clashDNS

dns:
  enable: true
  listen: 0.0.0.0:8053
  default-nameserver :
    - 223.5.5.5
  enhanced-mode: redir-host
  # enhanced-mode: redir-host # 或 fake-ip
  # # fake-ip-range: 198.18.0.1/16 # 如果你不知道这个参数的作用，请勿修改
  # # 实验性功能 hosts, 支持通配符 (例如 *.clash.dev 甚至 *.foo.*.example.com)
  # # 静态的域名 比 通配域名 具有更高的优先级 (foo.example.com 优先于 *.example.com)
  # # 注意: hosts 在 fake-ip 模式下不生效
  # hosts:
  #   '*.clash.dev': 127.0.0.1
  #   'alpha.clash.dev': '::1'
  use-hosts: true # 查询 hosts
  # 配置不使用fake-ip的域名
  fake-ip-filter:
    - '+.*'
  #   - '*.lan'
  #   - localhost.ptlogin2.qq.com

  nameserver:
    - https://[2620:119:fc::2]/dns-query
    - https://[2001:4860:4860::8888]/dns-query#h3=true
    - https://[2001:4860:4860::8888]/dns-query#h3=true
    - https://kr-sel.doh.sb/dns-query#h3=true
    - https://hk-hkg.doh.sb/dns-query#h3=true
    - https://jp-nrt.doh.sb/dns-query#h3=true
    - https://sg-sin.doh.sb/dns-query#h3=true
  nameserver-policy:
    "geosite:netflix,bing,openai,yahoo,msn,twitter": 
      - 0.0.0.0:8052
    "rule-set:DLC规则": 
      - 0.0.0.0:8052   
    "rule-set:DIRECT": 
      - 223.5.5.5 
sniffer:
  enable: true
  override-destination: false
  sniff:
    tls: { ports: [853, 5228] }

tun:
  enable: true
  stack: system 
  auto-route: false