stream {
    resolver 223.5.5.5;

    # === 端口 443：Nginx SNI 分流 ===
    map $ssl_preread_server_name $backend {
        www.samsung.com xray;
        addons.mozilla.org xray;
        www.apple.com xray;
        news.apple.com xray_lan;
        drive.salmonstill.cn nas;
        default npm;
    }

    # === 端口 9447：Reality 回落数据中心 ===
    map $ssl_preread_server_name $fallback {
        www.samsung.com       www.samsung.com:443;
        addons.mozilla.org    addons.mozilla.org:443;
        www.apple.com         www.apple.com:443;
        default               127.0.0.1:1;
    }

    upstream xray {
        server 127.0.0.1:9443;
    }
    upstream xray_lan {
        server 127.0.0.1:9445;
    }
    upstream nas {
        server 127.0.0.1:38653;
    }
    upstream npm {
        server 127.0.0.1:8443;
    }

    server {
        listen 443 reuseport;
        listen [::]:443 reuseport;
        ssl_preread on;
        proxy_pass $backend;
    }

    server {
        listen 127.0.0.1:9447;
        ssl_preread on;
        proxy_pass $fallback;
        proxy_download_rate 1m;
        proxy_upload_rate 512k;
    }
}