add additional v5 configs

README.ENG.md

@@ -1,147 +0,0 @@
-#v2ray-examples
-
-Here are some V2Ray configuration examples for reference, the content keeps pace with the times, automation scripts, etc. Please do not pull the configuration from here.
-
-Thanks to KiriKira, the author of vTemplate, Yuluowusheng and all the developers of Project V.
-
-## Contribution Guidelines
-
-You are welcome to make a template for your own configuration and submit a PR.
-
-Templates should adhere to the following standards:
-- use 4 spaces for indentation
-- Square (curly) brackets do not wrap
-- Unneeded fields should be removed
-- `log` section only leaves `loglevel`
-- For `outbounds`, client side should have `proxy` and `direct`, server side should have `direct` and `block`
-- Unless it is a template for a specific scenario, `geoip:private` should be routed to `direct` outbound (server configuration routes to `block` outbound)
-- DNS should not appear in config files unless it is a template for a specific scenario
-- `uuid` should be left blank and filled by the user.
-- `domainStrategy` in `routing` remains the default, which is `AsIs`.
-
-### Examples
-
-<!-- Here yaml is only used for syntax highlighting, the actual content is json -->
-```yaml
-{
-    "log": {
-        "loglevel": "warning"
-    },
-    "routing": {},
-    "inbounds": [],
-    "outbounds": []
-}
-```
-
-### client
-
-<!-- Here yaml is only used for syntax highlighting, the actual content is json -->
-```yaml
-{
-    "log": {
-        "loglevel": "warning"
-    },
-    "routing": {
-        "domainStrategy": "AsIs",
-        "rules": [
-            {
-                "ip": [
-                    "geoip:private"
-                ],
-                "outboundTag": "direct",
-                "type": "field"
-            }
-        ]
-    },
-    "inbounds": [
-        {
-            "port": 1080,
-            "protocol": "socks",
-            "settings": {
-                "auth": "noauth",
-                "udp": true
-            },
-            "tag": "socks"
-        }
-    ],
-    "outbounds": [
-        {
-            "protocol": "vmess",
-            "settings": {
-                "vnext": [
-                    {
-                        "users": [
-                            {
-                                "id": ""
-                            }
-                        ],
-                        "port": 1234,
-                        "address": "Your_IP_Address"
-                    }
-                ]
-            }
-        },
-        {
-            "protocol": "freedom",
-            "tag": "direct"
-        }
-    ]
-}
-```
-
-### Server
-
-<!-- Here yaml is only used for syntax highlighting, the actual content is json -->
-```yaml
-{
-    "log": {
-        "loglevel": "warning"
-    },
-    "routing": {
-        "domainStrategy": "AsIs",
-        "rules": [
-            {
-                "ip": [
-                    "geoip:private"
-                ],
-                "outboundTag": "blocked",
-                "type": "field"
-            }
-        ]
-    },
-    "inbounds": [
-        {
-            "port": 1234,
-            "protocol": "vmess",
-            "settings": {
-                "clients": [
-                    {
-                        "id": "",
-                    }
-                ]
-            }
-        }
-    ],
-    "outbounds": [
-        {
-            "protocol": "freedom"
-        },
-        {
-            "protocol": "blackhole",
-            "tag": "blocked"
-        }
-    ]
-}
-```
-
-## How to choose the configuration that suits you:
-
-![](how-to-choose/how-to-choose-a-v2ray-plan-ENG.png)
-
-Additional Notes:<br>
-Although Websocket+TLS+Web may be regarded as the best solution at this stage, it is definitely not a solution recommended for novices to try as soon as they come up, let alone the only usage of V2Ray. <br>
-At the same time, you should understand that the network conditions in each region are different (mainly referring to the QoS level of different protocols), you can try all the configurations to find the most suitable one for you, try to ask as little as possible, and it is best not to ask "why do I V2Ray so slow?" Questions like that.
-
-## at last
-
-have fun!

README.md

@@ -1,7 +1,5 @@
 # v2ray-examples
 
-![ENGLISH Here are some V2Ray configuration examples for reference](README.ENG.md)
-
 这里是一些供参考的 V2Ray 配置示例，内容与时俱进，自动化脚本等请勿从这里拉取配置。
 
 感谢 vTemplate 的作者 KiriKira、雨落无声和 Project V 的所有开发人员。

v5/General/configv5-example.json

@@ -0,0 +1,879 @@
+// emmm~ 本配置只是作为 v2ray jsonv5 写法的参考，尝试尽量把各个功能配置写法展现出来，如果日常使用，请先自行精简。（DNS 、路由）
+// 修复了上一个版本的问题，完善一些功能：DNS 地址、IP 语法导致匹配问题，freedom 协议的功能完善，流量嗅探等等
+// 启动命令
+// v2ray run -c configv5-example.json -format=jsonv5
+//
+//
+// 官方案例中使用的自签 tls 证书方法
+// openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:secp384r1 -days 3650 -nodes -keyout doubleclick.net.key -out doubleclick.net.pem -subj "/CN=doubleclick.net" -addext "subjectAltName=DNS:doubleclick.net"
+//
+// "pinned_peer_certificate_chain_sha256" 参数需要生成的 certChainHash
+//
+// ./v2ray tls certChainHash --cert doubleclick.net.pem
+// vdUnuqSt/i/fEtTlPxY8trQVsPfliIj0d/+gqOCL1Jg=
+//
+// openssl x509 -noout -fingerprint -sha256 -in doubleclick.net.pem
+// sha256 Fingerprint=BD:D5:27:BA:A4:AD:FE:2F:DF:12:D4:E5:3F:16:3C:B6:B4:15:B0:F7:E5:88:88:F4:77:FF:A0:A8:E0:8B:D4:98
+//
+//
+{
+  "log": {
+    "access": {
+      "type": "Console",
+      "level": "Info"
+    },
+    "error": {
+      "type": "Console",
+      "level": "Info"
+    }
+    /*
+    // 日常使用
+    "access": {
+      "type": "Console",
+      "level": "Info"
+    },
+    "error": {
+      "type": "Console",
+      "level": "Info"
+    }
+    //
+    //
+    // 测试使用
+    "access": {
+      "type": "File",
+      "level": "Debug",
+      "path": "logaccess.log"
+    },
+    "error": {
+      "type": "File",
+      "level": "Debug",
+      "path": "logerror.log"
+    }
+    //
+    //
+// type: "None" | "Console" | "File"
+//   "None"：日志将被丢弃。
+//   "Console"：日志将被输出到标准输出。
+//   "File"：日志将被输出到一个文件。
+//
+//
+// path: string
+//   日志的文件路径，其值是一个合法的文件路径， 例如 "/tmp/v2ray/_error.log" (Linux) 或 "C:\\Temp\\v2ray\\_error.log" (Windows)。
+//
+//
+// level: "Debug" | "Info" | "Warning" | "Error" | "None"
+// 日志等级，默认值为 "Warning"。
+//   "Debug"：详细的调试性信息。同时包含所有 "Info" 内容
+//   "Info"：V2Ray 在运行时的状态，不影响正常使用。同时包含所有 "Warning" 内容。
+//   "Warning"：V2Ray 可能遇到了一些问题，通常是外部问题，不影响 V2Ray 的正常运行，但有可能影响用户的体验。同时包含所有 "Error" 内容。
+//   "Error"：V2Ray 遇到了无法正常运行的问题，需要立即解决。
+//   "None"：不记录任何内容。
+    "access": {
+      "type": "File",
+      "level": "Error",
+      "path": "/var/log/v2ray/logaccess.log"
+    },
+    "error": {
+      "type": "File",
+      "level": "Info",
+      "path": "/var/log/v2ray/logerror.log"
+    }
+    */
+  },
+  "dns": {
+    "staticHosts": [
+      {
+        "type": "Full",
+        "domain": "services.gfe.nvidia.com",
+        "ip": [
+          "127.0.0.1"
+        ]
+      },
+      {
+        "type": "Full",
+        "domain": "dns.google",
+        "ip": [
+          "8.8.8.8",
+          "8.8.4.4"
+        ]
+      },
+      {
+        "type": "Full",
+        "domain": "cloudflare.com",
+        "ip": [
+          "1.1.1.1",
+          "1.0.0.1"
+        ]
+      },
+      {
+        "type": "Full",
+        "domain": "cloudflare.com",
+        "proxiedDomain": "api.v2fly.org"
+      }
+    ],
+    //
+    //
+    // V5 的 DNS 请求逻辑和 V4 的匹配完全类似。先按照命中 prioritizedDomain 依次请求，如果请求失败，则根据命中 prioritizedDomain 的顺序下一个继续请求，直到成功。如果都返回为空，则进入 fallback 请求。
+    // DNS 地址的写法，写错会导致程序使用到时奔溃。
+    // "223.5.5.5"
+    // "tcp://223.5.5.5:53"
+    // "tcp+local://223.5.5.5:53"
+    // "https://1.1.1.1/dns-query"
+    // "https+local://223.5.5.5/dns-query"
+    // "https+local://a.b.c.d:8443/my-dns-query"
+    // "quic+local://dns.adguard.com"
+    //
+    //
+    "nameServer": [
+      {
+        "address": {
+          "address": "8.8.8.8"
+        }
+      },
+      {
+        "address": {
+          "address": "1.1.1.1"
+        }
+      },
+      {
+        "address": {
+          "address": "tcp+local://8.8.8.8:53"
+        }
+      },
+      {
+        "address": {
+          "address": "https://dns.google/dns-query"
+        }
+      },
+      {
+        "address": {
+          "address": "localhost"
+        },
+        "prioritizedDomain": [
+          {
+            "type": "Subdomain",
+            "domain": ".cn"
+          },
+          {
+            "type": "Subdomain",
+            "domain": "weibo.cn"
+          },
+          {
+            "type": "Keyword",
+            "domain": "baidu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "sohu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "citic"
+          },
+          {
+            "type": "Keyword",
+            "domain": "xn--"
+          },
+          {
+            "type": "Keyword",
+            "domain": "unicom"
+          },
+          {
+            "type": "Regex",
+            "domain": "^[a-zA-Z0-9-]+(\\.[a-zA-Z0-9-]+)*\\.(com\\.cn|net\\.cn|org\\.cn|edu\\.cn|gov\\.cn|cn)$"
+          }
+        ]
+      },
+      {
+        "address": {
+          "address": "tcp+local://223.5.5.5:53"
+        },
+        "prioritizedDomain": [
+          {
+            "type": "Subdomain",
+            "domain": ".cn"
+          },
+          {
+            "type": "Subdomain",
+            "domain": "weibo.cn"
+          },
+          {
+            "type": "Keyword",
+            "domain": "baidu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "sohu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "citic"
+          },
+          {
+            "type": "Keyword",
+            "domain": "xn--"
+          },
+          {
+            "type": "Keyword",
+            "domain": "unicom"
+          },
+          {
+            "type": "Regex",
+            "domain": "^[a-zA-Z0-9-]+(\\.[a-zA-Z0-9-]+)*\\.(com\\.cn|net\\.cn|org\\.cn|edu\\.cn|gov\\.cn|cn)$"
+          }
+        ]
+      },
+      {
+        "address": {
+          "address": "119.29.29.29",
+          "port": 53
+        },
+        "skipFallback": false,
+        "prioritizedDomain": [
+          {
+            "type": "Subdomain",
+            "domain": ".cn"
+          },
+          {
+            "type": "Subdomain",
+            "domain": "weibo.cn"
+          },
+          {
+            "type": "Keyword",
+            "domain": "baidu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "sohu"
+          },
+          {
+            "type": "Keyword",
+            "domain": "citic"
+          },
+          {
+            "type": "Keyword",
+            "domain": "xn--"
+          },
+          {
+            "type": "Keyword",
+            "domain": "unicom"
+          },
+          {
+            "type": "Regex",
+            "domain": "^[a-zA-Z0-9-]+(\\.[a-zA-Z0-9-]+)*\\.(com\\.cn|net\\.cn|org\\.cn|edu\\.cn|gov\\.cn|cn)$"
+          }
+        ]
+        /*
+        "expectIPs": [{"code": "cn"}]
+        */
+      },
+      {
+        "address": {
+          //          "network": "udp",
+          "address": "1.1.1.1",
+          "port": 53
+        },
+        "clientIp": "1.1.1.1",
+        "skipFallback": false,
+        "prioritizedDomain": [
+          {
+            "type": "Subdomain",
+            "domain": "youtube.com"
+          },
+          {
+            "type": "Keyword",
+            "domain": "google"
+          }
+        ]
+        /*
+        "expectIPs": [
+          {
+            "countryCode": "cn",
+            "cidr": [
+              {
+                "ipAddr": "119.29.0.0",
+                "prefix": 16
+              }
+            ],
+            "inverseMatch": true
+          },
+          {
+            "filePath": "geoip.dat",
+            "code": "private"
+          }
+        ]
+        */
+      },
+      {
+        "address": {
+          "address": "119.29.29.29"
+        }
+      },
+      {
+        "address": {
+          "address": "https://1.1.1.1/dns-query"
+          //          "port": 53
+        },
+        "clientIp": "1.1.1.1",
+        "skipFallback": true,
+        // prioritizedDomain
+        //   type: "Full" | "Subdomain" | "Keyword" | "Regex"
+        //
+        //
+        // domain: string
+        //   Full：当此域名完整匹配目标域名时，该规则生效。例如 v2ray.com 匹配 v2ray.com 但不匹配 www.v2ray.com。
+        //   Regex：当 domain 所表示的正则表达式匹配目标域名时，该规则生效。例如 \.goo.*\.com$ 匹配 www.google.com、fonts.googleapis.com，但不匹配 google.com。
+        //   Subdomain (推荐)：当此域名是目标域名或其子域名时，该规则生效。例如 v2ray.com 匹配 www.v2ray.com、v2ray.com，但不匹配 xv2ray.com。
+        //   Keyword：当此字符串匹配目标域名中任意部分，该规则生效。比如 sina.com 可以匹配 sina.com、sina.com.cn、www.sina.com 和 www.sina.company，但不匹配 sina.cn。
+        //
+        //
+        "prioritizedDomain": [
+          {
+            "type": "Subdomain",
+            "domain": "youotube.com"
+          },
+          {
+            "type": "Keyword",
+            "domain": "gooogle"
+          }
+        ],
+        /*
+        "ExpectIPs": [
+          {
+            "cidr": [
+              {
+                "ipAddr": "119.29.0.0",
+                "prefix": 16
+              }
+            ],
+            "inverseMatch": true
+          },
+          {
+            "filePath": "geoip.dat",
+            "code": "private"
+          }
+        ],
+        */
+        "fakeDns": {
+          "pools": [
+            {
+              "ipPool": "198.18.0.0/15",
+              "lruSize": 65535
+            },
+            {
+              "ipPool": "fc00::/18",
+              "lruSize": 65535
+            }
+          ]
+        },
+        "tag": "CloudFlareDNS",
+        "queryStrategy": "USE_IP4",
+        "cacheStrategy": "CacheEnabled",
+        "fallbackStrategy": "Enabled"
+      }
+    ],
+    "fakeDns": {
+      "pools": [
+        {
+          "ipPool": "198.18.0.0/15",
+          "lruSize": 65535
+        },
+        {
+          "ipPool": "fc00::/18",
+          "lruSize": 65535
+        }
+      ]
+    },
+    //    "clientIp": "1.2.3.4",	// 此功能需要 DNS 服务器支持 EDNS Client Subnet，用于 DNS 查询时通知 DNS 服务器，客户端所在的地理位置（不能是私有 IP 地址）。不建议全局通知 "1.2.3.4"，会导致返回为空。
+    "domainMatcher": "mph",
+    "queryStrategy": "USE_IP4",
+    "cacheStrategy": "CacheEnabled",
+    "disableCache": false,
+    "fallbackStrategy": "Enabled",
+    "disableFallback": false,
+    //    "disableFallbackIfMatch": false,	// (v5.2.0+ 弃用)
+    "tag": "dns"
+  },
+  "inbounds": [
+    {
+      "tag": "socks",
+      "protocol": "socks",
+      "settings": {
+        "udpEnabled": true,
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet"
+      },
+      "port": 7830,
+      "listen": "127.0.0.1",
+      "sniffing": {
+        "enabled": true,
+        "destOverride": [
+          "http",
+          "tls"
+        ],
+        "metadataOnly": true
+      }
+    },
+    {
+      "tag": "http",
+      "protocol": "http",
+      "settings": {},
+      "port": 7831,
+      "listen": "127.0.0.1",
+      "sniffing": {
+        "enabled": true,
+        "destOverride": [
+          "http",
+          "tls"
+        ],
+        "metadataOnly": true
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "proxy", // 运行在 xray 的 vmess + ws +tls ，需要通过 v2ray 固定不安全的证书。 ./v2ray tls certChainHash --cert 证书.crt
+      "protocol": "vmess",
+      "settings": {
+        "address": "0.0.0.0",
+        "port": 100000,
+        "uuid": "0000000-0000000-0000000-0000000-0000000"
+      },
+      "streamSettings": {
+        "transport": "ws",
+        "transportSettings": {
+          "path": "/0000000000000000000000000000"
+        },
+        "security": "tls",
+        "securitySettings": {
+          "serverName": "0000000.com",
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "00000000000000"
+          ]
+        }
+      }
+    },
+    {
+      "tag": "hysteria2", // h2_h2
+      "protocol": "hysteria2",
+      "settings": {
+        "server": [
+          {
+            "address": "0.0.0.0",
+            "port": 100000
+          }
+        ]
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "000000000000000000000"
+          ],
+          "server_name": "00000000000000.com"
+        },
+        "transport": "hysteria2",
+        "transportSettings": {
+          "congestion": {
+            "type": "bbr"
+          },
+          "password": "000000000000000000000",
+          "use_udp_extension": true
+        }
+      }
+    },
+    {
+      "tag": "vmess+ws",
+      "protocol": "vmess",
+      "settings": {
+        "address": "0.0.0.0",
+        "port": 100000,
+        "uuid": "0000000-0000000-0000000-0000000-0000000"
+      },
+      "streamSettings": {
+        "transport": "ws",
+        "transportSettings": {
+          "path": "/000000000000000000000"
+        }
+      }
+    },
+    {
+      "tag": "vmess+ws+tls",
+      "protocol": "vmess",
+      "settings": {
+        "address": "0.0.0.0",
+        "port": 100000,
+        "uuid": "0000000-0000000-0000000-0000000-0000000"
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "000000000000000000000000000000000000000000"
+          ],
+          "server_name": "000000000000000000000.com"
+        },
+        "transport": "ws",
+        "transportSettings": {
+          "path": "/000000000000000000000000000000000000000000"
+        }
+      }
+    },
+    {
+      "tag": "vmess+tls+hy2",
+      "protocol": "vmess",
+      "settings": {
+        "address": "0.0.0.0",
+        "port": 100000,
+        "uuid": "0000000-0000000-0000000-0000000-0000000"
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "server_name": "0000000000000.com",
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "000000000000000000000000000000000000000000"
+          ]
+        },
+        "transport": "hysteria2",
+        "transportSettings": {
+          "congestion": {
+            "type": "bbr"
+          },
+          "password": "000000000000000000000000000000000000000000",
+          "use_udp_extension": true
+        }
+      }
+    },
+    {
+      "tag": "shadowsocks",
+      "protocol": "shadowsocks",
+      "settings": {
+        "address": "0.0.0.0",
+        "method": "aes-256-gcm",
+        "port": "100000",
+        "password": "000000000000000000000000000000000000000000"
+      }
+    },
+    {
+      "tag": "direct",
+      "protocol": "freedom",
+      "settings": {},
+      "mux": {
+        "domainStrategy": "UseIp", // [ "AsIs" | "UseIP" | "UseIP4" | "UseIP6" ]
+        "enabled": false,
+        "concurrency": 8
+      }
+    },
+    {
+      "tag": "block",
+      "protocol": "blackhole"
+    }
+  ],
+  //
+  //
+  //  GeoIP
+  //    cidr
+  //
+  //    code: string
+  //    filePath: string
+  //
+  //    inverseMatch : true | false （上面两个的通用参数）
+  //
+  //  CIDRObject
+  //    ipAddr: string
+  //    prefix: number
+  //
+  //  GeoDomain
+  //    domain : DomainObject
+  //    code: string
+  //    filePath: string
+  //
+  //  DomainObject
+  //  type : "Plain" | "Regex" | "RootDomain" | "Full"
+  //    Plain：纯字符串匹配模式，当匹配目标域名中任意部分时，该规则生效。比如 sina.com 可以匹配 sina.com、sina.com.cn、sina.company 和 www.sina.com，但不匹配 sina.cn。
+  //    Regex：正则表达式匹配模式，当正则表达式匹配目标域名时，该规则生效。例如 \.goo.*\.com$ 匹配 www.google.com、fonts.googleapis.com，但不匹配 google.com。
+  //    RootDomain：根域名匹配模式，当域名是目标域名或其子域名时，该规则生效。例如 v2ray.com 匹配 www.v2ray.com、v2ray.com，但不匹配 xv2ray.com。
+  //    Full：完整匹配模式，当域名完整匹配目标域名时，该规则生效。例如 v2ray.com 匹配 v2ray.com 但不匹配 www.v2ray.com。
+  //
+  //
+  "router": {
+    "domainStrategy": "IpIfNonMatch", // AsIs | UseIp | IpIfNonMatch | IpOnDemand
+    "rule": [
+      {
+        "tag": "block", // 网络流量类型 bittorrent 直连
+        "domainMatcher": "mph", // protocol
+        "protocol": [
+          "bittorrent"
+        ]
+      },
+      {
+        "tag": "block", // 全匹配去广告 + 关键词匹配去广告
+        "domainMatcher": "mph", // domain
+        "domain": [
+          {
+            "type": "Full",
+            "value": "discovery.razerapi.com"
+          },
+          {
+            "type": "Full",
+            "value": "services.gfe.nvidia.com"
+          },
+          {
+            "type": "Plain",
+            "value": "googleads"
+          },
+          {
+            "type": "Plain",
+            "value": "wlmonitor"
+          }
+        ]
+      },
+      {
+        "tag": "block", // geosite数据库匹配去广告
+        "domainMatcher": "mph", // domain
+        "geoDomain": [
+          {
+            "code": "category-httpdns",
+            "filePath": "geosite.dat"
+          },
+          {
+            "code": "category-ads-all",
+            "filePath": "geosite.dat"
+          }
+        ]
+      },
+      // 下面这个为融合写法，日常可以选择上面分开的，或者下面这个融合的。贴一下仓库佬友 shanoaice 去年的总结，不知道是否还准确，自行判断。https://github.com/v2fly/v2ray-core/issues/2518
+      //   domain 与 geoDomain 有分开的配置项，而 ip-cidr 和 geoip 没有分开来的配置项
+      //   domain 尽管可以单独写，但 geoDomain 的 GeoDomain 配置中也可以写 Domain 匹配
+      //   geoip 有 inverseMatch 选项，但 geoDomain 没有
+      //   domainMatcher 选项被放在了每一条规则单独的 RuleObject 里，而不是放在顶层的 service.router 中（像 v4 配置文件一样），单独对每一条规则配置 domainMatcher 意义不大，至少需要提供一个在顶层中提供默认值的方法，可以允许在每条 RuleObject 里单独 override
+      {
+        "tag": "block", // geosite数据库匹配 + domain 类型的全匹配和关键词匹配混合写法去广告
+        "domainMatcher": "mph", // domain
+        "geoDomain": [
+          {
+            "code": "category-httpdns",
+            "filePath": "geosite.dat"
+          },
+          {
+            "code": "category-ads-all",
+            "filePath": "geosite.dat"
+          },
+          {
+            "domain": [
+              {
+                "type": "Full",
+                "value": "discovery.razerapi.com"
+              },
+              {
+                "type": "Full",
+                "value": "services.gfe.nvidia.com"
+              },
+              {
+                "type": "Plain",
+                "value": "googleads"
+              },
+              {
+                "type": "Plain",
+                "value": "wlmonitor"
+              }
+            ]
+          }
+        ]
+      },
+      {
+        "tag": "proxy", // 根域名匹配模式代理 + 关键词匹配代理
+        "domainMatcher": "mph", // domain
+        "domain": [
+          {
+            "type": "RootDomain",
+            "value": "linux.do"
+          },
+          {
+            "type": "RootDomain",
+            "value": "v2ex.com"
+          },
+          {
+            "type": "Plain",
+            "value": "youtube"
+          },
+          {
+            "type": "Plain",
+            "value": "google"
+          }
+        ]
+      },
+      {
+        "tag": "proxy", // geosite数据库匹配代理
+        "domainMatcher": "mph", // domain
+        "geoDomain": [
+          {
+            "code": "google",
+            "filePath": "geosite.dat"
+          },
+          {
+            "code": "tld-!cn",
+            "filePath": "geosite.dat"
+          }
+        ]
+      },
+      {
+        "tag": "proxy", // cidr 匹配， cidr 需要在 geoip 下面才行。prefix 为 CIDR 地址计算IP地址范围，一般指定某个 IP，32即可。
+        "domainMatcher": "mph", // geoip
+        "geoip": [
+          {
+            "code": "google"
+          },
+          {
+            "cidr": [
+              {
+                "ipAddr": "8.8.4.4", // "prefix" 需要填写，否则导致 IP 匹配出问题。
+                "prefix": 32
+              },
+              {
+                "ipAddr": "8.8.8.8",
+                "prefix": 32
+              },
+              {
+                "ipAddr": "1.1.1.1",
+                "prefix": 32
+              }
+            ]
+          }
+        ]
+      },
+      {
+        "tag": "proxy", // geoip数据库匹配代理 + geoip数据库匹配反转代理
+        "domainMatcher": "mph", // geoip
+        "geoip": [
+          {
+            "code": "google",
+            "filePath": "geoip.dat"
+          },
+          {
+            "code": "telegram",
+            "filePath": "geoip.dat"
+          },
+          {
+            "inverseMatch": true,
+            "code": "cn",
+            "filePath": "geoip.dat"
+          }
+        ]
+      },
+      {
+        "tag": "direct", // 根域名匹配模式直连 + 关键词匹配直连
+        "domainMatcher": "mph", // domain
+        "domain": [
+          {
+            "type": "RootDomain",
+            "value": "bilibili.com"
+          },
+          {
+            "type": "RootDomain",
+            "value": "ixigua.com"
+          },
+          {
+            "type": "Plain",
+            "value": "moutai"
+          },
+          {
+            "type": "Plain",
+            "value": "tracker"
+          }
+        ]
+      },
+      {
+        "tag": "direct", // geosite数据库匹配直连
+        "domainMatcher": "mph", // geoDomain
+        "geoDomain": [
+          {
+            "code": "cn",
+            "filePath": "geosite.dat"
+          },
+          {
+            "code": "tld-cn",
+            "filePath": "geosite.dat"
+          }
+        ]
+      },
+      {
+        "tag": "direct", // cidr 匹配， cidr 需要在 geoip 下面才行。prefix 为 CIDR 地址计算IP地址范围，一般指定某个 IP，32即可。
+        "domainMatcher": "mph", // geoip
+        "geoip": [
+          {
+            "code": "private"
+          },
+          {
+            "cidr": [
+              {
+                "ipAddr": "223.5.5.5",
+                "prefix": 32
+              },
+              {
+                "ipAddr": "119.29.29.29",
+                "prefix": 32
+              },
+              {
+                "ipAddr": "114.114.114.114",
+                "prefix": 32
+              }
+            ]
+          }
+        ]
+      },
+      {
+        "tag": "direct", // geoip数据库匹配直连
+        "domainMatcher": "mph", // geoip
+        "geoip": [
+          {
+            "code": "private",
+            "filePath": "geoip.dat"
+          },
+          {
+            "code": "cn",
+            "filePath": "geoip.dat"
+          }
+        ]
+      }
+      /*
+      {
+        "tag": "proxy",
+        "portList": "53,443,1000-2000"	// portList
+      },
+      {
+        "tag": "proxy",
+        "networks": "tcp,udp"	// networks
+      },
+      {
+        "tag": "direct",
+        "domainMatcher": "mph",	// sourceGeoip
+        "sourceGeoip": [
+          {
+            "code": "cn",
+            "filePath": "geoip.dat"
+          }
+        ]
+      },
+      {
+        "tag": "proxy",
+        "sourcePortList": "53,443,1000-2000"	// sourcePortList
+      },
+      {
+        "tag": "direct",
+        "domainMatcher": "mph",	// protocol
+        "protocol": [
+          "bittorrent"
+        ]
+      }
+      */
+    ],
+    "balancingRule": []
+  },
+  "services": {}
+}

v5/Hysteria2-Hysteria2/hy2_hy2_client.json

@@ -0,0 +1,61 @@
+{
+  "log": {
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    },
+    "access": {
+      "type": "None"
+    }
+  },
+  "outbounds": [
+    {
+      "protocol": "hysteria2",
+      "settings": {
+        "server": [
+          {
+            "address": "",
+            "port": 23443
+          }
+        ]
+      },
+      "streamSettings": {
+        "transport": "hysteria2",
+        "transportSettings": {
+          "password": "52ox2wx75d7j8qk63e6qaayx9p2pllfv9asn",
+          "congestion": {
+            "type": "bbr"
+          },
+          "use_udp_extension": true
+        },
+        "security": "tls",
+        "securitySettings": {
+          "server_name": "doubleclick.net",
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "ZDc/ImNDWn5xyFxcKuorq/k44/V/4rww2NlUFOlQWmY="
+          ]
+        }
+      }
+    }
+  ],
+  "inbounds": [
+    {
+      "protocol": "socks",
+      "settings": {
+        "udpEnabled": true,
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet"
+      },
+      "port": 34479,
+      "listen": "127.0.0.1"
+    },
+    {
+      "protocol": "http",
+      "settings": {
+      },
+      "port": 34480,
+      "listen": "127.0.0.1"
+    }
+  ]
+}

v5/Hysteria2-Hysteria2/hy2_hy2_server.json

@@ -0,0 +1,44 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "0.0.0.0",
+      "port": 100000,
+      "protocol": "hysteria2",
+      "settings": {},
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "certificate": [
+            {
+              "certificate_file": "0000000.pem",
+              "key_file": "0000000.key",
+              "usage": "ENCIPHERMENT"
+            }
+          ]
+        },
+        "transport": "hysteria2",
+        "transportSettings": {
+          "congestion": {
+            "type": "bbr"
+          },
+          "password": "000000000000000000000",
+          "use_udp_extension": true
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}

v5/Shadowsocks-TCP/shadowsocks_client.json

@@ -0,0 +1,41 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "127.0.0.1",
+      "port": 7830,
+      "protocol": "socks",
+      "settings": {
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet",
+        "udpEnabled": true
+      }
+    },
+    {
+      "listen": "127.0.0.1",
+      "port": 7831,
+      "protocol": "http",
+      "settings": {}
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "proxy",
+      "protocol": "shadowsocks",
+      "settings": {
+        "address": "192.168.0.2",
+        "method": "aes-256-gcm",
+        "port": "10000",
+        "password": "c8/NLeEOIfV7tVudQ8xh5eRAeKZD4EyB01TGm93fTMM="
+      }
+    }
+  ]
+}

v5/Shadowsocks-TCP/shadowsocks_server.json

@@ -0,0 +1,29 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "0.0.0.0",
+      "port": 10000,
+      "protocol": "shadowsocks",
+      "settings": {
+        "method": "aes-256-gcm",
+        "password": "c8/NLeEOIfV7tVudQ8xh5eRAeKZD4EyB01TGm93fTMM=",
+        "networks": "tcp,udp",
+        "packetEncoding": "None"
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}

v5/Shadowsocks2022-TCP/shadowsocks2022_client.json

@@ -0,0 +1,44 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "127.0.0.1",
+      "port": 7830,
+      "protocol": "socks",
+      "settings": {
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet",
+        "udpEnabled": true
+      }
+    },
+    {
+      "listen": "127.0.0.1",
+      "port": 7831,
+      "protocol": "http",
+      "settings": {}
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "proxy",
+      "protocol": "shadowsocks2022",
+      "settings": {
+        "address": "0.0.0.0",
+        "port": 10000,
+        "method": "2022-blake3-aes-256-gcm",
+        "psk": "q+EHyQzDXNxaU4fLEVDs25TeFXp5dpvP9LSicGqQdNY=",	// 其他内核中 ipsk 没有设置的话，可以注销。
+        "ipsk": [
+          "qiObQZJVNCln3Gl5iJUVCw=="
+        ]
+      }
+    }
+  ]
+}

v5/Trojan-TLS/trojan-tls_client.json

@@ -0,0 +1,50 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "127.0.0.1",
+      "port": 7830,
+      "protocol": "socks",
+      "settings": {
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet",
+        "udpEnabled": true
+      }
+    },
+    {
+      "listen": "127.0.0.1",
+      "port": 7831,
+      "protocol": "http",
+      "settings": {}
+    }
+  ],
+  "outbounds": [
+    {
+      "tag": "proxy",
+      "protocol": "trojan",
+      "settings": {
+        "address": "0.0.0.0",
+        "password": "0000000-0000000-0000000-0000000-0000000",
+        "port": 100000
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "000000000000000000000"
+          ],
+          "server_name": "000000000000000000000.com"
+        }
+      }
+    }
+  ]
+}

v5/Trojan-TLS/trojan-tls_server.json

@@ -0,0 +1,42 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "0.0.0.0",
+      "port": 100000,
+      "protocol": "trojan",
+      "settings": {
+        "users": [
+          "0000000-0000000-0000000-0000000-0000000"
+        ],
+        "packetEncoding": "None"
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "certificate": [
+            {
+              "certificate_file": "000000000000000000000.pem",
+              "key_file": "000000000000000000000.key",
+              "usage": "ENCIPHERMENT"
+            }
+          ],
+          "serverName": "000000000000000000000.com"
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}

v5/VMess-Hysteria2/vmess_hy2_client.json

@@ -0,0 +1,58 @@
+{
+  "log": {
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    },
+    "access": {
+      "type": "None"
+    }
+  },
+  "outbounds": [
+    {
+      "protocol": "vmess",
+      "settings": {
+        "address": "",
+        "port": 23454,
+        "uuid": "934d4533-a99b-4d9e-981f-2d7b9497f088"
+      },
+      "streamSettings": {
+        "transport": "hysteria2",
+        "transportSettings": {
+          "password": "52ox2wx75d7j8qk63e6qaayx9p2pllfv9asn",
+          "congestion": {
+            "type": "bbr"
+          },
+          "use_udp_extension": true
+        },
+        "security": "tls",
+        "securitySettings": {
+          "server_name": "doubleclick.net",
+          "allow_insecure_if_pinned_peer_certificate": true,
+          "pinned_peer_certificate_chain_sha256": [
+            "ZDc/ImNDWn5xyFxcKuorq/k44/V/4rww2NlUFOlQWmY="
+          ]
+        }
+      }
+    }
+  ],
+  "inbounds": [
+    {
+      "protocol": "socks",
+      "settings": {
+        "udpEnabled": true,
+        "address": "127.0.0.1",
+        "packetEncoding": "Packet"
+      },
+      "port": 34479,
+      "listen": "127.0.0.1"
+    },
+    {
+      "protocol": "http",
+      "settings": {
+      },
+      "port": 34480,
+      "listen": "127.0.0.1"
+    }
+  ]
+}

v5/VMess-Hysteria2/vmess_hy2_server.json

@@ -0,0 +1,48 @@
+{
+  "log": {
+    "access": {
+      "type": "None"
+    },
+    "error": {
+      "level": "Debug",
+      "type": "Console"
+    }
+  },
+  "inbounds": [
+    {
+      "listen": "0.0.0.0",
+      "port": 100000,
+      "protocol": "vmess",
+      "settings": {
+        "users": [
+          "0000000-0000000-0000000-0000000-0000000"
+        ]
+      },
+      "streamSettings": {
+        "security": "tls",
+        "securitySettings": {
+          "certificate": [
+            {
+              "certificate_file": "000000000000000000000.pem",
+              "key_file": "000000000000000000000.key",
+              "usage": "ENCIPHERMENT"
+            }
+          ]
+        },
+        "transport": "hysteria2",
+        "transportSettings": {
+          "congestion": {
+            "type": "bbr"
+          },
+          "password": "000000000000000000000000000000000000000000",
+          "use_udp_extension": true
+        }
+      }
+    }
+  ],
+  "outbounds": [
+    {
+      "protocol": "freedom"
+    }
+  ]
+}

v5/VMess-TCP/config_client.json

@@ -0,0 +1,36 @@
+{
+    "log": {
+        "error": {
+            "level": "Warning",
+            "type": "Console"
+        },
+        "access": {
+            "type": "None"
+        }
+    },
+    "outbounds": [
+        {
+            "protocol": "vmess",
+            "settings": {
+                "address": "",
+                "port": 0,
+                "uuid": "00000000-0000-0000-0000-000000000000"
+            }
+        }
+    ],
+    "inbounds": [
+        {
+            "protocol": "socks",
+            "settings": {
+                "udpEnabled": true,
+                "address": "127.0.0.1"
+            },
+            "port": 1080
+        },
+        {
+            "protocol": "http",
+            "settings": {},
+            "port": 8080
+        }
+    ]
+}

v5/VMess-TCP/config_server.json

@@ -0,0 +1,34 @@
+{
+    "log": {
+        "error": {
+            "level": "Warning",
+            "type": "Console"
+        },
+        "access": {
+            "type": "None"
+        }
+    },
+    "inbounds": [
+        {
+            "protocol": "vmess",
+            "settings": {
+                "users": [
+                    "00000000-0000-0000-0000-000000000000"
+                ]
+            },
+            "port": 0,
+            "streamSettings": {
+                "transport": "ws",
+                "transportSettings": {
+                    "path": ""
+                },
+                "security": "none"
+            }
+        }
+    ],
+    "outbounds": [
+        {
+            "protocol": "freedom"
+        }
+    ]
+}

v5/VMess-Websocket-TLS/config_client.json

@@ -0,0 +1,46 @@
+{
+    "log": {
+        "error": {
+            "level": "Warning",
+            "type": "Console"
+        },
+        "access": {
+            "type": "None"
+        }
+    },
+    "outbounds": [
+        {
+            "protocol": "vmess",
+            "settings": {
+                "address": "",
+                "port": 0,
+                "uuid": "00000000-0000-0000-0000-000000000000"
+            },
+            "streamSettings": {
+                "transport": "ws",
+                "transportSettings": {
+                    "path": ""
+                },
+                "security": "tls",
+                "securitySettings": {
+                    "serverName": ""
+                }
+            }
+        }
+    ],
+    "inbounds": [
+        {
+            "protocol": "socks",
+            "settings": {
+                "udpEnabled": true,
+                "address": "127.0.0.1"
+            },
+            "port": 1080
+        },
+        {
+            "protocol": "http",
+            "settings": {},
+            "port": 8080
+        }
+    ]
+}

v5/VMess-Websocket-TLS/config_server.json

@@ -0,0 +1,45 @@
+{
+    "log": {
+        "error": {
+            "level": "Warning",
+            "type": "Console"
+        },
+        "access": {
+            "type": "None"
+        }
+    },
+    "inbounds": [
+        {
+            "protocol": "vmess",
+            "settings": {
+                "users": [
+                    "00000000-0000-0000-0000-000000000000"
+                ]
+            },
+            "port": 0,
+            "streamSettings": {
+                "transport": "ws",
+                "transportSettings": {
+                    "path": ""
+                },
+                "security": "tls",
+                "securitySettings": {
+                    "serverName": "",
+                    "certificate": [
+                        {
+                            "usage": "ENCIPHERMENT",
+                            "certificateFile":"",
+                            "keyFile": ""
+                        }
+                    ]
+                }
+            }
+
+        }
+    ],
+    "outbounds": [
+        {
+            "protocol": "freedom"
+        }
+    ]
+}