mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
ipv6: false                    # 全局禁用 IPv6（关键：服务端没有 IPv6）
unified-delay: true
tcp-concurrent: true
find-process-mode: "off"
global-client-fingerprint: chrome
keep-alive-interval: 30

profile:
  store-selected: true
  store-fake-ip: true

# ===== DNS：远程解析 + fake-ip，彻底避开污染和 IPv6 =====
dns:
  enable: true
  ipv6: false                  # 不返回 AAAA
  prefer-h3: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "+.okx.com"
    - "+.okxstatic.com"
    - "+.okcdn.com"
    - "+.oklink.com"
    - "+.okg.com"
    - "+.okex.com"
    - "+.okx.cab"
    - "+.okcdn.com"
    - "+.oklink.com"
    - "+.okg.com"
    - "+.binance.com"
    - "+.binance.cloud"
    - "*.lan"
    - "*.local"
    - "+.qq.com"
    - "+.weixin.qq.com"
    - "+.wechat.com"
    - "time.*.com"
    - "stun.*.*"
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
  nameserver:
    - https://1.1.1.1/dns-query
    - tls://8.8.8.8:853
  fallback:
    - 223.5.5.5
    - 119.29.29.29
  fallback-filter:
    geoip: true
    ipcidr:
      - 240.0.0.0/4
  proxy-server-nameserver:
    - 223.5.5.5
  nameserver-policy:
    "geosite:cn,private":
      - 223.5.5.5
      - 119.29.29.29
    "+.okx.com,+.okxstatic.com,+.okcdn.com,+.oklink.com,+.okg.com":
      - 223.5.5.5
      - 119.29.29.29
    "+.binance.com,+.binance.cloud":
      - 223.5.5.5
      - 119.29.29.29

proxies:
- name: TCP-443
  type: vless
  server: 43.153.156.206
  port: 443
  uuid: b9f6ac50-85f6-40e5-888d-471416fa217a
  network: tcp
  udp: true
  tls: true
  flow: xtls-rprx-vision
  servername: www.cloudflare.com
  reality-opts:
    public-key: E0Ir7t4DWspwmOr9TS8r7GIjo0N4KB_DgaR1-DOUqBk
    short-id: 0a020214
  client-fingerprint: chrome

- name: TCP-2053
  type: vless
  server: 43.153.156.206
  port: 2053
  uuid: b9f6ac50-85f6-40e5-888d-471416fa217a
  network: tcp
  udp: true
  tls: true
  flow: xtls-rprx-vision
  servername: www.cloudflare.com
  reality-opts:
    public-key: E0Ir7t4DWspwmOr9TS8r7GIjo0N4KB_DgaR1-DOUqBk
    short-id: 0a020214
  client-fingerprint: chrome

- name: HY2-443
  type: hysteria2
  server: 43.153.156.206
  port: 443
  password: f90ba9deaf47ca7c4c1989e7
  sni: www.bing.com
  skip-cert-verify: true
  up: 10 Mbps
  down: 30 Mbps
  udp: true

proxy-groups:
- name: PROXY
  type: fallback
  url: https://www.gstatic.com/generate_204
  interval: 60
  proxies:
  - TCP-443
  - TCP-2053
  - HY2-443
- name: 手动
  type: select
  proxies:
  - PROXY
  - TCP-443
  - TCP-2053
  - HY2-443
  - DIRECT

rules:
# Telegram 一律走代理，且强制 IPv4
- DOMAIN-SUFFIX,telegram.org,PROXY
- DOMAIN-SUFFIX,t.me,PROXY
- DOMAIN-SUFFIX,tdesktop.com,PROXY
- DOMAIN-SUFFIX,telegram.me,PROXY
- IP-CIDR,91.108.0.0/16,PROXY,no-resolve
- IP-CIDR,149.154.0.0/16,PROXY,no-resolve
- IP-CIDR,95.161.64.0/20,PROXY,no-resolve
# ===== Google / Play 商店（必须在 GEOIP,CN 之前）=====
- DOMAIN-SUFFIX,google.com,PROXY
- DOMAIN-SUFFIX,googleapis.com,PROXY
- DOMAIN-SUFFIX,googleapis.cn,PROXY
- DOMAIN-SUFFIX,gstatic.com,PROXY
- DOMAIN-SUFFIX,ggpht.com,PROXY
- DOMAIN-SUFFIX,googleusercontent.com,PROXY
- DOMAIN-SUFFIX,gvt1.com,PROXY
- DOMAIN-SUFFIX,gvt2.com,PROXY
- DOMAIN-SUFFIX,gvt3.com,PROXY
- DOMAIN-SUFFIX,dl.google.com,PROXY
- DOMAIN-SUFFIX,android.com,PROXY
- DOMAIN-SUFFIX,android.clients.google.com,PROXY
- DOMAIN-SUFFIX,play.google.com,PROXY
- DOMAIN-SUFFIX,youtube.com,PROXY
- DOMAIN-SUFFIX,googlevideo.com,PROXY
- DOMAIN-SUFFIX,ytimg.com,PROXY
- IP-CIDR,142.250.0.0/15,PROXY,no-resolve
- IP-CIDR,172.217.0.0/16,PROXY,no-resolve
- IP-CIDR,172.253.0.0/16,PROXY,no-resolve
- IP-CIDR,216.58.192.0/19,PROXY,no-resolve
- IP-CIDR,74.125.0.0/16,PROXY,no-resolve
- IP-CIDR,108.177.0.0/17,PROXY,no-resolve
- IP-CIDR,173.194.0.0/16,PROXY,no-resolve
- IP-CIDR,209.85.128.0/17,PROXY,no-resolve
- IP-CIDR,34.64.0.0/10,PROXY,no-resolve
# ===== 以上 Google 规则结束 =====
# 国内直连
# OKX 相关：强制走代理（OKX 在中国大陆被墙）
- DOMAIN-SUFFIX,okx.com,DIRECT
- DOMAIN-SUFFIX,okxstatic.com,DIRECT
- DOMAIN-SUFFIX,okcdn.com,DIRECT
- DOMAIN-SUFFIX,oklink.com,DIRECT
- DOMAIN-SUFFIX,okg.com,DIRECT
- DOMAIN-SUFFIX,okex.com,DIRECT
- DOMAIN-SUFFIX,okx.cab,DIRECT
- DOMAIN-SUFFIX,okx-chinese.com,DIRECT
- DOMAIN-SUFFIX,okx.ac,DIRECT
- DOMAIN-SUFFIX,binance.com,DIRECT
- DOMAIN-SUFFIX,binance.cloud,DIRECT
# 国内直连
- DOMAIN-SUFFIX,coinall.ltd,DIRECT
- DOMAIN-SUFFIX,qq.com,DIRECT
- DOMAIN-SUFFIX,weixin.qq.com,DIRECT
- DOMAIN-SUFFIX,wechat.com,DIRECT
- DOMAIN-SUFFIX,weibo.com,DIRECT
- DOMAIN-SUFFIX,taobao.com,DIRECT
- DOMAIN-SUFFIX,tmall.com,DIRECT
- DOMAIN-SUFFIX,aliyun.com,DIRECT
- DOMAIN-SUFFIX,alipay.com,DIRECT
- DOMAIN-SUFFIX,aliyuncs.com,DIRECT
- DOMAIN-SUFFIX,bilibili.com,DIRECT
- DOMAIN-SUFFIX,baidu.com,DIRECT
- DOMAIN-SUFFIX,bdstatic.com,DIRECT
- DOMAIN-SUFFIX,163.com,DIRECT
- DOMAIN-SUFFIX,126.net,DIRECT
- DOMAIN-SUFFIX,jd.com,DIRECT
- DOMAIN-SUFFIX,pinduoduo.com,DIRECT
- DOMAIN-SUFFIX,meituan.com,DIRECT
- DOMAIN-SUFFIX,douyin.com,DIRECT
- DOMAIN-SUFFIX,zhihu.com,DIRECT
- DOMAIN-SUFFIX,xiaohongshu.com,DIRECT
- DOMAIN-SUFFIX,mi.com,DIRECT
- DOMAIN-SUFFIX,coloros.com,DIRECT
- DOMAIN-SUFFIX,heytapmobi.com,DIRECT
- DOMAIN-SUFFIX,10086.cn,DIRECT
- DOMAIN-SUFFIX,mmstat.com,DIRECT
- DOMAIN-SUFFIX,rumt-zh.com,DIRECT
- DOMAIN-SUFFIX,tencent.com,DIRECT
- DOMAIN-SUFFIX,gtimg.com,DIRECT
- IP-CIDR,203.107.0.0/16,DIRECT,no-resolve
- IP-CIDR,223.167.0.0/16,DIRECT,no-resolve
- IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
- IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
- IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
- GEOIP,CN,DIRECT
- MATCH,PROXY