clash_transparent_proxy_config.yaml

mode: global
mixed-port: 7897
allow-lan: false
log-level: silent
ipv6: false
external-controller: 127.0.0.1:9097
secret: set-your-secret
unified-delay: true
dns:
  default-nameserver:
  - 8.8.8.8
  - 8.8.4.4
  direct-nameserver-follow-policy: false
  enable: true
  enhanced-mode: fake-ip
  fake-ip-filter:
  - '*.lan'
  - '*.local'
  - '*.arpa'
  - time.*.com
  - ntp.*.com
  - time.*.com
  - +.market.xiaomi.com
  - localhost.ptlogin2.qq.com
  - '*.msftncsi.com'
  - www.msftconnecttest.com
  fake-ip-filter-mode: blacklist
  fake-ip-range: 198.18.0.1/16
  fallback-filter:
    domain:
    - +.google.com
    - +.facebook.com
    - +.youtube.com
    geoip: false
    geoip-code: CN
    ipcidr:
    - 240.0.0.0/4
    - 0.0.0.0/32
  ipv6: true
  listen: :53
  nameserver:
  - 8.8.8.8
  - 8.8.4.4
  prefer-h3: false
  proxy-server-nameserver:
  - https://doh.pub/dns-query
  - https://dns.alidns.com/dns-query
  - tls://223.5.5.5
  respect-rules: false
  use-hosts: false
  use-system-hosts: false
external-controller-cors:
  allow-private-network: true
  allow-origins:
  - tauri://localhost
  - http://tauri.localhost
  - https://yacd.metacubex.one
  - https://metacubex.github.io
  - https://board.zash.run.place
tun:
  auto-detect-interface: true
  auto-route: true
  device: utun11
  dns-hijack:
  - any:53
  mtu: 1400
  stack: system
  strict-route: false
  enable: true
profile:
  store-selected: true
proxies:
- name: wg-vps
  type: wireguard
  server: <REPLACE>
  port: 51820
  ip: 172.30.0.2
  private-key: <REPLACE>
  public-key: <REPLACE>
  keepalive: 25
  mtu: 1280
  dns:
  - 8.8.8.8
  - 8.8.4.4
  udp: true
proxy-groups: []
rules: []