# 由 OpenClash 节点管理工具生成 2026-07-28 19:15:46
mixed-port: 7890
allow-lan: true
bind-address: "*"
mode: rule
ipv6: false
log-level: info
external-controller: 0.0.0.0:9090

dns:
  enable: true
  ipv6: false
  listen: 0.0.0.0:53
  enhanced-mode: redir-host
  default-nameserver:
    - 119.29.29.29
    - 223.5.5.5
  nameserver:
    - 119.29.29.29
    - 223.5.5.5

proxies:
  - {name: NJ01, type: socks5, server: njtxy01.fslvlx.best, port: 8888, username: ubuntu1, password: Zsmj1991, udp: true}
  - {name: NJ02, type: socks5, server: njtxy02.fslvlx.best, port: 8888, username: ubuntu2, password: Zsmj1991, udp: true}
  - {name: NJ03, type: socks5, server: njtxy03.fslvlx.best, port: 8888, username: ubuntu3, password: Zsmj1991, udp: true}
  - {name: NJ04, type: socks5, server: njtxy04.fslvlx.best, port: 8888, username: ubuntu4, password: Zsmj1991, udp: true}
  - {name: NJ05, type: socks5, server: njtxy05.fslvlx.best, port: 8888, username: ubuntu5, password: Zsmj1991, udp: true}
  - {name: NJ06, type: socks5, server: njtxy06.fslvlx.best, port: 8888, username: ubuntu6, password: Zsmj1991, udp: true}
  - {name: NJ07, type: socks5, server: njtxy07.fslvlx.best, port: 8888, username: ubuntu7, password: Zsmj1991, udp: true}
  - {name: NJ08, type: socks5, server: njtxy08.fslvlx.best, port: 8888, username: ubuntu8, password: Zsmj1991, udp: true}
  - {name: NJ09, type: socks5, server: njtxy09.fslvlx.best, port: 8888, username: ubuntu9, password: Zsmj1991, udp: true}
  - {name: NJ10, type: socks5, server: njtxy10.fslvlx.best, port: 8888, username: ubuntu10, password: Zsmj1991, udp: true}

proxy-groups:
  - {name: "💻 - 192.168.8.11", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.101", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.102", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.103", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.104", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.105", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.106", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.107", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.108", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.109", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: "💻 - 192.168.8.110", type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10,DIRECT]}
  - {name: 其他内网设备, type: select, url: http://connectivitycheck.platform.hicloud.com/generate_204, interval: 300, proxies: [DIRECT,NJ01,NJ02,NJ03,NJ04,NJ05,NJ06,NJ07,NJ08,NJ09,NJ10]}

rules:
  # 本机 + 网关直连(最优先)
  - SRC-IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - SRC-IP-CIDR,192.168.8.253/32,DIRECT,no-resolve
  # 节点服务器IP 直连(防回环)
  # DNS 直连
  - DST-PORT,53,DIRECT,no-resolve
  - IP-CIDR,119.29.29.29/32,DIRECT,no-resolve
  - IP-CIDR,223.5.5.5/32,DIRECT,no-resolve
  # 【业务核心】设备内网IP 精确匹配 → 出口(必须早于内网兜底)
  - SRC-IP-CIDR,192.168.8.11/32,💻 - 192.168.8.11
  - SRC-IP-CIDR,192.168.8.101/32,💻 - 192.168.8.101
  - SRC-IP-CIDR,192.168.8.102/32,💻 - 192.168.8.102
  - SRC-IP-CIDR,192.168.8.103/32,💻 - 192.168.8.103
  - SRC-IP-CIDR,192.168.8.104/32,💻 - 192.168.8.104
  - SRC-IP-CIDR,192.168.8.105/32,💻 - 192.168.8.105
  - SRC-IP-CIDR,192.168.8.106/32,💻 - 192.168.8.106
  - SRC-IP-CIDR,192.168.8.107/32,💻 - 192.168.8.107
  - SRC-IP-CIDR,192.168.8.108/32,💻 - 192.168.8.108
  - SRC-IP-CIDR,192.168.8.109/32,💻 - 192.168.8.109
  - SRC-IP-CIDR,192.168.8.110/32,💻 - 192.168.8.110
  # 目的地为内网/保留地址 → 直连(访问内网资源)
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
  - IP-CIDR,224.0.0.0/4,DIRECT,no-resolve
  # 其它内网设备(源地址，非网关/非已配置设备)→ 其他内网设备组
  - SRC-IP-CIDR,192.168.0.0/16,其他内网设备
  - SRC-IP-CIDR,10.0.0.0/8,其他内网设备
  - SRC-IP-CIDR,172.16.0.0/12,其他内网设备
  - MATCH,DIRECT