1[Endpoint]
 2Direct, builtin, freedom, domainStrategy=UseIP
 3Dns-Out, builtin, dns
 4trojan, builtin, socks, address=127.0.0.1, port=1080
 5
 6[Routing]
 7domainStrategy = IPIfNonMatch
 8
 9[RoutingRule]
10IP-CIDR, 223.5.5.5/32, Direct
11IP-CIDR, 8.8.8.8/32, trojan
12IP-CIDR, 8.8.4.4/32, trojan
13PROCESS-NAME, trojan.exe, Direct
14GEOIP, cn, Direct
15GEOIP, private, Direct
16PORT, 123, Direct
17DOMAIN-KEYWORD, geosite:cn, Direct
18DOMAIN-SUFFIX,ampproject.org, trojan
19DOMAIN, www.google.com, trojan
20DOMAIN-FULL, www.google.com, trojan
21DOMAIN-SUFFIX, google.com, trojan
22FINAL, trojan
23
24[Dns]
25clientIp = 114.114.114.114
26
27[DnsServer]
28223.5.5.5
298.8.8.8, 53, Remote
308.8.4.4
31
32[DnsRule]
33DOMAIN-KEYWORD, geosite:geolocation-!cn, Remote
34DOMAIN-SUFFIX, google.com, Remote
35
36[Log]
37loglevel = warning

 1[Endpoint]
 2; tag, parser, parser-specific params...
 3Direct, builtin, freedom, domainStrategy=UseIP
 4Reject, builtin, blackhole
 5Dns-Out, builtin, dns
 6Http-Out, builtin, http, address=192.168.100.1, port=1087, user=myuser, pass=mypass
 7Socks-Out, builtin, socks, address=192.168.100.1, port=1080, user=myuser, pass=mypass
 8Proxy-1, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:443/path?network=ws&tls=true&ws.host=example.com
 9Proxy-2, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:10025?network=tcp
10Proxy-3, ss, ss://aes-128-gcm:pass@192.168.100.1:8888
11Proxy-4, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:443/path?network=http&http.host=example.com%2Cexample1.com&tls=true&tls.allowinsecure=true
12Proxy-7, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:10025?network=kcp&kcp.mtu=1350&kcp.tti=20&kcp.uplinkcapacity=1&kcp.downlinkcapacity=2&kcp.congestion=false&header=none&sockopt.tos=184
13Proxy-8, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:10025?network=quic&quic.security=none&quic.key=&header=none&tls=false&sockopt.tos=184
14
15[EndpointGroup]
16; tag, colon-seperated list of selectors or endpoint tags, strategy, strategy-specific params...
17Group-1, Proxy-1:Proxy-2:Proxy-3, latency, interval=300, timeout=6
18
19[Routing]
20domainStrategy = IPIfNonMatch
21
22[RoutingRule]
23; type, filter, endpoint tag or enpoint group tag
24DOMAIN-KEYWORD, geosite:category-ads-all, Reject
25IP-CIDR, 223.5.5.5/32, Direct
26IP-CIDR, 8.8.8.8/32, Group-1
27IP-CIDR, 8.8.4.4/32, Group-1
28PROCESS-NAME, cloudmusic.exe, Direct
29PROCESS-NAME, NeteaseMusic, Direct
30GEOIP, cn, Direct
31GEOIP, private, Direct
32PORT, 123, Direct
33DOMAIN-KEYWORD, geosite:cn, Direct
34DOMAIN, www.google.com, Group-1
35DOMAIN-FULL, www.google.com, Group-1
36DOMAIN-SUFFIX, google.com, Group-1
37FINAL, Group-1
38
39[Dns]
40; hijack = dns endpoint tag
41hijack = Dns-Out
42; cliengIp = ip
43clientIp = 114.114.114.114
44
45[DnsServer]
46; address, port, tag
47localhost
48223.5.5.5
498.8.8.8, 53, Remote
508.8.4.4
51
52[DnsRule]
53; type, filter, dns server tag
54DOMAIN-KEYWORD, geosite:geolocation-!cn, Remote
55DOMAIN-SUFFIX, google.com, Remote
56
57[DnsHost]
58; domain = ip
59doubleclick.net = 127.0.0.1
60
61[Log]
62loglevel = warning