278 lines
6.5 KiB
YAML
278 lines
6.5 KiB
YAML
anchors:
|
|
reserved_ips: &reserved_ips
|
|
- 0.0.0.0/8
|
|
- 10.0.0.0/8
|
|
- 100.64.0.0/10
|
|
- 127.0.0.0/8
|
|
- 169.254.0.0/16
|
|
- 172.16.0.0/12
|
|
- 192.0.0.0/24
|
|
- 192.0.2.0/24
|
|
- 192.88.99.0/24
|
|
- 192.168.0.0/16
|
|
- 198.51.100.0/24
|
|
- 203.0.113.0/24
|
|
- 224.0.0.0/3
|
|
|
|
dns_ru: &dns_ru
|
|
- https://77.88.8.8/dns-query#DIRECT
|
|
- https://8.8.8.8/dns-query#DIRECT
|
|
|
|
dns_proxy: &dns_proxy
|
|
- https://1.1.1.1/dns-query#VPN
|
|
- https://dns.google/dns-query#VPN
|
|
|
|
mode: rule
|
|
ipv6: false
|
|
log-level: warning
|
|
allow-lan: false
|
|
tproxy-port: 7894
|
|
unified-delay: true
|
|
tcp-concurrent: true
|
|
enable-process: false
|
|
find-process-mode: off
|
|
keep-alive-idle: 120
|
|
keep-alive-interval: 30
|
|
routing-mark: 2
|
|
external-controller: 0.0.0.0:9090
|
|
external-ui: ./ui
|
|
external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"
|
|
|
|
profile:
|
|
store-selected: true
|
|
store-fake-ip: true
|
|
tracing: false
|
|
|
|
dns:
|
|
enable: true
|
|
cache-algorithm: arc
|
|
prefer-h3: false # true
|
|
use-hosts: true
|
|
use-system-hosts: true
|
|
listen: 0.0.0.0:7874
|
|
ipv6: false
|
|
enhanced-mode: fake-ip
|
|
fake-ip-range: 198.18.0.1/16
|
|
fake-ip-filter-mode: blacklist
|
|
fake-ip-filter:
|
|
- rule-set:geosite-private
|
|
- '+.lan'
|
|
- '+.local'
|
|
- '+.pool.ntp.org'
|
|
- 'time.windows.com'
|
|
- 'time.apple.com'
|
|
- '+.msftconnecttest.com'
|
|
- '+.msftncsi.com'
|
|
- '+.push.apple.com'
|
|
- '+.apple.com'
|
|
- '+.4829152.xyz'
|
|
direct-nameserver-follow-policy: true
|
|
default-nameserver:
|
|
- 1.1.1.1
|
|
- 8.8.8.8
|
|
nameserver: *dns_ru
|
|
proxy-server-nameserver: *dns_ru
|
|
direct-nameserver: *dns_ru
|
|
nameserver-policy:
|
|
rule-set:geosite-private:
|
|
- system
|
|
# rule-set:oisd-big:
|
|
# - rcode://refused
|
|
"rule-set:telegram,ru-bundle": *dns_proxy
|
|
|
|
sniffer:
|
|
enable: true
|
|
force-dns-mapping: true
|
|
parse-pure-ip: true
|
|
override-destination: false
|
|
sniff:
|
|
HTTP:
|
|
ports: [80, 8080-8880]
|
|
TLS:
|
|
ports: [443, 8443]
|
|
QUIC:
|
|
ports: [443, 8443]
|
|
skip-domain:
|
|
- '+.lan'
|
|
- '+.local'
|
|
- '+.pool.ntp.org'
|
|
- 'time.windows.com'
|
|
- 'time.apple.com'
|
|
- '+.msftconnecttest.com'
|
|
- '+.msftncsi.com'
|
|
- '+.push.apple.com'
|
|
- '+.apple.com'
|
|
- '+.4829152.xyz'
|
|
skip-dst-address: *reserved_ips
|
|
|
|
proxy-providers:
|
|
remnawave:
|
|
type: http
|
|
url: ""
|
|
path: ./providers/remnawave.yaml
|
|
interval: 86400
|
|
proxy: DIRECT
|
|
health-check:
|
|
enable: true
|
|
url: http://www.gstatic.com/generate_204
|
|
interval: 30
|
|
timeout: 3000
|
|
lazy: false
|
|
expected-status: 204
|
|
override:
|
|
udp: true
|
|
udp-over-tcp: true
|
|
|
|
proxy-groups:
|
|
- name: ⚡ Самый быстрый
|
|
icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Auto.png
|
|
type: url-test
|
|
url: http://www.gstatic.com/generate_204
|
|
interval: 30
|
|
timeout: 3000
|
|
tolerance: 50
|
|
hidden: true
|
|
use:
|
|
- remnawave
|
|
|
|
- name: VPN
|
|
icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Hijacking.png
|
|
type: select
|
|
url: http://www.gstatic.com/generate_204
|
|
proxies:
|
|
- ⚡ Самый быстрый
|
|
- DIRECT
|
|
use:
|
|
- remnawave
|
|
|
|
- name: Блокировки РФ
|
|
icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png
|
|
type: select
|
|
proxies:
|
|
- VPN
|
|
- DIRECT
|
|
use:
|
|
- remnawave
|
|
|
|
# - name: Реклама
|
|
# icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Advertising.png
|
|
# type: select
|
|
# proxies:
|
|
# - REJECT
|
|
# - DIRECT
|
|
|
|
- name: Остальные сайты
|
|
icon: https://cdn.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Global.png
|
|
type: select
|
|
proxies:
|
|
- DIRECT
|
|
- VPN
|
|
use:
|
|
- remnawave
|
|
|
|
rule-providers:
|
|
# oisd-big:
|
|
# type: http
|
|
# behavior: domain
|
|
# format: mrs
|
|
# url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/oisd/big.mrs
|
|
# path: ./rules/oisd/big.mrs
|
|
# interval: 86400
|
|
# proxy: VPN
|
|
|
|
geosite-private:
|
|
type: http
|
|
behavior: domain
|
|
format: mrs
|
|
url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/private.mrs
|
|
path: ./rules/geo/geosite/private.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
geoip-private:
|
|
type: http
|
|
behavior: ipcidr
|
|
format: mrs
|
|
url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/private.mrs
|
|
path: ./rules/geo/geoip/private.mrs
|
|
|
|
# refilter_domains:
|
|
# type: http
|
|
# behavior: domain
|
|
# format: mrs
|
|
# url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/domain-rule.mrs
|
|
# path: ./rules/re-filter/domain-rule.mrs
|
|
# interval: 86400
|
|
# proxy: VPN
|
|
|
|
# refilter_ipsum:
|
|
# type: http
|
|
# behavior: ipcidr
|
|
# format: mrs
|
|
# url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/re-filter/ip-rule.mrs
|
|
# path: ./rules/re-filter/ip-rule.mrs
|
|
# interval: 86400
|
|
# proxy: VPN
|
|
|
|
cloudflare:
|
|
type: http
|
|
behavior: ipcidr
|
|
format: mrs
|
|
url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cloudflare.mrs
|
|
path: ./rules/geoip/cloudflare.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
telegram:
|
|
type: http
|
|
behavior: domain
|
|
format: mrs
|
|
url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geosite/telegram.mrs
|
|
path: ./rules/geosite/telegram.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
telegram-ips:
|
|
type: http
|
|
behavior: ipcidr
|
|
format: mrs
|
|
url: https://github.com/MetaCubeX/meta-rules-dat/raw/meta/geo/geoip/telegram.mrs
|
|
path: ./rules/geoip/telegram.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
rknasnblock:
|
|
type: http
|
|
behavior: ipcidr
|
|
format: mrs
|
|
url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rknasnblock.mrs
|
|
path: ./rules/ru/rknasnblock.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
# include: itdoginfo-inside-russia + no-russia-hosts + antifilter-community
|
|
ru-bundle:
|
|
type: http
|
|
behavior: domain
|
|
format: mrs
|
|
url: https://github.com/legiz-ru/mihomo-rule-sets/raw/main/ru-bundle/rule.mrs
|
|
path: ./rules/ru/ru-bundle.mrs
|
|
interval: 86400
|
|
proxy: VPN
|
|
|
|
rules:
|
|
# === DIRECT (priority) ===
|
|
- RULE-SET,geoip-private,DIRECT,no-resolve
|
|
- RULE-SET,geosite-private,DIRECT
|
|
# === REJECT ===
|
|
# - RULE-SET,oisd-big,Реклама
|
|
# === PROXY ===
|
|
- OR,((RULE-SET,telegram),(RULE-SET,telegram-ips)),VPN
|
|
- RULE-SET,cloudflare,VPN
|
|
# - RULE-SET,refilter_ipsum,VPN,no-resolve
|
|
# - RULE-SET,refilter_domains,VPN
|
|
- RULE-SET,rknasnblock,Блокировки РФ,no-resolve
|
|
- RULE-SET,ru-bundle,Блокировки РФ
|
|
# === DIRECT ===
|
|
- MATCH,Остальные сайты
|