{
  "dns": {
    "tag": "dns-inbound",
    "servers": [
      "https://8.8.8.8/dns-query",
      "https://8.8.4.4/dns-query",
      "https://1.1.1.1/dns-query",
      "https://1.0.0.1/dns-query"
    ],
    "queryStrategy": "UseIPv4"
  },
  "log": {
    "dnsLog": true,
    "loglevel": "debug"
  },
  "routing": {
    "rules": [
      {
        "ruleTag": "dns-to-proxy",
        "inboundTag": [
          "dns-inbound"
        ],
        "outboundTag": "proxy"
      },
      {
        "ip": [
          "0.0.0.0/8",
          "10.0.0.0/8",
          "100.64.0.0/10",
          "127.0.0.0/8",
          "169.254.0.0/16",
          "172.16.0.0/12",
          "192.0.0.0/24",
          "192.0.2.0/24",
          "192.88.99.0/24",
          "192.168.0.0/16",
          "198.18.0.0/15",
          "198.51.100.0/24",
          "203.0.113.0/24",
          "224.0.0.0/3",
          "::/127",
          "fc00::/7",
          "fe80::/10",
          "ff00::/8"
        ],
        "ruleTag": "geoip-private",
        "outboundTag": "direct"
      },
      {
        "domain": [
          "domain:push.apple.com",
          "domain:api.push.apple.com",
          "domain:courier.push.apple.com"
        ],
        "ruleTag": "apple-push",
        "outboundTag": "direct"
      },
      {
        "port": "53",
        "ruleTag": "dns-hijack",
        "outboundTag": "dns-out"
      },
      {
        "type": "field",
        "domain": [
          "regexp:(^|\\.)2gis\\.com$",
          "regexp:(^|\\.)[^\\.]+\\.ru$",
          "regexp:(^|\\.)[^\\.]+\\.xn--p1ai$",
          "regexp:(^|\\.)ivi\\.tv$",
          "regexp:(^|\\.)max\\.ru$",
          "regexp:(^|\\.)okko\\.tv$",
          "regexp:(^|\\.)oneme\\.app$",
          "regexp:(^|\\.)ozonusercontent\\.com$",
          "regexp:(^|\\.)vk\\.com$",
          "regexp:(^|\\.)wbstatic\\.net$",
          "regexp:(^|\\.)yandex\\.com$",
          "regexp:(^|\\.)yandex\\.net$",
          "regexp:(^|\\.)yastatic\\.net$"
        ],
        "outboundTag": "direct"
      },
      {
        "type": "field",
        "protocol": [
          "bittorrent"
        ],
        "outboundTag": "direct"
      }
    ],
    "domainMatcher": "hybrid",
    "domainStrategy": "IPIfNonMatch"
  },
  "inbounds": [
    {
      "tag": "socks",
      "port": 10808,
      "listen": "127.0.0.1",
      "protocol": "socks",
      "settings": {
        "udp": true,
        "auth": "noauth"
      },
      "sniffing": {
        "enabled": true,
        "routeOnly": false,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "domainsExcluded": [
          "courier.push.apple.com",
          "push.apple.com",
          "api.push.apple.com",
          "regexp:(^|\\.)wa\\.me$",
          "regexp:(^|\\.)whatsapp-plus\\.info$",
          "regexp:(^|\\.)whatsapp-plus\\.me$",
          "regexp:(^|\\.)whatsapp-plus\\.net$",
          "regexp:(^|\\.)whatsapp\\.cc$",
          "regexp:(^|\\.)whatsapp\\.com$",
          "regexp:(^|\\.)whatsapp\\.info$",
          "regexp:(^|\\.)whatsapp\\.net$",
          "regexp:(^|\\.)whatsapp\\.org$",
          "regexp:(^|\\.)whatsapp\\.tv$",
          "regexp:(^|\\.)whatsappbrand\\.com$"
        ]
      }
    },
    {
      "tag": "http",
      "port": 10809,
      "listen": "127.0.0.1",
      "protocol": "http",
      "settings": {
        "allowTransparent": false
      },
      "sniffing": {
        "enabled": true,
        "routeOnly": false,
        "destOverride": [
          "http",
          "tls",
          "quic"
        ],
        "domainsExcluded": [
          "courier.push.apple.com",
          "push.apple.com",
          "api.push.apple.com",
          "regexp:(^|\\.)wa\\.me$",
          "regexp:(^|\\.)whatsapp-plus\\.info$",
          "regexp:(^|\\.)whatsapp-plus\\.me$",
          "regexp:(^|\\.)whatsapp-plus\\.net$",
          "regexp:(^|\\.)whatsapp\\.cc$",
          "regexp:(^|\\.)whatsapp\\.com$",
          "regexp:(^|\\.)whatsapp\\.info$",
          "regexp:(^|\\.)whatsapp\\.net$",
          "regexp:(^|\\.)whatsapp\\.org$",
          "regexp:(^|\\.)whatsapp\\.tv$",
          "regexp:(^|\\.)whatsappbrand\\.com$"
        ]
      }
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "protocol": "vless",
      "settings": {
        "vnext": [
          {
            "address": "at.srv.raw-srv.org",
            "port": 8444,
            "users": [
              {
                "id": "ccba9a61-666e-4ffb-ac63-b6d2cd4c2f84",
                "encryption": "none",
                "flow": ""
              }
            ]
          }
        ]
      },
      "streamSettings": {
        "network": "grpc",
        "grpcSettings": {
          "serviceName": "grpc",
          "authority": "",
          "mode": false
        },
        "security": "reality",
        "realitySettings": {
          "serverName": "dropbox.com",
          "publicKey": "HtGrlWYA8aAU9d5ap1tbB8dOCMkpfsYgXvtwO6LYXks",
          "shortId": "5a9ac84102706afb",
          "spiderX": "/",
          "fingerprint": "firefox"
        }
      }
    },
    {
      "tag": "direct",
      "protocol": "freedom",
      "settings": {
        "domainStrategy": "UseIP"
      }
    },
    {
      "tag": "block",
      "protocol": "blackhole"
    },
    {
      "tag": "dns-out",
      "protocol": "dns"
    }
  ],
  "remarks": "🇦🇹 Австрия · gRPC"
}