|
|
|
|
@ -1,89 +1,69 @@
|
|
|
|
|
# 除了注释建议浏览官方手册（https://manual.nssurge.com/）、帮助中心（https://nssurge.zendesk.com/）以及技术社区（https://community.nssurge.com）
|
|
|
|
|
# 官方手册 - https://manual.nssurge.com/
|
|
|
|
|
# 理解原理 - https://manual.nssurge.com/book/understanding-surge/cn/
|
|
|
|
|
# 帮助中心 - https://nssurge.zendesk.com/
|
|
|
|
|
# 技术社区 - https://community.nssurge.com
|
|
|
|
|
|
|
|
|
|
[General]
|
|
|
|
|
# ---(通用)---
|
|
|
|
|
# 延迟测试
|
|
|
|
|
# 通用设置
|
|
|
|
|
|
|
|
|
|
# > 增强版 Wi-Fi 助理
|
|
|
|
|
# (在 Wi-Fi 网络不佳时尝试使用数据网络建立连接，请仅当使用不限量的数据流量时开启)
|
|
|
|
|
wifi-assist = false
|
|
|
|
|
|
|
|
|
|
# > Internet 测试 URL
|
|
|
|
|
internet-test-url = http://www.aliyun.com
|
|
|
|
|
internet-test-url = http://wifi.vivo.com.cn/generate_204
|
|
|
|
|
# > 代理测速 URL
|
|
|
|
|
proxy-test-url = http://www.gstatic.com/generate_204
|
|
|
|
|
proxy-test-url = http://cp.cloudflare.com/generate_204
|
|
|
|
|
# > 测试超时（秒）
|
|
|
|
|
# test-timeout = 5
|
|
|
|
|
# TLS 引擎
|
|
|
|
|
test-timeout = 5
|
|
|
|
|
|
|
|
|
|
# > TLS 引擎
|
|
|
|
|
tls-provider = openssl
|
|
|
|
|
# GeoIP 数据库
|
|
|
|
|
|
|
|
|
|
# > 自定义 GeoIP 数据库
|
|
|
|
|
geoip-maxmind-url = https://raw.githubusercontent.com/JMVoid/ipip2mmdb/release/Country.mmdb
|
|
|
|
|
# IPv6 支持（关闭）
|
|
|
|
|
|
|
|
|
|
# > IPv6 支持（默认关闭）
|
|
|
|
|
ipv6 = false
|
|
|
|
|
# ------
|
|
|
|
|
|
|
|
|
|
# ---(Wi-Fi 访问)---
|
|
|
|
|
# > 允许 Wi-Fi 访问 (仅 iOS，若允许远程访问将「false」改为「true」)
|
|
|
|
|
allow-wifi-access = false
|
|
|
|
|
wifi-access-http-port = 6152
|
|
|
|
|
wifi-access-socks5-port = 6153
|
|
|
|
|
# ------
|
|
|
|
|
|
|
|
|
|
# ---(远程控制器)---
|
|
|
|
|
# 允许 Surge 请求查看器或 Surge CLI 进行管理控制。
|
|
|
|
|
# 如果允许由 Wi-Fi 控制则将「127.0.0.1」修改为「0.0.0.0」
|
|
|
|
|
# external-controller-access = password@127.0.0.1:6170
|
|
|
|
|
# ------
|
|
|
|
|
# > 允许 Wi-Fi 访问 (仅 macOS，若允许远程访问将「127.0.0.1」改为「0.0.0.0」)
|
|
|
|
|
http-listen = 127.0.0.1:6152
|
|
|
|
|
socks5-listen = 127.0.0.1:6153
|
|
|
|
|
|
|
|
|
|
# ---(兼容性)---
|
|
|
|
|
# 兼容模式
|
|
|
|
|
# > 兼容模式 (仅 iOS)
|
|
|
|
|
# compatibility-mode = 0
|
|
|
|
|
# 跳过代理
|
|
|
|
|
# > 跳过代理
|
|
|
|
|
skip-proxy = 127.0.0.1, 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12, 100.64.0.0/10, localhost, *.local, passenger.t3go.cn
|
|
|
|
|
# 排除简单主机名
|
|
|
|
|
# > 排除简单主机名
|
|
|
|
|
exclude-simple-hostnames = true
|
|
|
|
|
# SSID 组策略
|
|
|
|
|
# 当 Wi-Fi 不是首选网络时 SSID 组策略使用默认策略（仅 macOS 版）
|
|
|
|
|
use-default-policy-if-wifi-not-primary = false
|
|
|
|
|
# ------
|
|
|
|
|
|
|
|
|
|
# ---(DNS 服务器)---
|
|
|
|
|
# 电信 118.118.118.118
|
|
|
|
|
# 联通 116.116.116.116
|
|
|
|
|
|
|
|
|
|
# > Network framwork
|
|
|
|
|
network-framework = false
|
|
|
|
|
|
|
|
|
|
# > DNS 服务器 (如无必要不建议使用 DNS over HTTPS)
|
|
|
|
|
dns-server = 119.29.29.29,system
|
|
|
|
|
# ------
|
|
|
|
|
# > 从 /etc/hosts 读取 DNS 记录
|
|
|
|
|
read-etc-hosts = true
|
|
|
|
|
|
|
|
|
|
# ---(实验性功能)---
|
|
|
|
|
# 使用 Network framework
|
|
|
|
|
# network-framework = true
|
|
|
|
|
# ------
|
|
|
|
|
# 高级设置
|
|
|
|
|
|
|
|
|
|
# ---(高级)---
|
|
|
|
|
# 日志级别
|
|
|
|
|
# > 日志级别
|
|
|
|
|
loglevel = notify
|
|
|
|
|
|
|
|
|
|
# 当遇到 REJECT 策略时返回错误页
|
|
|
|
|
# > 当遇到 REJECT 策略时返回错误页
|
|
|
|
|
show-error-page-for-reject = true
|
|
|
|
|
|
|
|
|
|
# Always Real IP Hosts
|
|
|
|
|
# 当 Surge VIF 处理 DNS 问题时，此选项要求 Surge 返回一个真正的 IP 地址，而不是一个假 IP 地址。
|
|
|
|
|
# DNS 数据包将被转发到上游 DNS 服务器。
|
|
|
|
|
# > Always Real IP Hosts
|
|
|
|
|
always-real-ip = msftconnecttest.com, msftncsi.com, *.msftconnecttest.com, *.msftncsi.com, *.srv.nintendo.net, *.stun.playstation.net, xbox.*.microsoft.com, *.xboxlive.com
|
|
|
|
|
|
|
|
|
|
# Hijack DNS
|
|
|
|
|
# 默认情况下，Surge 只返回发送到 Surge DNS 地址的 DNS 查询的假 IP 地址(198.18.0.2)。
|
|
|
|
|
# 有些设备或软件总是使用硬编码的 DNS 服务器。 (例如 Google Speakers 总是使用 8.8.8.8)。 您可以使用此选项劫持查询，以获得一个假地址。
|
|
|
|
|
# hijack-dns = 8.8.8.8:53, 8.8.4.4:53
|
|
|
|
|
|
|
|
|
|
# TCP Force HTTP Hosts
|
|
|
|
|
# 让 Surge 把 TCP 连接当作 HTTP 请求来处理。Surge HTTP 引擎将处理这些请求，所有的高级功能，如捕获、重写和脚本等都可以使用。
|
|
|
|
|
# > TCP Force HTTP Hosts
|
|
|
|
|
force-http-engine-hosts = *.ott.cibntv.net,123.59.31.1,119.18.193.135,122.14.246.33,175.102.178.52
|
|
|
|
|
|
|
|
|
|
# VIF Excluded Routes
|
|
|
|
|
# Surge VIF 只能处理 TCP 和 UDP 协议。使用此选项可以绕过特定的 IP 范围，允许所有流量通过。
|
|
|
|
|
# tun-excluded-routes = 192.168.0.0/16, 10.0.0.0/8, 172.16.0.0/12
|
|
|
|
|
|
|
|
|
|
# VIF Included Routes
|
|
|
|
|
# 默认情况下，Surge VIF 接口会声明自己是默认路由。但是，由于 Wi-Fi 接口的路由较小，有些流量可能不会通过 Surge VIF 接口。使用此选项可以添加一条较小的路由。
|
|
|
|
|
# tun-included-routes = 192.168.1.12/32
|
|
|
|
|
# ------
|
|
|
|
|
|
|
|
|
|
[Replica]
|
|
|
|
|
# ---(实验性功能)---
|
|
|
|
|
# 0 为关闭，1 为开启
|
|
|
|
|
# > 隐藏 Apple 请求
|
|
|
|
|
hide-apple-request=0
|
|
|
|
|
@ -96,7 +76,6 @@ hide-udp=0
|
|
|
|
|
# keyword-filter-type = none
|
|
|
|
|
# > 关键词
|
|
|
|
|
# keyword-filter = (null)
|
|
|
|
|
# ------
|
|
|
|
|
|
|
|
|
|
[Proxy]
|
|
|
|
|
🌐Direct = direct
|
|
|
|
|
@ -120,7 +99,7 @@ hide-udp=0
|
|
|
|
|
🧯Fallback = fallback,🇺🇸LosSantos,🇨🇳TheHub,url = http://www.gstatic.com/generate_204
|
|
|
|
|
# 延迟自动测试
|
|
|
|
|
🕹AutoTest = url-test,🦆DuckDuckGo,🇺🇸LosSantos,🇭🇰Sandbox,url = http://www.gstatic.com/generate_204
|
|
|
|
|
# 冲鸭机场
|
|
|
|
|
# 冲鸭机场 (代理服务商提供的代理列表订阅示例)
|
|
|
|
|
🦆DuckDuckGo = select, policy-path=https://duckduckgo.security/user/sub.php?token=DivineEngine
|
|
|
|
|
|
|
|
|
|
[Rule]
|
|
|
|
|
|
Conners Hua
4 years ago