ClashRS

- Flexible traffic routing rules based off source/destination IP/Domain/GeoIP etc. - Local anti spoofing DNS with support of UDP/TCP/DoH/DoT remote, and expose it as a local UDP/TCP/DoH/DoT server. - Run as an HTTP/Socks5 proxy, or utun device as a home network gateway. - Shadowsocks/Trojan/Vmess/Wireguard(userspace)/Tor/Tuic/Socks5(TCP/UDP) outbound support with different underlying trasports(gRPC/TLS/H2/WebSocket/etc.). - Dynamic remote rule/proxy loader. Demo configuration file: allow-lan: true mode: rule log-level: debug external-controller: 127.0.0.1:6170 mixed-port: 8899 dns: enable: true listen: 127.0.0.1:53533 default-nameserver: - 114.114.114.114 - 8.8.8.8 enhanced-mode: fake-ip fake-ip-range: 198.18.0.1/16 nameserver: - 114.114.114.114 # default value - 8.8.8.8 # default value - tls://dns.google:853 # DNS over TLS - https://1.1.1.1/dns-query # DNS over HTTPS proxies: - name: ss-2022 type: ss server: 127.0.0.1 port: 8390 cipher: 2022-blake3-aes-256-gcm password: ss2022blake rules: - MATCH, ss-2022