diff --git a/stash/v20260830-4f48e61.yaml b/stash/v20260830-4f48e61.yaml new file mode 100644 index 0000000..bda48c5 --- /dev/null +++ b/stash/v20260830-4f48e61.yaml @@ -0,0 +1,286 @@ +mixed-port: 7890 +allow-lan: true +bind-address: "*" +mode: rule +log-level: info +external-controller: 127.0.0.1:9090 +unified-delay: true +tcp-concurrent: true + +dns: + enable: true + ipv6: false + default-nameserver: + - 223.5.5.5 + - 119.29.29.29 + enhanced-mode: fake-ip + fake-ip-range: 198.18.0.1/16 + use-hosts: true + nameserver-policy: + "+.google.com": "https://dns.cloudflare.com/dns-query" + "+.googleapis.com": "https://dns.cloudflare.com/dns-query" + "+.googleapis.cn": "https://dns.cloudflare.com/dns-query" + "+.googlevideo.com": "https://dns.cloudflare.com/dns-query" + "+.gstatic.com": "https://dns.cloudflare.com/dns-query" + "+.youtube.com": "https://dns.cloudflare.com/dns-query" + "+.youtu.be": "https://dns.cloudflare.com/dns-query" + "+.facebook.com": "https://dns.cloudflare.com/dns-query" + "+.twitter.com": "https://dns.cloudflare.com/dns-query" + "+.x.com": "https://dns.cloudflare.com/dns-query" + "+.github.com": "https://dns.cloudflare.com/dns-query" + "+.githubusercontent.com": "https://dns.cloudflare.com/dns-query" + "+.openai.com": "https://dns.cloudflare.com/dns-query" + "+.chatgpt.com": "https://dns.cloudflare.com/dns-query" + "+.anthropic.com": "https://dns.cloudflare.com/dns-query" + nameserver: + - https://doh.pub/dns-query + - https://dns.alidns.com/dns-query + - tls://dot.pub:853 + - tls://dns.alidns.com:853 + fallback: + - https://dns.cloudflare.com/dns-query + - https://dns.google/dns-query + - tls://1.1.1.1:853 + - tls://8.8.8.8:853 + fallback-filter: + geoip: true + geoip-code: CN + ipcidr: + - 0.0.0.0/8 + - 10.0.0.0/8 + - 100.64.0.0/10 + - 127.0.0.0/8 + - 169.254.0.0/16 + - 172.16.0.0/12 + - 192.168.0.0/16 + - 224.0.0.0/4 + - 240.0.0.0/4 + domain: + - "+.google.com" + - "+.facebook.com" + - "+.youtube.com" + - "+.githubusercontent.com" + - "+.googlevideo.com" + - "+.googleapis.cn" + fake-ip-filter: + - "*.lan" + - "*.local" + - "*.localhost" + - "*.test" + - localhost.ptlogin2.qq.com + - "+.stun.*.*" + - "+.stun.*.*.*" + - "+.stun.*.*.*.*" + - "lens.l.google.com" + - "*.srv.nintendo.net" + - "+.stun.playstation.net" + - "xbox.*.*.microsoft.com" + - "*.*.xboxlive.com" + - "+.msftncsi.com" + - "+.msftconnecttest.com" + +proxies: + +proxy-groups: + - { name: "$app_name", type: select, proxies: ["自动选择", "故障转移", "DIRECT"] } + - { name: "自动选择", type: url-test, proxies: [], url: "http://www.gstatic.com/generate_204", interval: 300, tolerance: 50 } + - { name: "故障转移", type: fallback, proxies: [], url: "http://www.gstatic.com/generate_204", interval: 300 } + +rules: + # Custom + # Ad blocking + - DOMAIN-KEYWORD,admarvel,REJECT + - DOMAIN-KEYWORD,admaster,REJECT + - DOMAIN-KEYWORD,adsage,REJECT + - DOMAIN-KEYWORD,adsmogo,REJECT + - DOMAIN-KEYWORD,adsrvmedia,REJECT + - DOMAIN-KEYWORD,adwords,REJECT + - DOMAIN-KEYWORD,adservice,REJECT + - DOMAIN-KEYWORD,domob,REJECT + - DOMAIN-KEYWORD,duomeng,REJECT + - DOMAIN-KEYWORD,dwtrack,REJECT + - DOMAIN-KEYWORD,guanggao,REJECT + - DOMAIN-KEYWORD,lianmeng,REJECT + - DOMAIN-KEYWORD,omgmta,REJECT + - DOMAIN-KEYWORD,openx,REJECT + - DOMAIN-KEYWORD,partnerad,REJECT + - DOMAIN-KEYWORD,supersonicads,REJECT + - DOMAIN-KEYWORD,umeng,REJECT + - DOMAIN-KEYWORD,zjtoolbar,REJECT + - DOMAIN-SUFFIX,appsflyer.com,REJECT + - DOMAIN-SUFFIX,doubleclick.net,REJECT + - DOMAIN-SUFFIX,mmstat.com,REJECT + # LAN + - DOMAIN-SUFFIX,local,DIRECT + - DOMAIN-SUFFIX,localhost,DIRECT + - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve + - IP-CIDR,17.0.0.0/8,DIRECT,no-resolve + - IP-CIDR,100.64.0.0/10,DIRECT,no-resolve + - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve + - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve + - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve + - IP-CIDR,198.18.0.0/16,DIRECT,no-resolve + - IP-CIDR,224.0.0.0/4,DIRECT,no-resolve + - IP-CIDR6,::1/128,DIRECT,no-resolve + - IP-CIDR6,fc00::/7,DIRECT,no-resolve + - IP-CIDR6,fe80::/10,DIRECT,no-resolve + # Apple (App Store via proxy for foreign regions) + - DOMAIN-SUFFIX,apps.apple.com,$app_name + - DOMAIN-SUFFIX,itunes.apple.com,$app_name + - DOMAIN-SUFFIX,blobstore.apple.com,$app_name + - DOMAIN,safebrowsing.urlsec.qq.com,DIRECT + - DOMAIN-SUFFIX,apple.com,DIRECT + - DOMAIN-SUFFIX,apple-cloudkit.com,DIRECT + - DOMAIN-SUFFIX,icloud.com,DIRECT + - DOMAIN-SUFFIX,icloud-content.com,DIRECT + - DOMAIN-SUFFIX,mzstatic.com,DIRECT + - DOMAIN-SUFFIX,aaplimg.com,DIRECT + - DOMAIN-SUFFIX,cdn-apple.com,DIRECT + - DOMAIN-SUFFIX,akadns.net,DIRECT + # China direct (KEYWORD) + - DOMAIN-KEYWORD,baidu,DIRECT + - DOMAIN-KEYWORD,alibaba,DIRECT + - DOMAIN-KEYWORD,alicdn,DIRECT + - DOMAIN-KEYWORD,alipay,DIRECT + - DOMAIN-KEYWORD,taobao,DIRECT + - DOMAIN-KEYWORD,tencent,DIRECT + - DOMAIN-KEYWORD,bilibili,DIRECT + - DOMAIN-KEYWORD,weibo,DIRECT + - DOMAIN-KEYWORD,douyin,DIRECT + - DOMAIN-KEYWORD,bytedance,DIRECT + - DOMAIN-KEYWORD,xiaomi,DIRECT + - DOMAIN-KEYWORD,huawei,DIRECT + - DOMAIN-KEYWORD,netease,DIRECT + - DOMAIN-KEYWORD,meituan,DIRECT + - DOMAIN-KEYWORD,pinduoduo,DIRECT + - DOMAIN-KEYWORD,kuaishou,DIRECT + - DOMAIN-KEYWORD,jingdong,DIRECT + - DOMAIN-KEYWORD,officecdn,DIRECT + # China direct (SUFFIX) + - DOMAIN-SUFFIX,qq.com,DIRECT + - DOMAIN-SUFFIX,weixin.com,DIRECT + - DOMAIN-SUFFIX,wechat.com,DIRECT + - DOMAIN-SUFFIX,gtimg.com,DIRECT + - DOMAIN-SUFFIX,qcloud.com,DIRECT + - DOMAIN-SUFFIX,myqcloud.com,DIRECT + - DOMAIN-SUFFIX,qpic.cn,DIRECT + - DOMAIN-SUFFIX,tenpay.com,DIRECT + - DOMAIN-SUFFIX,tmall.com,DIRECT + - DOMAIN-SUFFIX,jd.com,DIRECT + - DOMAIN-SUFFIX,360buyimg.com,DIRECT + - DOMAIN-SUFFIX,iqiyi.com,DIRECT + - DOMAIN-SUFFIX,youku.com,DIRECT + - DOMAIN-SUFFIX,ykimg.com,DIRECT + - DOMAIN-SUFFIX,tudou.com,DIRECT + - DOMAIN-SUFFIX,acfun.tv,DIRECT + - DOMAIN-SUFFIX,hdslb.com,DIRECT + - DOMAIN-SUFFIX,sohu.com,DIRECT + - DOMAIN-SUFFIX,sogou.com,DIRECT + - DOMAIN-SUFFIX,zhihu.com,DIRECT + - DOMAIN-SUFFIX,zhimg.com,DIRECT + - DOMAIN-SUFFIX,douban.com,DIRECT + - DOMAIN-SUFFIX,doubanio.com,DIRECT + - DOMAIN-SUFFIX,163.com,DIRECT + - DOMAIN-SUFFIX,126.com,DIRECT + - DOMAIN-SUFFIX,126.net,DIRECT + - DOMAIN-SUFFIX,127.net,DIRECT + - DOMAIN-SUFFIX,yeah.net,DIRECT + - DOMAIN-SUFFIX,sina.com,DIRECT + - DOMAIN-SUFFIX,sinaimg.cn,DIRECT + - DOMAIN-SUFFIX,ximalaya.com,DIRECT + - DOMAIN-SUFFIX,xmcdn.com,DIRECT + - DOMAIN-SUFFIX,csdn.net,DIRECT + - DOMAIN-SUFFIX,gitee.com,DIRECT + - DOMAIN-SUFFIX,jianshu.com,DIRECT + - DOMAIN-SUFFIX,cnblogs.com,DIRECT + - DOMAIN-SUFFIX,oschina.net,DIRECT + - DOMAIN-SUFFIX,ele.me,DIRECT + - DOMAIN-SUFFIX,ctrip.com,DIRECT + - DOMAIN-SUFFIX,suning.com,DIRECT + - DOMAIN-SUFFIX,dianping.com,DIRECT + - DOMAIN-SUFFIX,amap.com,DIRECT + - DOMAIN-SUFFIX,autonavi.com,DIRECT + - DOMAIN-SUFFIX,mi.com,DIRECT + - DOMAIN-SUFFIX,miui.com,DIRECT + - DOMAIN-SUFFIX,ifeng.com,DIRECT + - DOMAIN-SUFFIX,youdao.com,DIRECT + - DOMAIN-SUFFIX,iciba.com,DIRECT + - DOMAIN-SUFFIX,xunlei.com,DIRECT + - DOMAIN-SUFFIX,smzdm.com,DIRECT + - DOMAIN-SUFFIX,sspai.com,DIRECT + - DOMAIN-SUFFIX,36kr.com,DIRECT + - DOMAIN-SUFFIX,speedtest.net,DIRECT + - DOMAIN-SUFFIX,microsoft.com,DIRECT + - DOMAIN-SUFFIX,microsoftonline.com,DIRECT + - DOMAIN-SUFFIX,office.com,DIRECT + - DOMAIN-SUFFIX,office365.com,DIRECT + - DOMAIN-SUFFIX,windows.com,DIRECT + - DOMAIN-SUFFIX,windowsupdate.com,DIRECT + - DOMAIN-SUFFIX,live.com,DIRECT + - DOMAIN-SUFFIX,msn.com,DIRECT + - DOMAIN-SUFFIX,cn,DIRECT + - DOMAIN-KEYWORD,-cn,DIRECT + # Blocked services (KEYWORD) + - DOMAIN-KEYWORD,google,$app_name + - DOMAIN-KEYWORD,gmail,$app_name + - DOMAIN-KEYWORD,youtube,$app_name + - DOMAIN-KEYWORD,facebook,$app_name + - DOMAIN-KEYWORD,twitter,$app_name + - DOMAIN-KEYWORD,instagram,$app_name + - DOMAIN-KEYWORD,whatsapp,$app_name + - DOMAIN-KEYWORD,telegram,$app_name + - DOMAIN-KEYWORD,github,$app_name + - DOMAIN-KEYWORD,blogspot,$app_name + - DOMAIN-KEYWORD,dropbox,$app_name + - DOMAIN-KEYWORD,wikipedia,$app_name + - DOMAIN-KEYWORD,pinterest,$app_name + - DOMAIN-KEYWORD,discord,$app_name + - DOMAIN-KEYWORD,openai,$app_name + - DOMAIN-KEYWORD,anthropic,$app_name + - DOMAIN-KEYWORD,netflix,$app_name + - DOMAIN-KEYWORD,spotify,$app_name + - DOMAIN-KEYWORD,amazon,$app_name + # Blocked services (SUFFIX) + - DOMAIN-SUFFIX,t.co,$app_name + - DOMAIN-SUFFIX,x.com,$app_name + - DOMAIN-SUFFIX,twimg.com,$app_name + - DOMAIN-SUFFIX,fb.me,$app_name + - DOMAIN-SUFFIX,fbcdn.net,$app_name + - DOMAIN-SUFFIX,youtu.be,$app_name + - DOMAIN-SUFFIX,ytimg.com,$app_name + - DOMAIN-SUFFIX,gstatic.com,$app_name + - DOMAIN-SUFFIX,ggpht.com,$app_name + - DOMAIN-SUFFIX,googlevideo.com,$app_name + - DOMAIN-SUFFIX,v2ex.com,$app_name + - DOMAIN-SUFFIX,medium.com,$app_name + - DOMAIN-SUFFIX,reddit.com,$app_name + - DOMAIN-SUFFIX,redd.it,$app_name + - DOMAIN-SUFFIX,imgur.com,$app_name + - DOMAIN-SUFFIX,pixiv.net,$app_name + - DOMAIN-SUFFIX,nytimes.com,$app_name + - DOMAIN-SUFFIX,nyt.com,$app_name + - DOMAIN-SUFFIX,bbc.com,$app_name + - DOMAIN-SUFFIX,bbc.co.uk,$app_name + - DOMAIN-SUFFIX,steamcommunity.com,$app_name + - DOMAIN-SUFFIX,twitch.tv,$app_name + - DOMAIN-SUFFIX,vimeo.com,$app_name + - DOMAIN-SUFFIX,tumblr.com,$app_name + - DOMAIN-SUFFIX,linkedin.com,$app_name + - DOMAIN-SUFFIX,licdn.com,$app_name + - DOMAIN-SUFFIX,mega.nz,$app_name + - DOMAIN-SUFFIX,archive.org,$app_name + - DOMAIN-SUFFIX,wikimedia.org,$app_name + - DOMAIN-SUFFIX,soundcloud.com,$app_name + # Telegram IP + - IP-CIDR,91.108.4.0/22,$app_name,no-resolve + - IP-CIDR,91.108.8.0/21,$app_name,no-resolve + - IP-CIDR,91.108.12.0/22,$app_name,no-resolve + - IP-CIDR,91.108.16.0/22,$app_name,no-resolve + - IP-CIDR,91.108.56.0/22,$app_name,no-resolve + - IP-CIDR,149.154.160.0/20,$app_name,no-resolve + - IP-CIDR6,2001:67c:4e8::/48,$app_name,no-resolve + - IP-CIDR6,2001:b28:f23d::/48,$app_name,no-resolve + - IP-CIDR6,2001:b28:f23f::/48,$app_name,no-resolve + # Fallback + - GEOIP,CN,DIRECT + - MATCH,$app_name