SpechtLite.Config/Proxy.yaml at master · ChengLuffy/SpechtLite.Config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
# This is the local http proxy server port.
# Note there is another SOCKS5 proxy server starts at port+1 automatically.
port: 9090
# Adapter is the remote proxy server you want to connect to
adapter:
     # id is used to distinguish adapter when defining rules.
     # There is a 'direct' adapter that connect directly to target host without proxy.
  - id: one
    type: SHTTP
    host: http.proxy.connect.via.https
    port: 3128
    auth: true
    username: proxy_username
    password: proxy_password
  - id: adapter1
     # HTTP server is a http proxy server.
    type: HTTP
    host: http.proxy
    port: 3128
    auth: true
    username: proxy_username
    password: proxy_password
  - id: adapter2
     # SHTTP server is a http proxy server on SSL.
    type: SHTTP
    host: http.proxy.connect.via.https
    port: 3128
    auth: true
    username: proxy_username
    password: proxy_password
  - id: ss_proxy
    type: ss
    host: your host
    port: 443
    # Currently support: AES-128-CFB, AES-192-CFB, AES-256-CFB, chacha20, salsa20, rc4-md5
    # Shadowsocks encryption methods are not fully tested, please report if there is anything not working.
    method: AES-256-CFB
    password: your password
    # Currently support: origin and verify_sha1
    protocol: origin
    # Currently support: origin, http_simple and tls1.2_ticket_auth
    obfs: origin
  - id: adapter4
    type: socks5
    host: socks5.server
    port: 3128
  # Speed adapter automatically connects to all specified adapters (with given delay)
  # and uses the fastest one that becomes ready.
  - id: proxy
    type: SPEED
    adapters:
      - id: adapter1
        delay: 300
  # Disconnect after given delay without connecting to remote.
  - id: reject
    type: reject
    # It's very important to set a delay since some apps may try to reconnect repeatedly.
    delay: 300
# Here defines how things should work.
# Rule will be matched one by one.
rule:
  - type: iplist
  # Forward polluted host IP address
    file: ~/.SpechtLite/one
    adapter: one
  - type: iplist
  # Forward polluted host IP address
    file: ~/.SpechtLite/pollutedip
    adapter: proxy
  - type: list
  # Forward requests based on whether the host domain matches the given regular expressions.
    file: ~/.SpechtLite/directlist
    adapter: direct
  - type: iplist
  # Forward requests based on the IP address of the host.
    file: ~/.SpechtLite/directiprange
    adapter: direct
  - type: list
  # 某些链接不适合多节点 speed 规则，而且必须 科学上网，稳定节点链接相应请求 例如 mail.app 中的 outlook 链接，不可直连，IP 多变会触发异常报告。
    file: ~/.SpechtLite/one
    adapter: ss_proxy
  - type: list
  # Forward requests based on whether the host domain matches the given regular expressions.
    file: ~/.SpechtLite/proxylist
    adapter: proxy
  - type: iplist
  # Forward requests based on the IP address of the host.
    file: ~/.SpechtLite/proxyiprange
    adapter: proxy
  - type: list
  # Reject requests based on whether the host domain matches the given regular expressions.
    file: ~/.SpechtLite/rejectlist
    adapter: reject
  - type: iplist
  # Reject requests based on the IP address of the host.
    file: ~/.SpechtLite/rejectiprange
    adapter: reject
  - type: country
  # When the location is unknown. Usually this means this is resolved an Intranet IP.
    country: CN
    match: true
    adapter: direct
  - type: country
  # When the location is unknown. Usually this means this is resolved an Intranet IP.
    country: --
    match: true
    adapter: direct
  - type: DNSFail
  # When the DNS lookup of the host fails.
    adapter: proxy
  - type: all
  # Match all other requests.
    adapter: proxy