# ========================================================== # 基础通用设置 # ========================================================== mixed-port: 7890 allow-lan: true bind-address: "*" mode: rule log-level: info # 调试时用 info，稳定后改 error ipv6: true # --- 面板设置 --- external-controller: 0.0.0.0:9090 secret: "123456" # 你的面板登录密码 external-ui: dashboard # --- DNS 设置 (适配 Linux 系统) --- dns: enable: true ipv6: false listen: "0.0.0.0:53" enhanced-mode: fake-ip # 推荐在 Linux 上用 fake-ip 配合 TUN fake-ip-range: 198.18.0.1/16 nameserver: - 223.5.5.5 - 119.29.29.29 fallback: - 8.8.8.8 - 1.1.1.1 # --- TUN 模式 --- tun: enable: true stack: mixed auto-route: true auto-detect-interface: true dns-hijack: - any:53 # --- 直接让 Clash 彻底无视 Tailscale 的虚拟网卡 --- exclude-interface: - Tailscale # 匹配 Tailscale 的网卡名称 - tailscale0 # 兼容部分内核的命名 # ========================================================== # 节点信息 (Proxies) # ========================================================== proxies: - name: "🇰🇷 首尔 蔚蓝云" type: vless server: 20.196.130.10 port: 8443 uuid: 91051047-dde7-4460-aead-f9d48f6a63e9 tls: true servername: www.samsung.com network: tcp reality-opts: public-key: "Nl0XOE8h0VINZiT0y-qQo8_ZeYGvNwprzscBME4MgRk" short-id: "" client-fingerprint: chrome udp: true - name: "🇸🇬 新加坡 虚拟字节" type: vless server: 109.176.19.39 port: 443 uuid: 169875aa-3c76-41bb-8fa8-e342f062a588 tls: true flow: xtls-rprx-vision servername: www.samsung.com network: tcp reality-opts: public-key: "lclCybelgg1CGtjmApCDCEdTHigIX2Co24dEpxAZP2g" short-id: "061689eb01cfa871" client-fingerprint: chrome udp: true - name: "🇭🇰 香港-阿里云" type: vless server: hk.server.orynnx.org port: 8443 uuid: 5a425e14-ce09-40de-a643-b1a8c31074f1 tls: true flow: xtls-rprx-vision servername: www.samsung.com network: tcp reality-opts: public-key: "D_4C720Q-3-OiiPUc6mN2ZTIDPk9N9mUtHjo99s8FmU" short-id: "2aba0a93d7551a4a" client-fingerprint: chrome udp: true - name: "🇭🇰 香港 Lite ACCKCLOUD" type: vless server: 45.192.194.16 port: 443 uuid: 3b23de4c-999f-4fe7-b9a7-918b357d373c tls: true flow: xtls-rprx-vision servername: www.samsung.com network: tcp reality-opts: public-key: "legItK_S1dOgGErZpGG4r02cF6IzAstNZntD3LxOVBg" short-id: "5bdfbd6662e6048c" client-fingerprint: chrome udp: true # ========================================================== # 策略组 (Proxy Groups) # ========================================================== proxy-groups: - name: "节点选择" type: select proxies: - "🇭🇰 香港-阿里云" - "🇭🇰 香港 Lite ACCKCLOUD" - "🇸🇬 新加坡 虚拟字节" - "🇰🇷 首尔 蔚蓝云" - "DIRECT" # ========================================================== # 核心新增：云端远程规则集 (Rule Providers) # 每24小时自动在后台更新，无需手动维护国内大厂域名 # ========================================================== rule-providers: reject: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt" path: ./ruleset/reject.yaml interval: 86400 icloud: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt" path: ./ruleset/icloud.yaml interval: 86400 apple: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt" path: ./ruleset/apple.yaml interval: 86400 google: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt" path: ./ruleset/google.yaml interval: 86400 proxy: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt" path: ./ruleset/proxy.yaml interval: 86400 direct: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt" path: ./ruleset/direct.yaml interval: 86400 private: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt" path: ./ruleset/private.yaml interval: 86400 gfw: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt" path: ./ruleset/gfw.yaml interval: 86400 tld-not-cn: type: http behavior: domain url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt" path: ./ruleset/tld-not-cn.yaml interval: 86400 telegramcidr: type: http behavior: ipcidr url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt" path: ./ruleset/telegramcidr.yaml interval: 86400 cncidr: type: http behavior: ipcidr url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt" path: ./ruleset/cncidr.yaml interval: 86400 lancidr: type: http behavior: ipcidr url: "https://fastly.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt" path: ./ruleset/lancidr.yaml interval: 86400 # ========================================================== # 规则分流逻辑 (Rules) # 严格遵循“自上而下匹配”原则 # ========================================================== rules: # -------------------------------------------------------- # LEVEL 1: 最高优先级 - 本地组网、特殊进程与特定校园网强制直连 # -------------------------------------------------------- - "PROCESS-NAME,tailscaled.exe,DIRECT" - "PROCESS-NAME,tailscale-ipn.exe,DIRECT" - "PROCESS-NAME,tailscale.exe,DIRECT" - "PROCESS-NAME,tailscaled,DIRECT" # 适配 Linux/macOS 环境下的 Tailscale 守护进程 - "IP-CIDR,100.64.0.0/10,DIRECT" # Tailscale 官方 IPv4 Tailnet 网段 - "IP-CIDR6,fd7a:115c:a1e0::/48,DIRECT" # Tailscale 官方 IPv6 Tailnet 网段 - "DOMAIN-SUFFIX,ts.net,DIRECT" # Tailscale MagicDNS / tailnet 域名 - "DST-PORT,3389,DIRECT" # RDP 远程桌面 - "SRC-PORT,3389,DIRECT" - "DOMAIN-SUFFIX,jiangnan.edu.cn,DIRECT" # 江南大学专属直连 - "DOMAIN-SUFFIX,edu.cn,DIRECT" # 中国教育网直连 # -------------------------------------------------------- # LEVEL 2: 引入 Rule Providers 进行大规模云端规则匹配 # -------------------------------------------------------- - "RULE-SET,private,DIRECT" # 私有地址/本地特殊域名 - "RULE-SET,reject,REJECT" # 广告与隐私追踪拦截 - "RULE-SET,icloud,DIRECT" # iCloud 服务（推荐直连以保证同步速度） - "RULE-SET,apple,DIRECT" # Apple 服务 - "RULE-SET,google,节点选择" # Google 相关服务 - "RULE-SET,proxy,节点选择" # 常见国外被墙代理站点 - "RULE-SET,gfw,节点选择" # GFW 列表内的域名 - "RULE-SET,tld-not-cn,节点选择" # 所有非 .cn 的国际顶级域名 - "RULE-SET,telegramcidr,节点选择" # Telegram 的专属 IP 段 # 核心修复点：涵盖了包括 QQ、微信、淘宝等几乎所有国内主流 App 的上万条域名列表 - "RULE-SET,direct,DIRECT" - "RULE-SET,lancidr,DIRECT" # 局域网 IP 段 - "RULE-SET,cncidr,DIRECT" # 中国大陆大陆 IP 段 # -------------------------------------------------------- # LEVEL 3: 低优先级兜底规则 # -------------------------------------------------------- - "GEOIP,LAN,DIRECT,no-resolve" - "GEOIP,CN,DIRECT" # 兜底：未被上面规则涵盖的中国大陆本地 IP - "MATCH,节点选择" # 全局兜底：剩下的未知国外流量全部走节点