anchors: reserved_ips: &reserved_ips - 0.0.0.0/8 - 10.0.0.0/8 - 100.64.0.0/10 - 127.0.0.0/8 - 169.254.0.0/16 - 172.16.0.0/12 - 192.0.0.0/24 - 192.0.2.0/24 - 192.88.99.0/24 - 192.168.0.0/16 - 198.51.100.0/24 - 203.0.113.0/24 - 224.0.0.0/3 dns_ru: &dns_ru - https://77.88.8.8/dns-query#DIRECT - https://8.8.8.8/dns-query#DIRECT dns_proxy: &dns_proxy - https://1.1.1.1/dns-query#VPN - https://dns.google/dns-query#VPN pr_http: &pr_http type: http interval: 86400 proxy: VPN rp_classical: &rp_classical <<: *pr_http behavior: classical format: yaml rp_domain: &rp_domain <<: *pr_http behavior: domain format: mrs rp_ipcidr: &rp_ipcidr <<: *pr_http behavior: ipcidr format: mrs mode: rule log-level: warning ipv6: false unified-delay: true tcp-concurrent: true enable-process: true find-process-mode: strict keep-alive-idle: 120 keep-alive-interval: 30 external-controller: 127.0.0.1:9090 external-ui: ./ui external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip" profile: store-selected: true store-fake-ip: true tracing: false tun: enable: true stack: gvisor auto-route: true auto-detect-interface: true strict-route: true dns-hijack: - any:53 - tcp://any:53 # endpoint-independent-nat: true route-exclude-address: *reserved_ips exclude-package: ["az.vtb.android", "business.gid.hero", "business.gid.universe", "chat.strelka", "com.allgoritm.youla", "com.asmo.infometeos", "com.birzha_rt", "com.bogg.art.vkt", "com.dartit.mobileagent", "com.dartit.rtcabinet", "com.equeo.megafondraiv", "com.gmeteos.infometeos", "com.goodok.mts", "com.grotem.match", "com.horosho.tips", "com.indygomobi.detifm", "com.indygomobi.relaxfm", "com.indygomobi.zenit", "com.iwedia.ui.beeline.atv", "com.kazanexpress.ke_app", "com.lamoda.lite", "com.lenta.employee", "com.lenta.lentochka_service", "com.magnit.delivery.courier", "com.match.club", "com.matchtv.rustore", "com.mcd.superapp", "com.mcptt", "com.megafon.kk", "com.megafon.maps", "com.megafon.mcca.android.store", "com.megafon.rk", "com.mts.who_calls", "com.my.mygamesapp", "com.navplatform.navigator.public", "com.pobeda.anniversary", "com.pogoda.infometeos", "com.programmisty.emiasapp", "com.rostelecom.printservice", "com.rzd.eventsrzd", "com.sdkit.search.app", "com.spbtv.rosing", "com.vk.admin", "com.vk.calls", "com.vk.love", "com.vk.mail", "com.vk.tv", "com.vkusvill.courier", "com.vkusvill.vacancy", "com.wbextdelivery", "com.wbpoint.android.prod.release", "com.wbstream_app", "com.wildberries.consultations", "com.wildberries.wbkey", "com.wms_mm_point.mm_delivery_point", "com.yandex.aliceapp", "com.yandex.browser.lite", "com.yandex.shedevrus", "games.my.cloud", "games.my.cloud.tv", "intech.global.com.beeline", "me.membrana.kids.parent.app", "megafon.transport.mobile", "org.rtk.cleaning", "ru.beeline.beebookreader", "ru.beeline.dol", "ru.beeline.messengerx", "ru.beeline.mwpsapp", "ru.beeline.pro", "ru.cdek.courier", "ru.cdek.ek5", "ru.compass.tag", "ru.gazprompay.android", "ru.gid.app", "ru.gid.eventsapp", "ru.gid.most", "ru.gosuslugi.migrant", "ru.gosuslugi.volunteer", "ru.hh.android", "ru.hh.employer.android", "ru.ideast.championat", "ru.ideast.humor", "ru.ideast.nrj", "ru.ideast.romantika", "ru.ideast.ru101.rustore", "ru.imteleport.plp2", "ru.intech.lki", "ru.leroymerlin.employee", "ru.lifepay.pos.alfapos", "ru.lifepay.pos.vtb", "ru.litres.android", "ru.litres.android.readfree", "ru.litres.androidtv", "ru.livelib.client", "ru.m4bank.softpos.alfaru", "ru.m4bank.softpos.rshb", "ru.m4bank.softpos.vtbpos", "ru.magnit.hrtest.android", "ru.magnit.mesmag", "ru.magnit.tag", "ru.magnit.tms.armhde", "ru.magnit.vendorapp", "ru.mail.biz.avocado", "ru.mail.cloud", "ru.mail.horo.android", "ru.mail.intranet", "ru.mail.my", "ru.mail.search.electroscope", "ru.megafon.vn.client", "ru.megalabs.multifon", "ru.mgfoms.pandora", "ru.mntk.dostavka.prod", "ru.mts.books.droid", "ru.mts.live.app", "ru.mts.mtscode", "ru.mts.music.android", "ru.mts.pay", "ru.mts.twomem", "ru.mts.vdome.resident", "ru.mybook", "ru.netbynet.app.personal_cabinet", "ru.ntv.client", "ru.ntv.client.tv", "ru.ntv.today", "ru.ntvplus.service", "ru.ok.dating", "ru.onlime.my.app", "ru.ozon.chatzone", "ru.ozon.fintech.apvz", "ru.ozon.fintech.sme", "ru.ozon.flex", "ru.ozon.fresh", "ru.ozon.hire", "ru.ozon.magistral", "ru.ozon.maple_app", "ru.ozon.ozon_pvz", "ru.ozon.profit", "ru.ozon.select", "ru.ozon.seller_app", "ru.ozon.tv", "ru.pikabu.android", "ru.profmedia.avtoradio", "ru.profmedia.likefm", "ru.rambler.horoscopes.twa", "ru.ritmmedia.yappy", "ru.rostelecom.ideas", "ru.rostelecom.vatsmobilelk", "ru.rshb.dboul", "ru.rshb.digitalcoworkeroffice", "ru.rshb.ips_qr", "ru.rshb.privatebusiness", "ru.rshb.svoe_rodnoe", "ru.rshb.svoedom_android", "ru.rshb.svojfermer", "ru.rt.key", "ru.rt.life", "ru.rt.masterkey", "ru.rt.mb_installer", "ru.rt.mobileoffice", "ru.rt.ritm", "ru.rt.smarthome", "ru.rt.video.app.mobile", "ru.rt.video.app.mobile.b2b", "ru.rt.video.app.tv", "ru.rt.videocomfort", "ru.rt.wfm", "ru.rtdc.kakdela", "ru.russianpost.pechkin", "ru.rzd.cargolk", "ru.rzd.newsdo.skills", "ru.setka", "ru.systtech.megafon.mobile", "ru.tander.mobile_scout_flutter", "ru.tntmusic.tv", "ru.tutu.etrains", "ru.tutu.tutu_emp", "ru.utk.dostavka", "ru.vk.hrtek", "ru.vkpm.comedy", "ru.vtb.corporate.android.main_application", "ru.vtb.invest", "ru.vtb.smb", "ru.wb.courier", "ru.wb.go", "ru.wb.guru", "ru.wb.wband", "ru.wildberries.books", "ru.wildberries.manager", "ru.wildberries.team", "ru.wildberries.team2", "ru.wildberries.wbpayclient", "ru.wink.music", "ru.wink.music.tv", "ru.x5.foodru.rs", "ru.x5.key", "ru.x5.mfpnew", "ru.x5.mrm_android.personaldevice", "ru.x5.opermax.aura", "ru.x5.rooms", "ru.x5.wl.slata", "ru.x5.wrs2", "ru.x5.x5job", "ru.yandex.mobile.fmradio", "ru.yandex.searchplugin", "ru.yandex.telemost", "ru.yozhka", "ruagro.start.tech", "tech.clink.emias.emiasqrcode", "travel.ozon.mobile", "tv.ntvplus.app", "tv.ntvplus.app.tv", "wb.partners", "wildberries.business", "club.skllzz.fitness", "com.apegroup.mcdonaldsrussia", "com.bankffin.portfolio", "com.bastion", "com.bifit.rncbbeta", "ru.spb.parking", "com.whsd.whsdapp", "com.orgp.spbpodorozhnik", "ru.ftc.tc", "com.carshering", "com.citymobil", "com.taxsee.taxsee", "ru.yandex.uber", "ru.taxovichkof.android", "ru.rolf.rolf", "ru.russianhighways.mobile", "ru.mosparking.appnew", "centrida.neftmagistral", "ru.pichesky.rosneft", "ru.serebryakovas.lukoilmobileapp", "ru.tatneft.gasstations", "com.gpn.azs", "com.coolclever.app", "com.deliveryclub", "com.discover.moscow.lite", "com.edadeal.android", "com.gnivts.ausn", "com.gnivts.selfemployed", "com.icemobile.lenta.prod", "com.idamob.tinkoff.android", "com.keenetic.kn", "ru.netcraze.app", "com.moscowsport", "com.premiumbonus.jamm.ramen", "pro.arora.mobile.pizza_milana", "pro.arora.mobile.maradi", "com.punicapp.whoosh", "com.ru.dixy", "com.salute.smarthome.prod", "com.sberauto.mobile", "com.sberbank.sberpravo", "com.tdm.messenger", "com.tjuraniaapp", "com.uip.gosuslugi2", "com.vk.clips", "live.vkplay.app", "ru.mail.mailapp", "com.vk.im", "com.vk.vkvideo", "com.uma.musicvk", "com.wildberries.ru", "ru.zen.android", "com.yandex.browser", "com.yandex.bank", "com.yandex.bluecollars", "com.yandex.iot", "com.yandex.lavka", "com.yandex.mobile.drive", "com.yandex.mobile.realty", "com.yandex.plus.game.city", "com.yandex.searchapp", "com.yandex.shedevrus2", "com.yandex.tasks.androidapp", "com.yandex.yamb", "com.zvooq.openplay", "es.hol.ing.zagsr", "im.dlg.dialogx", "im.dlg.enterprise", "io.github.dovecoteescapee.byedpi", "io.itforces.android.timetable", "logo.com.mbanking", "org.orange.mobile", "pro.sber_zvuk", "ru.akbars.mobile", "ru.alfabank.mobile.android", "ru.alfabank.oavdo.amc", "ru.alfadirect.app", "ru.alfastrah.app", "ru.aliexpress.buyer", "ru.altarix.mos.pgu", "ru.auto.ara", "ru.aviasales", "ru.beru.android", "ru.bspb", "ru.burgerking", "ru.cardsmobile.mw3", "ru.crptech.b2bmark", "ru.crptech.mark", "ru.datapax.mosobl", "ru.diftechsvc", "ru.dit.smartstaff", "ru.dodopizza.app", "ru.domclick.mortgage", "ru.drclinics.app.sovcom", "ru.dublgis.dgismobile", "ru.dublgis.dgismobile4preview", "otello.dgis.ru", "ru.fanid", "ru.filit.mvideo.b2c", "ru.finassist", "ru.fns.billchecker", "ru.fns.billchecker.mobile.android", "ru.fns.lkfl", "ru.foodfox.client", "ru.gazprombank.android.mobilebank.app", "ru.getpharma.eapteka", "ru.gnivc.lkip", "ru.goods.marketplace", "ru.gosuslugi.auto", "ru.gosuslugi.culture", "ru.gosuslugi.goskey", "ru.gosuslugi.pos", "ru.gosuslugi.pos.executor", "ru.instamart", "ru.kfc.kfc_delivery", "ru.kinopoisk", "ru.letobank.prometheus", "ru.megafon.mlk", "ru.megamarket.marketplace", "ru.mes.sputnik", "ru.mes.dnevnik", "ru.more.play", "ru.mos.app", "ru.mos.ed", "ru.mos.gz", "ru.mos.myid", "ru.mos.ourcity", "ru.mos.polls", "ru.mos.um", "ru.mos.zaryadye", "ru.mosgorpass", "ru.mosmetro.metro", "ru.mosoblgaz", "ru.mosreg.easuz.portal", "ru.mosreg.ekjp", "ru.mosreg.mingos.mdp.app", "ru.mosreg.mo112", "ru.mosreg.uslugi.mobile.beta", "ru.mts.bank", "ru.mts.mtstv", "ru.mts.mymts", "ru.mvm.eldo", "ru.sportmaster.app", "ru.myspar", "ru.nalog.rmr.client", "ru.nspk.mir.loyalty", "ru.nspk.mirpay", "ru.okbmei.gosservice", "ru.ostrovok.android", "ru.ozon.app.android", "ru.ozon.fintech.finance", "ru.perekrestok.app", "club.chizhik", "ru.plus.bookmate", "ru.pyaterochka.app.browser", "ru.raiffeisennews", "ru.rambler.mail", "com.dartit.RTcabinet", "ru.rostel", "ru.rutube.app", "ru.rutube.RutubeKids", "ru.rutube.studio", "ru.rutube.app.tv", "gpm.tnt_premier", "one.premier.rustoretv", "ru.rzd.pass", "ru.salute.b2b.prod", "ru.sbcs.store", "ru.sber.csradar", "ru.sber.telecom", "ru.sberbank.investor", "ru.sberbank.onlineencashment", "ru.sberbank.sberkids", "ru.sberbank.sbersign", "ru.sberbank_sbbol", "ru.sberbankmobile", "ru.sberins.insureapp.android", "ru.sbermegamarket.pro", "ru.bankuralsib.mb.android", "ru.sovcombank.dms", "ru.sovcombank.investor", "ru.sovcomcard.halva.v1", "pro.rocketTech.rocket.rocketapp", "ru.oneme.app", "ru.start.androidmobile", "ru.bristol.bristol_app", "www.metro.com", "ru.tander.magnit", "ru.technokad.digitalkey", "ru.tii.lkcomu", "ru.tinkoff.bnpl", "ru.tinkoff.invest.course", "ru.tinkoff.investing", "ru.tinkoff.magent", "ru.tinkoff.mvno", "ru.tinkoff.posterminal", "ru.tinkoff.sme", "ru.troika.regional", "ru.urentbike.app", "com.vkontakte.android", "ru.vk.store", "ru.vk.video", "ru.vkmusic.audio", "ru.tbank.online", "ru.amina.moscow", "ru.lewis.dbo", "ru.gibdd_pay.app", "com.moex.finuslugi", "su.azure.paymaster", "ru.nspk.sbpay", "ru.gosuslugi.school", "ru.sigma.gisgkh", "ru.rshb.dbo", "ru.spb.iac.dnevnikspb_new", "ru.ues.users_personal_account", "com.leroymerlin.mobile", "ru.kari.android", "ru.sunlight.sunlight", "level.travel", "ru.abrr.gas", "com.maxxt.recordradio", "com.uchi.app", "ru.chitaigorod.mobile", "ru.usetech.velobike.v2", "ru.zolotoy585.customer", "com.onecwearable.keyboard.rustore", "com.gloriajeans.mobile", "ru.rabota.app2", "ru.domopult.mosobleirc.android", "ru.rgs.lk", "ru.dikidi", "ru.citilink", "ru.spb.dnevnik", "ru.sima_land.spb.market", "ru.ufanet.myufanet", "ru.bcs.bcsbank", "com.svoi.bank", "ru.vkusvill", "ru.detmir.dmbonus", "ru.lenta.lentochka", "goldapple.ru.goldapple.customers", "com.notissimus.allinstruments.android", "ru.vseapteki", "ru.leonardo.leonardoshop", "ru.leroymerlin.mobile", "ru.maxidom.ecomm", "air.ru.obi.mobile", "com.logistic.sdek", "ru.vtb24.mobilebanking.android", "ru.yandex.androidkeyboard", "ru.yandex.disk", "ru.yandex.games", "ru.yandex.key", "ru.yandex.mail", "ru.yandex.market.partner", "ru.yandex.metro", "ru.yandex.mobile.gasstations", "ru.yandex.music", "ru.yandex.practicum.flutter_practicum", "ru.yandex.subtitles", "ru.yandex.taxi", "ru.yandex.taximeter", "ru.yandex.translate", "ru.yandex.travel", "ru.yandex.weatherplugin", "ru.yandex.yandexmaps", "ru.yandex.yandexnavi", "ru.yandex_team.calendar_app", "ru.yoo.business", "ru.yoo.kassa", "ru.yoo.money", "ru.yoo.sdk.kassa.payments.example.release", "ru.yota.android", "ru.zhuck.webapp", "ru.ok.android", "team.rtds.checkcontrol", "tv.lfstrm.smotreshka", "com.apteka.sklad", "com.platfomni.gorzdrav", "com.invitro.app", "youdrive.today", "com.kms.free", "ru.paribet", "ru.rosbank.android.beta", "ru.beeline.services", "ru.beeline.cloud", "ru.beeline.tve.android", "ru.otpbank.mobile", "biz.growapp.winline", "com.national.lottery", "ru.stoloto.mobile", "ru.bkfon", "ru.cian.main", "ru.m2.squaremeter", "ru.winelab", "ru.smmd.superdelivery", "ru.aisa.android.ekpv2", "com.mobium12580.app", "ru.smclinic.app.lk", "com.teremok.keys", "ru.tokyocity.tokyocity", "com.tseh85", "ru.plazius.cofix", "com.avito.android", "ru.x5.omni", "ru.tele2.mytele2", "by.advasoft.android.troika.app", "com.octopod.russianpost.client.android", "ru.dahl.messenger", "ru.dns.shop.android", "com.evrasiar", "com.loyaltyplant.partner.subway", "ru.reksoft.okey"] dns: enable: true cache-algorithm: arc prefer-h3: false # true use-hosts: true use-system-hosts: true listen: :53 ipv6: false enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 fake-ip-filter-mode: blacklist fake-ip-filter: - rule-set:geosite-private - '+.lan' - '+.local' - '+.pool.ntp.org' - 'time.windows.com' - 'time.apple.com' - '+.msftconnecttest.com' - '+.msftncsi.com' - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' direct-nameserver-follow-policy: true default-nameserver: - 1.1.1.1 - 8.8.8.8 nameserver: *dns_ru proxy-server-nameserver: *dns_ru direct-nameserver: *dns_ru nameserver-policy: rule-set:geosite-private: - system rule-set:oisd-big: - rcode://refused "rule-set:telegram,ru-bundle": *dns_proxy sniffer: enable: true force-dns-mapping: true parse-pure-ip: true override-destination: false sniff: HTTP: ports: [80, 8080-8880] TLS: ports: [443, 8443] QUIC: ports: [443, 8443] skip-domain: - '+.lan' - '+.local' - '+.pool.ntp.org' - 'time.windows.com' - 'time.apple.com' - '+.msftconnecttest.com' - '+.msftncsi.com' - '+.push.apple.com' - '+.apple.com' - '+.4829152.xyz' skip-dst-address: *reserved_ips proxy-providers: remnawave: type: http url: "" path: ./providers/remnawave.yaml interval: 86400 proxy: DIRECT health-check: enable: true url: http://www.gstatic.com/generate_204 interval: 30 timeout: 3000 lazy: false expected-status: 204 override: udp: true udp-over-tcp: true proxy-groups: - name: ⚡ Самый быстрый icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Auto.png type: url-test url: http://www.gstatic.com/generate_204 interval: 30 timeout: 3000 tolerance: 50 hidden: true use: - remnawave - name: VPN icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Hijacking.png type: select url: http://www.gstatic.com/generate_204 proxies: - ⚡ Самый быстрый - DIRECT use: - remnawave - name: Блокировки РФ icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png type: select proxies: - VPN - DIRECT use: - remnawave - name: Реклама icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png type: select proxies: - REJECT - DIRECT - name: Остальные сайты icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Global.png type: select proxies: - DIRECT - VPN use: - remnawave rule-providers: oisd-big: <<: *rp_domain url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs path: ./rules/oisd/big.mrs geosite-private: <<: *rp_domain url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/private.mrs path: ./rules/geo/geosite/private.mrs geoip-private: <<: *rp_ipcidr url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/private.mrs path: ./rules/geo/geoip/private.mrs # refilter_domains: # <<: *rp_domain # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/domain-rule.mrs # path: ./rules/re-filter/domain-rule.mrs # refilter_ipsum: # <<: *rp_ipcidr # url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/ip-rule.mrs # path: ./rules/re-filter/ip-rule.mrs cloudflare: <<: *rp_ipcidr url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs path: ./rules/geoip/cloudflare.mrs telegram: <<: *rp_domain url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/telegram.mrs path: ./rules/geosite/telegram.mrs telegram-ips: <<: *rp_ipcidr url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/telegram.mrs path: ./rules/geoip/telegram.mrs games-direct: <<: *rp_classical url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/games-direct.yaml path: ./rules/services/games-direct.yaml ru-app-list: <<: *rp_classical url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/other/ru-app-list.yaml path: ./rules/ru/ru-app-list.yaml rknasnblock: <<: *rp_ipcidr url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs path: ./rules/ru/rknasnblock.mrs # include: itdoginfo-inside-russia + no-russia-hosts + antifilter-community ru-bundle: <<: *rp_domain url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs path: ./rules/ru/ru-bundle.mrs apps_ipcheck: type: inline behavior: classical payload: - DOMAIN,ipwho.is - DOMAIN,ipapi.is - DOMAIN,ipapi.co - DOMAIN,api.ip.sb # - DOMAIN,ipinfo.io - DOMAIN,ip-api.com rules: - RULE-SET,apps_ipcheck,VPN # === DIRECT (priority) === - RULE-SET,geoip-private,DIRECT,no-resolve - RULE-SET,geosite-private,DIRECT - RULE-SET,games-direct,DIRECT - RULE-SET,ru-app-list,DIRECT # === REJECT === - RULE-SET,oisd-big,Реклама # === PROXY === - OR,((RULE-SET,telegram),(RULE-SET,telegram-ips)),VPN - RULE-SET,cloudflare,VPN # - RULE-SET,refilter_ipsum,VPN,no-resolve # - RULE-SET,refilter_domains,VPN - RULE-SET,rknasnblock,Блокировки РФ,no-resolve - RULE-SET,ru-bundle,Блокировки РФ # === DIRECT === - MATCH,Остальные сайты