CalshConfig.new.mac.yaml

#---------------------------------------------------#
# 配置文件需要放置在 $HOME/.config/clash/config.yml
# 或者运行目录下的config.yml
# fallback: 与 nameserver 并发发起DNS请求，如果解析的IP地址是CN就用 nameserver，如果不是 CN 就用 fallback
# fake-ip-filter: 代表匹配的不走fake-ip
#---------------------------------------------------#
# 混合端口 HTTP和SOCKS5用一个端口
port: 7890
socks-port: 7891
mixed-port: 7893
allow-lan: true
bind-address: '*'
skip-auth-prefixes:
  - 127.0.0.1/8
  - ::1/128
ipv6: false
find-process-mode: strict
log-level: debug
mode: rule
external-controller: 0.0.0.0:9090
external-ui: yacd
external-ui-url: "https://mirror.ghproxy.com/https://github.com/haishanh/yacd/archive/gh-pages.zipp"
unified-delay: true
tcp-concurrent: true
global-client-fingerprint: chrome
geodata-loader: standard
geodata-mode: true
geo-auto-update: true
geo-update-interval: 24
keep-alive-interval: 60
geox-url:
  geoip: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geoip.dat"
  geosite: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/geosite.dat"
  mmdb: "https://mirror.ghproxy.com/https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/country.mmdb"
  asn: "https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb"
tun:
  enable: true
  stack: gvisor # system gvisor mixed
  dns-hijack:
    - any:53
    - tcp://any:53
  auto-redirect: true
  auto-route: true
  auto-detect-interface: true
  strict-route: true
  route-exclude-address-set: [cncidr, chinaips]
  route-exclude-address:
    - 74.48.160.148/32
    - 122.224.0.0/12
    - 119.96.0.0/13
    - 106.56.0.0/13
    - 120.133.71.0/24
    - 163.181.166.0/24
    - 163.181.164.0/24
    - 163.181.201.0/24
    - 163.181.199.0/24
    - 163.181.42.0/24
    - 163.181.39.0/24
    - 47.89.66.0/24
    - 128.1.157.0/24
    - 163.181.23.0/24
    - 163.181.129.0/24
    - 163.181.81.0/24
    - 163.181.82.0/24
    - 163.181.128.0/24
    - 163.181.160.0/24
    - 14.112.0.0/12
    - 183.0.0.0/10
    - 223.5.5.5/32
    - 223.6.6.6/32
    - 119.29.29.29/32
    - 114.114.114.114/32
    - 1.12.12.12/32
    - 180.76.76.76/32
    - 0.0.0.0/8
    - 10.0.0.0/8
    - 100.64.0.0/10
    - 127.0.0.0/8
    - 169.254.0.0/16
    - 172.16.0.0/12
    - 192.0.0.0/24
    - 192.0.2.0/24
    - 192.88.99.0/24
    - 192.168.0.0/16
    - 198.18.0.0/15
    - 198.51.100.0/24
    - 203.0.113.0/24
    - ::/127
    - fc00::/7
    - fe80::/10
    - ff00::/8
profile:
  store-selected: true
  store-fake-ip: false
dns:
  enable: true
  use-system-hosts: true
  ipv6: false
  prefer-h3: true
  respect-rules: true
  listen: 0.0.0.0:53
  enhanced-mode: fake-ip # fake-ip or redir-host
  fake-ip-range: 28.0.0.1/8
  use-hosts: true
  default-nameserver: [223.5.5.5, 119.29.29.29, 114.114.114.114]
  nameserver-policy:
    "+.lohome.top,+.syncthing.net,+.zerotier.net":
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
    "rule-set:direct,mydirect,china,chinax,chinatest": 
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
    "geosite:tracker,private":
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
    "geosite:cn,tld-cn,category-games@cn,apple-cn,apple,microsoft@cn,onedrive": 
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
    "rule-set:github,google,gfw,proxy,tiktok,openai,myopenai,proxyclassical,global":
      - https://dns.google/dns-query#ecs=120.76.0.0/14&ecs-override=true
      - https://dns12.quad9.net/dns-query#ecs=120.76.0.0/14&ecs-override=true
    "geosite:github,google,facebook,twitter,tiktok,openai":
      - https://dns.google/dns-query#ecs=120.76.0.0/14&ecs-override=true
      - https://dns12.quad9.net/dns-query#ecs=120.76.0.0/14&ecs-override=true
  proxy-server-nameserver: 
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
  nameserver: 
      - quic://223.5.5.5:853
      - https://1.12.12.12/dns-query
  fake-ip-filter-mode: blacklist
  fake-ip-filter:
    - "+.*"

sniffer:
  enable: true
  parse-pure-ip: true
  force-dns-mapping: true
  sniff:
    HTTP:
      ports: [80, 8080-8880]
      override-destination: true
    TLS:
      ports: [443, 8443]
    QUIC:
      ports: [443, 8443]
  skip-domain:
    - "Mijia Cloud"
    - "dlg.io.mi.com"
    - "+.apple.com"

NodeParam: &NodeParam {type: http, interval: 86400, health-check: {enable: true, url: 'http://www.google.com/generate_204', interval: 60}}

proxy-providers: 
  sub-providers: # 替换为订阅分组名称, proxy-group 中 use 字段引用
    url: '订阅地址' # 替换为订阅地址
    <<: *NodeParam
    path: './ProxyProvider/sub-providers.yaml'

RuleSetDomain: &RuleSetDomain {type: http, behavior: domain, interval: 86400, proxy: DIRECT}
RuleSetClassical: &RuleSetClassical {type: http, behavior: classical, interval: 86400, proxy: DIRECT}
RuleSetIpcidr: &RuleSetIpcidr {type: http, behavior: ipcidr, interval: 86400, proxy: DIRECT}

rule-providers:
  reject:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml

  directprocess:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/CuminLo/clash-rules/master/DirectProcess.list"
    path: ./ruleset/directprocess.yaml

  mydirect:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/CuminLo/clash-rules/master/DirectDomain.list"
    path: ./ruleset/mydirect.yaml

  myproxy:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/CuminLo/clash-rules/master/Proxy.list"
    path: ./ruleset/myproxy.yaml

  mydeny:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/DustScribe/clash-rules/main/rules/Deny.list"
    path: ./ruleset/mydeny.yaml
    format: text

  binance:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Binance/Binance_No_Resolve.yaml"
    path: ./ruleset/binance.yaml

  mybinance:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/CuminLo/clash-rules/master/Binance.list"
    path: ./ruleset/mybinance.yaml

  crypto:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Crypto/Crypto_No_Resolve.yaml"
    path: ./ruleset/crypto.yaml

  mycrypto:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/CuminLo/clash-rules/master/Crypto.list"
    path: ./ruleset/mycrypto.yaml

  icloud:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
    path: ./ruleset/icloud.yaml

  apple:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
    path: ./ruleset/apple.yaml

  appleall:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Apple/Apple_Classical_No_Resolve.yaml"
    path: ./ruleset/appleall.yaml

  netflix:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Netflix/Netflix_Classical_No_Resolve.yaml"
    path: ./ruleset/netflix.yaml

  youtube:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/YouTube/YouTube_No_Resolve.yaml"
    path: ./ruleset/youtube.yaml

  googleFCM:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/GoogleFCM/GoogleFCM_No_Resolve.yaml"
    path: ./ruleset/googleFCM.yaml

  google:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Google/Google_No_Resolve.yaml"
    path: ./ruleset/google.yaml

  openai:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/OpenAI/OpenAI_No_Resolve.yaml"
    path: ./ruleset/openai.yaml

  myopenai:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/DustScribe/clash-rules/main/rules/AI.list"
    path: ./ruleset/myopenai.yaml

  bahamut:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Bahamut/Bahamut_No_Resolve.yaml"
    path: ./ruleset/bahamut.yaml

  amazon:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Amazon/Amazon_No_Resolve.yaml"
    path: ./ruleset/amazon.yaml

  onedrive:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/OneDrive/OneDrive_No_Resolve.yaml"
    path: ./ruleset/onedrive.yaml

  microsoft:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Microsoft/Microsoft_No_Resolve.yaml"
    path: ./ruleset/microsoft.yaml

  discord:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Discord/Discord_No_Resolve.yaml"
    path: ./ruleset/discord.yaml

  twitter:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Twitter/Twitter_No_Resolve.yaml"
    path: ./ruleset/twitter.yaml

  tiktok:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/TikTok/TikTok_No_Resolve.yaml"
    path: ./ruleset/tiktok.yaml

  github:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/GitHub/GitHub_No_Resolve.yaml"
    path: ./ruleset/github.yaml

  proxy:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
    path: ./ruleset/proxy.yaml

  china:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/China/China_No_Resolve.yaml"
    path: ./ruleset/china.yaml

  chinax:
    <<: *RuleSetClassical
    url: "https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/China/China_Classical_No_Resolve.yaml"
    path: ./ruleset/chinax.yaml

  chinatest:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/ChinaTest/ChinaTest_Classical_No_Resolve.yaml"
    path: ./ruleset/chinatest.yaml

  direct:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
    path: ./ruleset/direct.yaml

  private:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    path: ./ruleset/private.yaml

  gfw:
    <<: *RuleSetDomain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
    path: ./ruleset/gfw.yaml

  global:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Global/Global_Classical_No_Resolve.yaml"
    path: ./ruleset/global.yaml

  proxyclassical:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Proxy/Proxy_Classical_No_Resolve.yaml"
    path: ./ruleset/proxyclassical.yaml

  telegramcidr:
    <<: *RuleSetIpcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
    path: ./ruleset/telegramcidr.yaml

  cncidr:
    <<: *RuleSetIpcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
    path: ./ruleset/cncidr.yaml

  chinaips:
    <<: *RuleSetIpcidr
    url: "https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/ChinaIPs/ChinaIPs_IP.yaml"
    path: ./ruleset/chinaips.yaml

  lancidr:
    <<: *RuleSetIpcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
    path: ./ruleset/lancidr.yaml

  applications:
    <<: *RuleSetClassical
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    path: ./ruleset/applications.yaml

FilterCrypto: &FilterCrypto '^(?=.*((?i)🇸🇬|坡|狮|SG|Singapore|台|新北|彰化|TW|Taiwan|日本|川日|东京|大阪|泉日|埼玉|沪日|深日|JP))^(?!.*(网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
FilterUS: &FilterUS '^(?=.*((?i)🇺🇸|美国|波特兰|达拉斯|俄勒冈|凤凰城|费利蒙|硅谷|拉斯维加斯|洛杉矶|圣何塞|圣克拉拉|西雅图|芝加哥|(\b(US|United States)\b)))^(?!.*(网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
FilterTW: &FilterTW '^(?=.*((?i)台湾|(\b(TW|Taiwan)\b)))^(?!.*(网站|地址|剩余|过期|时间|有效|网址|禁止|邮箱|发布|客服|订阅|节点)).*$'
FilterVPS: &FilterVPS '^(?=.*((?i)0x)).*$'

Select: &Select {type: select, url: 'http://connectivitycheck.platform.hicloud.com/generate_204', disable-udp: false, hidden: false, include-all: true}

proxy-groups: 
  - {name: 🚀 节点选择, type: select, proxies: [🔥 手动切换, ♻️ 自动选择, ☯️ 全部节点, DIRECT]}
  - {name: ☯️ 全部节点, type: select, include-all: true}
  - {name: 🔥 手动切换, type: select, proxies: [🪨 订阅分组, ☯️ 全部节点]}
  - {name: ♻️ 自动选择, type: url-test, include-all: true, tolerance: 10}
  - {name: 🅱️ Crypto, <<: *Select, filter: *FilterCrypto}
  - {name: 🎯 全球直连, type: select, proxies: [DIRECT]}
  - {name: 🆎 AdBlock, type: select, proxies: [REJECT, DIRECT]}
  - {name: 🛡️ 隐私防护, type: select, proxies: [REJECT, DIRECT]}
  - {name: 🇬 Google, type: select, proxies: [🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 🤖 Chat服务, type: select, proxies: [🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name:  苹果服务, type: select, proxies: [DIRECT, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 📹 油管视频, type: select, proxies: [🔥 手动切换, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 👨‍💻‍ Github, type: select, proxies: [🔥 手动切换, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 📺 巴哈姆特, type: select, proxies: [🇨🇳 台湾节点, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: Ⓜ️ 微软云盘, type: select, proxies: [DIRECT, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: Ⓜ️ 微软服务, type: select, proxies: [DIRECT, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 💬 自由消息, type: select, proxies: [🔥 手动切换, 🚀 节点选择, 🐔 落地鸡, 🇺🇲 美国节点, ♻️ 自动选择]}
  - {name: 🐟 漏网之鱼, type: select, proxies: [🔥 手动切换, 🚀 节点选择, ♻️ 自动选择]}
  - {name: 🐔 落地鸡, <<: *Select, filter: *FilterVPS}
  - {name: 🇺🇲 美国节点, <<: *Select, filter: *FilterUS}
  - {name: 🇨🇳 台湾节点, <<: *Select, filter: *FilterTW}
  - {name: 🪨 订阅分组, use: [sub-providers], type: url-test, include-all: false, tolerance: 10}

rules:
  - RULE-SET,myproxy,🚀 节点选择
  - RULE-SET,crypto,🅱️ Crypto
  - RULE-SET,binance,🅱️ Crypto
  - RULE-SET,mybinance,🅱️ Crypto
  - RULE-SET,mycrypto,🅱️ Crypto
  - RULE-SET,directprocess,🎯 全球直连
  - RULE-SET,mydirect,🎯 全球直连
  - PROCESS-NAME,android.uid.system,🇬 Google
  - PROCESS-NAME,com.google.uid.shared,🇬 Google
  - PROCESS-NAME,com.android.vending,🇬 Google
  - DOMAIN-SUFFIX,xn--ngstr-lra8j.com,🇬 Google
  - DOMAIN-SUFFIX,android.googleapis.com,🇬 Google
  - DOMAIN-SUFFIX,android.clients.google.com,🇬 Google
  - DOMAIN-SUFFIX,play.googleapis.com,🇬 Google
  - DOMAIN-SUFFIX,services.googleapis.cn,🇬 Google
  - DOMAIN-SUFFIX,voice.google.com,🇬 Google
  - DOMAIN-SUFFIX,dl.google.com,🇬 Google
  - IP-CIDR,224.0.0.0/4,🎯 全球直连,no-resolve
  - IP-CIDR,103.41.167.0/24,🎯 全球直连,no-resolve
  - IP-CIDR,74.48.160.148/32,🎯 全球直连,no-resolve
  - RULE-SET,openai,🤖 Chat服务
  - RULE-SET,myopenai,🤖 Chat服务
  - RULE-SET,applications,🎯 全球直连
  - DOMAIN,clash.razord.top,🎯 全球直连
  - DOMAIN,yacd.haishan.me,🎯 全球直连
  - RULE-SET,private,🎯 全球直连
  - RULE-SET,icloud, 苹果服务
  - RULE-SET,apple, 苹果服务
  - RULE-SET,appleall, 苹果服务
  - GEOSITE,apple-cn, 苹果服务
  - RULE-SET,youtube,📹 油管视频
  - RULE-SET,netflix,📹 油管视频
  - GEOSITE,youtube,📹 油管视频
  - GEOIP,netflix,📹 油管视频
  - RULE-SET,googleFCM,🇬 Google
  - RULE-SET,google,🇬 Google
  - GEOSITE,google,🇬 Google
  - GEOIP,google,🇬 Google
  - GEOSITE,steam@cn,🎯 全球直连
  - GEOSITE,category-games@cn,🎯 全球直连
  - GEOSITE,tracker,🎯 全球直连
  - RULE-SET,reject,🆎 AdBlock
  - GEOSITE,category-ads-all,🆎 AdBlock
  - RULE-SET,mydeny,🛡️ 隐私防护
  - RULE-SET,bahamut,📺 巴哈姆特
  - GEOSITE,bahamut,📺 巴哈姆特
  - RULE-SET,github,👨‍💻‍ Github
  - GEOSITE,github,👨‍💻‍ Github
  - RULE-SET,onedrive,Ⓜ️ 微软云盘
  - GEOSITE,onedrive,Ⓜ️ 微软云盘
  - RULE-SET,microsoft,Ⓜ️ 微软服务
  - RULE-SET,telegramcidr,💬 自由消息,no-resolve
  - RULE-SET,twitter,💬 自由消息
  - RULE-SET,discord,💬 自由消息
  - RULE-SET,tiktok,💬 自由消息
  - GEOSITE,telegram,💬 自由消息
  - GEOSITE,twitter,💬 自由消息
  - GEOIP,twitter,💬 自由消息
  - RULE-SET,gfw,🚀 节点选择
  - RULE-SET,proxy,🚀 节点选择
  - RULE-SET,global,🚀 节点选择
  - RULE-SET,proxyclassical,🚀 节点选择
  - RULE-SET,china,🎯 全球直连
  - RULE-SET,chinax,🎯 全球直连
  - RULE-SET,chinatest,🎯 全球直连
  - RULE-SET,direct,🎯 全球直连
  - RULE-SET,lancidr,🎯 全球直连,no-resolve
  - RULE-SET,cncidr,🎯 全球直连,no-resolve
  - RULE-SET,chinaips,🎯 全球直连,no-resolve
  - GEOIP,LAN,🎯 全球直连,no-resolve
  - GEOIP,CN,🎯 全球直连,no-resolve
  - MATCH,🐟 漏网之鱼