port: 7890
socks-port: 7891
allow-lan: false
mode: rule
log-level: info
geodata-mode: true
geo-auto-update: true
geodata-loader: standard
geo-update-interval: 24
geox-url:
  geoip: https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip.dat
  geosite: >-
    https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat
  mmdb: >-
    https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb
  asn: >-
    https://github.com/xishang0128/geoip/releases/download/latest/GeoLite2-ASN.mmdb
rule-providers:
  geolocation-cn:
    type: http
    format: mrs
    behavior: domain
    url: >-
      https://gh.sageer.me/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-cn.mrs
    path: ./ruleset/geolocation-cn.mrs
    interval: 86400
  geolocation-!cn:
    type: http
    format: mrs
    behavior: domain
    url: >-
      https://gh.sageer.me/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geosite/geolocation-!cn.mrs
    path: ./ruleset/geolocation-!cn.mrs
    interval: 86400
  private:
    type: http
    format: mrs
    behavior: ipcidr
    url: >-
      https://gh.sageer.me/https://github.com/MetaCubeX/meta-rules-dat/raw/refs/heads/meta/geo/geoip/private.mrs
    path: ./ruleset/private.mrs
    interval: 86400
  cn:
    type: http
    format: mrs
    behavior: domain
    url: >-
      https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/cn.yaml
    path: ./ruleset/cn.mrs
    interval: 86400
dns:
  enable: true
  ipv6: false
  respect-rules: true
  enhanced-mode: fake-ip
  nameserver:
    - https://120.53.53.53/dns-query
    - https://223.5.5.5/dns-query
  proxy-server-nameserver:
    - https://120.53.53.53/dns-query
    - https://223.5.5.5/dns-query
  nameserver-policy:
    geosite:cn,private:
      - https://120.53.53.53/dns-query
      - https://223.5.5.5/dns-query
    geosite:geolocation-!cn:
      - https://dns.cloudflare.com/dns-query
      - https://dns.google/dns-query
proxies:

    # 落地代理
  - name: proxycheap
   # 前置代理
    dialer-proxy: dialer
    type: socks5
    server: 192.204.0.72
    port: 12324
    username: 14acc9ad9e029
    password: 65ab9719f5
    # tls: true
    # fingerprint: xxxx
    # skip-cert-verify: true
    # udp: true
    # ip-version: ipv6

  - name: socks5
    type: socks5
    server: 92.112.6.88
    port: 12324
    username: 14acc9ad9e029
    password: 65ab9719f5
    # tls: true
    # fingerprint: xxxx
    # skip-cert-verify: true
    # udp: true
    # ip-version: ipv6


  - name: "242af835-singbox_hysteria"
    type: hysteria2
    server: 107.173.7.226
    # server: hy2.nomadro.com
    port: 34814
    ports: 30000-31000
    password: 1f28cd23-d223-4eaa-a786-4a010d674cbc
    sni: hy2.nomadro.com
    skip-cert-verify: true
    alpn:
      - h3
    up: "1000 Mbps"
    down: "1000 Mbps"
    # congestion_control: bbr        # 优化带宽利用率
  - name: hackrobot-singbox_tuic
    type: tuic
    server: 107.173.7.226
    port: 33935
    ports: 32000-40000
    uuid: 1f28cd23-d223-4eaa-a786-4a010d674cbc
    password: 1f28cd23-d223-4eaa-a786-4a010d674cbc

    # 可选优化字段（以下均为官方推荐写法）
    alpn:
      - h3
    udp-relay-mode: native          # 原生 UDP 转发模式
    congestion-controller: bbr      # 拥塞控制算法：bbr/cubic/new_reno
    disable-sni: false              # 保留 SNI，用于伪装域名
    reduce-rtt: true                # 启用 0-RTT 握手以降低延迟
    request-timeout: 8000           # 连接超时时间（毫秒）
    heartbeat-interval: 10000       # 心跳包间隔（毫秒）
    tls: true
    sni: hy2.nomadro.com            # 若使用域名证书建议填写
    skip-cert-verify: true          # 测试阶段跳过证书验证
    fast-open: true                 # 启用 TCP Fast-Open
    max-open-streams: 20            # 最大并发流数量
    max-udp-relay-packet-size: 1500 # 最大 UDP 包大小（字节）
    udp: true                       # 启用 UDP 支持
  - name: "VLESS_Reality_Vision"
    type: vless
    server: 107.173.7.226      # 替换为域名
    port: 21730                   # 修改端口为21730
    uuid: 1f28cd23-d223-4eaa-a786-4a010d674cbc
    flow: xtls-rprx-vision
    encryption: none
    network: tcp

    tls: true
    servername: hy2.nomadro.com
    alpn:
      - h2
      - http/1.1
    client-fingerprint: chrome
    skip-cert-verify: true

    reality-opts:
      public-key: ppipIkuEvHMBaMMg42C1lsRX_igSZPlDDZDBVY1UdzM
      short-id: 6ba85179e30d4fc2
      server-names:
        - hy2.nomadro.com
      flow: xtls-rprx-vision

    smux:
      enabled: false

  - name: "242af835-singbox_hysteria2"
    type: hysteria2
    server: 23.94.99.206
    # server: hy2.nomadro.com
    port: 32941
    ports: 30000-31000
    password: fda6eb84-7b47-473f-abcb-82a5addece55
    sni: web3.nomadro.com
    skip-cert-verify: true
    alpn:
      - h3
    up: "1000 Mbps"
    down: "1000 Mbps"
    # congestion_control: bbr        # 优化带宽利用率
  - name: hackrobot-singbox_tuic2
    type: tuic
    server: 23.94.99.206
    port: 10831
    ports: 32000-33000
    uuid: fda6eb84-7b47-473f-abcb-82a5addece55
    password: fda6eb84-7b47-473f-abcb-82a5addece55

    # 可选优化字段（以下均为官方推荐写法）
    alpn:
      - h3
    udp-relay-mode: native          # 原生 UDP 转发模式
    congestion-controller: bbr      # 拥塞控制算法：bbr/cubic/new_reno
    disable-sni: false              # 保留 SNI，用于伪装域名
    reduce-rtt: true                # 启用 0-RTT 握手以降低延迟
    request-timeout: 8000           # 连接超时时间（毫秒）
    heartbeat-interval: 10000       # 心跳包间隔（毫秒）
    tls: true
    sni: web3.nomadro.com            # 若使用域名证书建议填写
    skip-cert-verify: true          # 测试阶段跳过证书验证
    fast-open: true                 # 启用 TCP Fast-Open
    max-open-streams: 20            # 最大并发流数量
    max-udp-relay-packet-size: 1500 # 最大 UDP 包大小（字节）
    udp: true                       # 启用 UDP 支持
  - name: "VLESS_Reality_Vision2"
    type: vless
    server: 23.94.99.206      # 替换为域名
    port: 35925                   # 修改端口为21730
    uuid: fda6eb84-7b47-473f-abcb-82a5addece55
    flow: xtls-rprx-vision
    encryption: none
    network: tcp

    tls: true
    servername: web3.nomadro.com
    alpn:
      - h2
      - http/1.1
    client-fingerprint: chrome
    skip-cert-verify: true

    reality-opts:
      public-key: JhJEy3-xC5sux3iBJ1Ryc8jO5F6CKsZsQjzG0BSN_g0
      short-id: 6ba85179e30d4fc2
      server-names:
        - web3.nomadro.com
      flow: xtls-rprx-vision

    smux:
      enabled: false
  
  - name: "5d723acc-singbox_hysteria2"
    type: hysteria2
    server: vpn.nomadro.live
    port: 42220
    password: 5d723acc-7454-4d36-8c95-7dd4ac7345f0
    sni: vpn.nomadro.live
    skip-cert-verify: true
    alpn:
      - h3
    up: "1000 Mbps"
    down: "1000 Mbps"

  - name: "5d723acc-singbox_hysteria3"
    type: hysteria2
    server: vpn.nomadro.live
    port: 42220
    password: 5d723acc-7454-4d36-8c95-7dd4ac7345f0
    sni: vpn.nomadro.live
    skip-cert-verify: true
    alpn:
      - h3
    up: "1000 Mbps"
    down: "1000 Mbps"
  - name: "5d723acc-singbox_tuic3"
    type: tuic
    server: vpn.nomadro.live
    port: 11090
    ports: 32000-40000
    uuid: 5d723acc-7454-4d36-8c95-7dd4ac7345f0
    password: 5d723acc-7454-4d36-8c95-7dd4ac7345f0
    alpn:
      - h3
    udp-relay-mode: native
    congestion-controller: bbr
    disable-sni: false
    reduce-rtt: true
    request-timeout: 8000
    heartbeat-interval: 10000
    tls: true
    sni: vpn.nomadro.live
    skip-cert-verify: true
    fast-open: true
    max-open-streams: 20
    max-udp-relay-packet-size: 1500
    udp: true
  - name: "5d723acc-VLESS_Reality_Vision3"
    type: vless
    server: vpn.nomadro.live
    port: 10166
    uuid: 5d723acc-7454-4d36-8c95-7dd4ac7345f0
    flow: xtls-rprx-vision
    encryption: none
    network: tcp
    tls: true
    servername: vpn.nomadro.live
    alpn:
      - h2
      - http/1.1
    client-fingerprint: chrome
    skip-cert-verify: true
    reality-opts:
      public-key: O7N27RFEB0aZA22B9MCaMuScNL8o4mEJ1L59ckwMdQo
      short-id: 6ba85179e30d4fc2
      server-names:
        - vpn.nomadro.live
      flow: xtls-rprx-vision
    smux:
      enabled: false

  - name: leafHY2
    type: hysteria2
    server: proxy.smallzhiyuns.com
    port: 25050
    ports: 30000-31000  # 保持这个范围
    password: 1c8bafc8-f9cc-4168-a6c2-a57fc6a76eee
    sni: proxy.smallzhiyuns.com
    up: "200 Mbps"      # 先降低测试
    down: "200 Mbps"
    alpn:
      - h3              # 只留 h3
    skip-cert-verify: false  # 先试不跳过（如果证书正规）；如果还是超时，再改回 true
    fast-open: true
    retry: 60
    retry_interval: 5


  - name: "leafvless"
    type: vless
    server: 104.223.57.113
    port: 31364
    uuid: d8165fe1-57e4-424c-8674-4559e22790dc
    flow: xtls-rprx-vision
    udp: true
    packet-encoding: xudp

    tls: true
    servername: proxy.smallzhiyuns.com
    client-fingerprint: chrome
    skip-cert-verify: true
    reality-opts:
      public-key: W-2MnNH5XiSstFwh9IyMcMFcdvTH32brc0N9d7e1Q3w
      short-id: 6ba85179e30d4fc2
    network: tcp
    smux:
      enabled: false
  
  - name: leaftuic
    type: tuic
    server: proxy.smallzhiyuns.com
    port: 29121
    uuid: d8165fe1-57e4-424c-8674-4559e22790dc
    password: d8165fe1-57e4-424c-8674-4559e22790dc

    # 可选优化字段（参考官方推荐）
    alpn:
      - h3
    udp-relay-mode: native
    congestion-controller: bbr
    disable-sni: false
    reduce-rtt: true
    request-timeout: 8000
    heartbeat-interval: 10000
    tls: true
    sni: hy2.smallzhiyuns.com
    skip-cert-verify: true
    fast-open: true
    max-open-streams: 20
    max-udp-relay-packet-size: 1500
    udp: true

proxy-groups:
  - type: select
    name: 🚀 节点选择
    proxies:
      - DIRECT
      - REJECT
      - ⚡ 自动选择
      - proxycheap
      - 242af835-singbox_hysteria
      - hackrobot-singbox_tuic
      - VLESS_Reality_Vision
      - 242af835-singbox_hysteria2
      - hackrobot-singbox_tuic2
      - VLESS_Reality_Vision2
      - 5d723acc-singbox_hysteria3
      - 5d723acc-singbox_tuic3
      - 5d723acc-VLESS_Reality_Vision3
      - leafHY2
      - leafvless
      - leaftuic
  - name: dialer
    type: select
    proxies:
    - 242af835-singbox_hysteria
    - hackrobot-singbox_tuic
    - VLESS_Reality_Vision
    - 242af835-singbox_hysteria2
    - hackrobot-singbox_tuic2
    - VLESS_Reality_Vision2
    - 5d723acc-singbox_hysteria3
    - 5d723acc-singbox_tuic3
    - 5d723acc-VLESS_Reality_Vision3
    - leafHY2
    - leafvless
    - leaftuic

  - name: ⚡ 自动选择
    type: url-test
    proxies:
      - 242af835-singbox_hysteria
      - hackrobot-singbox_tuic
      - VLESS_Reality_Vision
    url: https://www.gstatic.com/generate_204
    interval: 300
    lazy: false
  - type: select
    name: 🏠 私有网络
    proxies:
      - 🚀 节点选择
      - DIRECT
      - REJECT
      - ⚡ 自动选择
      - 242af835-singbox_hysteria2
  - type: select
    name: 🔒 国内服务
    proxies:
      - 🚀 节点选择
      - DIRECT
      - REJECT
      - ⚡ 自动选择
      - 242af835-singbox_hysteria2
  - type: select
    name: 🌐 非中国
    proxies:
      - 🚀 节点选择
      - DIRECT
      - REJECT
      - ⚡ 自动选择
      - 242af835-singbox_hysteria2
  - type: select
    name: 🐟 漏网之鱼
    proxies:
      - 🚀 节点选择
      - DIRECT
      - REJECT
      - ⚡ 自动选择
      - 242af835-singbox_hysteria2
rules:
  - RULE-SET,geolocation-cn,🔒 国内服务
  - RULE-SET,geolocation-!cn,🌐 非中国
  - RULE-SET,private,🏠 私有网络,no-resolve
  - RULE-SET,cn,🔒 国内服务,no-resolve
  - MATCH,🐟 漏网之鱼