mode: rule

socks-port: 1080
#mixed-port: 7890
redir-port: 8081
#tproxy-port: 7893
geodata-mode: true
tcp-concurrent: true
global-client-fingerprint: ios
external-controller: 127.0.0.1:9090
external-ui: folder
skip-cert-verify: true
bind-address: "*"
interface-name: en0
routing-mark: 6666
allow-insecure: true
allowinsecure: true

mux:
enable: true
allow-lan: true
log-level: silent
unified-delay: true
ipv6: true
find-process-mode: always
sniffer:
enable: true
force-dns-mapping: true
parse-pure-ip: true
override-destination: true
sniffing: [http, tls]
skip-domain:
- 'dhcp://en0'
force-domain:
- 'dhcp://en0'
port-whitelist:
- 80
- 443
dns:
listen: 0.0.0.0:1053
enable: true
ipv6: true
default-nameserver:
- dhcp://en0
- 1.1.1.1
- 1.0.0.1
nameserver:
- dhcp://en0
- 1.1.1.1
- 1.0.0.1
proxy-server-nameserver:
- dhcp://en0
- 1.1.1.1
- 1.0.0.1
fallback:
- dhcp://en0
- 1.1.1.1
- 1.0.0.1
nameserver:
- dhcp://en0
 - 1.1.1.1
- 1.0.0.1
nameserver-policy: #指定域名使用自定义 DNS 解析
'www.baidu.com': 'https://223.5.5.5/dns-query'
'+.internal.crop.com': '114.114.114.114'

fallback-filter:
# geoip: true
#geoip-code: CN
#geosite:
# - gfw
# ipcidr:
# - 10.0.0.0/24
# - 1.1.1.1/32
# - 1.0.0.1/32
# domain:
# - '+.google.com'
#- '+.facebook.com'
#- '+.youtube.com'
hosts:
'*.clash.dev': 127.0.0.1
'.dev': 127.0.0.1
'alpha.clash.dev': '::1'
profile:
store-selected: true
store-fake-ip: true
enhanced-mode: redir-host
use-hosts: false
fake-ip-range: 198.18.0.1/16
fake-ip-filter:
- "*.lan"
- "*.localdomain"
- "*.example"
- "*.invalid"
- "*.localhost"
- "*.test"
- "*.local"
- "*.home.arpa"
- time.*.com
- time.*.gov
- time.*.edu.cn
- time.*.apple.com
- time1.*.com
- time2.*.com
- time3.*.com
- time4.*.com
- time5.*.com
- time6.*.com
- time7.*.com
- ntp.*.com
- ntp1.*.com
- ntp2.*.com
- ntp3.*.com
- ntp4.*.com
- ntp5.*.com
- ntp6.*.com
- ntp7.*.com
- "*.time.edu.cn"
- "*.ntp.org.cn"
- +.pool.ntp.org
- time1.cloud.tencent.com
- music.163.com
- "*.music.163.com"
- "*.126.net"
- musicapi.taihe.com
- music.taihe.com
- songsearch.kugou.com
- trackercdn.kugou.com
- "*.kuwo.cn"
- api-jooxtt.sanook.com
- api.joox.com
- joox.com
- y.qq.com
- "*.y.qq.com"
- streamoc.music.tc.qq.com
- mobileoc.music.tc.qq.com
- isure.stream.qqmusic.qq.com
- dl.stream.qqmusic.qq.com
- aqqmusic.tc.qq.com
- amobile.music.tc.qq.com
- "*.xiami.com"
- "*.music.migu.cn"
- music.migu.cn
- "*.msftconnecttest.com"
- "*.msftncsi.com"
- msftconnecttest.com
- msftncsi.com
- localhost.ptlogin2.qq.com
- localhost.sec.qq.com
- +.srv.nintendo.net
- +.stun.playstation.net
- xbox.*.microsoft.com
- xnotify.xboxlive.com
- +.battlenet.com.cn
- +.wotgame.cn
- +.wggames.cn
- +.wowsgame.cn
- +.wargaming.net
- proxy.golang.org
- stun.*.*
- stun.*.*.*
- +.stun.*.*
- +.stun.*.*.*
- +.stun.*.*.*.*
- heartbeat.belkin.com
- "*.linksys.com"
- "*.linksyssmartwifi.com"
- "*.router.asus.com"
- mesu.apple.com
- swscan.apple.com
- swquery.apple.com
- swdownload.apple.com
- swcdn.apple.com
- swdist.apple.com
- lens.l.google.com
- stun.l.google.com
- +.nflxvideo.net
 - "*.square-enix.com"
- "*.finalfantasyxiv.com"
- "*.ffxiv.com"
- "*.mcdn.bilivideo.cn"
- +.media.dssott.com

proxy-groups:
- name: "PILIHAN"
type: select
proxies:
#- "REJECT"
- "OTOMATIS"
- "Robot"

- name: "OTOMATIS"
type: url-test
url: 'http://cp.cloudflare.com'
interval: 300
tolerance: 20
lazy: true
use:
- "foo1"

- name: "Robot"
type: url-test
url: 'http://cp.cloudflare.com'
interval: 300
tolerance: 20
lazy: true
use:
- "foo1"

#PROXY PROVIDERS#############################

proxy-providers:
"foo1":
type: http
behavior: domain
interval: 3600
health-check:
lazy: true
enable: true
interval: 300
url: "http://cp.cloudflare.com"
url: "https://drive.usercontent.google.com/download?
id=1Pk7UGmkECMs2FLMjLbSSIlqMeQA85q3J&export=download"
path: ./foo1.yaml

############################################

rule-providers:
lokal:
type: http
behavior: classical
url:
"https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/LocalAreaNetwork.li
st"
path: ./LocalAreaNetwork.list
 interval: 600
#规则配置：

google:
type: http
behavior: classical
url:
"https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyGFWlist.list"
path: ./ProxyGFWlist.list
interval: 600

clash:
type: http
behavior: domain
url: https://howdy.id/download/rules/clash.txt
path: ./providers/rule-provider_clash.yaml
interval: 86400
tunnels:
# 单行配置
- tcp/udp,127.0.0.1:6553,'en0':53,PILIHAN
- tcp,127.0.0.1:6666,rds.mysql.com:3306,PILIHAN #全 yaml 配置
- network: [tcp, udp]
address: 127.0.0.1:7777
target: en0
proxy: PILIHAN

rules:
# - DOMAIN-SUFFIX,githubusercontent.com,AUTO
- DOMAIN-SUFFIX,clash,REJECT
# - DOMAIN-SUFFIX,google,AUTO
# - DOMAIN-SUFFIX,one.one.one.one,DIRECT,tcp #【Meta 专属】可指定协议类型(tcp/udp)

#目的域名规则
- DOMAIN,welcome2.wifi.id,DIRECT
- DOMAIN,wifi.id,DIRECT
- DOMAIN,123.xl.co.id,DIRECT

#目的域名关键字规则
- DOMAIN-KEYWORD,google,PILIHAN
- DOMAIN-KEYWORD,clash,PILIHAN
- DOMAIN-KEYWORD,lokal,PILIHAN

#目的 IP 规则
#- IP-CIDR,122.122.0.0/8, akunku

#来源 IP 规则
- SRC-IP-CIDR,192.168.1.201/32,DIRECT

#目的端口规则
- DST-PORT,53/443/80,PILIHAN #【Meta 专属】可指定端口范围

#来源端口规则
#- SRC-PORT,123/136/137-139,DIRECT,udp #【Meta 专属】可指定端口范围

#【Meta 专属】入站规则
 #支持 HTTP/HTTPS/SOCKS5/SOCKS4/SOCKS/TUN/TPROXY/REDIR/INNER
- IN-TYPE,HTTPS/HTTP,PILIHAN
#【Meta 专属】逻辑判断规则
#- AND,((DOMAIN,one.one.one.one),(DOMAIN,dns.google),(NETWORK,UDP)),AUTO #AND(和):
域名为 baidu.com 的 UDP 协议
#- OR,((DOMAIN,cloudflare),(DOMAIN,google),(NETWORK,UDP)),akun
- NOT,((DOMAIN,dns.google)),PILIHAN
- AND,((OR,((DOMAIN-KEYWORD,google),(DOMAIN-KEYWORD,cloudflare))),
(NETWORK,UDP)),REJECT

- SUB-RULE,(OR,((NETWORK,TCP),(NETWORK,UDP))),PILIHAN
- SUB-RULE,(AND,((NETWORK,TCP),(NETWORK,UDP))),PILIHAN

- GEOSITE,category-ads-all,REJECT
- GEOSITE,icloud@cn,REJECT
- GEOSITE,apple@cn,REJECT
- GEOSITE,apple-cn,REJECT
- GEOSITE,microsoft@cn,PILIHAN
- GEOSITE,facebook,PILIHAN
- GEOSITE,youtube,PILIHAN
- GEOSITE,geolocation-cn,DIRECT
- GEOSITE,geolocation-!cn,PILIHAN

#GEOIP 规则
- GEOIP,telegram,PILIHAN,no-resolve
- GEOIP,private,DIRECT,no-resolve
- GEOIP,cn,DIRECT

#Rule Provider 规则
- RULE-SET,google,PILIHAN
- RULE-SET,lokal,PILIHAN
- RULE-SET,clash,REJECT
- MATCH,PILIHAN #========