allow-lan: true
bind-address: '*'
dns:
  default-nameserver:
  - 223.5.5.5
  - 223.6.6.6
  enable: true
  enhanced-mode: fake-ip
  fake-ip-filter:
  - +.lan
  - +.local
  fake-ip-range: 198.18.0.1/16
  listen: 0.0.0.0:53
  nameserver:
  - https://223.5.5.5/dns-query
  - https://223.6.6.6/dns-query
  - https://1.12.12.12/dns-query
  - https://120.53.53.53/dns-query
  nameserver-policy:
    captive.apple.com: 1.1.1.1
  prefer-h3: true
  use-hosts: true
  use-system-hosts: true
external-controller: 0.0.0.0:9090
geo-auto-update: true
geodata-mode: false
ipv6: true
log-level: warning
mixed-port: 7892
mode: rule
ntp:
  enable: true
  interval: 60
  port: 123
  server: time.cloudflare.com
  write-to-system: false
port: 7890
profile:
  store-fake-ip: true
  store-selected: true
  tracing: false
proxy-groups:
- filter: "(?<![A-Za-z])TWN?(?![A-Za-z])|Taiwan|Taiwanese|Taipei|\u53F0\u7063|\u53F0\
    \u6E7E|\u53F0(?![\\u4E00-\\u9FFF])"
  hidden: true
  include-all: true
  interval: 600
  lazy: true
  name: TW
  type: url-test
  url: http://1.1.1.1/
  use: &id001 []
- filter: "(?<![A-Za-z])JPN?(?![A-Za-z])|Japan|Japanese|Tokyo|Osaka|\u65E5\u672C\u570B\
    ?|(?<!\u5C3C)\u65E5(?![\\u4E00-\\u9FFF])"
  hidden: true
  include-all: true
  interval: 600
  lazy: true
  name: JP
  type: url-test
  url: http://1.1.1.1/
  use: *id001
- filter: "(?<![A-Za-z])(?:USA?|NY|LA)(?![A-Za-z])|United\\s?States|American?|\u7F8E\
    \u570B|\u7F8E\u56FD|\u7F8E(?![\\u4E00-\\u9FFF])"
  hidden: true
  include-all: true
  interval: 600
  lazy: true
  name: US
  type: url-test
  url: http://1.1.1.1/
  use: *id001
proxy-providers: {}
redir-port: 7893
rule-providers:
  dncn:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/cn-dn-c.yml
  dnjp:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/jp-dn-c.yml
  dnstream:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/stream-dn-c.yml
  dnsystem:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/system-dn-c.yml
  dntw:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/tw-dn-c.yml
  dnus:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/us-dn-c.yml
  dnworld:
    behavior: domain
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/world-dn-c.yml
  ipcn:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/cn-ip-s.txt
  ipjp:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/jp-ip-s.txt
  ipstream:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/stream-ip-s.txt
  ipsystem:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/system-ip-s.txt
  iptw:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/tw-ip-s.txt
  ipworld:
    behavior: classical
    format: text
    interval: 86400
    type: http
    url: https://cdn.jsdelivr.net/gh/xszo/cr/rule/world-ip-s.txt
rules:
- RULE-SET, dncn, DIRECT
- RULE-SET, dnsystem, DIRECT
- RULE-SET, dntw, TW
- RULE-SET, dnstream, TW
- RULE-SET, dnjp, JP
- RULE-SET, dnus, US
- RULE-SET, dnworld, TW
- RULE-SET, ipcn, DIRECT
- RULE-SET, ipsystem, DIRECT
- RULE-SET, iptw, TW
- RULE-SET, ipstream, TW
- RULE-SET, ipjp, JP
- RULE-SET, ipworld, TW
- MATCH, TW
secret: '00000000'
sniffer:
  enable: true
  force-dns-mapping: true
  override-destination: false
  parse-pure-ip: true
socks-port: 7891
tcp-concurrent: true
tproxy-port: 7894
tun:
  auto-detect-interface: true
  auto-redir: true
  auto-route: true
  dns-hijack:
  - udp://any:53
  - tcp://any:53
  enable: true
  stack: system
unified-delay: true