter_domains,VPN + - RULE-SET,rknasnblock,Блокировки РФ,no-resolve + - RULE-SET,ru-bundle,Блокировки РФ # === DIRECT === - - MATCH,DIRECT + - MATCH,Остальные сайты diff --git a/singbox/config/client.json b/singbox/config/client.json deleted file mode 100644 index 3ecd2a9..0000000 --- a/singbox/config/client.json +++ /dev/null @@ -1,250 +0,0 @@ -{ - "dns": { - "rules": [ - { - "server": "remote", - "query_type": [ - "A", - "AAAA" - ] - }, - { - "server": "local", - "outbound": "any" - } - ], - "fakeip": { - "enabled": true, - "inet4_range": "198.18.0.0/15", - "inet6_range": "fc00::/18" - }, - "servers": [ - { - "tag": "cf-dns", - "address": "tls://1.1.1.1" - }, - { - "tag": "local", - "detour": "direct", - "address": "tcp://1.1.1.1", - "strategy": "ipv4_only", - "address_strategy": "prefer_ipv4" - }, - { - "tag": "remote", - "address": "fakeip" - } - ], - "independent_cache": true - }, - "log": { - "level": "debug", - "disabled": true, - "timestamp": true - }, - "route": { - "rules": [ - { - "action": "sniff" - }, - { - "mode": "or", - "type": "logical", - "rules": [ - { - "protocol": "dns" - }, - { - "port": 53 - } - ], - "action": "hijack-dns" - }, - { - "outbound": "direct", - "ip_is_private": true - }, - { - "outbound": "PROXY", - "domain_suffix": [ - "ipwho.is", - "ipapi.is", - "ipapi.co", - "api.ip.sb", - "ip-api.com" - ] - }, - { - "outbound": "direct", - "rule_set": [ - "ru-app-list" - ] - }, - { - "geoip": [ - "telegram" - ], - "geosite": [ - "telegram" - ], - "outbound": "PROXY" - }, - { - "geoip": [ - "cloudflare" - ], - "outbound": "PROXY" - }, - { - "outbound": "PROXY", - "rule_set": [ - "refilter_ipsum", - "refilter_domains" - ] - }, - { - "outbound": "RU-Banned", - "rule_set": [ - "rknasnblock", - "ru-bundle" - ] - } - ], - "rule_set": [ - { - "tag": "ru-app-list", - "url": "https://raw.githubusercontent.com/legiz-ru/sb-rule-sets/main/ru-app-list.srs", - "type": "remote", - "format": "binary", - "download_detour": "PROXY" - }, - { - "tag": "refilter_domains", - "url": "https://github.com/1andrevich/Re-filter-lists/releases/latest/download/ruleset-domain-refilter_domains.srs", - "type": "remote", - "format": "binary", - "download_detour": "PROXY" - }, - { - "tag": "refilter_ipsum", - "url": "https://github.com/1andrevich/Re-filter-lists/releases/latest/download/ruleset-ip-refilter_ipsum.srs", - "type": "remote", - "format": "binary", - "download_detour": "PROXY" - }, - { - "tag": "rknasnblock", - "url": "https://github.com/legiz-ru/sb-rule-sets/raw/main/rknasnblock.srs", - "type": "remote", - "format": "binary", - "download_detour": "PROXY" - }, - { - "tag": "ru-bundle", - "url": "https://github.com/legiz-ru/sb-rule-sets/raw/main/ru-bundle.srs", - "type": "remote", - "format": "binary", - "download_detour": "PROXY" - } - ], - "override_android_vpn": true, - "auto_detect_interface": true - }, - "inbounds": [ - { - "mtu": 9000, - "tag": "tun-in", - "type": "tun", - "sniff": true, - "stack": "mixed", - "platform": { - "http_proxy": { - "server": "127.0.0.1", - "enabled": true, - "server_port": 2412 - } - }, - "auto_route": true, - "strict_route": true, - "inet4_address": "172.19.0.1/30", - "inet6_address": "fdfe:dcba:9876::1/126", - "interface_name": "tun125", - "endpoint_independent_nat": true - }, - { - "tag": "mixed-in", - "type": "mixed", - "sniff": true, - "users": [], - "listen": "127.0.0.1", - "listen_port": 2412, - "set_system_proxy": false - } - ], - "outbounds": [ - { - "tag": "→ Remnawave", - "type": "selector", - "outbounds": null, - "interrupt_exist_connections": true - }, - { - "tag": "Fastest", - "url": "http://www.gstatic.com/generate_204", - "type": "urltest", - "interval": "30s", - "outbounds": [ - "→ Remnawave" - ], - "tolerance": 50 - }, - { - "tag": "PROXY", - "type": "selector", - "outbounds": [ - "Fastest", - "→ Remnawave", - "direct" - ] - }, - { - "tag": "RU-Banned", - "type": "selector", - "outbounds": [ - "PROXY", - "direct" - ] - }, - { - "tag": "Реклама", - "type": "selector", - "outbounds": [ - "block", - "direct" - ] - }, - { - "tag": "direct", - "type": "direct" - }, - { - "tag": "block", - "type": "block" - } - ], - "experimental": { - "clash_api": { - "external_ui": "metacubexd", - "default_mode": "rule", - "external_controller": "127.0.0.1:9090", - "external_ui_download_url": "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip", - "external_ui_download_detour": "direct" - }, - "cache_file": { - "path": "remnawave.db", - "enabled": true, - "cache_id": "remnawave", - "store_fakeip": true - } - } -}