# ======================== # 1. 基础设置与 TUN 模式 # ======================== mode: rule mixed-port: 7890 allow-lan: true log-level: info unified-delay: true global-client-fingerprint: chrome # 开启 TUN 模式,确保全手机 App 流量接管 tun: enable: true stack: mixed auto-route: true auto-detect-interface: true dns-hijack: - any:53 # Geo 资源设置(匹配你截图中的 MetaCubeX 数据) geodata-mode: true geo-auto-update: true geo-update-interval: 24 # ======================== # 2. DNS 设置 (适配 TUN 模式的最佳方案) # ======================== dns: enable: true ipv6: false enhanced-mode: fake-ip # 安卓 TUN 模式下 fake-ip 兼容性与性能最好 fake-ip-range: 198.18.0.1/16 listen: 0.0.0.0:1053 default-nameserver: - 223.5.5.5 - 119.29.29.29 nameserver: - https://dns.alidns.com/dns-query - https://doh.pub/dns-query fallback: - https://1.1.1.1/dns-query - https://8.8.8.8/dns-query fallback-filter: geoip: true geoip-code: CN ipcidr: - 240.0.0.0/4 # ======================== # 3. 代理节点列表 # ======================== proxies: - name: "lisa" type: vless server: 216.36.104.95 port: 443 uuid: 08742b04-9d3e-4764-8a7b-2723aae7684d network: tcp tls: true udp: true flow: xtls-rprx-vision servername: www.microsoft.com reality-opts: public-key: NY2uRzrezt9x2nQqNRnmCs80gYgap6NFNYZh84FnIRs short-id: ffecddb9 client-fingerprint: chrome - {name: US-BGP-1, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32001, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: US-BGP-2, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32028, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: TW-NeaRoute, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32003, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: FR-BGP, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32009, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: UK-BGP, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32010, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: AU-VUAU, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32012, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: MY-Shin, server: 94a5070b-cff9-4b4d-9223-c7bb66ea49a0.bnsepserv.com, port: 32038, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} - {name: YD-DOIN, server: 11f8ca15-c3b1-4891-a2e2-7948c32224f5.bnsepserv.com, port: 32017, type: trojan, password: 8830f50e-98de-4436-ac79-921378ab3976, sni: w1.ding-doc.com, skip-cert-verify: true, udp: true} # ======================== # 4. 策略组 (已移除表情) # ======================== proxy-groups: - name: bitznet type: url-test url: http://www.gstatic.com/generate_204 interval: 300 proxies: - US-BGP-1 - US-BGP-2 - TW-NeaRoute - FR-BGP - UK-BGP - AU-VUAU - MY-Shin - YD-DOIN - name: AI-Google type: select proxies: - lisa - bitznet - name: PROXY type: select proxies: - bitznet - lisa # ======================== # 5. 分流规则 # ======================== rules: # AI 业务 - DOMAIN-SUFFIX,cursor.sh,AI-Google - DOMAIN-SUFFIX,cursor.com,AI-Google - DOMAIN-SUFFIX,anysphere.co,AI-Google - GEOSITE,anthropic,AI-Google - GEOSITE,openai,AI-Google # 常用墙外服务 - GEOSITE,google,AI-Google - GEOSITE,youtube,AI-Google - GEOSITE,telegram,PROXY - GEOSITE,twitter,PROXY - GEOSITE,netflix,PROXY - GEOSITE,gfw,PROXY # 必须走代理的 IP (如电报) - GEOIP,telegram,PROXY # 国内直连 (确保微信/QQ/支付宝不走代理) - GEOSITE,cn,DIRECT - GEOSITE,apple,DIRECT - GEOSITE,steam@cn,DIRECT - GEOIP,private,DIRECT - GEOIP,cn,DIRECT # 兜底规则 - MATCH,PROXY