订阅预览 /cls-2023 · Clash 客户端请直接填此 URL（将拿到 YAML 原文） 
# ============================================================
# Clash / Mihomo 优化订阅（自用）
# 优化点：DNS+sniffer、rule-providers 减负、策略组分区测速、
#         性能开关、控制面安全、节点命名与协议参数统一
# 客户端：Clash Verge Rev / FlClash / Mihomo Party / OpenClash 等 Meta 内核
# TUN：请在客户端本地开关，不在此强制
# ============================================================

mixed-port: 7890
socks-port: 7891
port: 7892
allow-lan: true
bind-address: "*"
mode: rule
log-level: info
ipv6: false
find-process-mode: off
external-controller: 127.0.0.1:9090
# 首次使用请改成自己的随机串；不需要面板远程管理可保持本地即可
secret: "change-me-to-a-long-random-string"
unified-delay: true
tcp-concurrent: true
global-client-fingerprint: chrome
keep-alive-interval: 30
profile:
  store-selected: true
  store-fake-ip: true

# -------------------- DNS（性能 + 抗污染）--------------------
dns:
  enable: true
  prefer-h3: false
  listen: 0.0.0.0:1053
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.local"
    - "*.localhost"
    - "+.local"
    - "localhost.ptlogin2.qq.com"
    - "+.msftconnecttest.com"
    - "time.*.com"
    - "time.*.gov"
    - "time.*.edu.cn"
    - "time.*.apple.com"
    - "time1.*.com"
    - "time2.*.com"
    - "time3.*.com"
    - "time4.*.com"
    - "time5.*.com"
    - "time6.*.com"
    - "time7.*.com"
    - "ntp.*.com"
    - "ntp1.*.com"
    - "ntp2.*.com"
    - "ntp3.*.com"
    - "ntp4.*.com"
    - "ntp5.*.com"
    - "ntp6.*.com"
    - "ntp7.*.com"
    - "*.time.edu.cn"
    - "*.ntp.org.cn"
    - "+.pool.ntp.org"
    - "time1.cloud.tencent.com"
    - "+.market.xiaomi.com"
    - "localhost"
    - "*.stun.*.*"
    - "stun.*.*"
    - "stun.*"
    - "lens.l.google.com"
    - "*.srv.nintendo.net"
    - "+.stun.playstation.net"
    - "xbox.*.*.microsoft.com"
    - "*.*.xboxlive.com"
    - "*.battlenet.com.cn"
    - "*.battlenet.com"
    - "*.blzstatic.cn"
    - "WORKGROUP"
  default-nameserver:
    - 223.5.5.5
    - 119.29.29.29
  nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
    - tls://dot.pub
  fallback:
    - https://dns.cloudflare.com/dns-query
    - https://dns.google/dns-query
    - tls://1.1.1.1
  fallback-filter:
    geoip: true
    geoip-code: CN
    geosite:
      - gfw
    ipcidr:
      - 240.0.0.0/4
      - 0.0.0.0/32
    domain:
      - "+.google.com"
      - "+.facebook.com"
      - "+.youtube.com"
      - "+.twitter.com"
      - "+.x.com"
      - "+.github.com"
      - "+.githubusercontent.com"
  nameserver-policy:
    "geosite:cn,private,apple-cn,microsoft@cn":
      - https://dns.alidns.com/dns-query
      - https://doh.pub/dns-query
    "geosite:gfw,geolocation-!cn":
      - https://dns.cloudflare.com/dns-query
      - https://dns.google/dns-query

# -------------------- 嗅探（配合 fake-ip，减少漏分流）--------------------
sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  override-destination: true
  sniff:
    HTTP:
      ports: [80, 8080-8880]
      override-destination: true
    TLS:
      ports: [443, 8443]
    QUIC:
      ports: [443]
  skip-domain:
    - "Mijia Cloud"
    - "+.push.apple.com"
    - "lens.l.google.com"

# -------------------- 节点（保留全部，参数统一）--------------------
proxies:
  - name: 🇸🇬 新加坡A-［移动联通推荐］
    type: ss
    server: 129.150.45.254
    port: 2525
    cipher: 2022-blake3-aes-256-gcm
    password: "Lh16UntErzBUDqOgYIe+/I9MvbdI59qyOJjjbQShiGk="
    udp: true
    tfo: true

  - name: 🇸🇬 新加坡B-［移动联通推荐］
    type: ss
    server: 129.150.45.73
    port: 2525
    cipher: 2022-blake3-aes-256-gcm
    password: "o27xzkyq2qv0Q0zOzRA6KbXGRg1st9HRScggUK/7ov0="
    udp: true
    tfo: true

  - name: 🇺🇸 US-CA-圣何塞-HY2
    type: hysteria2
    server: 152.67.228.14
    port: 24400
    password: NDnbvigwNwmXF0TRoMF8HkNE
    sni: www.bing.com
    skip-cert-verify: true
    udp: true
    up: "100 Mbps"
    down: "500 Mbps"


  - name: "GCP-BE-测试"
    type: vless
    server: 35.206.143.178
    port: 14519
    uuid: bde68e5d-1949-471d-b896-6f767f236115
    network: tcp
    tls: true
    udp: true
    flow: xtls-rprx-vision
    servername: lol.secure.dyn.riotcdn.net
    client-fingerprint: chrome
    reality-opts:
      public-key: Eg-EUZlH7Z0vd8IYmccKG-92B6BE1d_RdQXzk3iybCk
      short-id: 6ba85179e30d4fc2

  - name: 🇺🇸 US-WA-西雅图-SS
    type: ss
    server: 4.154.136.85
    port: 8443
    cipher: 2022-blake3-aes-256-gcm
    password: "iW9SEDbJrejNTf2oREe9QL9to5k8BLPR2qQnGVcMdTY="
    udp: true



  - name: 🇺🇸 US-CA-圣何塞-SS
    type: ss
    server: 152.67.228.14
    port: 24358
    cipher: 2022-blake3-aes-256-gcm
    password: "L412almgAv6MsTJ7rswK6306UDl8dnV47PCffqvmuvQ="
    udp: true
    plugin: shadow-tls
    client-fingerprint: chrome
    plugin-opts:
      host: www.microsoft.com
      password: "U7DI2jEbAS8YJzHiC8GGjd1H"
      version: 3


  - name: 🇯🇵 JP-OS-大阪-SS
    type: ss
    server: 138.2.34.119
    port: 38822
    cipher: 2022-blake3-chacha20-poly1305
    password: "ZJdqPGqUO41ui/LsIDWVcHQj+VNs3zRD5hGI4SFUbAA="
    udp: true

# -------------------- 策略组 --------------------
proxy-groups:
  # 主选择：运营商推荐 / 自动 / 分区 / 直连 / 全部节点
  - name: 🚀 节点选择
    type: select
    proxies:
      - ♻️ 自动选择
      - 📱 移动联通推荐
      - 📡 电信优选
      - 🌏 亚洲
      - 🇺🇸 美洲
      - DIRECT
      - 🇸🇬 新加坡A-［移动联通推荐］
      - 🇸🇬 新加坡B-［移动联通推荐］
      - 🇯🇵 JP-OS-大阪-SS
      - 🇺🇸 US-CA-圣何塞-SS
      - 🇺🇸 US-CA-圣何塞-HY2
      - 🇺🇸 US-WA-西雅图-SS
      - GCP-BE-测试


  # 全节点测速（lazy：未使用不探测，减负）
  - name: ♻️ 自动选择
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 30
    lazy: true
    timeout: 3000
    max-failed-times: 2
    proxies:
      - 🇸🇬 新加坡A-［移动联通推荐］
      - 🇸🇬 新加坡B-［移动联通推荐］
      - 🇯🇵 JP-OS-大阪-SS
      - 🇺🇸 US-CA-圣何塞-SS
      - 🇺🇸 US-CA-圣何塞-HY2


  # 移动/联通：优先新加坡 + 亚洲低延迟
  - name: 📱 移动联通推荐
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 30
    lazy: true
    timeout: 3000
    proxies:
      - 🇸🇬 新加坡A-［移动联通推荐］
      - 🇸🇬 新加坡B-［移动联通推荐］
      - 🇯🇵 JP-OS-大阪-SS
      - 🇺🇸 US-CA-圣何塞-SS

  # 电信：日美通常更稳，新加坡作备选
  - name: 📡 电信优选
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 30
    lazy: true
    timeout: 3000
    proxies:
      - 🇯🇵 JP-OS-大阪-SS
      - 🇺🇸 US-CA-圣何塞-SS
      - 🇺🇸 US-CA-圣何塞-HY2
      - 🇸🇬 新加坡B-［移动联通推荐］
      - 🇸🇬 新加坡A-［移动联通推荐］

  - name: 🌏 亚洲
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 30
    lazy: true
    proxies:
      - 🇸🇬 新加坡A-［移动联通推荐］
      - 🇸🇬 新加坡B-［移动联通推荐］
      - 🇯🇵 JP-OS-大阪-SS

  - name: 🇺🇸 美洲
    type: url-test
    url: https://www.gstatic.com/generate_204
    interval: 180
    tolerance: 30
    lazy: true
    proxies:
      - 🇺🇸 US-CA-圣何塞-SS
      - 🇺🇸 US-CA-圣何塞-HY2


  # 业务组：只引用上层组，避免重复罗列节点
  - name: 🌍 国外媒体
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🇺🇸 美洲
      - 🇺🇸 US-CA-圣何塞-SS
      - 🎯 全球直连

  - name: 🎥 流媒体
    type: select
    proxies:
      - 🇺🇸 美洲
      - 🇺🇸 US-CA-圣何塞-SS
      - 🇺🇸 US-CA-圣何塞-HY2
      - 🚀 节点选择
      - ♻️ 自动选择

  - name: 📲 电报信息
    type: select
    proxies:
      - ♻️ 自动选择
      - 🚀 节点选择
      - 🇺🇸 US-CA-圣何塞-HY2
      - 🇺🇸 US-CA-圣何塞-SS
      - 🎯 全球直连

  - name: Ⓜ️ 微软服务
    type: select
    proxies:
      - 🎯 全球直连
      - 🚀 节点选择
      - ♻️ 自动选择

  - name: 🍎 苹果服务
    type: select
    proxies:
      - 🎯 全球直连
      - 🚀 节点选择
      - ♻️ 自动选择

  - name: 📢 谷歌FCM
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🎯 全球直连

  - name: 🤖 AI服务
    type: select
    proxies:
      - 🇺🇸 美洲
      - 🇺🇸 US-CA-圣何塞-SS
      - 🚀 节点选择
      - ♻️ 自动选择

  - name: 🎯 全球直连
    type: select
    proxies:
      - DIRECT
      - 🚀 节点选择

  - name: 🛑 全球拦截
    type: select
    proxies:
      - REJECT
      - DIRECT

  - name: 🍃 应用净化
    type: select
    proxies:
      - REJECT
      - DIRECT

  - name: 🐟 漏网之鱼
    type: select
    proxies:
      - 🚀 节点选择
      - ♻️ 自动选择
      - 🎯 全球直连

# -------------------- 规则集（按需拉取，订阅本体更小）--------------------
# 首次会各下载一次；interval=86400 每天更新，不拖慢日常拉取
rule-providers:
  reject:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt"
    path: ./ruleset/reject.yaml
    interval: 86400
    format: yaml

  icloud:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt"
    path: ./ruleset/icloud.yaml
    interval: 86400
    format: yaml

  apple:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt"
    path: ./ruleset/apple.yaml
    interval: 86400
    format: yaml

  google:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt"
    path: ./ruleset/google.yaml
    interval: 86400
    format: yaml

  proxy:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt"
    path: ./ruleset/proxy.yaml
    interval: 86400
    format: yaml

  direct:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt"
    path: ./ruleset/direct.yaml
    interval: 86400
    format: yaml

  private:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt"
    path: ./ruleset/private.yaml
    interval: 86400
    format: yaml

  gfw:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt"
    path: ./ruleset/gfw.yaml
    interval: 86400
    format: yaml

  tld-not-cn:
    type: http
    behavior: domain
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt"
    path: ./ruleset/tld-not-cn.yaml
    interval: 86400
    format: yaml

  telegramcidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt"
    path: ./ruleset/telegramcidr.yaml
    interval: 86400
    format: yaml

  cncidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt"
    path: ./ruleset/cncidr.yaml
    interval: 86400
    format: yaml

  lancidr:
    type: http
    behavior: ipcidr
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt"
    path: ./ruleset/lancidr.yaml
    interval: 86400
    format: yaml

  applications:
    type: http
    behavior: classical
    url: "https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt"
    path: ./ruleset/applications.yaml
    interval: 86400
    format: yaml

# -------------------- 规则（精简、命中顺序优化）--------------------
rules:
  # 优先直连
  - DOMAIN-SUFFIX,sensha.top,DIRECT

  # 本地 / 局域网
  - RULE-SET,applications,🎯 全球直连
  - RULE-SET,private,🎯 全球直连
  - RULE-SET,reject,🛑 全球拦截
  - RULE-SET,lancidr,🎯 全球直连,no-resolve

  # 业务分流
  - RULE-SET,icloud,🍎 苹果服务
  - RULE-SET,apple,🍎 苹果服务
  - RULE-SET,google,🚀 节点选择
  - DOMAIN-SUFFIX,openai.com,🤖 AI服务
  - DOMAIN-SUFFIX,chatgpt.com,🤖 AI服务
  - DOMAIN-SUFFIX,ai.com,🤖 AI服务
  - DOMAIN-SUFFIX,anthropic.com,🤖 AI服务
  - DOMAIN-SUFFIX,claude.ai,🤖 AI服务
  - DOMAIN-SUFFIX,googleapis.com,🚀 节点选择
  - DOMAIN-SUFFIX,gstatic.com,🚀 节点选择
  - DOMAIN-SUFFIX,googleusercontent.com,🚀 节点选择
  - DOMAIN-KEYWORD,1e100,🚀 节点选择

  # 流媒体（常见解锁相关）
  - DOMAIN-SUFFIX,netflix.com,🎥 流媒体
  - DOMAIN-SUFFIX,netflix.net,🎥 流媒体
  - DOMAIN-SUFFIX,nflxvideo.net,🎥 流媒体
  - DOMAIN-SUFFIX,nflxso.net,🎥 流媒体
  - DOMAIN-SUFFIX,nflximg.net,🎥 流媒体
  - DOMAIN-SUFFIX,disneyplus.com,🎥 流媒体
  - DOMAIN-SUFFIX,disney-plus.net,🎥 流媒体
  - DOMAIN-SUFFIX,bamgrid.com,🎥 流媒体
  - DOMAIN-SUFFIX,dssott.com,🎥 流媒体
  - DOMAIN-SUFFIX,hulu.com,🎥 流媒体
  - DOMAIN-SUFFIX,huluim.com,🎥 流媒体
  - DOMAIN-SUFFIX,primevideo.com,🎥 流媒体
  - DOMAIN-SUFFIX,aiv-cdn.net,🎥 流媒体
  - DOMAIN-SUFFIX,aiv-delivery.net,🎥 流媒体
  - DOMAIN-SUFFIX,amazonvideo.com,🎥 流媒体
  - DOMAIN-SUFFIX,tv.apple.com,🎥 流媒体
  - DOMAIN-SUFFIX,youtube.com,🌍 国外媒体
  - DOMAIN-SUFFIX,youtu.be,🌍 国外媒体
  - DOMAIN-SUFFIX,ytimg.com,🌍 国外媒体
  - DOMAIN-SUFFIX,googlevideo.com,🌍 国外媒体
  - DOMAIN-SUFFIX,spotify.com,🌍 国外媒体
  - DOMAIN-SUFFIX,scdn.co,🌍 国外媒体
  - DOMAIN-SUFFIX,twitch.tv,🌍 国外媒体
  - DOMAIN-SUFFIX,ttvnw.net,🌍 国外媒体

  # Telegram
  - DOMAIN-SUFFIX,t.me,📲 电报信息
  - DOMAIN-SUFFIX,tdesktop.com,📲 电报信息
  - DOMAIN-SUFFIX,telegra.ph,📲 电报信息
  - DOMAIN-SUFFIX,telegram.org,📲 电报信息
  - RULE-SET,telegramcidr,📲 电报信息,no-resolve

  # 微软（默认直连，可在组内改代理）
  - DOMAIN-SUFFIX,microsoft.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,microsoftonline.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,msftconnecttest.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,msn.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,live.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,office.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,office365.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,windows.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,windowsupdate.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,xboxlive.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,azure.com,Ⓜ️ 微软服务
  - DOMAIN-SUFFIX,onedrive.com,Ⓜ️ 微软服务

  # 代理列表 / GFW
  - RULE-SET,gfw,🚀 节点选择
  - RULE-SET,tld-not-cn,🚀 节点选择
  - RULE-SET,proxy,🚀 节点选择

  # 国内直连
  - RULE-SET,direct,🎯 全球直连
  - RULE-SET,cncidr,🎯 全球直连,no-resolve
  - GEOIP,CN,🎯 全球直连

  - MATCH,🐟 漏网之鱼