qbittorent代理的第一步wancheng

2026-05-11 11:42:40 +08:00
parent edd8614b0a
commit 54c1d69ced
5 changed files with 403 additions and 4 deletions
@@ -2,6 +2,7 @@ stream {
    map $ssl_preread_server_name $backend {
        www.apple.com xray;       # 旁路由反向代理隧道
        www.microsoft.com mihomo; # 新增：mihomo出站流量
+        news.apple.com xray_lan;  # 新增：旁路由代理直连流量
        drive.salmonstill.cn nas; # 绿联云服务
        default npm;              # Nginx Proxy Manager
    }
@@ -12,6 +13,10 @@ stream {
    upstream mihomo {
        server 127.0.0.1:9444;
    }
+    # 旁路由代理直连
+    upstream xray_lan {
+        server 127.0.0.1:9445;
+    }
    upstream nas {
        server 127.0.0.1:38653;
    }
@@ -0,0 +1,307 @@
+# ========================
+# Clash-ALL 思路（单上游 Xray Reality 精简版） + 额外端口：7891 全局代理 + 7892 强制直连
+# ========================
+
+mixed-port: 7890
+allow-lan: true
+bind-address: '*'
+mode: rule
+log-level: info
+external-controller: '127.0.0.1:9090'
+
+find-process-mode: off
+
+dns:
+  enable: true
+  ipv6: false
+  prefer-h3: false
+  use-hosts: false
+  use-system-hosts: true
+  enhanced-mode: fake-ip
+  fake-ip-range: 198.18.0.1/16
+  fake-ip-filter:
+    - geosite:private
+    - geosite:tracker
+    - geosite:cn
+    - geosite:apple@cn
+    - geosite:microsoft@cn
+    - geosite:microsoft
+    - '+.lan'
+    - '+.local'
+  default-nameserver:
+    - 223.5.5.5
+    - 223.6.6.6
+  nameserver:
+    - https://9.9.9.9/dns-query
+    - https://149.112.112.112/dns-query
+    - https://94.140.14.14/dns-query
+    - https://94.140.15.15/dns-query
+  proxy-server-nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
+  direct-nameserver:
+    - https://dns.alidns.com/dns-query
+    - https://doh.pub/dns-query
+  respect-rules: true
+
+# ========================
+# 代理定义
+# ========================
+proxies:
+  - name: 直连
+    type: direct
+  - name: 拒绝
+    type: reject
+
+  - name: Xray-Real
+    type: vless
+    server: salmonstill.cn
+    port: 443
+    uuid: "113e167a-a2be-4b46-9010-60020108626c"
+    udp: true
+    flow: xtls-rprx-vision
+    packet-encoding: xudp
+    tls: true
+    servername: www.microsoft.com
+    client-fingerprint: chrome
+    reality-opts:
+      public-key: "62y5gDjPrdeuePGl-D2IW4Cw9Kb8_bSBBTmArvL7Nhs"
+      short-id: "7c947a71b94f369e"
+    network: tcp
+
+# ========================
+# 策略组
+# ========================
+proxy-groups:
+  - name: 国内
+    type: select
+    proxies: [直连]
+
+  - name: 国外
+    type: select
+    proxies: [Xray-Real, 直连]
+
+  - name: Steam-rule
+    type: select
+    proxies: [国内, 国外, 直连]
+
+  - name: Microsoft-rule
+    type: select
+    proxies: [国内, 国外, 直连]
+
+  - name: AI
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Stream Media
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: GitHub
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Crypto
+    type: select
+    proxies: [国外, 国内, 直连]
+
+  - name: Block
+    type: select
+    proxies: [拒绝, 直连]
+
+  - name: 其他
+    type: select
+    proxies: [国外, 国内, 直连, 拒绝]
+
+# ========================
+# rule-providers
+# ========================
+rule-providers:
+  Ads:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-ads-all.mrs
+    path: ./rule-providers/ads.mrs
+    proxy: 国外
+
+  Private_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.mrs
+    path: ./rule-providers/private_domain.mrs
+    proxy: 国外
+
+  Private_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.mrs
+    path: ./rule-providers/private_ip.mrs
+    proxy: 国外
+
+  China_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/cn.mrs
+    path: ./rule-providers/cn_domain.mrs
+    proxy: 国外
+
+  China_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cn.mrs
+    path: ./rule-providers/cn_ip.mrs
+    proxy: 国外
+
+  Oracle:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/oracle.mrs
+    path: ./rule-providers/oracle.mrs
+    proxy: 国外
+
+  OpenAI:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/openai.mrs
+    path: ./rule-providers/openai.mrs
+    proxy: 国外
+
+  GitHub_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/github.mrs
+    path: ./rule-providers/github.mrs
+    proxy: 国外
+
+  Netflix_Domain:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/netflix.mrs
+    path: ./rule-providers/netflix_domain.mrs
+    proxy: 国外
+
+  Netflix_IP:
+    type: http
+    behavior: ipcidr
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/netflix.mrs
+    path: ./rule-providers/netflix_ip.mrs
+    proxy: 国外
+
+  Steam_CN:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/steam@cn.mrs
+    path: ./rule-providers/steam_cn.mrs
+    proxy: 国外
+
+  Steam:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/steam.mrs
+    path: ./rule-providers/steam.mrs
+    proxy: 国外
+
+  GFW:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/gfw.mrs
+    path: ./rule-providers/gfw.mrs
+    proxy: 国外
+
+  Geo_NoCN:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/geolocation-!cn.mrs
+    path: ./rule-providers/geo_nocn.mrs
+    proxy: 国外
+
+  Microsoft:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/microsoft.mrs
+    path: ./rule-providers/microsoft.mrs
+    proxy: 国外
+
+  Crypto:
+    type: http
+    behavior: domain
+    format: mrs
+    interval: 86400
+    url: https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/category-cryptocurrency.mrs
+    path: ./rule-providers/crypto.mrs
+    proxy: 国外
+
+# ========================
+# 多监听器部分
+# ========================
+listeners:
+  - name: global-mixed
+    type: mixed
+    port: 7891
+    listen: 127.0.0.1
+    udp: true
+    proxy: Xray-Real
+
+  - name: direct-mixed
+    type: mixed
+    port: 7892
+    listen: 127.0.0.1
+    udp: true
+    proxy: 直连
+
+# ========================
+# rules
+# ========================
+rules:
+  - DOMAIN,vs18.bj2cu.u3.ucweb.com,拒绝
+  - DOMAIN-SUFFIX,salmonstill.cn,直连
+  - DOMAIN-KEYWORD,raylink,直连
+  - IP-CIDR,49.232.242.90/32,直连
+  - IP-CIDR,43.165.178.10/32,直连
+  - RULE-SET,Ads,Block
+  - RULE-SET,Private_Domain,国内
+  - RULE-SET,Private_IP,国内,no-resolve
+  - RULE-SET,China_Domain,国内
+  - RULE-SET,Oracle,国内
+  - RULE-SET,China_IP,国内,no-resolve
+  - RULE-SET,OpenAI,AI
+  - RULE-SET,GitHub_Domain,GitHub
+  - RULE-SET,Netflix_Domain,Stream Media
+  - RULE-SET,Netflix_IP,Stream Media,no-resolve
+  - RULE-SET,Steam_CN,国内
+  - RULE-SET,Steam,Steam-rule
+  - RULE-SET,Microsoft,Microsoft-rule
+  - RULE-SET,Crypto,Crypto
+  - RULE-SET,GFW,国外
+  - RULE-SET,Geo_NoCN,国外
+  - MATCH,其他
@@ -29,8 +29,8 @@ dns:
    - '+.lan'
    - '+.local'
  default-nameserver:
-    - tls://223.5.5.5
-    - tls://223.6.6.6
+    - 223.5.5.5
+    - 223.6.6.6
  nameserver:
    - https://9.9.9.9/dns-query
    - https://149.112.112.112/dns-query
@@ -111,7 +111,7 @@ proxy-groups:

  - name: 其他
    type: select
-    proxies: [国内, 国外, 直连, 拒绝]
+    proxies: [国外, 国内, 直连, 拒绝]

 # ========================
 # rule-providers
@@ -189,6 +189,36 @@
          ]
        }
      }
+    },
+    {
+      "tag": "proxy_from_lan",
+      "listen": "127.0.0.1",
+      "port": 9445,
+      "protocol": "vless",
+      "settings": {
+        "clients": [
+          {
+            "id": "113e167a-a2be-4b46-9010-60020108626c",
+            "flow": "xtls-rprx-vision"
+          }
+        ],
+        "decryption": "none"
+      },
+      "streamSettings": {
+        "network": "raw",
+        "security": "reality",
+        "realitySettings": {
+          "show": false,
+          "target": "www.apple.com:443",
+          "serverNames": [
+            "news.apple.com"
+          ],
+          "privateKey": "GGT9LfN_2JdQG68cwrULgUK-adfT6wIokLzWjaB0fXs",
+          "shortIds": [
+            "7c947a71b94f369e"
+          ]
+        }
+      }
    }
  ],
  "outbounds": [
@@ -202,7 +232,7 @@
      "settings": {
        "vnext": [
          {
-            "address": "tokyo.salmonstill.cn",
+            "address": "us.salmonstill.cn",
            "port": 443,
            "users": [
              {
@@ -320,6 +350,13 @@
          "mihomo_in"
        ],
        "outboundTag": "to_tokyo"
+      },
+      {
+        "type": "field",
+        "inboundTag": [
+          "proxy_from_lan"
+        ],
+        "outboundTag": "direct"
      }
    ]
  }
@@ -10,6 +10,18 @@
      }
    ]
  },
+  "inbounds": [
+    {
+      "tag": "socks-lan",
+      "port": 1080,
+      "listen": "0.0.0.0",
+      "protocol": "socks",
+      "settings": {
+        "auth": "noauth",
+        "udp": true
+      }
+    }
+  ],
  "outbounds": [
    {
      "tag": "to_nas",
@@ -112,6 +124,37 @@
        }
      }
    },
+    {
+      "tag": "to_beijing_direct",
+      "protocol": "vless",
+      "settings": {
+        "vnext": [
+          {
+            "address": "salmonstill.cn",
+            "port": 443,
+            "users": [
+              {
+                "id": "113e167a-a2be-4b46-9010-60020108626c",
+                "encryption": "none",
+                "flow": "xtls-rprx-vision"
+              }
+            ]
+          }
+        ]
+      },
+      "streamSettings": {
+        "network": "raw",
+        "security": "reality",
+        "realitySettings": {
+          "show": false,
+          "fingerprint": "chrome",
+          "serverName": "news.apple.com",
+          "password": "62y5gDjPrdeuePGl-D2IW4Cw9Kb8_bSBBTmArvL7Nhs",
+          "shortId": "7c947a71b94f369e",
+          "spiderX": "/"
+        }
+      }
+    },
    {
      "tag": "direct",
      "protocol": "freedom"
@@ -119,6 +162,13 @@
  ],
  "routing": {
    "rules": [
+      {
+        "type": "field",
+        "inboundTag": [
+          "socks-lan"
+        ],
+        "outboundTag": "to_beijing_direct"
+      },
      {
        "type": "field",
        "inboundTag": [