mixed-port: 7890
allow-lan: false
mode: rule
log-level: silent
ipv6: true
unified-delay: true
tcp-concurrent: true

tun:
  enable: true
  stack: mixed
  auto-route: true
  auto-detect-interface: true
  dns-hijack:
    - any:53

dns:
  enable: true
  listen: 127.0.0.1:1053
  ipv6: true
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  default-nameserver:
    - 1.1.1.1
    - 8.8.8.8
  nameserver:
    - https://1.1.1.1/dns-query#AnyTLS-CN2-GIA
    - https://8.8.8.8/dns-query#AnyTLS-CN2-GIA
  fake-ip-filter:
    - '*.lan'
    - '*.local'
    - localhost

proxies:
  - name: AnyTLS-CN2-GIA
    type: anytls
    server: 179.255.108.228
    port: 443
    password: Ybr2f-nO4-uux5epf0CqGwyTX-SJQSliIfQMGwWEmHI
    client-fingerprint: chrome
    udp: true
    idle-session-check-interval: 30
    idle-session-timeout: 30
    min-idle-session: 0
    sni: 179.255.108.228
    alpn:
      - h2
      - http/1.1
    skip-cert-verify: false

proxy-groups:
  - name: PROXY
    type: select
    proxies:
      - AnyTLS-CN2-GIA
      - DIRECT

rules:
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - GEOSITE,CN,DIRECT
  - GEOIP,CN,DIRECT,no-resolve
  - MATCH,PROXY