mixed-port: 7890

redir-port: 7891
tproxy-port: 1536
allow-lan: true
mode: rule
geodata-mode: true
unified-delay: true
log-level: debug
ipv6: false
external-controller: 0.0.0.0:9090
external-ui: "yacd"
external-ui-url: "https://github.com/MetaCubeX/Yacd-meta/archive/gh-pages.zip"
secret: ""
enable-process: true
find-process-mode: strict
#tcp-concurrent: true
global-client-fingerprint: chrome

geox-url:
geoip: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/
geoip.dat"
geosite: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/
geosite.dat"
mmdb: "https://github.com/MetaCubeX/meta-rules-dat/releases/download/latest/
country.mmdb"

profile:
store-selected: true
store-fake-ip: true

sniffer:
enable: true
sniff:
TLS:
ports: [443, 8443]
HTTP:
ports: [80, 8080-8880]
override-destination: true

tun:
enable: true
device: tun0
stack: system
inet6-address:
dns-hijack:
- "any:53"
auto-route: true
auto-detect-interface: true

dns:
enable: true
listen: 0.0.0.0:1053
ipv6: false
enhanced-mode: fake-ip
fake-ip-range: 28.0.0.1/8
fake-ip-filter:
- "*"
- "+.lan"
- "connect.rom.miui.com"
 default-nameserver:
- "8.8.8.8"
nameserver:
- "8.8.8.8"
- "8.8.4.4"
proxy-server-nameserver:
- 24.199.100.225 #proxy wa
- 1.1.1.1
- https://doh.pub/dns-query
nameserver-policy:
"geosite:cn,private":
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query
- racevpn.com
- howdy.id

proxies:

- name: Linode
server: 104.18.225.52
port: 443
type: vless
uuid: 9132908c-57bf-4858-8845-e9aa385b6e16
cipher: auto
tls: true
skip-cert-verify: true
servername: cx42.ntr.biz.id
network: ws
ws-opts:
path: /?ed=2048
headers:
Host: cx42.ntr.biz.id
udp: true
- name: OVH
server: 104.18.225.52
port: 443
type: vless
uuid: 9132908c-57bf-4858-8845-e9aa385b6e16
cipher: auto
tls: true
skip-cert-verify: true
servername: cx10.ntr.biz.id
network: ws
ws-opts:
path: /?ed=2048
headers:
Host: cx10.ntr.biz.id
udp: true
- name: Zenlayer
server: 104.18.225.52
port: 443
type: vless
uuid: 9132908c-57bf-4858-8845-e9aa385b6e16
cipher: auto
tls: true
skip-cert-verify: true
servername: cx1.ntr.biz.id
network: ws
ws-opts:
 path: /?ed=2048
headers:
Host: cx1.ntr.biz.id
udp: true
- name: DigitalOcean
server: 104.18.225.52
port: 443
type: vless
uuid: 9132908c-57bf-4858-8845-e9aa385b6e16
cipher: auto
tls: true
skip-cert-verify: true
servername: cx11.ntr.biz.id
network: ws
ws-opts:
path: /?ed=2048
headers:
Host: cx11.ntr.biz.id
udp: true
- name: FirstServer
server: 104.18.225.52
port: 443
type: vless
uuid: 9132908c-57bf-4858-8845-e9aa385b6e16
cipher: auto
tls: true
skip-cert-verify: true
servername: cx18.ntr.biz.id
network: ws
ws-opts:
path: /?ed=2048
headers:
Host: cx18.ntr.biz.id
udp: true

proxy-providers:
FoolApi:
type: http
url: "https://fool.azurewebsites.net/get?
vpn=vless,vmess,trojan&format=raw&cc=ID,SG&mode=cdn&cdn=104.18.225.52&port=80,443&l
imit=5&pass=17243337"
interval: 3600
path: ./provider1.yaml
health-check:
enable: true
interval: 600
url: https://cp.cloudflare.com/generate_204

proxy-groups:
- name: Tunnel
type: select
proxies:
- Url Test
- Selector
- Load Balance

url: "https://cp.cloudflare.com/generate_204"
interval: 300
 - name: Url Test
type: url-test
use:
- FoolApi
proxies:
- Linode
- OVH
- Zenlayer
- DigitalOcean
- FirstServer

url: "https://cp.cloudflare.com/generate_204"
interval: 300

- name: Load Balance

type: load-balance
strategy: round-robin
url: http://hi.bonds.id/ping
interval: 300
use:
- FoolApi
proxies:
- Linode
- OVH
- Zenlayer
- DigitalOcean
- FirstServer

- name: Selector
type: select
use:
- FoolApi
proxies:
- Linode
- OVH
- Zenlayer
- DigitalOcean
- FirstServer

url: "https://cp.cloudflare.com/generate_204"
interval: 300

- name: Ads
type: select
proxies:
- REJECT
- Tunnel

rule-providers:
Ads:
type: file
behavior: classical
path: ./adblock.yaml

rules:
- RULE-SET,Ads,Ads
- AND,((NETWORK,UDP),(DST-PORT,123)),DIRECT
- AND,((NETWORK,UDP),(OR,((DST-PORT,443),(GEOSITE,youtube)))),REJECT
- GEOIP,PRIVATE,DIRECT,no-resolve
- MATCH,Tunnel