before refactor the arch of configuration.

2025-01-06 21:35:28 +08:00 · 2025-01-06 21:35:28 +08:00 · 6be554822c
commit 6be554822c
parent 19ef41633b
12 changed files with 884 additions and 92 deletions
--- a/users/dae/config.dae
+++ b/users/dae/config.dae
@ -0,0 +1,82 @@
+include {
+  proxy.d/*.dae
+}
+
+global {
+  # 绑定到 LAN 和/或 WAN 接口。将下述接口替换成你自己的接口名。
+  lan_interface: auto
+  wan_interface: auto
+
+  log_level: trace
+  allow_insecure: false
+  auto_config_kernel_parameter: true
+  dial_mode: domain
+}
+
+# 更多的 DNS 样例见 https://github.com/daeuniverse/dae/blob/main/docs/en/configuration/dns.md
+dns {
+  upstream {
+    googledns: 'tcp+udp://8.8.8.8:53'
+    alidns: 'udp://114.114.114.114:53'
+  }
+  routing {
+    request {
+      fallback: alidns
+    }
+    response {
+      upstream(googledns) -> accept
+      ip(geoip: private) && !qname(geosite: cn) -> googledns
+      fallback: accept
+    }
+  }
+}
+
+group {
+  proxy {
+    filter: subtag(wget)
+    policy: min_moving_avg
+  }
+  us {
+    filter: subtag(wget) && name(keyword: "美国")
+    policy: min_moving_avg
+  }
+  hk {
+    filter: subtag(wget) && name(keyword: "香港")
+    policy: min_moving_avg
+  }
+}
+
+# 更多的 Routing 样例见 https://github.com/daeuniverse/dae/blob/main/docs/en/configuration/routing.md
+routing {
+  pname(hickory-dns) && dport(53) -> must_direct
+  pname(mihomo) -> must_direct
+  domain(geosite:cn) -> direct
+  # personal config routing
+
+  domain(full: time.windows.com) -> must_direct
+  domain(suffix: 'hit.edu.cn') -> must_direct
+  domain(geosite: microsoft) -> proxy
+  # domain(geosite: onedrive) -> must_direct
+  domain(geosite: 'category-ai-chat-!cn') -> us
+  domain(geosite: google) -> us
+  domain(geosite: google-play) -> proxy
+  domain(geosite: apple) -> us
+  domain(keyword: spotify) -> us
+  domain(geosite: tiktok) -> us
+
+  dip(geoip:private) -> direct
+  dip(geoip:cn) -> direct
+  # dport(63434) && sip(192.168.31.170) -> hk
+  dip(223.5.5.5) -> direct
+  
+  # ban qq dns over http
+  # dip(43.136.0.0/13) -> block
+  # dip(109.244.0.0/16) -> block
+  # dip(175.27.0.0/16) -> block
+  # dip('2409:8C1E:75B0:80::/64') -> block
+
+  ## 禁用 h3，因为它通常消耗很多 CPU 和内存资源
+  # l4proto(udp) && dport(443) -> block
+
+  fallback: proxy
+}