---
# ========================
# 基础设置
# ========================
mixed-port: 7890
allow-lan: true
mode: rule
log-level: info
find-process-mode: always
ipv6: false
keep-alive-interval: 15

# ========================
# DNS
# ========================
dns:
  enable: true
  listen: 0.0.0.0:53
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.local"
    - "*.localhost"
    - +.laibutech.com
    - +.oray.com
    - +.oray.net
    - +.orayimg.com
    - +.todesk.com
    - +.todesk.cn
    - +.rustdesk.com
    - +.market.xiaomi.com
    - localhost.ptlogin2.qq.com
    - +.msftconnecttest.com
    - +.msftncsi.com
    - +.apple.com
    - +.push.apple.com
    - time.*.com
    - time.*.gov
    - ntp.*.com
    - +.in-addr.arpa
    - +.ip6.arpa
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
  fallback:
    - https://1.1.1.1/dns-query#Proxy
    - https://dns.google/dns-query#Proxy
  fallback-filter:
    geoip: true
    geoip-code: CN
    ipcidr:
      - 240.0.0.0/4
  nameserver-policy:
    geosite:cn,private: 223.5.5.5
    +.laibutech.com: 223.5.5.5
    +.oray.com: 223.5.5.5
    +.oray.net: 223.5.5.5
    +.orayimg.com: 223.5.5.5
    +.todesk.com: 223.5.5.5
    +.todesk.cn: 223.5.5.5
    +.rustdesk.com: 223.5.5.5

# ========================
# Proxies
# ========================
proxies:
  - name: "美国-圣何塞"
    type: vless
    server: 173.249.210.179
    port: 61000
    uuid: 12f4c3f6-ecce-4586-b39d-987757ea9b3b
    encryption: none
    udp: true

    # 传输层
    network: tcp

    # REALITY
    tls: true
    servername: www.amd.com
    client-fingerprint: chrome
    reality-opts:
      public-key: c7XtbOUOg19bgo2N-ufXbZHaGHuSB7jAdvmj1zchRn4
      short-id: ecf5

  - name: "美国-洛杉矶"
    type: vless
    server: 165.154.173.84
    port: 61000
    uuid: 7940c6f3-0239-44b8-b5d7-202edcb58435
    encryption: none
    udp: true

    # 传输层
    network: tcp

    # REALITY
    tls: true
    servername: www.intel.com
    client-fingerprint: chrome
    reality-opts:
      public-key: ajATpOJYj2Bw0zD8kqM32GpCvXQzSMkCspMBq0MssRM
      short-id: 7f86b7a98115

  - name: "新加坡"
    type: vless
    server: 43.156.89.197
    port: 61000
    uuid: f5b93de5-b756-4f87-bb1c-7e5b622688fa
    encryption: none
    udp: true
    flow: xtls-rprx-vision

    # 传输层
    network: tcp

    # REALITY
    tls: true
    servername: www.amd.com
    client-fingerprint: chrome
    reality-opts:
      public-key: FivAz9qw86uYacvLo5qIMnw9gQ9uKT9KIdGzhxROTSE
      short-id: 63dac514fdfdd11c

# ========================
# Proxy Groups
# ========================

  - name: "机场-香港 01"
    type: vless
    server: 611ca6ea-a7ca-4551-a37c-d15e61a6ae77.32a73776-9d7c-4e99-8ef5-bc246c3171b8.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: i0.hdslb.com
    client-fingerprint: ios
    reality-opts:
      public-key: wdn6PKn58OToqA7JltlOznFTHZ3D1cXhSBRbShiKMww
      short-id: 3737bde9

  - name: "机场-香港 102"
    type: vless
    server: b15f64cb-419a-4f3b-9f13-3c9a4b9d8e5c.54f9f53c-ccf2-414f-aa73-7977e2217ff1.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: tva1.sinaimg.cn
    client-fingerprint: ios
    reality-opts:
      public-key: X99O2com9_NbJgy1b9bxiOao0E7zmVoNKD14NGXhokg
      short-id: 81575626

  - name: "机场-香港 104"
    type: vless
    server: f9bc4d6c-bd4e-4256-b4cf-97181306dc00.80ad646a-103e-4a97-9195-0c93563ef332.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: tva1.sinaimg.cn
    client-fingerprint: ios
    reality-opts:
      public-key: QFJbT8JDJqlcqWyiHRMuhlhdpclNNpOeD9KxvS9ovzA
      short-id: ed703367

  - name: "机场-香港 107"
    type: vless
    server: 822e3f59-63a3-49dd-9025-537e79f534ae.506cad66-deb7-4b41-a35f-496b981946c1.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: tva1.sinaimg.cn
    client-fingerprint: ios
    reality-opts:
      public-key: oCk29Qbnj0eXgY4zMZpCMR2Ukw33m_b2PT7zJP0g1Bw
      short-id: f4127347

  - name: "机场-香港 111"
    type: vless
    server: 57d89862-2f3e-4b36-bf20-bf5d302eeaa6.69290827-acbd-4035-94cd-4d1fa0997bb8.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: tva1.sinaimg.cn
    client-fingerprint: ios
    reality-opts:
      public-key: rV6kc94WuI-e8k94iQ8l8SHTvTynTjtd8io7LDByEnc
      short-id: e5b9c61d

  - name: "机场-香港 03"
    type: vless
    server: 874e71ae-6c7c-4944-a959-dd6004aab194.ad68289f-02c1-4eeb-83e3-f18114f90c86.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: live.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: em4y1LNcT6JuLvEa3LoNYikp1vShx4ToM1rhvNe-kSY
      short-id: c975352f

  - name: "机场-香港 07"
    type: vless
    server: 506b696f-183f-4d4c-b381-06dc945a81ba.c65e104a-80a7-476b-baf1-cf753fec1eb7.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: live.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: xBBebAa3_FmRJAzPnEP9seJneZtPiIZVLHo23pHxRxc
      short-id: a0134868

  - name: "机场-香港 08"
    type: vless
    server: ad6ea328-ace0-45e1-8b69-e698536fa709.67dc6e59-0fd8-4ca5-ba29-26a8817e203b.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: live.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: xBBebAa3_FmRJAzPnEP9seJneZtPiIZVLHo23pHxRxc
      short-id: a0134868

  - name: "机场-香港 10"
    type: vless
    server: 0d3705e9-ba7e-4851-bc32-0719a1866d1b.d9fa5a0f-9b07-4fca-9dd6-8ac47d83c708.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: live.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: 2xX937-HagNcXTIFb6QB8BZPAnbqhKdDN6HH55Xkf3Y
      short-id: 51c9068f

  - name: "机场-日本 01"
    type: vless
    server: 6aa21c4d-11d4-45bf-ba55-59512593692c.7b63595a-1119-4080-80e1-3f638120be58.smartprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: www.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: 3nFa_3MSnFQDm9XfVfFHOnMb3FOptREpe1ehXjAbk1c
      short-id: d369dbc2

  - name: "机场-日本 02 | 20倍流量"
    type: vless
    server: cc56418e-5a4e-428b-904d-d2d8959bbd03.e28fb658-343a-45b2-8be2-1ca1966b048d.smartprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: mcs.zijieapi.com
    client-fingerprint: ios
    reality-opts:
      public-key: e1L9v1a3tkmHMzrdv9q5-lMXKhTtXcjot8pKFHZD8Vo
      short-id: c7f12faf

  - name: "机场-新加坡 01"
    type: vless
    server: e28fb658-343a-45b2-8be2-1ca1966b048d.d4d89e60-57f2-478b-bafd-936a2c3183af.smartprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: www.douyin.com
    client-fingerprint: ios
    reality-opts:
      public-key: -QgMOwO9HekIbLO5Ptcc0FtuwnDKdg-asGq_aNt-Pm0
      short-id: 84dd2a2e

  - name: "机场-新加坡 03 | 20倍流量"
    type: vless
    server: sg03.18adae16-f183-4aaf-9227-67dc4b27fec6.984b277d-718f-4ba8-9e06-0036b675c900.byteprivatelink.com
    port: 443
    uuid: 2a778078-9f4f-4203-a204-6fb94547b707
    cipher: none
    udp: true
    flow: xtls-rprx-vision
    network: tcp
    tls: true
    servername: data.bilibili.com
    client-fingerprint: android
    reality-opts:
      public-key: 8tchZLwV9VDzFuQ0EZjG3ZbI3lU6JBQ3MDWlo8Fxc3M
      short-id: 1006134a


proxy-groups:
  - name: Proxy
    type: select
    proxies:
      - "美国-圣何塞"
      - "美国-洛杉矶"
      - "新加坡"
      - "机场-香港 01"
      - "机场-香港 102"
      - "机场-香港 104"
      - "机场-香港 107"
      - "机场-香港 111"
      - "机场-香港 03"
      - "机场-香港 07"
      - "机场-香港 08"
      - "机场-香港 10"
      - "机场-日本 01"
      - "机场-日本 02 | 20倍流量"
      - "机场-新加坡 01"
      - "机场-新加坡 03 | 20倍流量"
      - DIRECT

  - name: Global
    type: select
    proxies:
      - Proxy
      - DIRECT

# ========================
# Rule Providers
# ========================
rule-providers:
  direct:
    type: http
    behavior: domain
    url: https://vpn.ruiovo.com/rules/direct.txt
    path: ./ruleset/direct.yaml
    interval: 86400
  proxy:
    type: http
    behavior: domain
    url: https://vpn.ruiovo.com/rules/proxy.txt
    path: ./ruleset/proxy.yaml
    interval: 86400
  cncidr:
    type: http
    behavior: ipcidr
    url: https://vpn.ruiovo.com/rules/cncidr.txt
    path: ./ruleset/cncidr.yaml
    interval: 86400
  lancidr:
    type: http
    behavior: ipcidr
    url: https://vpn.ruiovo.com/rules/lancidr.txt
    path: ./ruleset/lancidr.yaml
    interval: 86400

# ========================
# Rules
# ========================
rules:
  # ========== Clash Verge update mirror direct ==========
  - DOMAIN,update.hwdns.net,DIRECT

  # ========== 远程控制进程全直连 ==========
  - PROCESS-NAME,rustdesk,DIRECT
  - PROCESS-NAME,RustDesk,DIRECT
  - PROCESS-NAME,rustdesk.exe,DIRECT
  - PROCESS-NAME,RustDesk.exe,DIRECT
  - PROCESS-NAME,service,DIRECT
  - PROCESS-PATH,/Applications/RustDesk.app/Contents/MacOS/RustDesk,DIRECT
  - PROCESS-PATH,/Applications/RustDesk.app/Contents/MacOS/service,DIRECT

  # ========== RustDesk 自建服务端口直连 ==========
  - DST-PORT,21114,DIRECT
  - DST-PORT,21115,DIRECT
  - DST-PORT,21116,DIRECT
  - DST-PORT,21117,DIRECT
  - DST-PORT,21118,DIRECT
  - DST-PORT,21119,DIRECT

  # ========== 公司 / 内网服务直连 ==========
  - DOMAIN,lb-rdev1.laibutech.com,DIRECT
  - DOMAIN,git.laibutech.com,DIRECT
  - DOMAIN-SUFFIX,laibutech.com,DIRECT

  # ========== 服务器 ==========
  - IP-CIDR,47.98.150.16/32,DIRECT,no-resolve
  - IP-CIDR,173.249.210.179/32,DIRECT,no-resolve
  - IP-CIDR,165.154.173.84/32,DIRECT,no-resolve
  - IP-CIDR,173.249.210.179/32,DIRECT,no-resolve
  - IP-CIDR,43.143.233.206/32,DIRECT,no-resolve
  - IP-CIDR,43.156.89.197/32,DIRECT,no-resolve

  # ========== 远程控制工具直连 ==========
  - DOMAIN-KEYWORD,sunlogin,DIRECT
  - DOMAIN-KEYWORD,oray,DIRECT
  - DOMAIN-SUFFIX,oray.com,DIRECT
  - DOMAIN-SUFFIX,oray.net,DIRECT
  - DOMAIN-SUFFIX,orayimg.com,DIRECT
  - DOMAIN-KEYWORD,todesk,DIRECT
  - DOMAIN-SUFFIX,todesk.com,DIRECT
  - DOMAIN-SUFFIX,todesk.cn,DIRECT
  - DOMAIN-KEYWORD,rustdesk,DIRECT
  - DOMAIN-SUFFIX,rustdesk.com,DIRECT

  # ========== 局域网 / 内网直连 ==========
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - RULE-SET,lancidr,DIRECT,no-resolve

  # ========== SSH 保底代理 ==========
  - DST-PORT,22,Proxy

  # ========== AI 服务 ==========
  - DOMAIN-KEYWORD,openai,Proxy
  - DOMAIN-KEYWORD,chatgpt,Proxy
  - DOMAIN-KEYWORD,anthropic,Proxy
  - DOMAIN-KEYWORD,claude,Proxy
  - DOMAIN-SUFFIX,opencode.ai,Proxy
  - DOMAIN-KEYWORD,gemini,Proxy
  - DOMAIN-KEYWORD,aistudio,Proxy
  - DOMAIN-KEYWORD,deepmind,Proxy
  - DOMAIN-KEYWORD,huggingface,Proxy
  - DOMAIN-KEYWORD,replicate,Proxy
  - DOMAIN-KEYWORD,midjourney,Proxy
  - DOMAIN-KEYWORD,perplexity,Proxy
  - DOMAIN-KEYWORD,mistral,Proxy
  - DOMAIN-KEYWORD,groq,Proxy
  - DOMAIN-KEYWORD,fireworks,Proxy
  - DOMAIN-KEYWORD,cursor,Proxy
  - DOMAIN-KEYWORD,copilot,Proxy
  - DOMAIN-KEYWORD,stability,Proxy
  - DOMAIN-KEYWORD,cohere,Proxy
  - DOMAIN-SUFFIX,x.ai,Proxy
  - DOMAIN-SUFFIX,grok.x.ai,Proxy
  - DOMAIN-SUFFIX,together.ai,Proxy
  - DOMAIN-SUFFIX,x.com,Proxy

  # ========== Google 生态 ==========
  - DOMAIN-KEYWORD,google,Proxy
  - DOMAIN-KEYWORD,gstatic,Proxy
  - DOMAIN-KEYWORD,youtube,Proxy
  - DOMAIN-SUFFIX,ggpht.com,Proxy

  # ========== 开发工具 ==========
  - DOMAIN-KEYWORD,github,Proxy
  - DOMAIN-KEYWORD,gitlab,Proxy
  - DOMAIN-KEYWORD,bitbucket,Proxy
  - DOMAIN-KEYWORD,stackoverflow,Proxy
  - DOMAIN-KEYWORD,stackexchange,Proxy
  - DOMAIN-KEYWORD,vercel,Proxy
  - DOMAIN-KEYWORD,netlify,Proxy
  - DOMAIN-SUFFIX,render.com,Proxy
  - DOMAIN-KEYWORD,railway,Proxy
  - DOMAIN-SUFFIX,fly.io,Proxy
  - DOMAIN-KEYWORD,supabase,Proxy
  - DOMAIN-KEYWORD,planetscale,Proxy
  - DOMAIN-KEYWORD,upstash,Proxy
  - DOMAIN-SUFFIX,neon.tech,Proxy

  # ========== IDE & 编辑器 ==========
  - DOMAIN-KEYWORD,visualstudio,Proxy
  - DOMAIN-SUFFIX,vscode-cdn.net,Proxy
  - DOMAIN-SUFFIX,vscode.dev,Proxy
  - DOMAIN-SUFFIX,vscodium.com,Proxy
  - DOMAIN-KEYWORD,jetbrains,Proxy
  - DOMAIN-SUFFIX,intellij.net,Proxy

  # ========== 前端包管理 ==========
  - DOMAIN-KEYWORD,npmjs,Proxy
  - DOMAIN-KEYWORD,yarnpkg,Proxy

  # ========== 常用国外服务 ==========
  - DOMAIN-KEYWORD,twitter,Proxy
  - DOMAIN-KEYWORD,discord,Proxy
  - DOMAIN-KEYWORD,slack,Proxy
  - DOMAIN-KEYWORD,notion,Proxy
  - DOMAIN-KEYWORD,figma,Proxy
  - DOMAIN-KEYWORD,stitch,Proxy

  # ========== 国内直连 ==========
  - DOMAIN-KEYWORD,aliyun,DIRECT
  - DOMAIN-SUFFIX,cn,DIRECT
  - RULE-SET,direct,DIRECT
  - RULE-SET,cncidr,DIRECT,no-resolve
  - GEOIP,CN,DIRECT

  # ========== 兜底策略 ==========
  - RULE-SET,proxy,Proxy
  - MATCH,Proxy