mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
unified-delay: true
tcp-concurrent: true

# 1 Gbps 吞吐与并发调优
find-process-mode: strict
global-client-fingerprint: chrome

# TUN 模式（推荐开启以接管系统流量并跑满千兆网卡）
tun:
  enable: true
  stack: mixed # 或 gvisor / system
  dns-hijack:
    - "any:53"
    - "tcp://any:53"
  auto-route: true
  auto-detect-interface: true

# Geo 规则集资源
geodata-mode: true
geo-auto-update: true
geodata-loader: standard
geo-update-interval: 24
geox-url:
  geoip: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat"
  geosite: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat"
  mmdb: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb"
  asn: "https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb"

rule-providers:
  private:
    type: http
    format: mrs
    behavior: ipcidr
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geoip/private.mrs"
    path: ./ruleset/private.mrs
    interval: 86400
  geolocation-!cn:
    type: http
    format: mrs
    behavior: domain
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-!cn.mrs"
    path: ./ruleset/geolocation-!cn.mrs
    interval: 86400
  geolocation-cn:
    type: http
    format: mrs
    behavior: domain
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-cn.mrs"
    path: ./ruleset/geolocation-cn.mrs
    interval: 86400
  cn:
    type: http
    format: mrs
    behavior: ipcidr
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geoip/cn.mrs"
    path: ./ruleset/cn.mrs
    interval: 86400

# 高速低延迟 DNS
dns:
  enable: true
  ipv6: false
  respect-rules: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.local"
    - "*.localdomain"
    - "time.*.com"
    - "ntp.*.com"
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
  proxy-server-nameserver:
    - https://dns.alidns.com/dns-query
  nameserver-policy:
    "geosite:cn,private":
      - https://dns.alidns.com/dns-query
      - https://doh.pub/dns-query
    "geosite:geolocation-!cn":
      - https://dns.cloudflare.com/dns-query
      - https://dns.google/dns-query

proxies:
  # 推荐主力：VLESS-Vision (直连开销最低，单核吞吐极高，容易跑满 1G)
  - name: MY-Evoxt_Sdn._Bhd.
    type: vless
    server: 198.20.153.23
    port: 25023
    uuid: 8852a890-fe80-4966-bc56-84c013085a44
    tls: true
    client-fingerprint: chrome
    servername: www.iij.ad.jp
    network: tcp
    reality-opts:
      public-key: xkLborUR05ssIvn3iEkqX9UV8p65GDIBVVQ7d4pdiD8
    flow: xtls-rprx-vision
    tfo: false
    skip-cert-verify: false

  # Argo 临时隧道（受限于 CF 免费 CDN 调度，通常难跑满 1G，作为备用）
  - name: MY-Evoxt_Sdn._Bhd. 2
    type: vmess
    server: cdns.doon.eu.org
    port: 443
    uuid: 8852a890-fe80-4966-bc56-84c013085a44
    alterId: 0
    cipher: zero # 改为 zero 降低加解密 CPU 开销
    tls: true
    client-fingerprint: firefox
    servername: cheers-stanford-hold-peninsula.trycloudflare.com
    network: ws
    ws-opts:
      path: /vmess-argo?ed=2560
      headers:
        Host: cheers-stanford-hold-peninsula.trycloudflare.com

  # 推荐主力：Hysteria 2 (UDP 协议，多倍发包/BBR 拥塞控制，抗丢包能力最强)
  - name: MY-Evoxt_Sdn._Bhd. 3
    type: hysteria2
    server: 198.20.153.23
    port: 25026
    password: 8852a890-fe80-4966-bc56-84c013085a44
    sni: www.bing.com
    skip-cert-verify: true
    up: "1000 Mbps" # 声明千兆上行带宽
    down: "1000 Mbps" # 声明千兆下行带宽

  - name: MY-Evoxt_Sdn._Bhd. 4
    type: tuic
    server: 198.20.153.23
    port: 25025
    uuid: 8852a890-fe80-4966-bc56-84c013085a44
    password: 8852a890-fe80-4966-bc56-84c013085a44
    skip-cert-verify: true
    alpn:
      - h3
    sni: www.bing.com
    udp-relay-mode: native
    congestion-controller: bbr # 强制启用 BBR 拥塞控制

proxy-groups:
  - name: 🚀 节点选择
    type: select
    proxies:
      - MY-Evoxt_Sdn._Bhd. 3 # 优先 Hysteria 2
      - MY-Evoxt_Sdn._Bhd. # 备选 VLESS-Reality
      - ♻️ 自动选择
      - DIRECT
      - MY-Evoxt_Sdn._Bhd. 2
      - MY-Evoxt_Sdn._Bhd. 4

  - name: ♻️ 自动选择
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    proxies:
      - MY-Evoxt_Sdn._Bhd.
      - MY-Evoxt_Sdn._Bhd. 2
      - MY-Evoxt_Sdn._Bhd. 3
      - MY-Evoxt_Sdn._Bhd. 4

  - name: 🌏 非中国
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - DIRECT

  - name: 🔒 国内服务
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择

  - name: 🏠 私有网络
    type: select
    proxies:
      - DIRECT
      - REJECT

  - name: 🐟 漏网之鱼
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - DIRECT

rules:
  - RULE-SET,private,🏠 私有网络,no-resolve
  - RULE-SET,geolocation-!cn,🌏 非中国
  - RULE-SET,geolocation-cn,🔒 国内服务
  - RULE-SET,cn,🔒 国内服务
  - MATCH,🐟 漏网之鱼