sub.yaml

mode: rule
log-level: warning # 日志等级 silent/error/warning/info/debug
ipv6: false # 开启 IPv6 总开关，关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录
external-controller: 0.0.0.0:9090 # RESTful API 监听地址
secret: '' # `Authorization:Bearer ${secret}`

proxy-providers:
  provider1:
    type: http
    interval: 3600
    health-check:
      enable: true
      url: https://www.gstatic.com/generate_204
      interval: 300
    exclude-filter: Traffic|Expire|Play|Game|官网|套餐|剩余
    url: ''

mixed-port: 7890 # HTTP(S) 和 SOCKS 代理混合端口
redir-port: 7891 # 透明代理端口，用于 Linux 和 MacOS
tproxy-port: 7892 # Transparent proxy server port for Linux (TProxy TCP and TProxy UDP)
port: 7893
socks-port: 7894
allow-lan: true # 允许局域网连接
bind-address: '*' # 绑定 IP 地址，仅作用于 allow-lan 为 true，'*'表示所有地址

tun:
  enable: true
  stack: mixed # gvisor/mixed
  device: Mihomo
  dns-hijack:
    - tcp://any:53
    # - any:53 # 需要劫持的 DNS
  auto-detect-interface: true # 自动识别出口网卡
  auto-route: false # 配置路由表
  auto-redirect: false # 自动配置 iptables 以重定向 TCP 连接。仅支持 Linux。带有 auto-redirect 的 auto-route 现在可以在路由器上按预期工作，无需干预。

  endpoint-independent-nat: true # 启用独立于端点的 NAT
  # include-interface: # 限制被路由的接口。默认不限制，与 `exclude-interface` 冲突
  #   - "lan0"
  # exclude-interface: # 排除路由的接口，与 `include-interface` 冲突
  #   - "lan1"
  # 当 auto-route与auto-redirect 为true时, 若 route-exclude-address-set 非空，生成的防火墙链路略有区别
  # 此时可在nftables下 过滤源地址
  # nft insert rule inet mihomo prerouting ip saddr {192.168.1.1/24} return
  # route-exclude-address-set:
  #   - LocalAreaNetwork

dns:
  enable: true
  ipv6: false
  listen: 0.0.0.0:7874
  respect-rules: true
  proxy-server-nameserver:
    - https://doh.pub/dns-query
    - https://dns.alidns.com/dns-query

  # # redir-host模式
  # enhanced-mode: redir-host
  # nameserver:
  #   - https://dns.google/dns-query
  #   - https://cloudflare-dns.com/dns-query
  # default-nameserver:
  #   - 8.8.8.8
  #   - 1.1.1.1
  # nameserver-policy:
  #   # "*,+.lan,+.in-addr.arpa,geosite:private": "127.0.0.1:53" # 内网主机名解析 默认dnsmasq端口53，当路由端需要反向dns解析时启用
  #   "geosite:cn":
  #     - https://doh.pub/dns-query
  #     - https://dns.alidns.com/dns-query

  # fake-ip模式
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - https://doh.pub/dns-query
    - https://dns.alidns.com/dns-query
  default-nameserver:
    - 119.29.29.29
    - 223.5.5.5
  # nameserver-policy:
  #   "*,+.lan,+.in-addr.arpa,geosite:private": "127.0.0.1:53" # 内网主机名解析 默认dnsmasq端口53，当路由端需要反向dns解析时启用
  fake-ip-filter:
    - '*.localdomain'
    - '*.example'
    - '*.invalid'
    - '*.localhost'
    - '*.test'
    - '*.local'
    - '*.home.arpa'
    - time.*.com
    - time.*.gov
    - time.*.edu.cn
    - time.*.apple.com
    - time-ios.apple.com
    - time1.*.com
    - time2.*.com
    - time3.*.com
    - time4.*.com
    - time5.*.com
    - time6.*.com
    - time7.*.com
    - ntp.*.com
    - ntp1.*.com
    - ntp2.*.com
    - ntp3.*.com
    - ntp4.*.com
    - ntp5.*.com
    - ntp6.*.com
    - ntp7.*.com
    - '*.time.edu.cn'
    - '*.ntp.org.cn'
    - +.pool.ntp.org
    - time1.cloud.tencent.com
    - music.163.com
    - '*.music.163.com'
    - '*.126.net'
    - musicapi.taihe.com
    - music.taihe.com
    - songsearch.kugou.com
    - trackercdn.kugou.com
    - '*.kuwo.cn'
    - api-jooxtt.sanook.com
    - api.joox.com
    - joox.com
    - y.qq.com
    - '*.y.qq.com'
    - streamoc.music.tc.qq.com
    - mobileoc.music.tc.qq.com
    - isure.stream.qqmusic.qq.com
    - dl.stream.qqmusic.qq.com
    - aqqmusic.tc.qq.com
    - amobile.music.tc.qq.com
    - '*.xiami.com'
    - '*.music.migu.cn'
    - music.migu.cn
    - +.msftconnecttest.com
    - +.msftncsi.com
    - localhost.ptlogin2.qq.com
    - localhost.sec.qq.com
    - +.qq.com
    - +.tencent.com
    - +.srv.nintendo.net
    - '*.n.n.srv.nintendo.net'
    - +.cdn.nintendo.net
    - +.stun.playstation.net
    - xbox.*.*.microsoft.com
    - '*.*.xboxlive.com'
    - xbox.*.microsoft.com
    - xnotify.xboxlive.com
    - +.battlenet.com.cn
    - +.wotgame.cn
    - +.wggames.cn
    - +.wowsgame.cn
    - +.wargaming.net
    - proxy.golang.org
    - stun.*.*
    - stun.*.*.*
    - +.stun.*.*
    - +.stun.*.*.*
    - +.stun.*.*.*.*
    - +.stun.*.*.*.*.*
    - heartbeat.belkin.com
    - '*.linksys.com'
    - '*.linksyssmartwifi.com'
    - '*.router.asus.com'
    - mesu.apple.com
    - swscan.apple.com
    - swquery.apple.com
    - swdownload.apple.com
    - swcdn.apple.com
    - swdist.apple.com
    - lens.l.google.com
    - stun.l.google.com
    - na.b.g-tun.com
    - +.nflxvideo.net
    - '*.square-enix.com'
    - '*.finalfantasyxiv.com'
    - '*.ffxiv.com'
    - '*.ff14.sdo.com'
    - ff.dorado.sdo.com
    - '*.mcdn.bilivideo.cn'
    - +.media.dssott.com
    - shark007.net
    - Mijia Cloud
    - +.cmbchina.com
    - +.cmbimg.com
    - local.adguard.org
    - +.sandai.net
    - +.n0808.com
    - +.uu.163.com
    - ps.res.netease.com
    - geosite:cn
    - some.url # fix LOL connection issue


external-ui: ui
external-ui-name: metacubexd
external-ui-url: 
  https://mirror.ghproxy.com/https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip

unified-delay: true # 统一延迟
tcp-concurrent: false # TCP 并发

#自定义 geodata url
geodata-mode: true
geodata-loader: standard
geox-url:
  geoip: 
    https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat
  geosite: 
    https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat
geo-auto-update: false # 是否自动更新 geodata
geo-update-interval: 24 # 更新间隔，单位：小时

#  find-process-mode has 3 values:always, strict, off
#  - always, 开启，强制匹配所有进程
#  - strict, 默认，由 mihomo 判断是否开启
#  - off, 不匹配进程，推荐在路由器上使用此模式
find-process-mode: off

profile:
  store-selected: true # 存储 select 选择记录
  # store-fake-ip: false # 持久化 fake-ip

sniffer:
  enable: true
  parse-pure-ip: true
  force-dns-mapping: true
  override-destination: false
  sniff:
    HTTP:
      ports:
        - 80
        - 443
      override-destination: false
    TLS:
      ports:
        - 443
    QUIC:
      ports:
        - 443
  skip-domain:
    - +.push.apple.com
rule-providers:
  LocalAreaNetwork:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/LocalAreaNetwork.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/LocalAreaNetwork.yaml
  Apple:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Apple.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Apple.yaml
  Telegram:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Telegram.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Telegram.yaml
  GoogleFCM:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/GoogleFCM.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/GoogleFCM.yaml
  GoogleCN:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/GoogleCN.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/GoogleCN.yaml
  SteamCN:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/SteamCN.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/SteamCN.yaml
  GameDownload:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/GameDownload.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/GameDownload.yaml
  UnBan:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/UnBan.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/UnBan.yaml
  BanAD:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BanAD.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/BanAD.yaml
  BanProgramAD:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BanProgramAD.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/BanProgramAD.yaml
  BanEasyList:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BanEasyList.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/BanEasyList.yaml
  BanEasyListChina:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BanEasyListChina.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/BanEasyListChina.yaml
  BanEasyPrivacy:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BanEasyPrivacy.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/BanEasyPrivacy.yaml
  AI:
    type: http
    interval: 86400
    behavior: classical
    format: text
    path: rules/AI.list
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ConnersHua/RuleGo/master/Surge/Ruleset/Extra/AI.list
  OneDrive:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/OneDrive.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/OneDrive.yaml
  Microsoft:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Microsoft.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Microsoft.yaml
  Epic:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Epic.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Epic.yaml
  Origin:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Origin.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Origin.yaml
  Sony:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Sony.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Sony.yaml
  Steam:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Steam.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Steam.yaml
  Nintendo:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/Nintendo.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/Nintendo.yaml
  Xbox:
    type: http
    interval: 86400
    behavior: classical
    format: text
    path: rules/Xbox.list
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Xbox.list
  ChinaMedia:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/ChinaMedia.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/ChinaMedia.yaml
  ProxyMedia:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/ProxyMedia.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/ProxyMedia.yaml
  BilibiliHMT:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/BilibiliHMT.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/Ruleset/BilibiliHMT.yaml
  ProxyGFWlist:
    type: http
    interval: 86400
    behavior: classical
    format: yaml
    path: rules/ProxyGFWlist.yaml
    url: 
      https://mirror.ghproxy.com/https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Providers/ProxyGFWlist.yaml
proxy-groups:
  - name: 🚀 节点选择
    type: select
    proxies:
      - ♻️ 自动选择
      - 🔯 故障转移
      - 🔮 负载均衡
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇺🇲 美国节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
      - DIRECT
  - name: 🚀 手动切换
    type: select
    filter: .*
    include-all: true
  - name: 💬 AI服务
    type: select
    proxies:
      - 🇺🇲 美国节点
      - 🚀 节点选择
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
      - DIRECT
    filter: ''
  - name: 🎮 游戏平台
    type: select
    proxies:
      - 🚀 节点选择
      - DIRECT
      - 🇺🇲 美国节点
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
  - name: 🍎 苹果服务
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择
      - 🇺🇲 美国节点
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
  - name: 📲 电报消息
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🇸🇬 狮城节点
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇯🇵 日本节点
      - 🇺🇲 美国节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
      - DIRECT
  - name: Ⓜ️ 微软云盘
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择
      - 🇺🇲 美国节点
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
  - name: Ⓜ️ 微软服务
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择
      - 🇺🇲 美国节点
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
  - name: 🌍 国外媒体
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇺🇲 美国节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
      - DIRECT
  - name: 🌏 国内媒体
    type: select
    proxies:
      - DIRECT
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🚀 手动切换
  - name: 🎯 全球直连
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择
      - ♻️ 自动选择
  - name: 🛑 全球拦截
    type: select
    proxies:
      - REJECT
      - DIRECT
  - name: 🇭🇰 香港节点
    type: url-test
    include-all: true
    filter: (港|HK|hk|Hong Kong|HongKong|hongkong)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🇯🇵 日本节点
    type: url-test
    include-all: true
    filter: (日本|川日|东京|大阪|泉日|埼玉|沪日|深日|[^-]日|JP|Japan)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🇺🇲 美国节点
    type: url-test
    include-all: true
    filter: (美|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|US|United States)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '150'
  - name: 🇨🇳 台湾节点
    type: url-test
    include-all: true
    filter: (台|新北|彰化|TW|Taiwan)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🇸🇬 狮城节点
    type: url-test
    include-all: true
    filter: (新加坡|坡|狮城|SG|Singapore)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🇰🇷 韩国节点
    type: url-test
    include-all: true
    filter: (KR|Korea|KOR|首尔|韩|韓)
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: ♻️ 自动选择
    type: url-test
    include-all: true
    filter: .*
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🔯 故障转移
    type: fallback
    include-all: true
    filter: .*
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
  - name: 🔮 负载均衡
    type: load-balance
    strategy: round-robin
    filter: .*
    url: http://www.gstatic.com/generate_204
    interval: '300'
    tolerance: '50'
    include-all: true
  - name: 🐟 漏网之鱼
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🔯 故障转移
      - 🔮 负载均衡
      - DIRECT
      - 🇭🇰 香港节点
      - 🇨🇳 台湾节点
      - 🇸🇬 狮城节点
      - 🇯🇵 日本节点
      - 🇺🇲 美国节点
      - 🇰🇷 韩国节点
      - 🚀 手动切换
rules:
  - RULE-SET,LocalAreaNetwork,🎯 全球直连
  - RULE-SET,Apple,🍎 苹果服务
  - RULE-SET,Telegram,📲 电报消息
  - RULE-SET,GoogleFCM,🎯 全球直连
  - RULE-SET,GoogleCN,🎯 全球直连
  - RULE-SET,SteamCN,🎯 全球直连
  - RULE-SET,GameDownload,🎯 全球直连
  - RULE-SET,UnBan,🎯 全球直连
  - RULE-SET,BanAD,🛑 全球拦截
  - RULE-SET,BanProgramAD,🛑 全球拦截
  - RULE-SET,BanEasyList,🛑 全球拦截
  - RULE-SET,BanEasyListChina,🛑 全球拦截
  - RULE-SET,BanEasyPrivacy,🛑 全球拦截
  - RULE-SET,AI,💬 AI服务
  - RULE-SET,OneDrive,Ⓜ️ 微软云盘
  - RULE-SET,Microsoft,Ⓜ️ 微软服务
  - RULE-SET,Epic,🎮 游戏平台
  - RULE-SET,Origin,🎮 游戏平台
  - RULE-SET,Sony,🎮 游戏平台
  - RULE-SET,Steam,🎮 游戏平台
  - RULE-SET,Nintendo,🎮 游戏平台
  - RULE-SET,Xbox,🎮 游戏平台
  - RULE-SET,ChinaMedia,🌏 国内媒体
  - RULE-SET,ProxyMedia,🌍 国外媒体
  - RULE-SET,BilibiliHMT,🌍 国外媒体
  - RULE-SET,ProxyGFWlist,🚀 节点选择
  - GEOIP,cn,🎯 全球直连,no-resolve
  - GEOSITE,cn,🎯 全球直连
  - MATCH,🐟 漏网之鱼