🦄 Sync 2026-09-27 22:25:23

honk/files/config.d/dns.dae

@@ -0,0 +1,23 @@
+# dns.dae
+dns {
+    bind: 'tcp+udp://[::]:53530'
+    client_subnet: auto
+    #ipversion_prefer: 4
+    upstream {
+        local: 'udp://127.0.0.1:53' -> direct
+        remote: 'tcp+udp://dns.google:53'
+    }
+    routing {
+        request {
+            qtype(https) -> reject
+            qname(geosite: gfw) -> remote
+            fallback: local
+        }
+        response {
+            upstream(remote) -> accept
+            qname(geosite: private) -> accept
+            ip(geoip: cn) -> accept
+            fallback: remote
+        }
+    }
+}

honk/files/config.d/node.dae

@@ -0,0 +1,35 @@
+# node.dae
+node {
+    node1: 'xxx'
+    node2: 'xxx'
+}
+
+subscription {
+    # 短形式：默认 86400s 刷新一次
+    sub: 'http://sub'
+
+    # 短形式 + UA：仍然只能默认 86400s
+    sub_ua: 'http://sub'(honk/1.0 like)
+
+    # 块形式：可以自定义定时刷新周期
+    sub2: {
+        url: 'http://sub'
+        ua: 'honk/1.0'
+        interval: '10000s'   # 每 10000 秒刷新一次
+    }
+
+    # 禁用定期刷新
+    sub3: {
+        url: 'http://sub'
+        interval: 0
+    }
+}
+
+group {
+    proxy {
+        filter: subtag(sub) && !name(keyword: 'ExpireAt:')
+        filter: name(node1, node2)
+        policy: score
+    }
+}
+

honk/files/config.d/route.dae

@@ -0,0 +1,27 @@
+# route.dae
+routing {
+    pname(dnsmasq, zerotier-one) -> direct(must)
+    dip(224.0.0.0/3, 'ff00::/8', geoip: private) -> direct
+    domain(geosite: category-bank-cn, geosite: boc@!cn, geosite: synology) -> direct
+
+    # block quic, if u node has poor quic support, enable this line
+    # l4proto(udp) && dport(443) -> block
+
+    domain(geosite: spotify) -> proxy
+    domain(geosite: category-doh) -> proxy
+    domain(geosite: tiktok) -> proxy
+    domain(geosite: category-ai-!cn, geosite: github) -> proxy
+    domain(geosite: gfw) -> proxy
+
+    dip(geoip: telegram) -> proxy
+
+    dip(geoip: cn) -> direct
+    # geoip:cn always using chiness asn, can use domain rule to override
+    # domain(geosite: cn) -> direct
+
+    # using proxy for ssh, http, https, and common ports, avoid (bt, or other p2p)
+    # dport(22, 80, 443, 8080, 6443, 9090) -> proxy
+
+    # fallback: direct
+    fallback: proxy
+}