1{
 2    "run_type": "client",
 3    "local_addr": "127.0.0.1",
 4    "local_port": 1080,
 5    "remote_addr": "123.com",
 6    "remote_port": 443,
 7    "password": [
 8        "1321"
 9    ],
10    "log_level": 1,
11    "ssl": {
12        "verify": true,
13        "verify_hostname": true,
14        "cert": "",
15        "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA:ECDHE-RSA-AES256-SHA:RSA-AES128-GCM-SHA256:RSA-AES256-GCM-SHA384:RSA-AES128-SHA:RSA-AES256-SHA:RSA-3DES-EDE-SHA",
16        "sni": "",
17        "alpn": [
18            "h2",
19            "http/1.1"
20        ],
21        "reuse_session": true,
22        "session_ticket": false,
23        "curves": ""
24    },
25    "tcp": {
26        "no_delay": true,
27        "keep_alive": true,
28        "fast_open": false,
29        "fast_open_qlen": 20
30    }
31}
32
33

 1[Endpoint]
 2; tag, parser, parser-specific params...
 3Direct, builtin, freedom, domainStrategy=UseIP
 4Reject, builtin, blackhole
 5Dns-Out, builtin, dns
 6; Http-Out, builtin, http, address=192.168.100.1, port=1087, user=myuser, pass=mypass
 7; Socks-Out, builtin, socks, address=127.0.0.1, port=1080, user=myuser, pass=mypass
 8trojan, builtin, socks, address=127.0.0.1, port=1080
 9; Proxy-1, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:443/v2?network=ws&tls=true
10; Proxy-2, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:10025?network=tcp
11; Proxy-3, ss, ss://aes-128-gcm:pass@192.168.100.1:8888
12; Proxy-4, vmess1, vmess1://75da2e14-4d08-480b-b3cb-0079a0c51275@example.com:443/h2?network=http&http.host=example.com%2Cexample1.com&tls=true&tls.allowinsecure=true
13
14[EndpointGroup]
15; tag, colon-seperated list of selectors or endpoint tags, strategy, strategy-specific params...
16Group-1, trojan, latency, interval=300, timeout=6
17
18[Routing]
19domainStrategy = IPIfNonMatch
20
21[RoutingRule]
22; type, filter, endpoint tag or enpoint group tag
23DOMAIN-KEYWORD, geosite:category-ads-all, Reject
24IP-CIDR, 223.5.5.5/32, Direct
25IP-CIDR, 8.8.8.8/32, Group-1
26IP-CIDR, 8.8.4.4/32, Group-1
27; PROCESS-NAME, cloudmusic.exe, Direct
28PROCESS-NAME, trojan, Direct
29PROCESS-NAME, NeteaseMusic, Direct
30GEOIP, cn, Direct
31GEOIP, private, Direct
32PORT, 123, Direct
33DOMAIN-KEYWORD, geosite:cn, Direct
34DOMAIN, www.google.com, Group-1
35DOMAIN-FULL, www.google.com, Group-1
36DOMAIN-SUFFIX, google.com, Group-1
37FINAL, Group-1
38
39[Dns]
40; hijack = dns endpoint tag
41hijack = Dns-Out
42; cliengIp = ip
43clientIp = 114.114.114.114
44
45[DnsServer]
46; address, port, tag
47localhost
48223.5.5.5
498.8.8.8, 53, Remote
508.8.4.4
51
52[DnsRule]
53; type, filter, dns server tag
54DOMAIN-KEYWORD, geosite:geolocation-!cn, Remote
55DOMAIN-SUFFIX, google.com, Remote
56
57[DnsHost]
58; domain = ip
59doubleclick.net = 127.0.0.1
60
61[Log]
62loglevel = warning
63