mode: rule
log-level: info
ipv6: false

dns:
  enable: true
  listen: 0.0.0.0:53
  enhanced-mode: fake-ip
  nameserver:
    - https://1.1.1.1/dns-query
    - https://8.8.8.8/dns-query

# После сна iOS старые QUIC-сессии приложений могут зависать.
# Запрещаем только QUIC, чтобы Instagram и другие приложения использовали HTTPS/TCP.
script:
  shortcuts:
    quic: network == 'udp' and dst_port == 443

proxies:
  - name: OWN-Stable-TCP
    type: trojan
    server: 194.117.88.243
    port: 8443
    password: 2a04697157b3fb6c54341c924fac55d5133f20353976fa62
    sni: 194-117-88-243.sslip.io
    skip-cert-verify: true
    udp: true

proxy-groups:
  - name: VPN
    type: select
    proxies:
      - OWN-Stable-TCP
      - DIRECT

rules:
  - SCRIPT,quic,REJECT
  - DOMAIN-SUFFIX,telegram.org,VPN
  - DOMAIN-SUFFIX,t.me,VPN
  - DOMAIN-SUFFIX,telegram.me,VPN
  - DOMAIN-SUFFIX,telesco.pe,VPN
  - DOMAIN-SUFFIX,telegra.ph,VPN
  - IP-CIDR,91.108.4.0/22,VPN,no-resolve
  - IP-CIDR,91.108.8.0/22,VPN,no-resolve
  - IP-CIDR,91.108.12.0/22,VPN,no-resolve
  - IP-CIDR,91.108.16.0/22,VPN,no-resolve
  - IP-CIDR,91.108.20.0/22,VPN,no-resolve
  - IP-CIDR,91.108.56.0/22,VPN,no-resolve
  - IP-CIDR,149.154.160.0/20,VPN,no-resolve
  - DOMAIN-SUFFIX,instagram.com,VPN
  - DOMAIN-SUFFIX,cdninstagram.com,VPN
  - DOMAIN-SUFFIX,facebook.com,VPN
  - DOMAIN-SUFFIX,facebook.net,VPN
  - DOMAIN-SUFFIX,fbcdn.net,VPN
  - DOMAIN-SUFFIX,fbsbx.com,VPN
  - DOMAIN-SUFFIX,meta.com,VPN
  - DOMAIN,194-117-88-243.sslip.io,DIRECT
  - DOMAIN-SUFFIX,sslip.io,DIRECT
  - IP-CIDR,194.117.88.243/32,DIRECT,no-resolve
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - DOMAIN-SUFFIX,ru,DIRECT
  - DOMAIN-SUFFIX,su,DIRECT
  - DOMAIN-SUFFIX,xn--p1ai,DIRECT
  - DOMAIN-SUFFIX,yandex.ru,DIRECT
  - DOMAIN-SUFFIX,yandex.net,DIRECT
  - DOMAIN-SUFFIX,ya.ru,DIRECT
  - DOMAIN-SUFFIX,vk.com,DIRECT
  - DOMAIN-SUFFIX,vk.ru,DIRECT
  - DOMAIN-SUFFIX,mail.ru,DIRECT
  - DOMAIN-SUFFIX,ok.ru,DIRECT
  - DOMAIN-SUFFIX,gosuslugi.ru,DIRECT
  - DOMAIN-SUFFIX,sberbank.ru,DIRECT
  - DOMAIN-SUFFIX,sber.ru,DIRECT
  - DOMAIN-SUFFIX,tbank.ru,DIRECT
  - DOMAIN-SUFFIX,tinkoff.ru,DIRECT
  - DOMAIN-SUFFIX,ozon.ru,DIRECT
  - DOMAIN-SUFFIX,wildberries.ru,DIRECT
  - DOMAIN-SUFFIX,avito.ru,DIRECT
  - MATCH,VPN
