Skip to content

Instantly share code, notes, and snippets.

@158212892

158212892/config.yaml

Last active September 4, 2024 03:12
Show Gist options
  • Save 158212892/081268a869f01bd4ec50d79d076c6d62 to your computer and use it in GitHub Desktop.
Save 158212892/081268a869f01bd4ec50d79d076c6d62 to your computer and use it in GitHub Desktop.
Download ZIP
Clash configs
Raw
config.yaml
# 混合端口 HTTP和SOCKS5用一个端口
mixed-port: 7893
# TCP 并发连接所有 IP, 将使用最快握手的 TCP
tcp-concurrent: true
# 允许局域网的连接（可用来共享代理）
allow-lan: true
# 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录
ipv6: true
# 规则模式：rule/global/direct/script
mode: rule
# 设置日志输出级别: silent/error/warning/info/debug
log-level: info
# 全局 TLS 指纹
global-client-fingerprint: chrome
# 匹配所有进程（always/strict/off）
find-process-mode: strict
external-controller: 0.0.0.0:9090 # 外部控制器，可以使用 RESTful API 来控制你的 Clash 内核，API 监听地址，你可以将 127.0.0.1 修改为 0.0.0.0 来监听所有 IP
external-ui: ui # 可以将静态网页资源 (比如 Clash-dashboard) 运行在 Clash API, 路径为 API 地址/ui，可以为绝对路径，或者 Clash 工作目录的相对路径
external-ui-url: 'https://mirror.ghproxy.com/https://github.com/MetaCubeX/Yacd-meta/archive/gh-pages.zip'
# 自定义外部用户界面下载地址
secret: "Aa135246Aa" # 自定义 API 的访问密钥
# 使用geoip.dat数据库
geodata-mode: true
geox-url:
geoip: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip-lite.dat"
geosite: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat"
mmdb: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country-lite.mmdb"
profile:
# 存储 select 选择记录
store-selected: true
# 持久化 fake-ip
store-fake-ip: true
# 嗅探域名
sniffer:
enable: true
# 是否使用嗅探结果作为实际访问，默认 true
parse-pure-ip: true
sniff:
TLS:
ports: [443, 8443]
HTTP:
ports: [80, 8080-8880]
override-destination: true
QUIC:
ports: [443, 8443]
# Tun 配置
tun:
enable: true
# 可选： system/gvisor/mixed；
stack: mixed
# dns劫持,一般设置为 any:53 即可, 即劫持所有53端口的udp流量
dns-hijack: ['any:53']
# 自动设置全局路由，可以自动将全局流量路由进入tun网卡。
auto-route: true
# 自动识别出口网卡
auto-detect-interface: true
dns:
enable: true
# IPV6解析开关；如果为false，将返回ipv6结果为空
ipv6: true
# DNS处理模式，可选值 normal/fake-ip/redir-host
enhanced-mode: fake-ip
# DNS监听地址
listen: :1053
# Fake-IP解析地址池
fake-ip-range: 198.18.0.1/16
# fakeip 过滤，以下地址不会下发 fakeip 映射用于连接
fake-ip-filter: ['*.lan', '*.direct', cable.auth.com, '*.msftconnecttest.com', '*.msftncsi.com', network-test.debian.org, detectportal.firefox.com, resolver1.opendns.com, '*.srv.nintendo.net', '*.stun.playstation.net', 'xbox.*.microsoft.com', '*.xboxlive.com', 'stun.*', global.turn.twilio.com, global.stun.twilio.com, app.yinxiang.com, injections.adguard.org, local.adguard.org, cable.auth.com, 'localhost.*.qq.com', 'localhost.*.weixin.qq.com', '*.logon.battlenet.com.cn', '*.logon.battle.net', '*.blzstatic.cn', 'music.163.com', '*.music.163.com', '*.126.net', musicapi.taihe.com, music.taihe.com, songsearch.kugou.com, trackercdn.kugou.com, '*.kuwo.cn', api-jooxtt.sanook.com, api.joox.com, joox.com, y.qq.com, '*.y.qq.com', streamoc.music.tc.qq.com, mobileoc.music.tc.qq.com, isure.stream.qqmusic.qq.com, dl.stream.qqmusic.qq.com, aqqmusic.tc.qq.com, amobile.music.tc.qq.com, '*.xiami.com', '*.music.migu.cn', music.migu.cn, proxy.golang.org, '*.mcdn.bilivideo.cn', '*.cmpassport.com', id6.me, 'open.e.189.cn', mdn.open.wo.cn, opencloud.wostore.cn, auth.wosms.cn, '*.jegotrip.com.cn', '*.icitymobile.mobi', '*.pingan.com.cn', '*.cmbchina.com', '*.10099.com.cn', pool.ntp.org, '*.pool.ntp.org', 'ntp.*.com', 'time.*.com', 'ntp?.*.com', 'time?.*.com', 'time.*.gov', 'time.*.edu.cn', '*.ntp.org.cn', 'PDC._msDCS.*.*', 'DC._msDCS.*.*', 'GC._msDCS.*.*']
# 解析非 IP 的 dns 用的 dns 服务器,只支持纯 IP
default-nameserver: [223.5.5.5, 119.29.29.29]
# 默认的域名解析服务器
nameserver: [223.5.5.5, 119.29.29.29]
# 指定域名查询的解析服务器，可使用 geosite, 优先于 nameserver/fallback 查询
nameserver-policy:
'geosite:cn': system
'geosite:gfw,geolocation-!cn': ['quic://223.5.5.5', 'quic://223.6.6.6', 'https://1.12.12.12/dns-query', 'https://120.53.53.53/dns-query']
# 策略组引用相关参数
pg: &pg {type: select, proxies: [手动切换, 香港节点, 美国节点, 狮城节点, 日本节点, 台湾节点, DIRECT]}
# 订阅更新和延迟测试相关参数
p: &p {type: http, interval: 86400, health-check: {enable: true, url: 'http://latency-test.skk.moe/endpoint', interval: 1800}}
# 自动选择策略组：选取延迟最低节点
url-test: &url-test {type: url-test, url: 'http://latency-test.skk.moe/endpoint', interval: 300, tolerance: 0, include-all: true}
# 手动选择策略组：手动选择想要的节点/策略组
select: &select {type: select, include-all: true}
# 故障回退策略组：策略组将按顺序选择你列表中第一个可用的节点
fallback: &fallback {type: fallback, url: 'http://latency-test.skk.moe/endpoint', interval: 300, include-all: true}
# 负载均衡策略组：不同的请求将使用不同的代理节点
load-balance: &load-balance {type: load-balance, strategy: consistent-hashing, url: 'http://latency-test.skk.moe/endpoint', interval: 300, include-all: true}
# classical规则相关
c: &c {type: http, behavior: classical, format: text, interval: 86400}
# domain规则相关
d: &d {type: http, behavior: domain, format: text, interval: 86400}
# ipcidr规则相关
i: &i {type: http, behavior: ipcidr, format: text, interval: 86400}
proxy-providers:
Subscribe: {<<: *p, path: ./proxy-providers/Sub.yaml, url: "https://app.zilihaijichang.top/zijihai?token=11bfe2f386515e894693fb2f4a58cb13"}
# 在此将"http://your-service-provider"替换为你的机场订阅，推荐使用 base64 或者 node list
# Sub-Store生成的链接,可以直接替换上述 url 引号中的部分,具体见 Sub-Store 教程
proxy-groups:
#分流分组
- {name: 手动切换, type: select, include-all: null, proxies: [香港节点, 美国节点, 狮城节点, 日本节点, 台湾节点, DIRECT], icon: 'https://github.com/clash-verge-rev/clash-verge-rev/raw/main/src-tauri/icons/icon.png'}
- {name: 国外网站, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Global.png'}
- {name: 国际媒体, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/YouTube.png'}
- {name: 苹果服务, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Apple_1.png'}
- {name: 微软服务, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Microsoft.png'}
- {name: 谷歌服务, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Google_Search.png'}
- {name: 电报消息, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Telegram.png'}
- {name: 推特消息, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Twitter.png'}
- {name: AI, <<: *pg, icon: 'https://raw.githubusercontent.com/Orz-3/mini/master/Color/OpenAI.png'}
- {name: 游戏平台, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Game.png'}
- {name: Emby, <<: *pg, include-all: null, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Emby.png', proxies: [手动切换, 香港节点, 美国节点, 狮城节点, 日本节点, 台湾节点, DIRECT], type: select}
- {name: 广告拦截, type: select, proxies: [REJECT, DIRECT], icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Advertising.png'}
- {name: 兜底分流, <<: *pg, icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Final.png'}
#节点地区分组
- {name: 香港节点, <<: *url-test, filter: "(?i)🇭🇰|香港|(\b(HK|Hong)\b)", icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Hong_Kong.png'}
- {name: 美国节点, <<: *url-test, filter: "(?i)🇺🇸|美国|洛杉矶|圣何塞|(\b(US|United States)\b)", icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/United_States.png'}
- {name: 狮城节点, <<: *url-test, filter: "(?i)🇸🇬|新加坡|狮|(\b(SG|Singapore)\b)", icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Singapore.png'}
- {name: 日本节点, <<: *url-test, filter: "(?i)🇯🇵|日本|东京|(\b(JP|Japan)\b)", icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/Japan.png'}
- {name: 台湾节点, <<: *url-test, filter: "(?i)🇨🇳|🇹🇼|台湾|(\b(TW|Tai|Taiwan)\b)", icon: 'https://raw.githubusercontent.com/Koolson/Qure/master/IconSet/Color/China.png'}
rule-providers:
# 自用直连
myDirect: {<<: *c, path: ./rule-providers/myDirect.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myDirect.list'}
# 自用拦截
myReject: {<<: *c, path: ./rule-providers/myReject.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myReject.list'}
# 自用代理
myProxy: {<<: *c, path: ./rule-providers/myProxy.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myProxy.list'}
#广告拦截
AD: {<<: *c, path: ./rule-providers/AD.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Reject.list'}
# 苹果服务
Apple: {<<: *c, path: ./rule-providers/Apple.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Apple.list'}
# 谷歌服务
YouTube: {<<: *c, path: ./rule-providers/YouTube.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/YouTube.list'}
Google: {<<: *c, path: ./rule-providers/Google.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Google.list'}
# 电报消息
Telegram: {<<: *c, path: ./rule-providers/Telegram.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Telegram.list'}
# 推特消息
Twitter: {<<: *c, path: ./rule-providers/Twitter.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Twitter.list'}
# 游戏平台
Steam: {<<: *c, path: ./rule-providers/Steam.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Steam.list'}
Epic: {<<: *c, path: ./rule-providers/Epic.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Epic.list'}
# AI平台
AI: {<<: *c, path: ./rule-providers/AI.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/AI.list'}
# Emby
Emby: {<<: *c, path: ./rule-providers/Emby.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Emby.list'}
# 国际媒体
Spotify: {<<: *c, path: ./rule-providers/Spotify.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Spotify.list'}
Bahamut: {<<: *c, path: ./rule-providers/Bahamut.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Bahamut.list'}
Netflix: {<<: *c, path: ./rule-providers/Netflix.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Netflix.list'}
Disney: {<<: *c, path: ./rule-providers/Disney.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/Disney.list'}
PrimeVideo: {<<: *c, path: ./rule-providers/PrimeVideo.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/PrimeVideo.list'}
HBO: {<<: *c, path: ./rule-providers/HBO.list, url: 'https://github.com/Repcz/Tool/raw/X/Clash/Rules/HBO.list'}
rules:
# 自定义规则优先放前面
- RULE-SET,myDirect,DIRECT
- RULE-SET,myReject,REJECT
- RULE-SET,myProxy,兜底分流
- RULE-SET,AD,广告拦截
- RULE-SET,AI,AI
- RULE-SET,Apple,苹果服务
- RULE-SET,YouTube,谷歌服务
- RULE-SET,Google,谷歌服务
- RULE-SET,Telegram,电报消息
- RULE-SET,Twitter,推特消息
- RULE-SET,Steam,游戏平台
- RULE-SET,Epic,游戏平台
- RULE-SET,Emby,Emby
- RULE-SET,Spotify,国际媒体
- RULE-SET,Bahamut,国际媒体
- RULE-SET,Netflix,国际媒体
- RULE-SET,Disney,国际媒体
- RULE-SET,PrimeVideo,国际媒体
- RULE-SET,HBO,国际媒体
- GEOSITE,onedrive,微软服务
- GEOSITE,github,微软服务
- GEOSITE,microsoft,微软服务
- GEOSITE,gfw,国外网站
- GEOSITE,cn,DIRECT
- GEOIP,lan,DIRECT
- GEOIP,CN,DIRECT
- MATCH,兜底分流
http:
# 以 PKCS #12 编码的 CA 证书
ca: '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'
# 证书密码
ca-passphrase: 'F0D314E6'
# 开启 MitM 功能的域名列表，需要确保上述 CA 证书已受系统信任
mitm:
- g.cn
- '*.google.cn'
- weather-data.apple.com # 默认只对 443 端口开启
- weather-data.apple.com:* # 使用通配符对所有端口开启
- '*.weather-data.apple.com' # 域名中也可以使用通配符
- ad.mcloud.139.com
- www.baidu.com
- api.bilibili.com
- buy.itunes.apple.com
Raw
configEvolveMod.yaml
#SUBSCRIBED https://raw.githubusercontent.com/Coldvvater/Mononoke/master/Clash/Config/Evolve.yaml
# Clash Config Make by Coldvvater
# TG Channel: https://t.me/Coldvvater_Channel
# GitHub: https://github.com/Coldvvater
# Update Date: 2024.06.16
port: 7890 # HTTP(S) 代理服务器端口
socks-port: 7891 # SOCKS5 代理端口
mixed-port: 7892 # 混合端口，HTTP和SOCKS5用一个端口
redir-port: 7893 # 透明代理端口，用于 Linux 和 MacOS
tproxy-port: 7894 # Transparent proxy server port for Linux (TProxy TCP and TProxy UDP)
# mixed-port: 7890
# tproxy-port: 7891
mode: rule # 规则模式：rule（规则） / global（全局代理）/ direct（全局直连）/ script (脚本)
log-level: info # 设置日志输出级别 (5 个级别：silent / error / warning / info / debug）
allow-lan: true # 允许局域网的连接（共享代理）
bind-address: "*" # 监听IP白名单，可绑定单个IPv4和v6地址，"*" 为绑定所有IP地址，仅在将allow-lan设置为true时适用
ipv6: true # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录
udp: true # 是否允许 UDP 通过代理，默认为 false
unified-delay: true # 开启统一延迟时，会进行两次延迟测试，以消除连接握手等带来的不同类型节点的延迟差异，可选值 true/false
tcp-concurrent: true # TCP 并发，可选值 true/false
find-process-mode: strict # 控制是否让 Clash 去匹配进程，always 开启，强制匹配所有进程，strict 默认，由 Clash 判断是否开启，off 不匹配进程，推荐在路由器上使用此模式
global-client-fingerprint: chrome # 全局 TLS 指纹，优先低于 proxy 内的 client-fingerprint，目前支持开启 TLS 传输的 TCP/grpc/WS/HTTP , 支持协议有 VLESS,Vmess 和 trojan
external-controller: 0.0.0.0:9090 # 外部控制器，可以使用 RESTful API 来控制你的 Clash 内核，API 监听地址，你可以将 127.0.0.1 修改为 0.0.0.0 来监听所有 IP
external-ui: ui # 可以将静态网页资源 (比如 Clash-dashboard) 运行在 Clash API, 路径为 API 地址/ui，可以为绝对路径，或者 Clash 工作目录的相对路径
external-ui-url: 'https://mirror.ghproxy.com/https://github.com/MetaCubeX/Yacd-meta/archive/gh-pages.zip'
# 自定义外部用户界面下载地址
secret: "Aa135246Aa" # 自定义 API 的访问密钥
geodata-mode: false # 更改 geoip 使用文件，mmdb 或者 dat，可选 true/false,true为 dat，此项有默认值 false
geodata-loader: memconservative # GEO 文件加载模式，standard：标准加载器 memconservative：专为内存受限 (小内存) 设备优化的加载器 (默认值)
geo-auto-update: true # 自动更新 GEO
geo-update-interval: 24 # 更新间隔，单位为小时
geox-url:
geoip: 'https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat'
geosite: 'https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat'
mmdb: 'https://testingcf.jsdelivr.net/gh/soffchen/GeoIP2-CN@release/Country.mmdb'
asn: 'https://mirror.ghproxy.com/https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb'
# 自定义 GEO 下载地址
profile:
store-selected: true # 储存 API 对策略组的选择，以供下次启动时使用
store-fake-ip: true # 储存 fakeip 映射表，域名再次发生连接时，使用原有映射地址
sniffer:
enable: true # 是否启用sniffer
force-dns-mapping: true # 对 redir-host 类型识别的流量进行强制嗅探
parse-pure-ip: true # 对所有未获取到域名的流量进行强制嗅探
override-destination: true # 是否使用嗅探结果作为实际访问，默认为 true
sniff:
HTTP:
ports: [80, 8080-8880] # ports字段，表示端口范围。示例：ports: [80, 8080-8880]
override-destination: true # override-destination字段（可选），用于覆盖全局override-destination设置
TLS:
ports: [443, 8443]
QUIC:
ports: [443, 8443]
force-domain: # 需要强制嗅探的域名（默认情况下只对IP进行嗅探）
- +.v2ex.com
skip-domain: # 需要跳过嗅探的域名。主要解决部分站点sni字段非域名，导致嗅探结果异常的问题，如米家设备Mijia Cloud
- Mijia Cloud
tun:
enable: true # 启用 tun
stack: system # tun 模式堆栈,可用值：system/gvisor/mixed
dns-hijack: # dns 劫持，将匹配到的连接导入内部 dns 模块，不书写协议则为 udp://
- any:53
auto-route: true # 自动设置全局路由，可以自动将全局流量路由进入 tun 网卡
auto-detect-interface: true # 自动选择流量出口接口，多出口网卡同时连接的设备建议手动指定出口网卡
dns:
enable: true # 关闭将使用系统 DNS
listen: 0.0.0.0:1053 # DNS 监听地址
ipv6: true # IPV6解析开关；如果为false，将返回ipv6结果为空
enhanced-mode: fake-ip # 模式：redir-host或fake-ip
default-nameserver: [223.5.5.5, 119.29.29.29]
# 解析非IP的dns用的dns服务器，只支持纯IP
nameserver: [https://223.5.5.5/dns-query, https://120.53.53.53/dns-query]
# 默认DNS服务器，支持udp/tcp/dot/doh/doq
fake-ip-range: 28.0.0.1/8 # Fake-IP 解析地址池
fake-ip-filter: ['*.lan', 'cable.auth.com', '*.msftconnecttest.com', '*.msftncsi.com', 'network-test.debian.org', 'detectportal.firefox.com', 'resolver1.opendns.com', '*.srv.nintendo.net', '*.stun.playstation.net', 'xbox.*.microsoft.com', '*.xboxlive.com', 'stun.*', 'global.turn.twilio.com', 'global.stun.twilio.com', 'localhost.*.qq.com', 'localhost.*.weixin.qq.com', '*.logon.battlenet.com.cn', '*.logon.battle.net', '*.blzstatic.cn', 'music.163.com', '*.music.163.com', '*.126.net', 'musicapi.taihe.com', 'music.taihe.com', 'songsearch.kugou.com', 'trackercdn.kugou.com', '*.kuwo.cn', 'api-jooxtt.sanook.com', 'api.joox.com', 'joox.com', 'y.qq.com', '*.y.qq.com', 'streamoc.music.tc.qq.com', 'mobileoc.music.tc.qq.com', 'isure.stream.qqmusic.qq.com', 'dl.stream.qqmusic.qq.com', 'aqqmusic.tc.qq.com', 'amobile.music.tc.qq.com', '*.xiami.com', '*.music.migu.cn', 'music.migu.cn', 'proxy.golang.org', '*.mcdn.bilivideo.cn', '*.cmpassport.com', 'id6.me', 'open.e.189.cn', 'mdn.open.wo.cn', 'opencloud.wostore.cn', 'auth.wosms.cn', '*.jegotrip.com.cn', '*.icitymobile.mobi', '*.pingan.com.cn', '*.cmbchina.com', 'pool.ntp.org', '*.pool.ntp.org', 'ntp.*.com', 'time.*.com', 'ntp?.*.com', 'time?.*.com', 'time.*.gov', 'time.*.edu.cn', '*.ntp.org.cn', 'PDC._msDCS.*.*', 'DC._msDCS.*.*', 'GC._msDCS.*.*']
# Fake-ip 过滤，列表中的域名返回真实IP
######### 锚点 start #########
# 规则行为相关
c: &c {type: http, behavior: classical, interval: 86400, format: text}
d: &d {type: http, behavior: domain, interval: 86400, format: text}
i: &i {type: http, behavior: ipcidr, interval: 86400, format: text}
# 代理组相关
g: &g {type: select, proxies: [Proxy, Auto, Fallback, HongKong, TaiWan, Singapore, Japan, America, Others, DIRECT]}
# 远程订阅相关
p: &p {type: http, interval: 86400, benchmark-timeout: 5, health-check: {enable: true, url: http://www.apple.com/library/test/success.html, interval: 600}}
# 订阅引用相关
u: &u {type: select, use: [Subscribe]}
######### 锚点 end #########
# 本地服务器
proxies: null
# 远程订阅
proxy-providers:
Subscribe: {<<: *p, path: ./proxy_providers/subscribe.yaml, url: "https://app.zilihaijichang.top/zijihai?token=11bfe2f386515e894693fb2f4a58cb13"}
# 1. 请使用Clash类型订阅链接填入引号""内使用,
# 2. 或可使用通用订阅链接通过Sub-Store进行订阅转换(用于Stash)。
# 代理组
proxy-groups:
# 漏网之鱼
- {name: Final, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Final.png, <<: *g, proxies: [Proxy,DIRECT]}
# 节点切换
- {name: Proxy, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Rocket.png, <<: *g, proxies: [Auto,Fallback,HongKong,TaiWan,Singapore,Japan,America,Others]}
# 自动选择
- {name: Auto, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Auto.png, type: url-test, lazy: true, <<: *u}
# 故障转移
- {name: Fallback, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Available.png, type: fallback, <<: *u}
# 国外网站
- {name: Global, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Global.png, <<: *g}
# 国内网站
- {name: Mainland, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/China_Map.png, <<: *g, proxies: [DIRECT,Proxy,Auto]}
# 人工智能
- {name: AI, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/AI.png, <<: *g, proxies: [America,Japan,Singapore,TaiWan,Others]}
# 油管视频
- {name: YouTube, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/YouTube.png, <<: *g}
# 奈飞影视
- {name: NETFLIX, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Netflix.png, <<: *g}
# Disney+
- {name: Disney+, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Disney.png, <<: *g}
# Emby
- {name: Emby, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Emby.png, <<: *g}
# 哔哩哔哩
- {name: BiliBili, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/bilibili_3.png, <<: *g, proxies: [DIRECT,HongKong,TaiWan]}
# Spotify
- {name: Spotify, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Spotify.png, <<: *g}
# 网易云音乐
- {name: NetEaseMusic, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Netease_Music.png, <<: *g, proxies: [DIRECT]}
# TikTok
- {name: TikTok, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/TikTok.png, <<: *g}
# 国际媒体
- {name: Streaming, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Streaming.png, <<: *g}
# 电报信息
- {name: Telegram, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Telegram_X.png, <<: *g}
# X(Twitter)
- {name: X, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/X.png, <<: *g}
# 苹果服务
- {name: Apple, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Apple_1.png, <<: *g, proxies: [DIRECT, Proxy, Auto, Fallback, HongKong, TaiWan, Singapore, Japan, America, Others]}
# 谷歌服务
- {name: Google, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Google_Search.png, <<: *g}
# 微软服务
- {name: Microsoft, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Windows_11.png, <<: *g}
# 游戏平台
- {name: Games, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Game.png, <<: *g}
# 香港节点
- {name: HongKong, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Hong_Kong.png, <<: *u, filter: "港|🇭🇰|HK|(?i)Hong"}
# 台湾节点
- {name: TaiWan, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/China.png, <<: *u, filter: "台|🇨🇳|🇹🇼|湾|TW|(?i)Taiwan"}
# 狮城节点
- {name: Singapore, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Singapore.png, <<: *u, filter: "新加坡|坡|狮城|🇸🇬|SG|(?i)Singapore"}
# 日本节点
- {name: Japan, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Japan.png, <<: *u, filter: "日|🇯🇵|东京|JP|(?i)Japan"}
# 美国节点
- {name: America, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/United_States.png, <<: *u, filter: "美|🇺🇲|US|(?i)States|American"}
# 其他节点
- {name: Others, icon: https://raw.gitmirror.com/Koolson/Qure/master/IconSet/Color/Airport.png, <<: *u, filter: "^((?!香港|HK|Hong Kong|台湾|TW|TaiWan|新加坡|SG|Singapore|狮城|日本|JP|Japan|美国|US|States|American)).*$"}
# 远程规则集
rule-providers:
# 自用直连
myDirect: {<<: *c, path: ./rule-providers/myDirect.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myDirect.list'}
# 自用拦截
myReject: {<<: *c, path: ./rule-providers/myReject.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myReject.list'}
# 自用代理
myProxy: {<<: *c, path: ./rule-providers/myProxy.list, url: 'https://mirror.ghproxy.com/https://github.com/158212892/QuantumultXMark/raw/main/My/RuleSet/myProxy.list'}
# 隐私网络/局域网
private-domain: {<<: *d, path: ./ruleset/private-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.list}
private-ip: {<<: *i, path: ./ruleset/private-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.list}
# 人工智能
ai-classical: {<<: *c, path: ./ruleset/openai-classical.list, url: https://raw.gitmirror.com/Coldvvater/Mononoke/master/Clash/RuleSet/AI.list}
# 油管视频
youtube-domain: {<<: *d, path: ./ruleset/youtube-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/youtube.list}
# 奈飞影视
netflix-domain: {<<: *d, path: ./ruleset/netflix-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/netflix.list}
netflix-ip: {<<: *i, path: ./ruleset/netflix-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/netflix.list}
# 迪士尼+
disney-domain: {<<: *d, path: ./ruleset/disney-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/disney.list}
# Emby
emby-classical: {<<: *c, path: ./ruleset/emby-classical.list, url: https://raw.gitmirror.com/Repcz/Tool/X/Surge/Rules/Emby.list}
# 动画疯
bahamut-domain: {<<: *d, path: ./ruleset/bahamut-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bahamut.list}
# 哔哩哔哩东南亚
biliintl-domain: {<<: *d, path: ./ruleset/biliintl-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/biliintl.list}
# 哔哩哔哩
bilibili-domain: {<<: *d, path: ./ruleset/bilibili-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bilibili.list}
bilibili-ip: {<<: *i, path: ./ruleset/bilibili-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo-lite/geoip/bilibili.list}
# 声田音乐
spotify-domain: {<<: *d, path: ./ruleset/spotify-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/spotify.list}
# 网易云音乐
neteasemusic-classical: {<<: *c, path: ./ruleset/neteasemusic-classical.list, url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/NetEaseMusic/NetEaseMusic.list}
# 海外抖音
tiktok-domain: {<<: *d, path: ./ruleset/tiktok-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/tiktok.list}
# 国际媒体
streamingmedia-classical: {<<: *c, path: ./ruleset/streamingmedia-classical.list, url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/GlobalMedia/GlobalMedia.list}
# 电报信息
telegram-domain: {<<: *d, path: ./ruleset/telegram-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/telegram.list}
telegram-ip: {<<: *i, path: ./ruleset/telegram-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/telegram.list}
# GitHub
github-domain: {<<: *d, path: ./ruleset/github-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/github.list}
# Twitter
twitter-domain: {<<: *d, path: ./ruleset/twitter-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/twitter.list}
twitter-ip: {<<: *i, path: ./ruleset/twitter-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/twitter.list}
# 苹果代理服务
apple-classical: {<<: *c, path: ./ruleset/apple-classical.list, url: https://raw.gitmirror.com/Coldvvater/Mononoke/master/Clash/RuleSet/AppleProxyService.list}
# 苹果服务
apple-domain: {<<: *d, path: ./ruleset/apple-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/apple.list}
apple-ip: {<<: *i, path: ./ruleset/apple-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo-lite/geoip/apple.list}
# 谷歌服务
google-domain: {<<: *d, path: ./ruleset/google-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/google.list}
google-ip: {<<: *i, path: ./ruleset/google-ip.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/google.list}
# 微软服务
microsoft-domain: {<<: *d, path: ./ruleset/microsoft-domain.list, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/microsoft.list}
# 游戏平台
games-classical: {<<: *c, path: ./ruleset/games-classical.list, url: https://raw.gitmirror.com/blackmatrix7/ios_rule_script/master/rule/Clash/Game/Game.list}
# 国内网站
cn-domain: {<<: *d, path: ./ruleset/cn-domain.yaml, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo-lite/geosite/cn.list}
# 国外网站
proxy-domain: {<<: *d, path: ./ruleset/proxy-domain.yaml, url: https://raw.gitmirror.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/geolocation-!cn.list}
# 分流规则引用
rules:
# 自定义规则优先放前面
- RULE-SET,myDirect,DIRECT
- RULE-SET,myReject,REJECT
- RULE-SET,myProxy,Global
# - AND,((NETWORK,UDP),(DST-PORT,443)),REJECT
# - SCRIPT,quic,REJECT
- DOMAIN,clash.razord.top,DIRECT
- DOMAIN,yacd.metacubex.one,DIRECT
- DOMAIN,yacd.haishan.me,DIRECT
- DOMAIN,d.metacubex.one,DIRECT
- DOMAIN,raw.gitmirror.com,Proxy
- RULE-SET,private-domain,DIRECT
- RULE-SET,ai-classical,AI
- RULE-SET,youtube-domain,YouTube
- RULE-SET,netflix-domain,NETFLIX
- RULE-SET,disney-domain,Disney+
- RULE-SET,emby-classical,Emby
- RULE-SET,bahamut-domain,TaiWan
- RULE-SET,biliintl-domain,Streaming
- RULE-SET,bilibili-domain,BiliBili
- RULE-SET,spotify-domain,Spotify
- RULE-SET,neteasemusic-classical,NetEaseMusic
- RULE-SET,tiktok-domain,TikTok
- RULE-SET,streamingmedia-classical,Streaming
- RULE-SET,telegram-domain,Telegram
- RULE-SET,github-domain,Global
- RULE-SET,twitter-domain,X
- RULE-SET,apple-classical,Global
- RULE-SET,apple-domain,Apple
- RULE-SET,google-domain,Google
- RULE-SET,microsoft-domain,Microsoft
- RULE-SET,games-classical,Games
- RULE-SET,proxy-domain,Global
- RULE-SET,google-ip,Google
- RULE-SET,netflix-ip,NETFLIX
- RULE-SET,telegram-ip,Telegram
- RULE-SET,twitter-ip,X
- RULE-SET,cn-domain,Mainland
- RULE-SET,bilibili-ip,BiliBili
- RULE-SET,apple-ip,Apple
- RULE-SET,private-ip,DIRECT
- GEOIP,CN,DIRECT
- MATCH,Final
script:
shortcuts:
quic: network == 'udp' and dst_port == 443
http:
# 以 PKCS #12 编码的 CA 证书
ca: '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'
# 证书密码
ca-passphrase: 'F0D314E6'
# 开启 MitM 功能的域名列表，需要确保上述 CA 证书已受系统信任
mitm:
- g.cn
- '*.google.cn'
- weather-data.apple.com # 默认只对 443 端口开启
- weather-data.apple.com:* # 使用通配符对所有端口开启
- '*.weather-data.apple.com' # 域名中也可以使用通配符
- ad.mcloud.139.com
- www.baidu.com
- api.bilibili.com
- buy.itunes.apple.com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment