mixin:
  dns:
    enable: true
    enhanced-mode: redir-host
    listen: '0.0.0.0:53'
    ipv6: true
    default-nameserver:
      - 'tls://223.5.5.5:853'
      - 'tls://223.6.6.6:853' #阿里加密DNS
    nameserver:
      - 'tls://223.5.5.5:853'
      - 'tls://223.6.6.6:853' #阿里加密DNS
    fallback:
      - 'https://doh.opendns.com/dns-query' #Cisco OpenDNS加密DNS
      - 'https://dns11.quad9.net/dns-query' #IBM Quad9加密DNS(支持ECS)
    fallback-filter:
      geoip: true
      geoip-code: CN
      ipcidr:
        - 0.0.0.0/32
        - 127.0.0.1/32
        - '::/128'
        - '::1/128'
  tun:
    enable: true
    stack: gvisor #改成system可提高性能,但需要在Windows防火墙放行Clash流量
    dns-hijack:
      - '198.18.0.2:53'
    auto-route: true
    auto-detect-interface: true