kitsunebi_android_default.conf

// Section names such as "DnsServer", "DnsRule" are all case-insensitive.
// All empty lines and whitespaces will be omitted, comment lines are
// start with `//`, inline comments are start with `#`, all characters
// after `#` will be treated as comments.


[Rule]
// [Rule] is equalient to [RoutingRule]
// Rules better group by their types (DOMAIN/IP/USER-AGENT)
// and targets (PROXY/DIRECT/REJECT) for better performance.
//
// ==== block rules ====
//
DOMAIN-KEYWORD,geosite:category-ads-all,REJECT

// ==== prioritized proxy rules ====
IP-CIDR,8.8.8.8/32,PROXY
IP-CIDR,8.8.4.4/32,PROXY
IP-CIDR,1.1.1.1/32,PROXY
IP-CIDR,1.0.0.1/32,PROXY
IP-CIDR,9.9.9.9/32,PROXY
IP-CIDR,149.112.112.112/32,PROXY
IP-CIDR,208.67.222.222/32,PROXY
IP-CIDR,208.67.220.220/32,PROXY


// ==== direct rules ====
//
// ip rules
GEOIP,cn,DIRECT
GEOIP,private,DIRECT

// user agent rules
USER-AGENT,*WeChat*,DIRECT
USER-AGENT,*MicroMessenger*,DIRECT
USER-AGENT,*%E7%BD%91%E6%98%93*,DIRECT
USER-AGENT,*Netease*,DIRECT
USER-AGENT,*?eituan*,DIRECT # meituan

// port rules
PORT,123,DIRECT

// toutiao
DOMAIN-SUFFIX,pstatp.com,DIRECT
DOMAIN-SUFFIX,snssdk.com,DIRECT
DOMAIN-SUFFIX,toutiao.com,DIRECT

// xigua
DOMAIN-SUFFIX,ixigua.com,DIRECT

// apple
DOMAIN-SUFFIX,apple.com,DIRECT
DOMAIN-SUFFIX,crashlytics.com,DIRECT
DOMAIN-SUFFIX,icloud.com,DIRECT

// cctv
DOMAIN-KEYWORD,cctv,DIRECT

// umeng
DOMAIN-KEYWORD,umeng,DIRECT

// weibo
DOMAIN-SUFFIX,weico.cc,DIRECT

// meituan
DOMAIN-KEYWORD,meituan,DIRECT
DOMAIN-KEYWORD,dianping,DIRECT
DOMAIN-KEYWORD,maoyan,DIRECT

// eleme
DOMAIN-SUFFIX,ele.me,DIRECT
DOMAIN-SUFFIX,elemecdn.com,DIRECT
DOMAIN-SUFFIX,eleme.cn,DIRECT

// jd
DOMAIN-SUFFIX,jd.com,DIRECT
DOMAIN-SUFFIX,360buy.com,DIRECT
DOMAIN-SUFFIX,360buyimg.com,DIRECT

// douyu
DOMAIN-SUFFIX,douyu.tv,DIRECT
DOMAIN-SUFFIX,douyu.com,DIRECT
DOMAIN-SUFFIX,douyucdn.cn,DIRECT

// others
DOMAIN-KEYWORD,geosite:cn,DIRECT


// ==== proxy rules ====
//
// ip rules
// telegram
IP-CIDR,149.154.167.0/24,PROXY
IP-CIDR,149.154.175.0/24,PROXY
IP-CIDR,91.108.56.0/24,PROXY
// others
IP-CIDR,125.209.222.0/24,PROXY

// user agent rules
USER-AGENT,*Twitter*,PROXY
USER-AGENT,*Gmail*,PROXY
USER-AGENT,*Telegram*,PROXY
USER-AGENT,*Tumblr*,PROXY
USER-AGENT,*Facebook*,PROXY
USER-AGENT,*Pinterest*,PROXY
USER-AGENT,*Instagram*,PROXY

// twitter
DOMAIN-KEYWORD,twitter,PROXY
DOMAIN-SUFFIX,twimg.com,PROXY
DOMAIN-SUFFIX,t.co,PROXY

// google
DOMAIN-KEYWORD,google,PROXY
DOMAIN-SUFFIX,ggpht.com,PROXY
# DOMAIN-SUFFIX,google.com,PROXY
# DOMAIN-SUFFIX,googleapis.com,PROXY
# DOMAIN-SUFFIX,googleusercontent.com,PROXY
# DOMAIN-SUFFIX,googlevideo.com,PROXY
DOMAIN-SUFFIX,gstatic.com,PROXY
DOMAIN-SUFFIX,youtube.com,PROXY
DOMAIN-SUFFIX,ytimg.com,PROXY

// pixiv
DOMAIN-KEYWORD,pixiv,PROXY
DOMAIN-SUFFIX,pximg.net,PROXY

// tumblr
DOMAIN-KEYWORD,tumblr,PROXY

// instagram
DOMAIN-KEYWORD,instagram,PROXY

// LINE
DOMAIN-SUFFIX,line-scdn.net,PROXY
DOMAIN-SUFFIX,line.me,PROXY
DOMAIN-SUFFIX,naver.jp,PROXY

// facebook
DOMAIN-SUFFIX,facebook.com,PROXY
DOMAIN-SUFFIX,fbcdn.net,PROXY

// pinterest
DOMAIN-KEYWORD,pinterest,PROXY
# DOMAIN-SUFFIX,pinimg.com,PROXY

// github
DOMAIN-KEYWORD,github,PROXY
# DOMAIN-SUFFIX,github.io,PROXY
# DOMAIN-SUFFIX,githubusercontent.com,PROXY

// dropbox
DOMAIN-KEYWORD,dropbox,PROXY

// netflix
DOMAIN-KEYWORD,netflix,PROXY

// medium
DOMAIN-SUFFIX,medium.com,PROXY

// others
DOMAIN-SUFFIX,fivecdm.com,PROXY
DOMAIN-SUFFIX,quora.com,PROXY


// ==== final ====
FINAL,PROXY


[DnsServer]
// Format: address,port,tag
//
// `tag` is a unique alphanumeric string for each DNS server, it's used for
// identifying DNS servers by DNS domain rules, it's case-insensitive. `tag`s are
// only help in the configuration parsing procedure, and won't be used elsewhere.
//
// `port` and `tag` could be omitted, means that using the default 53 port
// and no DNS rules attach to that DNS server.
//
// A DNS lookup will perform on DNS servers list below in order until results
// return, except there is a matching domain rule.

223.5.5.5
114.114.114.114
8.8.8.8,53,REMOTE
8.8.4.4

[DnsRule]
// DNS requests for domain names which match these rules will send to the DNS
// server with the corresponding tag name first, i.e. DNS server with the matched
// tag has the highest priority.

// Remote dns
DOMAIN-KEYWORD,google,REMOTE
DOMAIN-KEYWORD,android,REMOTE
DOMAIN-KEYWORD,fbcdn,REMOTE
DOMAIN-KEYWORD,facebook,REMOTE
DOMAIN-SUFFIX,fb.com,REMOTE
DOMAIN-KEYWORD,instagram,REMOTE
DOMAIN-KEYWORD,whatsapp,REMOTE
DOMAIN-KEYWORD,akamai,REMOTE
DOMAIN-SUFFIX,line-scdn.net,REMOTE
DOMAIN-SUFFIX,line.me,REMOTE
DOMAIN-SUFFIX,naver.jp,REMOTE
DOMAIN-SUFFIX,googlevideo.com,REMOTE

[DnsHost]
// Static DNS map that functions in the same way as /etc/hosts.

localhost = 127.0.0.1
www.localnetwork.uop = 127.0.0.1

[DnsClientIp]
// Client IP for EDNS Client Subnet extension, a single IP address.

115.239.211.92

[RoutingDomainStrategy]
// https://www.v2ray.com/chapter_02/03_routing.html

IPIfNonMatch

[LocalPolicy]
bufferSize = 4096
connIdle = 120
downlinkOnly = 0
handshake = 4
uplinkOnly = 0

[Log]
// Logging level for V2Ray
loglevel = warning

[PerAppVpn]
// Not a complete PerApp VPN setting, comment out to avoid overriding existing settings.
//
// Off

[PerAppMode]
// Not a complete PerApp VPN setting, comment out to avoid overriding existing settings.
//
// Allow

[PerAppAllow]
// Not a complete PerApp VPN setting, comment out to avoid overriding existing settings.
//
// .*google.*
// .*twitter.*

[PerAppDisallow]
// Not a complete PerApp VPN setting, comment out to avoid overriding existing settings.
//
// .*tencent.*
// .*baidu.*

[FreedomDomainStrategy]
AsIs