mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
unified-delay: true
global-client-fingerprint: chrome

dns:
  enable: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - '*.lan'
    - '*.local'
    - '+.msftconnecttest.com'
    - '+.msftncsi.com'
    - localhost.ptlogin2.qq.com
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query

sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  sniff:
    HTTP:
      ports: [80, 8080-8880]
      override-destination: true
    TLS:
      ports: [443]
    QUIC:
      ports: [443]

proxies:
  - name: "V.PS-TYO-Reality"
    type: vless
    server: 103.201.130.18
    port: 443
    uuid: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: www.microsoft.com
    reality-opts:
      public-key: lDygZPzNThnjbu2jt-yX41zfrGG_I9JMDHGsfdWCrWA
      short-id: 9910a13ee5c44b5a
    client-fingerprint: chrome

  - name: "V.PS-TYO-Hysteria2"
    type: hysteria2
    server: 103.201.130.18
    port: 12443
    password: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    sni: www.bing.com
    skip-cert-verify: true
    up: "50 mbps"
    down: "200 mbps"

  - name: "HK-VOLL-Reality"
    type: vless
    server: 103.20.223.42
    port: 443
    uuid: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: www.microsoft.com
    reality-opts:
      public-key: wTI4MDSc4vmTYXgGTovzjL_58ctVw67idclnLxT75wc
      short-id: 0855fbaa51db3636
    client-fingerprint: chrome

  - name: "HK-VOLL-Hysteria2"
    type: hysteria2
    server: 103.20.223.42
    port: 12443
    password: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    sni: www.bing.com
    skip-cert-verify: true
    up: "50 mbps"
    down: "200 mbps"

  - name: "HK-YT-Reality"
    type: vless
    server: 149.104.5.239
    port: 443
    uuid: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: www.microsoft.com
    reality-opts:
      public-key: ITSO8iEAX-E0d-qFI4qF736C0M9aNhpmjgeRDaOZlW0
      short-id: 8fff1986529caf0a
    client-fingerprint: chrome

  - name: "HK-YT-Hysteria2"
    type: hysteria2
    server: 149.104.5.239
    port: 12443
    password: cdd59f1c-46f7-4eb7-9084-a254c5540ce9
    sni: www.bing.com
    skip-cert-verify: true
    up: "50 mbps"
    down: "200 mbps"

  - name: "NY-SOCKS5-V.PS-TYO-Rea"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "V.PS-TYO-Reality"

  - name: "NY-SOCKS5-V.PS-TYO-HY2"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "V.PS-TYO-Hysteria2"

  - name: "TYO-SOCKS5-V.PS-TYO-Rea"
    type: socks5
    server: 103.244.220.149
    port: 443
    username: AhaKTpUzyMiK
    password: "UkR2V4Apxb"
    udp: true
    dialer-proxy: "V.PS-TYO-Reality"

  - name: "TYO-SOCKS5-V.PS-TYO-HY2"
    type: socks5
    server: 103.244.220.149
    port: 443
    username: AhaKTpUzyMiK
    password: "UkR2V4Apxb"
    udp: true
    dialer-proxy: "V.PS-TYO-Hysteria2"

  - name: "NY-SOCKS5-HK-VOLL-Rea"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "HK-VOLL-Reality"

  - name: "NY-SOCKS5-HK-VOLL-HY2"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "HK-VOLL-Hysteria2"

  - name: "NY-SOCKS5-HK-YT-Rea"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "HK-YT-Reality"

  - name: "NY-SOCKS5-HK-YT-HY2"
    type: socks5
    server: 69.3.215.73
    port: 443
    username: iEuwZfquAnHO
    password: "m3uPh6TUTi"
    udp: true
    dialer-proxy: "HK-YT-Hysteria2"

proxy-groups:
  - name: "DEFAULT"
    type: select
    url: https://www.gstatic.com/generate_204
    interval: 300
    timeout: 5000
    proxies:
      - "AUTO-HK"
      - "V.PS-TYO-Reality"
      - "V.PS-TYO-Hysteria2"
      - "TYO-SOCKS5-V.PS-TYO-Rea"
      - "TYO-SOCKS5-V.PS-TYO-HY2"
      - "HK-VOLL-Reality"
      - "HK-VOLL-Hysteria2"
      - "HK-YT-Reality"
      - "HK-YT-Hysteria2"

  - name: "AUTO-HK"
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 300
    tolerance: 50
    proxies:
      - "HK-VOLL-Reality"
      - "HK-VOLL-Hysteria2"
      - "HK-YT-Reality"
      - "HK-YT-Hysteria2"

  - name: "AI"
    type: select
    url: https://www.gstatic.com/generate_204
    interval: 300
    timeout: 5000
    proxies:
      - "NY-SOCKS5-V.PS-TYO-Rea"
      - "NY-SOCKS5-V.PS-TYO-HY2"
      - "NY-SOCKS5-HK-VOLL-Rea"
      - "NY-SOCKS5-HK-VOLL-HY2"
      - "NY-SOCKS5-HK-YT-Rea"
      - "NY-SOCKS5-HK-YT-HY2"

rules:
  # LAN / Private IPs - DIRECT, no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
  - IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
  - IP-CIDR6,::1/128,DIRECT,no-resolve
  - IP-CIDR6,fc00::/7,DIRECT,no-resolve
  - IP-CIDR6,fe80::/10,DIRECT,no-resolve

  # VPS servers - DIRECT
  - IP-CIDR,103.201.130.18/32,DIRECT,no-resolve
  - IP-CIDR,103.20.223.42/32,DIRECT,no-resolve
  - IP-CIDR,149.104.5.239/32,DIRECT,no-resolve

  # Custom
  - DOMAIN-SUFFIX,binance.com,DEFAULT
  - DOMAIN-SUFFIX,bybit.com,DEFAULT

  # AI providers - GEOSITE
  - GEOSITE,category-ai-!cn,AI
  - GEOSITE,spotify,AI

  # AI providers - KEYWORD matching (supplementary)
  - DOMAIN-KEYWORD,ping0,AI
  - DOMAIN-KEYWORD,openai,AI
  - DOMAIN-KEYWORD,chatgpt,AI
  - DOMAIN-KEYWORD,oai,AI
  - DOMAIN-KEYWORD,anthropic,AI
  - DOMAIN-KEYWORD,claude,AI
  - DOMAIN-KEYWORD,gemini,AI
  - DOMAIN-KEYWORD,deepmind,AI
  - DOMAIN-KEYWORD,generativelanguage,AI
  - DOMAIN-KEYWORD,aistudio,AI
  - DOMAIN-KEYWORD,antigravity,AI
  - DOMAIN-KEYWORD,grok,AI
  - DOMAIN-KEYWORD,groq,AI
  - DOMAIN-KEYWORD,perplexity,AI
  - DOMAIN-KEYWORD,pplx,AI
  - DOMAIN-KEYWORD,cohere,AI
  - DOMAIN-KEYWORD,mistral,AI
  - DOMAIN-KEYWORD,huggingface,AI
  - DOMAIN-KEYWORD,replicate,AI
  - DOMAIN-KEYWORD,together,AI
  - DOMAIN-KEYWORD,midjourney,AI
  - DOMAIN-KEYWORD,stability,AI
  - DOMAIN-KEYWORD,runway,AI
  - DOMAIN-KEYWORD,poe,AI
  - DOMAIN-KEYWORD,character,AI
  - DOMAIN-KEYWORD,inflection,AI
  - DOMAIN-KEYWORD,suno,AI
  - DOMAIN-KEYWORD,udio,AI
  - DOMAIN-KEYWORD,cursor,AI
  - DOMAIN-KEYWORD,replit,AI
  - DOMAIN-KEYWORD,windsurf,AI
  - DOMAIN-KEYWORD,codeium,AI
  - DOMAIN-KEYWORD,copilot,AI
  - DOMAIN-KEYWORD,github,AI
  - DOMAIN-KEYWORD,notebooklm,AI
  - DOMAIN-KEYWORD,llama,AI
  - DOMAIN-KEYWORD,bolt,AI
  - DOMAIN-KEYWORD,sentry,AI
  - DOMAIN-KEYWORD,crisp,AI
  - DOMAIN-KEYWORD,revenuecat,AI
  - DOMAIN-KEYWORD,coze,AI
  - DOMAIN-KEYWORD,auth0,AI
  - DOMAIN-KEYWORD,lmstudio,AI
  - DOMAIN-KEYWORD,sift,AI
  - DOMAIN-KEYWORD,o3pro,AI
  - DOMAIN-KEYWORD,kiro,AI
  - DOMAIN-KEYWORD,factory,AI
  # Too short for KEYWORD, keep DOMAIN-SUFFIX
  - DOMAIN-SUFFIX,x.ai,AI
  - DOMAIN-SUFFIX,pi.ai,AI
  - DOMAIN-SUFFIX,meta.ai,AI
  - DOMAIN-SUFFIX,v0.dev,AI
  - DOMAIN-SUFFIX,ant.dev,AI

  # China direct
  - GEOSITE,cn,DIRECT
  - GEOIP,CN,DIRECT

  # Everything else
  - MATCH,DEFAULT