{
  "log": {
    "level": "info"
  },
  "dns": {
    "servers": [
      {
        "tag": "remote",
        "type": "https",
        "server": "dns.google",
        "path": "/dns-query",
        "detour": "proxy",
        "domain_resolver": "local",
        "tls": {
          "enabled": true,
          "server_name": "dns.google"
        }
      },
      {
        "tag": "local",
        "type": "local"
      }
    ],
    "final": "remote",
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "address": [
        "172.19.0.1/30"
      ],
      "auto_route": true
    }
  ],
  "outbounds": [
    {
      "type": "anytls",
      "tag": "proxy",
      "server": "anytls.paff-67.top",
      "server_port": 8443,
      "password": "UJawG9c4TArndnjTGaUi20oO6mzmFpJWZ1u7QocxYaY=",
      "idle_session_check_interval": "30s",
      "idle_session_timeout": "30s",
      "min_idle_session": 2,
      "domain_resolver": "local",
      "tls": {
        "enabled": true,
        "server_name": "anytls.paff-67.top",
        "min_version": "1.3",
        "record_fragment": true
      }
    },
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "action": "sniff"
      },
      {
        "protocol": "dns",
        "action": "hijack-dns"
      },
      {
        "domain": [
          "fd.yooo2.com",
          "safebrowsing.urlsec.qq.com"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_keyword": [
          "admarvel",
          "admaster",
          "adsage",
          "adsmogo",
          "adsrvmedia",
          "adwords",
          "adservice",
          "domob",
          "duomeng",
          "dwtrack",
          "guanggao",
          "lianmeng",
          "omgmta",
          "openx",
          "partnerad",
          "supersonicads",
          "umeng",
          "zjtoolbar"
        ],
        "action": "reject"
      },
      {
        "domain_suffix": [
          "appsflyer.com",
          "doubleclick.net",
          "mmstat.com"
        ],
        "action": "reject"
      },
      {
        "domain_suffix": [
          "local",
          "localhost"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "ip_is_private": true,
        "action": "route",
        "outbound": "direct"
      },
      {
        "ip_cidr": [
          "10.0.0.0/8",
          "17.0.0.0/8",
          "100.64.0.0/10",
          "127.0.0.0/8",
          "172.16.0.0/12",
          "192.168.0.0/16",
          "198.18.0.0/16",
          "224.0.0.0/4",
          "::1/128",
          "fc00::/7",
          "fe80::/10"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_suffix": [
          "services.googleapis.cn",
          "xn--ngstr-lra8j.com",
          "yun.youthidc.com",
          "zheshe.cc",
          "larkidc.com",
          "halocloudnet.com",
          "pototapay.com",
          "lhguomy.xyz",
          "tich1.top"
        ],
        "action": "route",
        "outbound": "proxy"
      },
      {
        "domain_suffix": [
          "apps.apple.com",
          "itunes.apple.com",
          "blobstore.apple.com"
        ],
        "action": "route",
        "outbound": "proxy"
      },
      {
        "domain_suffix": [
          "apple.com",
          "apple-cloudkit.com",
          "icloud.com",
          "icloud-content.com",
          "mzstatic.com",
          "aaplimg.com",
          "cdn-apple.com",
          "akadns.net"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_suffix": [
          "microsoft.com",
          "microsoftonline.com",
          "office.com",
          "office365.com",
          "windows.com",
          "windowsupdate.com",
          "live.com",
          "msn.com",
          "speedtest.net"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_keyword": [
          "officecdn"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_suffix": [
          "cn"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_keyword": [
          "-cn"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "domain_keyword": [
          "google",
          "gmail",
          "youtube",
          "facebook",
          "twitter",
          "instagram",
          "whatsapp",
          "telegram",
          "github",
          "blogspot",
          "dropbox",
          "wikipedia",
          "pinterest",
          "discord",
          "openai",
          "anthropic",
          "netflix",
          "spotify",
          "amazon"
        ],
        "action": "route",
        "outbound": "proxy"
      },
      {
        "domain_suffix": [
          "t.co",
          "x.com",
          "twimg.com",
          "fb.me",
          "fbcdn.net",
          "youtu.be",
          "ytimg.com",
          "gstatic.com",
          "ggpht.com",
          "googlevideo.com",
          "v2ex.com",
          "medium.com",
          "reddit.com",
          "redd.it",
          "imgur.com",
          "pixiv.net",
          "nytimes.com",
          "nyt.com",
          "bbc.com",
          "bbc.co.uk",
          "steamcommunity.com",
          "twitch.tv",
          "vimeo.com",
          "tumblr.com",
          "linkedin.com",
          "licdn.com",
          "mega.nz",
          "archive.org",
          "wikimedia.org",
          "soundcloud.com"
        ],
        "action": "route",
        "outbound": "proxy"
      },
      {
        "ip_cidr": [
          "91.108.4.0/22",
          "91.108.8.0/21",
          "91.108.12.0/22",
          "91.108.16.0/22",
          "91.108.56.0/22",
          "149.154.160.0/20",
          "2001:67c:4e8::/48",
          "2001:b28:f23d::/48",
          "2001:b28:f23f::/48"
        ],
        "action": "route",
        "outbound": "proxy"
      },
      {
        "rule_set": [
          "geosite-cn"
        ],
        "action": "route",
        "outbound": "direct"
      },
      {
        "rule_set": [
          "geoip-cn"
        ],
        "action": "route",
        "outbound": "direct"
      }
    ],
    "rule_set": [
      {
        "tag": "geosite-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-cn.srs",
        "download_detour": "proxy"
      },
      {
        "tag": "geoip-cn",
        "type": "remote",
        "format": "binary",
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs",
        "download_detour": "proxy"
      }
    ],
    "auto_detect_interface": true,
    "default_domain_resolver": "local",
    "final": "proxy"
  },
  "experimental": {
    "cache_file": {
      "enabled": true,
      "cache_id": "paff-mobile-anytls"
    }
  }
}
