qbittorent代理的第一步wancheng

beijing-vps-stream.conf

@@ -2,6 +2,7 @@ stream {
     map $ssl_preread_server_name $backend {
         www.apple.com xray;       # 旁路由反向代理隧道
         www.microsoft.com mihomo; # 新增：mihomo出站流量
+        news.apple.com xray_lan;  # 新增：旁路由代理直连流量
         drive.salmonstill.cn nas; # 绿联云服务
         default npm;              # Nginx Proxy Manager
     }
@@ -12,6 +13,10 @@ stream {
     upstream mihomo {
         server 127.0.0.1:9444;
     }
+    # 旁路由代理直连
+    upstream xray_lan {
+        server 127.0.0.1:9445;
+    }
     upstream nas {
         server 127.0.0.1:38653;
     }

mac 的mihomo config.yaml

@@ -0,0 +1,307 @@
+# ========================
+# Clash-ALL 思路（单上游 Xray Reality 精简版） + 额外端口：7891 全局代理 + 7892 强制直连
+# ========================
+
+mixed-port: 7890
+allow-lan: true
+bind-address: '*'
+mode: rule
+log-level: info
+external-controller: '127.0.0.1:9090'
+
+find-process-mode: off
+
+dns:
+  enable: true
+  ipv6: false
+  prefer-h3: false
+  use-hosts: false
+  use-system-hosts: true
+  enhanced-mode: fake-ip
+  fake-ip-range: 198.18.0.1/16
+  fake-ip-filter:
+    - geosite:private
+    - geosite:tracker
+    - geosite:cn
+    - geosite:apple@cn
+    - geosite:microsoft@cn
+    - geosite:microsoft
+    - '+.lan'
+    - '+.local'
+  default-nameserver:
+    - 223.5.5.5
+    - 223.6.6.6
+  nameserver:
+    - https://9.9.9.9/dns-query
+    - https://149.112.112.112/dns-query
+    - https://94.140.14.14/dns-query
+    - https://94.140.15.15/dns-query
+  proxy-server-nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
+  direct-nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
+  respect-rules: true
+
+# ========================
+# 代理定义
+# ========================
+proxies:
+  - name: 直连
+    type: direct
+  - name: 拒绝
+    type: reject
+
+  - name: Xray-Real
+    type: vless
+    server: salmonstill.cn
+    port: 443
+    uuid: "113e167a-a2be-4b46-9010-60020108626c"
+    udp: true
+    flow: xtls-rprx-vision
+    packet-encoding: xudp
+    tls: true
+    servername: www.microsoft.com
+    client-fingerprint: chrome
+    reality-opts:
+      public-key: "62y5gDjPrdeuePGl-D2IW4Cw9Kb8_bSBBTmArvL7Nhs"
+      short-id: "7c947a71b94f369e"
+    network: tcp
+
+# ========================
+# 策略组
+# ========================
+proxy-groups:
+  - name: 国内
+    type: select
+    proxies: [直连]
+
+  - name: 国外
+    type: select
+    proxies: [Xray-Real, 直连]
+
+  - name: Steam-rule
+    type: select
+    proxies: [国内, 国外, 直连]
+
+  - name: Microsoft-rule
+    type: select
+    proxies: [国内, 国外, 直连]
+
+  - name: AI
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Stream Media
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: GitHub
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Crypto
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Block
+    type: select
+    proxies: [拒绝, 直连]
+
+  - name: 其他
+    type: select
+    proxies: [国外, 国内, 直连, 拒绝]
+
+# ========================
+# rule-providers
+# ========================
+rule-providers:
+  Ads:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-ads-all.mrs
+    path: ./rule-providers/ads.mrs
+    proxy: 国外
+
+  Private_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.mrs
+    path: ./rule-providers/private_domain.mrs
+    proxy: 国外
+
+  Private_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.mrs
+    path: ./rule-providers/private_ip.mrs
+    proxy: 国外
+
+  China_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/cn.mrs
+    path: ./rule-providers/cn_domain.mrs
+    proxy: 国外
+
+  China_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cn.mrs
+    path: ./rule-providers/cn_ip.mrs
+    proxy: 国外
+
+  Oracle:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/oracle.mrs
+    path: ./rule-providers/oracle.mrs
+    proxy: 国外
+
+  OpenAI:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/openai.mrs
+    path: ./rule-providers/openai.mrs
+    proxy: 国外
+
+  GitHub_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/github.mrs
+    path: ./rule-providers/github.mrs
+    proxy: 国外
+
+  Netflix_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/netflix.mrs
+    path: ./rule-providers/netflix_domain.mrs
+    proxy: 国外
+
+  Netflix_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/netflix.mrs
+    path: ./rule-providers/netflix_ip.mrs
+    proxy: 国外
+
+  Steam_CN:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/steam@cn.mrs
+    path: ./rule-providers/steam_cn.mrs
+    proxy: 国外
+
+  Steam:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/steam.mrs
+    path: ./rule-providers/steam.mrs
+    proxy: 国外
+
+  GFW:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/gfw.mrs
+    path: ./rule-providers/gfw.mrs
+    proxy: 国外
+
+  Geo_NoCN:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/geolocation-!cn.mrs
+    path: ./rule-providers/geo_nocn.mrs
+    proxy: 国外
+
+  Microsoft:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/microsoft.mrs
+    path: ./rule-providers/microsoft.mrs
+    proxy: 国外
+
+  Crypto:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-cryptocurrency.mrs
+    path: ./rule-providers/crypto.mrs
+    proxy: 国外
+
+# ========================
+# 多监听器部分
+# ========================
+listeners:
+  - name: global-mixed
+    type: mixed
+    port: 7891
+    listen: 127.0.0.1
+    udp: true
+    proxy: Xray-Real
+
+  - name: direct-mixed
+    type: mixed
+    port: 7892
+    listen: 127.0.0.1
+    udp: true
+    proxy: 直连
+
+# ========================
+# rules
+# ========================
+rules:
+  - DOMAIN,vs18.bj2cu.u3.ucweb.com,拒绝
+  - DOMAIN-SUFFIX,salmonstill.cn,直连
+  - DOMAIN-KEYWORD,raylink,直连
+  - IP-CIDR,49.232.242.90/32,直连
+  - IP-CIDR,43.165.178.10/32,直连
+  - RULE-SET,Ads,Block
+  - RULE-SET,Private_Domain,国内
+  - RULE-SET,Private_IP,国内,no-resolve
+  - RULE-SET,China_Domain,国内
+  - RULE-SET,Oracle,国内
+  - RULE-SET,China_IP,国内,no-resolve
+  - RULE-SET,OpenAI,AI
+  - RULE-SET,GitHub_Domain,GitHub
+  - RULE-SET,Netflix_Domain,Stream Media
+  - RULE-SET,Netflix_IP,Stream Media,no-resolve
+  - RULE-SET,Steam_CN,国内
+  - RULE-SET,Steam,Steam-rule
+  - RULE-SET,Microsoft,Microsoft-rule
+  - RULE-SET,Crypto,Crypto
+  - RULE-SET,GFW,国外
+  - RULE-SET,Geo_NoCN,国外
+  - MATCH,其他

subscribe.yaml

@@ -29,8 +29,8 @@ dns:
     - '+.lan'
     - '+.local'
   default-nameserver:
-    - tls://223.5.5.5
+    - 223.5.5.5
-    - tls://223.6.6.6
+    - 223.6.6.6
   nameserver:
     - https://9.9.9.9/dns-query
     - https://149.112.112.112/dns-query
@@ -111,7 +111,7 @@ proxy-groups:
 
   - name: 其他
     type: select
-    proxies: [国内, 国外, 直连, 拒绝]
+    proxies: [国外, 国内, 直连, 拒绝]
 
 # ========================
 # rule-providers

xray-北京vps-config.json

@@ -189,6 +189,36 @@
           ]
         }
       }
+    },
+    {
+      "tag": "proxy_from_lan",
+      "listen": "127.0.0.1",
+      "port": 9445,
+      "protocol": "vless",
+      "settings": {
+        "clients": [
+          {
+            "id": "113e167a-a2be-4b46-9010-60020108626c",
+            "flow": "xtls-rprx-vision"
+          }
+        ],
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "raw",
+        "security": "reality",
+        "realitySettings": {
+          "show": false,
+          "target": "www.apple.com:443",
+          "serverNames": [
+            "news.apple.com"
+          ],
+          "privateKey": "GGT9LfN_2JdQG68cwrULgUK-adfT6wIokLzWjaB0fXs",
+          "shortIds": [
+            "7c947a71b94f369e"
+          ]
+        }
+      }
     }
   ],
   "outbounds": [
@@ -202,7 +232,7 @@
       "settings": {
         "vnext": [
           {
-            "address": "tokyo.salmonstill.cn",
+            "address": "us.salmonstill.cn",
             "port": 443,
             "users": [
               {
@@ -320,6 +350,13 @@
           "mihomo_in"
         ],
         "outboundTag": "to_tokyo"
+      },
+      {
+        "type": "field",
+        "inboundTag": [
+          "proxy_from_lan"
+        ],
+        "outboundTag": "direct"
       }
     ]
   }

xray-旁路由-config.json

@@ -10,6 +10,18 @@
       }
     ]
   },
+  "inbounds": [
+    {
+      "tag": "socks-lan",
+      "port": 1080,
+      "listen": "0.0.0.0",
+      "protocol": "socks",
+      "settings": {
+        "auth": "noauth",
+        "udp": true
+      }
+    }
+  ],
   "outbounds": [
     {
       "tag": "to_nas",
@@ -112,6 +124,37 @@
         }
       }
     },
+    {
+      "tag": "to_beijing_direct",
+      "protocol": "vless",
+      "settings": {
+        "vnext": [
+          {
+            "address": "salmonstill.cn",
+            "port": 443,
+            "users": [
+              {
+                "id": "113e167a-a2be-4b46-9010-60020108626c",
+                "encryption": "none",
+                "flow": "xtls-rprx-vision"
+              }
+            ]
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "raw",
+        "security": "reality",
+        "realitySettings": {
+          "show": false,
+          "fingerprint": "chrome",
+          "serverName": "news.apple.com",
+          "password": "62y5gDjPrdeuePGl-D2IW4Cw9Kb8_bSBBTmArvL7Nhs",
+          "shortId": "7c947a71b94f369e",
+          "spiderX": "/"
+        }
+      }
+    },
     {
       "tag": "direct",
       "protocol": "freedom"
@@ -119,6 +162,13 @@
   ],
   "routing": {
     "rules": [
+      {
+        "type": "field",
+        "inboundTag": [
+          "socks-lan"
+        ],
+        "outboundTag": "to_beijing_direct"
+      },
       {
         "type": "field",
         "inboundTag": [