这是我的,用着感觉还行,不过我的用途是给不支持 proxy 的容器做代理用
```
{
"log": {
"level": "info",
"timestamp": true
},
"experimental": {
"cache_file": {
"enabled": true,
"store_fakeip": true,
"store_rdrc": true
}
},
"dns": {
"independent_cache": true,
"disable_cache": false,
"strategy": "ipv4_only",
"servers": [
{
"tag": "ali",
"type": "https",
"server": "223.5.5.5",
"detour": "direct"
},
{
"tag": "ali-h3",
"type": "h3",
"server": "
xxxxxx.alidns.com",
"detour": "direct",
"domain_resolver": "ali"
},
{
"tag": "fakeip",
"type": "fakeip",
"inet4_range": "198.18.0.0/15",
"inet6_range": "fc00::/18"
}
],
"rules": [
{
"rule_set": "geosite-cn",
"server": "ali-h3"
},
{
"query_type": [
"A",
"AAAA"
],
"server": "fakeip"
}
]
},
"route": {
"default_domain_resolver": "ali-h3",
"auto_detect_interface": true,
"rules": [
{
"action": "sniff"
},
{
"protocol": "dns",
"action": "hijack-dns"
},
{
"ip_is_private": true,
"outbound": "direct"
},
{
"rule_set": [
"geosite-cn",
"geoip-cn"
],
"outbound": "direct"
},
{
"protocol": "quic",
"port": 443,
"action": "reject",
"method": "default",
"no_drop": false
},
{
"inbound": "tun",
"outbound": "clash"
}
],
"rule_set": [
{
"tag": "geosite-cn",
"type": "remote",
"format": "binary",
"url": "
https://raw.github.com/lyc8503/sing-box-rules/rule-set-geosite/geosite-cn.srs",
"download_detour": "clash"
},
{
"tag": "geoip-cn",
"type": "remote",
"format": "binary",
"url": "
https://raw.github.com/lyc8503/sing-box-rules/rule-set-geoip/geoip-cn.srs",
"download_detour": "clash"
}
]
},
"inbounds": [
{
"type": "tun",
"tag": "tun",
"address": [
"172.18.0.1/30"
],
"auto_route": true,
"strict_route": true
}
],
"outbounds": [
{
"type": "direct",
"tag": "direct",
"connect_timeout": "5s"
},
{
"type": "socks",
"tag": "clash",
"server": "192.168.1.92",
"connect_timeout": "5s",
"server_port": 17891
}
]
}
```