mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
unified-delay: true
tcp-concurrent: true

# 开启 TUN 模式提升吞吐效率
tun:
  enable: true
  stack: mixed
  dns-hijack:
    - "any:53"
  auto-route: true
  auto-detect-interface: true

# Geo 规则集配置
geodata-mode: true
geo-auto-update: true
geodata-loader: standard
geo-update-interval: 24
geox-url:
  geoip: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat"
  geosite: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat"
  mmdb: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb"
  asn: "https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb"

rule-providers:
  private:
    type: http
    format: mrs
    behavior: ipcidr
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geoip/private.mrs"
    path: ./ruleset/private.mrs
    interval: 86400
  geolocation-!cn:
    type: http
    format: mrs
    behavior: domain
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-!cn.mrs"
    path: ./ruleset/geolocation-!cn.mrs
    interval: 86400
  geolocation-cn:
    type: http
    format: mrs
    behavior: domain
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-cn.mrs"
    path: ./ruleset/geolocation-cn.mrs
    interval: 86400
  cn:
    type: http
    format: mrs
    behavior: ipcidr
    url: "https://gh-proxy.com/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geoip/cn.mrs"
    path: ./ruleset/cn.mrs
    interval: 86400

dns:
  enable: true
  ipv6: false
  respect-rules: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.local"
    - "*.localdomain"
    - "time.*.com"
    - "ntp.*.com"
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
  proxy-server-nameserver:
    - https://dns.alidns.com/dns-query
  nameserver-policy:
    "geosite:cn,private":
      - https://dns.alidns.com/dns-query
      - https://doh.pub/dns-query
    "geosite:geolocation-!cn":
      - https://dns.cloudflare.com/dns-query
      - https://dns.google/dns-query

proxies:
  # 1. VLESS Reality (日常低延迟主力)
  - name: SC-cognetcloud-Reality
    type: vless
    server: 154.201.80.157
    port: 27919
    uuid: 530b6c0f-85ba-4a1b-9953-33048c9ecd96
    network: tcp
    tls: true
    flow: xtls-rprx-vision
    servername: www.iij.ad.jp
    client-fingerprint: firefox
    reality-opts:
      public-key: BYsAjkgt2WT0knrFNoPuOZPG0PyvpLGgij78I2KlVHM
      short-id: 051019b51548306b
    tfo: false
    skip-cert-verify: false

  # 2. VMess (经 Cloudflare Argo 临时隧道中转)
  - name: SC-cognetcloud-VMess
    type: vmess
    server: cdns.doon.eu.org
    port: 443
    uuid: 530b6c0f-85ba-4a1b-9953-33048c9ecd96
    alterId: 0
    cipher: auto
    tls: true
    client-fingerprint: firefox
    servername: riverside-water-public-sen.trycloudflare.com
    network: ws
    ws-opts:
      path: /vmess-argo?ed=2560
      headers:
        Host: riverside-water-public-sen.trycloudflare.com

  # 3. Hysteria 2 (QUIC 协议，支持高带宽满速)
  - name: SC-cognetcloud-Hy2
    type: hysteria2
    server: 154.201.80.157
    port: 41524
    password: 530b6c0f-85ba-4a1b-9953-33048c9ecd96
    sni: www.bing.com
    skip-cert-verify: true
    up: 100 Mbps
    down: 1000 Mbps

  # 4. TUIC v5 (原生 UDP 极速中继)
  - name: SC-cognetcloud-TUIC
    type: tuic
    server: 154.201.80.157
    port: 16435
    uuid: 530b6c0f-85ba-4a1b-9953-33048c9ecd96
    password: 530b6c0f-85ba-4a1b-9953-33048c9ecd96
    skip-cert-verify: true
    alpn:
      - h3
    sni: www.bing.com
    udp-relay-mode: native
    congestion-controller: bbr
    reduce-rtt: true

proxy-groups:
  - name: 🚀 节点选择
    type: select
    proxies:
      - ♻️ 自动选择
      - SC-cognetcloud-Hy2
      - SC-cognetcloud-Reality
      - SC-cognetcloud-TUIC
      - SC-cognetcloud-VMess
      - DIRECT

  - name: ♻️ 自动选择
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    proxies:
      - SC-cognetcloud-Hy2
      - SC-cognetcloud-Reality
      - SC-cognetcloud-TUIC
      - SC-cognetcloud-VMess

  - name: 🌏 非中国
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - DIRECT

  - name: 🔒 国内服务
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择

  - name: 🏠 私有网络
    type: select
    proxies:
      - DIRECT
      - REJECT

  - name: 🐟 漏网之鱼
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - DIRECT

rules:
  - RULE-SET,private,🏠 私有网络,no-resolve
  - RULE-SET,geolocation-!cn,🌏 非中国
  - RULE-SET,geolocation-cn,🔒 国内服务
  - RULE-SET,cn,🔒 国内服务
  - MATCH,🐟 漏网之鱼