Skip to content

Instantly share code, notes, and snippets.

@HydrangeaPurple
Last active October 30, 2025 03:26
Show Gist options
  • Save HydrangeaPurple/ec91f9eb1f28e0646646e614106f6943 to your computer and use it in GitHub Desktop.
Save HydrangeaPurple/ec91f9eb1f28e0646646e614106f6943 to your computer and use it in GitHub Desktop.
# 2025年10月30日
# port: 7890 # HTTP(S) 代理服务器端口
# socks-port: 7891 # SOCKS5 代理端口
mixed-port: 10801 # HTTP(S) 和 SOCKS 代理混合端口
redir-port: 7891 # 透明代理端口,用于 Linux 和 MacOS
# Transparent proxy server port for Linux (TProxy TCP and TProxy UDP)
tproxy-port: 1536
allow-lan: true # 允许局域网连接
bind-address: "*"
# find-process-mode has 3 values:always, strict, off
# - always, 开启,强制匹配所有进程
# - strict, 默认,由 mihomo 判断是否开启
# - off, 不匹配进程,推荐在路由器上使用此模式
find-process-mode: strict
mode: rule
log-level: error # 日志等级 silent/error/warning/info/debug
ipv6: true # 开启 IPv6 总开关,关闭阻断所有 IPv6 链接和屏蔽 DNS 请求 AAAA 记录
tcp-concurrent: true # TCP 并发连接所有 IP, 将使用最快握手的 TCP
external-controller: 127.0.0.1:9090
#secret: "1234"
# 配置 WEB UI 目录,使用 http://{{external-controller}}/ui 访问
external-ui: metacubexd
external-ui-name: xd
external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"
# 全局 TLS 指纹,优先低于 proxy 内的 client-fingerprint
# 可选: "chrome","firefox","safari","ios","random","none" options.
# Utls is currently support TLS transport in TCP/grpc/WS/HTTP for VLESS/Vmess and trojan.
global-client-fingerprint: chrome
# TCP keep alive interval(国内运营商大概NAT超时5分钟,所以改成280)
keep-alive-interval: 15 #默认15
keep-alive-idle: 15
hosts:
# '*.mihomo.dev': 127.0.0.1
# '.dev': 127.0.0.1
# 'alpha.mihomo.dev': '::1'
# test.com: [1.1.1.1, 2.2.2.2]
# home.lan: lan # lan 为特别字段,将加入本地所有网卡的地址
# baidu.com: google.com # 只允许配置一个别名
profile: # 存储 select 选择记录
store-selected: true
# 持久化 fake-ip
store-fake-ip: true
tun:
enable: true
stack: mixed # system/gvisor/mixed
device: tun0
dns-hijack:
- "any:53"
- "tcp://any:53"
auto-route: true # 配置路由表
auto-redirect: false # 自动配置 iptables 以重定向 TCP 连接。仅支持 Linux。带有 auto-redirect 的 auto-route 现在可以在路由器上按预期工作,无需干预。
auto-detect-interface: true # 自动识别出口网卡
sniffer:
enable: false
force-dns-mapping: true
parse-pure-ip: true
override-destination: false
sniff:
HTTP:
ports: [80, 8080-8880]
override-destination: true
TLS:
ports: [443, 8443]
QUIC:
ports: [443]
force-domain:
- +.v2ex.com
skip-domain:
- Mijia Cloud
dns:
enable: true
prefer-h3: false
listen: 0.0.0.0:1053
ipv6: true
ipv6-timeout: 300 # 单位:ms,内部双栈并发时,向上游查询 AAAA 时,等待 AAAA 的时间,默认 100ms
respect-rules: true
enhanced-mode: fake-ip # fake-ip or redir-host
fake-ip-range: 198.18.0.1/16
use-hosts: true
# 配置不使用fake-ip的域名
fake-ip-filter:
- "rule-set:fakeIpFilter"
default-nameserver: ## 用于解析 nameserver,fallback 以及其他DNS服务器配置的,DNS 服务域名
- 119.29.29.29
- 223.6.6.6
direct-nameserver:
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
direct-nameserver-follow-policy: true
proxy-server-nameserver:
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
nameserver:
- https://dns.cloudflare.com/dns-query
- https://dns.google/dns-query
nameserver-policy:
"rule-set:alibaba,category-games@cn,cn-domain":
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
"rule-set:private-domain":
- system
#这里是订阅更新和延迟测试相关
#可以更改 proxy 指定的出站
p: &p {type: http, interval: 21600, proxy: 默认, header: {User-Agent: ["clash-verge/v2.4.2/clash.party/v1.8.7(clash.meta)/FlClash/v0.8.89/mihomo/v1.19.14"]}, health-check: {enable: true, url: https://cp.cloudflare.com, interval: 900, timeout: 2000, expected-status: 204, lazy: true}}
# url 里填写自己的订阅,名称不能重复
proxy-providers:
订阅1:
<<: *p
url: 订阅地址
path: ./proxy-providers/dingyue1.yaml
override:
additional-prefix: "[订阅1]"
订阅2:
<<: *p
url: 订阅地址
path: ./proxy-providers/dingyue2.yaml
override:
additional-prefix: "[订阅2]"
proxies:
- name: "直连"
type: direct
udp: true
- name: "DNS_Hijack"
type: dns
proxy-groups:
- name: 默认
type: select
proxies: [自动选择,直连,香港,台湾,日本,新加坡,美国,其它地区,全部节点]
- name: Google
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: 🪟Microsoft@CN
type: select
proxies: [直连,默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择]
- name: 🪟Microsoft
type: select
proxies: [直连,默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择]
- name: 🔮OpenAI_Claude
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: ✈ Telegram
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: 𝕏 Twitter and DLsite
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: 🅱️哔哩哔哩
type: select
proxies: [直连,香港,台湾,日本,新加坡,美国]
- name: YouTube
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
# - name: NETFLIX
# type: select
# proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: Spotify
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: 🐙🐱Github
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
- name: 🇨🇳国内
type: select
proxies: [直连,默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择]
- name: 😤STEAM
type: select
proxies: [直连,默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择]
- name: GoogleFCM
type: select
proxies: [直连,默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择]
- name: 其他
type: select
proxies: [默认,香港,台湾,日本,新加坡,美国,其它地区,全部节点,自动选择,直连]
#分隔,下面是地区分组
- name: 香港
type: select
include-all: true
filter: "(?i)港|(?:^|[^a-z0-9])hk(?:[^a-z0-9]|$)|🇭🇰|hong ?kong"
- name: 台湾
type: select
include-all: true
filter: "(?i)台|(?:^|[^a-z0-9])tw(?:[^a-z0-9]|$)|🇹🇼|tai ?wan"
- name: 日本
type: select
include-all: true
filter: "(?i)日本|(?:^|[^a-z0-9])jp(?:[^a-z0-9]|$)|🇯🇵|ja ?pan"
- name: 美国
type: select
include-all: true
filter: "(?i)美|(?:^|[^a-z0-9])us(?:[^a-z0-9]|$)|🇺🇸|united ?states"
- name: 新加坡
type: select
include-all: true
filter: "(?i)^(?!.*(?:^|[^a-z0-9])us(?:[^a-z0-9]|$)).*(新加坡|狮城|(?:^|[^a-z0-9])sg(?:[^a-z0-9]|$)|🇸🇬|singapore)"
- name: 其它地区
type: select
include-all: true
filter: "(?i)^(?!.*(港|(?:^|[^a-z0-9])hk(?:[^a-z0-9]|$)|🇭🇰|hong ?kong|台|(?:^|[^a-z0-9])tw(?:[^a-z0-9]|$)|🇹🇼|tai ?wan|日本|(?:^|[^a-z0-9])jp(?:[^a-z0-9]|$)|🇯🇵|ja ?pan|美|(?:^|[^a-z0-9])us(?:[^a-z0-9]|$)|🇺🇸|united ?states|新加坡|狮城|(?:^|[^a-z0-9])sg(?:[^a-z0-9]|$)|🇸🇬|singapore)).*$"
- name: 全部节点
type: select
include-all: true
- name: 自动选择
type: url-test
include-all: true
tolerance: 60
lazy: true
filter: "(?i).*(港|(?:^|[^a-z0-9])hk(?:[^a-z0-9]|$)|🇭🇰|hong ?kong|台|(?:^|[^a-z0-9])tw(?:[^a-z0-9]|$)|🇹🇼|tai ?wan|日本|(?:^|[^a-z0-9])jp(?:[^a-z0-9]|$)|🇯🇵|ja ?pan|美|(?:^|[^a-z0-9])us(?:[^a-z0-9]|$)|🇺🇸|united ?states|新加坡|狮城|(?:^|[^a-z0-9])sg(?:[^a-z0-9]|$)|🇸🇬|singapore).*"
rules:
- DST-PORT,53,DNS_Hijack
- RULE-SET,private-domain,DIRECT
- RULE-SET,private-ip,DIRECT,no-resolve
- RULE-SET,alibaba,DIRECT
- RULE-SET,category-games@cn,DIRECT
- RULE-SET,mydirectIP,DIRECT
- RULE-SET,mydirect,DIRECT
- AND,((NETWORK,UDP),(DST-PORT,123)),DIRECT
- AND,((NETWORK,UDP),(DST-PORT,443)),REJECT #reject quic
- RULE-SET,myreject,REJECT
- RULE-SET,myrejectDrop,REJECT-DROP
- RULE-SET,fuckmiui,REJECT
- RULE-SET,myproxy,默认
- RULE-SET,fcm-domain,GoogleFCM
- RULE-SET,github-domain,🐙🐱Github
- RULE-SET,twitter-domain,𝕏 Twitter and DLsite
- RULE-SET,dlsite-domain,𝕏 Twitter and DLsite
- RULE-SET,youtube-domain,YouTube
- RULE-SET,google-domain,Google
- RULE-SET,microsoft-domain-cn,🪟Microsoft@CN
- RULE-SET,microsoft-domain,🪟Microsoft
- RULE-SET,openai-domain,🔮OpenAI_Claude
- RULE-SET,anthropic-domain,🔮OpenAI_Claude
- DOMAIN,trae-api-sg.mchost.guru,🔮OpenAI_Claude
- RULE-SET,telegram-domain,✈ Telegram
# - RULE-SET,netflix-domain,NETFLIX
- RULE-SET,bilibili-domain,🅱️哔哩哔哩
- RULE-SET,bahamut-domain,台湾
- RULE-SET,spotify-domain,Spotify
- RULE-SET,cn-domain,🇨🇳国内
- RULE-SET,steam@cn,🇨🇳国内
- RULE-SET,steam,😤STEAM
- RULE-SET,geolocation-!cn,其他
- RULE-SET,google-ip,Google
# - RULE-SET,netflix-ip,NETFLIX
- RULE-SET,telegram-ip,✈ Telegram
- RULE-SET,twitter-ip,𝕏 Twitter and DLsite
- RULE-SET,cn-ip,🇨🇳国内
- MATCH,其他
rule-anchor:
ip: &ip {type: http, interval: 86400, behavior: ipcidr, format: mrs}
domain: &domain {type: http, interval: 86400, behavior: domain, format: mrs}
c: &c {type: http, interval: 86400, behavior: classical}
d: &d {type: http, interval: 86400, behavior: domain, format: text}
rule-providers:
"mydirect":
<<: *c
url: "https://clash-rule-set.vercel.app/mydirect.yaml"
path: ./rule-providers/rule1.yaml
"mydirectIP":
type: http
behavior: ipcidr
format: text
interval: 86400
url: "https://clash-rule-set.vercel.app/mydirectIP"
path: ./rule-providers/rule2
"myproxy":
<<: *c
url: "https://clash-rule-set.vercel.app/myproxy.yaml"
path: ./rule-providers/myproxy.yaml
"myreject":
<<: *d
url: "https://clash-rule-set.vercel.app/myreject"
path: ./rule-providers/myreject
"myrejectDrop":
<<: *d
url: "https://clash-rule-set.vercel.app/myrejectDrop"
path: ./rule-providers/myrejectDrop
"fuckmiui":
<<: *d
url: "https://clash-rule-set.vercel.app/fuckmiui"
path: ./rule-providers/fuckmiui
"fakeIpFilter":
<<: *d
url: "https://clash-rule-set.vercel.app/fakeIpFilter"
path: ./rule-providers/fakeIpFilter
"private-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.mrs"
"cn-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/cn.mrs"
"alibaba":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/alibaba.mrs"
"category-games@cn":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/[email protected]"
# "biliintl-domain":
# <<: *domain
# url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/biliintl.mrs"
# "ehentai-domain":
# <<: *domain
# url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/ehentai.mrs"
"github-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/github.mrs"
"twitter-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/twitter.mrs"
"dlsite-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/dlsite.mrs"
"youtube-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/youtube.mrs"
"google-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/google.mrs"
"telegram-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/telegram.mrs"
"netflix-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/netflix.mrs"
"bilibili-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bilibili.mrs"
"bahamut-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bahamut.mrs"
"spotify-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/spotify.mrs"
"pixiv-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/pixiv.mrs"
"openai-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/openai.mrs"
"anthropic-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/anthropic.mrs"
"microsoft-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/microsoft.mrs"
"microsoft-domain-cn":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/[email protected]"
"fcm-domain":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/googlefcm.mrs"
"geolocation-!cn":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/geolocation-!cn.mrs"
"steam@cn":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/[email protected]"
"steam":
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/steam.mrs"
"private-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.mrs"
"cn-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cn.mrs"
"google-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/google.mrs"
"netflix-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/netflix.mrs"
"twitter-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/twitter.mrs"
"telegram-ip":
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/telegram.mrs"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment