include {
    system.dae
}

group {
    proxy {
        policy: min_moving_avg
    }
}

dns {
    upstream {
        default: 'https://223.5.5.5/dns-query?tls_server_name=dns.alidns.com' -> direct
        remote: 'https://8.8.8.8/dns-query?tls_server_name=dns.google' -> proxy
    }
    routing {
        request {
            qname(geosite: private) -> asis
            qname(geosite: cn) -> default
            fallback: remote
        }
    }
}

routing {
    dip(224.0.0.0/3, 'ff00::/8') -> direct
    # 路由器自身地址直连，管理面板不被代理；服务启动时按本机地址重写下面区块
    # honk:local-direct-begin
    # honk:local-direct-end
    dip(geoip: private) && !dport(53) -> direct(must)
    dip(geoip: cn) && !dport(53) -> direct(must)
    domain(geosite: cn) -> direct
    fallback: direct
}