Config Examples

[piyoki]

Welcome to share your config.dae in this discussion panel. Doing so can definitely benefit the dae community. Thanks in advance.

Geosite based on https://github.com/v2fly/domain-list-community

Regex Standard: https://github.com/google/re2/wiki/Syntax

[youwei5683]

global {
	# 绑定到 LAN 和/或 WAN 接口。将下述接口替换成你自己的接口名。
	lan_interface: eth0
	wan_interface: auto # 使用 "auto" 自动侦测 WAN 接口。
	dial_mode: domain++
	log_level: info
	allow_insecure: false
	auto_config_kernel_parameter: true
	tcp_check_http_method: GET
        check_tolerance: 50ms
	disable_waiting_network: true
}


subscription {}

node {
	chatgpt:'ss://'
	SHENGANGT48:'ss://'
	ZHANXUXIN:'ss://'
	chatgpt:'ss://'
}
dns {
	
        upstream {
                googledns: 'tcp+udp://8.8.8.8:53'
                alidns: 'udp://223.5.5.5:53'
        }
        routing {
          request {  
		#去广告 https://github.com/techprober/v2ray-rules-dat
	
		qname(geosite:category-ads) -> reject
		qname(geosite:category-ads-all) -> reject
		qname(geosite:cn) -> alidns
		fallback: googledns
          }
        }
}

group {

	proxy {
		#filter: subtag(sub)
		filter: name('SHENGANGT48')
      	        filter: name('ShuiMo')[add_latency: 150ms]
		filter: name('ZHANXUXIN')[add_latency: 300ms]
		policy: min_moving_avg
	}	
  	
  	chatgpt {
      	        filter: name('chatgpt')
		policy: min
	}
}
routing {
        pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
        dip(224.0.0.0/3) -> direct
        
        #去广告 https://github.com/techprober/v2ray-rules-dat
        domain(geosite:category-ads) -> block
        domain(geosite:category-ads-all) -> block
        domain(gstatic.com) -> proxy
        
        l4proto(udp) && dport(443) && domain(geosite:youtube) -> block
        
        #chatGPT
        domain(openai.com,
                     pay.openai.com,
                     chat.openai.com,
                     challenges.cloudflare.com,
                     auth0.openai.com,
                     platform.openai.com,
                     # Add ai.com
                     ai.com,
                     # Add stripe.com
                     invoice.stripe.com,
                     stripe.com,
                     # Add justmysocks.ne
                     justmysocks.ne) -> chatgpt
        
        dip(geoip:private, geoip:cn) -> direct
        domain(geosite:cn) -> direct
        
        dport(23-65535) -> proxy
        fallback: proxy
}

[WhiteBalance2800K]

###自用 ImmortalWRT，未修改 dnsmasq 设置

global {
  lan_interface: 'br-lan'
  wan_interface: "auto"
  dial_mode: domain
#disable_waiting_network: false
  log_level: trace
  allow_insecure: false
  auto_config_kernel_parameter: true
}

subscription {     
    data: 'https://'
}


dns {
  ipversion_prefer: 4
  upstream {
    puredns: 'udp://221.131.165.165:53'
    alidns: 'udp://dns.alidns.com:53'
  }
  routing {
    request {
      fallback: alidns
    }
    # 根据 DNS 查询的回复， 决定接受或使用其他 upstream 重新查询。
    # 按由上到下的顺序匹配。
    response {
      # 可信的 upstream。总是接受它的回复。
      upstream(puredns) -> accept
      # 非大陆的网站，向 'puredns' 重查。
      !qname(geosite:cn) -> puredns
      # fallback 意为 default。
      fallback: accept
    }
  }
}

group {
  proxy {
    policy: fixed(0)
    filter: name(keyword: 'Hong')
  }
}

routing {
  !mac('xxxx') -> must_direct #白名单模式
  pname('NetworkManager','systemd-resolved','dnsmasq','zerotier-one') -> must_direct
  mac('xxxx') && !dport(21,22,23,53,80,123,143,194,443,465,587,853,993,995,998,2052,2053,2082,2083,2086,2095,2096,3000,8080,8443,8787,8880,8888) -> must_direct #高位端口直连，防止 BT 流量经过代理
  sport(33627,47643) -> must_direct #BT 软件端口
  !dport(53) && l4proto(udp) -> must_direct
  domain(keyword: tracker,announce,torrent) -> direct
  domain(suffix: 'docker.com','githubusercontent.com','themoviedb.org','tmdb.org','telegram.org','fanart.tv') -> proxy #NASTOOL 代理
  domain(suffix: 'torrent.com,'tracker.com') -> direct #BT 软件向 tracker 汇报直连，必须修改为自己的站点
  dip(224.0.0.0/3, 'ff00::/8') -> direct
  dip(geoip:private) -> direct
  dip(geoip:cn) -> direct
  domain(geosite:cn) -> direct

  fallback: proxy

[jdjingdian]

Is there a way to customize node parameters? I need to specify a server address for vless, and ignore SSL certificate.

[jdjingdian]

Sorry for this stupid question, I think I can simply modify the vless link to change the server address, and set allow_insecure: true

[sdttttt]

# 黑名单模式
# 运行在 OpenWRT
# geosite 和 geoip 来自 github.com/Loyalsoldier/v2ray-rules-dat

dns {
	ipversion_prefer: 4
	
        
	upstream {
	  cndns: 'tcp+udp://127.0.0.1:53' # dnsmasq
	  falldns: 'tcp+udp://1.1.1.1:53'
	}
	
	routing {
	  request {
	    qname(ext:'geosite.dat:category-ads-all') -> reject
	    fallback: cndns
	  }
	
	  response {
	            upstream(falldns) -> accept
	            qname(ext:'geosite.dat:private') -> accept
	            ip(geoip:private) && !qname(ext:'geosite.dat:cn') -> falldns
	            fallback: accept
	  }
	}
}

routing {
	pname(NetworkManager, systemd-resolved, dnsmasq) -> must_direct
	
	ipversion(6) -> direct

	# 目标非常用端口都走直连，避免BT流量走代理
	!dport(21,22,23,53,80,123,143,194,443,465,587,853,993,995,998) -> direct
	
	domain(ext:'geosite.dat:category-ads-all') -> block
	
	domain(ext:'geosite:github') -> proxy
	domain(ext:'geosite:telegram') -> proxy
	dip(ext:'geoip:telegram') -> proxy
        # 一般情况下gfw够用
	domain(ext:'geosite:gfw') -> proxy
	
        #domain(ext:'geosite:category-games') -> direct
	#domain(ext:'geosite:geolocation-!cn') -> proxy
	
	fallback: direct
}

[SoraShu]

An example for separated configuration, may be useful for switch config via tools like sed:

Directory Structure:

# tree /etc/dae
/etc/dae
├── config.d
│  ├── dns.dae
│  ├── node.dae
│  └── route.dae
└── config.dae

Config files:

# config.dae
include {
    config.d/*.dae
}
global {
    tproxy_port: 12345

    log_level: warn

    tcp_check_url: 'http://cp.cloudflare.com'
    udp_check_dns: 'dns.google.com:53'
    check_interval: 600s
    check_tolerance: 50ms

    #lan_interface: eth0
    wan_interface: eth0
    allow_insecure: false

    dial_mode: domain
    disable_waiting_network: false
    auto_config_kernel_parameter: true
    sniffing_timeout: 100ms
}

# dns.dae
dns {
    upstream {
        alidns: 'udp://dns.alidns.com:53'
        googledns: 'tcp+udp://dns.google.com:53'
    }

    routing {
        request {
            qname(geosite:category-ads) -> reject
            qname(geosite:category-ads-all) -> reject
            fallback: alidns
        }
        response {
            upstream(googledns) -> accept
            !qname(geosite:cn) && ip(geoip:private) -> googledns
            fallback: accept
        }
    }
}

# node.dae
node {
    node1: 'xxx'
    node2: 'xxx'
}

subscription {
    my_sub: 'https://www.example.com/subscription/link'
}

group {
    my_group {
        filter: subtag(my_sub) && !name(keyword: 'ExpireAt:')
        policy: min_moving_avg
    }

    local_group {
        filter: name(node1, node2)
        policy: fixed(0)
    }
}

# route.dae
routing {
    pname(NetworkManager) -> direct
    dip(224.0.0.0/3, 'ff00::/8') -> direct
    dip(geoip:private) -> direct

    dip(1.14.5.14) -> direct

    domain(geosite:openai) -> local_group
    dip(geoip:cn) -> direct
    domain(geosite:cn) -> direct
    domain(geosite:category-scholar-cn) -> direct
    domain(geosite:geolocation-cn) -> direct


    fallback: my_group
}

[Ziqi-Yang]

校园网下 DNS 和 Routing 的配置。 认证服务器如 lgn.xxxx.edu.cn 在内网。* 表示下一行是重要配置。
DNS

可能git push的时候使用ssh会有点问题，总之我现在用广电卡加移动wifi了，去tm的校园网 :P

dns {
  upstream {
    # * use `dig xxxx.edu.cn ns` or `nslookup -type=ns xxxx.edu.cn` to find the DNS server address
    xxxx: 'udp://10.21.200.28:53'
    googledns: 'tcp+udp://dns.google.com:53'
    alidns: 'udp://dns.alidns.com:53'
  }
  routing {
    request {
      // * A list of address to go through your university DNS server
      qname(full: my.xxxx.edu.cn, full:lgn.xxxx.edu.cn) -> xxxx
      fallback: alidns
    }
    # according to the response, we can decide to query DNS with other DNS upstreams
    response {
      // *
      upstream(xxxx) -> accept
      upstream(googledns) -> accept
      # If DNS request name is not in CN and response answers include private IP, which is most likely polluted
      # in China mainland. Therefore, resend DNS request to 'googledns' to get correct result.
      ip(geoip:private) && !qname(geosite:cn) -> googledns
      fallback: accept
    }
  }
}

Routing

routing {
  pname(NetworkManager) -> direct
  dip(224.0.0.0/3, 'ff00::/8') -> direct

  # * xxxx DNS
  sip(10.21.200.28) && l4proto(udp) && dport(53) -> must_direct
  
  # Disable h3 because it usually consumes too much cpu/mem resources.
  l4proto(udp) && dport(443) -> block
  dip(geoip:private) -> direct  # local address like 127.0.0.1
  dip(geoip:cn) -> direct
  domain(geosite:cn) -> direct

  fallback: proxy
}

[azone]

打开国内网站老是超时和丢包是怎么回事？