天依再吃俩包子(๑>⌔<๑)8

路由器直接走代理,听着就很酷

前言

基地的网络可以直接用魔法,刚入队的时候就感觉很神奇,现在终于有机会自己试试了。现在快退役了,丰富一下教程内容。

基地目前(2024.3.4)拥有一个红米 AC2100、两个友善 Nanopi R2S 软路由、一个 J1800 x86 2核4G 小主机

红米 AC2100刷openwrt

像这种路由器也叫硬路由,cpu 算力不高,但是无线性能好。要刷成openwrt系统会经历下面的过程:

红米自带系统->BREED->OpenWrt

这个教程很详细。热门路由器在网上搜索都可以找到相应的教程,不过值得注意的是,硬路由因为本身性能不高,低价位的路由器刷成 openwrt 系统后可能会出现卡顿、断流等情况,所以这个路由器基本闲置了。

友善 Nanopi R2S 软路由刷入OpenWrt系统

接口:

一个 type-C 供电口

一个 WAN 口(连接学校的网口)

一个 LAN 口(连接局域网设备,如路由器、电脑)

一张 SD 卡

  • 我习惯使用大佬的固件定制网站,搜索 R2S,自定义固件里面把 OpenClash(clash的openwrt插件版)安装上,后台地址和后台密码按需修改,在校园内建议修改为192.168.x.1

  • 将 R2S 上的 sd 卡拿下来放入 sd 卡中插入电脑

  • 我这里使用烧录软件balenaEtcher将镜像烧录到 sd 卡中,一步一步按提示操作即可

  • 插入 sd 卡并开机,LAN 口与自己的电脑连接,你将被分配一个 192.168.x.x 的 ip,访问 192.168.x.1 或者 /op 即可访问 openwrt后台

就普通使用而言,编译固件、ssh、命令行 opkg等等都用不到,如果愿意请自行折腾

J1800 x86刷openwrt

接口:

一个 12V DC 供电

一个 LAN1 口

一个 LAN2 口

一个 HDMI 口

一个 VGA 口

因为它的硬盘不方便/不能像 R2S 一样可以直接接入电脑进行烧录,所以我们选择借助 PE 系统,在 J1800 上运行 pe 系统然后将镜像烧录到原本的硬盘里

  • 我习惯使用大佬的固件定制网站,搜索 x86/64,自定义固件里面把 OpenClash(clash的openwrt插件版)安装上,后台地址和后台密码按需修改,在校园内建议修改为192.168.x.1

  • 烧录 PE 系统,我使用的是优启通 PE 系统

  • 烧录软件WinDiskFlash 和 openwrt 镜像放入 u 盘之中

  • 开机乱按进入 BIOS,选择以 u 盘启动

  • 试一试两个LAN 口与自己的电脑连接,接入其中一个时你将被分配一个 192.168.x.x 的 ip,那个就是真正的 LAN 口,另外一个是 WAN 口,访问 192.168.x.1 或者 /op 即可访问 openwrt后台

H3C NX30 PRO刷openwrt

https://blog.qust.me/nx30pro

https://www.cnblogs.com/gloves7/p/18628961

重启解决百分之99的问题!!!!

今天总算是又领悟到这句话的真谛了,一开始上传新固件也是一直报错,一个重启再上传就好了

打开openclash结果主程序一直显示未运行,捯饬半天各种检查各种搜索,结果一个重启又好了

遇到 * opkg_download: 请检查网络设置, 确保本设备网络可用.也是多运行几次,重启然后再多运行几次就好了

神奇

命令行安装插件

自行安装插件的时候麻烦还挺多,因为完全不了解,有些README读起来有困难,比如uname -a看到你是mips架构结果你找了半天发现newifid2.zip里面放的就是mipsel的.ipk东西

传输文件我看网上用sftp用的多,但是我之前习惯了scp,我感觉scp似乎更方便,指令像这样scp *.ipk root@192.168.7.1:/package

我试了老半天luci-app-unblockmusic这个解锁网易云音乐的插件,结果发现最近一次commit是三年前,估计是已经用不了了

OpenClash的使用

上网设置

  • 网络->接口,WAN 口设置为 PPPOE 拨号,输入学号密码,在学院楼的话账号是不用充钱的

    LAN 口的静态地址千万别改,不然就可以考虑重新刷机了(或许设置静态地址也能连上?没试过)

opencalsh设置

  • 服务->OpenClash,最下方 启动!然后查看运行日志,但必然会碰到这个问题,如果是 x86 或者其他架构在这里
  • 其余的就是上传订阅了,剩下的自行探索一下

OpenClash 与 IPV6 极不兼容,使用 IPV6 的情况下容易发生问题(官方自己说的)

代理发生问题时刻尝试关闭 IPV6 相关设置

luci-theme-argon

一个好看的主题

Nikki

也是用来挂代理的插件,目前比较喜欢使用这一个

油管1h视频详解

油管实操视频

  • 网络 ->DHCP/DNS->DNS 重定向:如果有一定要关闭,不如dns劫持会出现异常

  • DNS设置:模式有Redir-Host和fake ip,fake ip模式会把ip隐射到一个内网网段中,但我自己买的域名是解析到学校局域网的ip上的,如果使用fake ip模式就会出错,如果就要用fake ip,那么需要把域名添加到fake-ip-filter过滤器里面,这样这些域名就会直接用真实的ip,如果使用fake ip模式建议把大陆地区的也使用真实ip,后面会使用到

    1
    2
    +.bing.com
    geosite:cn
  • 代理配置->绕过->绕过大陆IP:建议绕过,我实测不绕过的情况下(确认的是直连DIRECT),国内测速只能跑到400兆(NX30 PRO),绕过的情况下不经过核心,可以跑到800兆+。此外如果是fake ip模式,一定要把geosite:cn加到过滤器里面才能生效

  • 混入配置->混入文件配置->启用:打开之后,编辑器里面的用于混入的文件就会生效,相当于覆写选中的代理文件,最后产生实际会被运行的文件是用于启动的配置文件

  • 下面是我的混入的文件,也可以在Clash Party里面当做覆写文件使用,如果喜欢单文件的,把前面的proxy-providers注释打开,填入url即可

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
# url 里填写自己的订阅,名称不能重复
# proxy-providers:
# provider1:
# url: ""
# type: http
# interval: 86400
# health-check: {enable: true,url: "https://www.gstatic.com/generate_204",interval: 300}
# override:
# additional-prefix: "[provider1]"

# provider2:
# url: ""
# type: http
# interval: 86400
# health-check: {enable: true,url: "https://www.gstatic.com/generate_204",interval: 300}
# override:
# additional-prefix: "[provider2]"

mixed-port: 7890
ipv6: true
allow-lan: true
unified-delay: false
tcp-concurrent: true
external-controller: 127.0.0.1:9090
external-ui: ui
external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"

find-process-mode: strict
global-client-fingerprint: chrome

profile:
store-selected: true
store-fake-ip: true

sniffer:
enable: true
sniff:
HTTP:
ports: [80, 8080-8880]
override-destination: true
TLS:
ports: [443, 8443]
QUIC:
ports: [443, 8443]
skip-domain:
- "Mijia Cloud"
- "+.push.apple.com"

tun:
enable: true
stack: mixed
dns-hijack:
- "any:53"
- "tcp://any:53"
auto-route: true
auto-reDIRECT: true
auto-detect-interface: true

dns:
enable: true
ipv6: true
enhanced-mode: redir-host
fake-ip-filter:
- "*"
- "+.lan"
- "+.local"
- "+.market.xiaomi.com"
- "+.qllokirin.xyz"
- "+.npu5v5.cn"
default-nameserver:
- tls://223.5.5.5
- tls://223.6.6.6
nameserver:
- https://doh.pub/dns-query
- https://dns.alidns.com/dns-query

proxy-groups:

- name: 🛫 节点选择
type: select
proxies: [⚡自动选择,🇭🇰 香港节点,🇨🇳 台湾节点,🇯🇵 日本节点,🇸🇬 新加坡节点,🇺🇲 美国节点,🌀 其它地区,👋🏻 手动切换]

- name: 👋🏻 手动切换
type: select
include-all: true
exclude-type: DIRECT

- name: 🎮 游戏平台
type: select
proxies: [DIRECT,⚡自动选择,🇭🇰 香港节点,🇨🇳 台湾节点,🇯🇵 日本节点,🇸🇬 新加坡节点,🇺🇲 美国节点,🌀 其它地区,👋🏻 手动切换]

- name: 🐟 漏网之鱼
type: select
proxies: [🛫 节点选择,DIRECT]

#分隔,下面是地区分组
- name: 🇭🇰 香港节点
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)港|hk|hongkong|hong kong"

- name: 🇨🇳 台湾节点
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)台|tw|taiwan"

- name: 🇯🇵 日本节点
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)日|jp|japan"

- name: 🇺🇲 美国节点
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)美|us|unitedstates|united states"

- name: 🇸🇬 新加坡节点
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)(新|sg|singapore)"

- name: 🌀 其它地区
type: url-test
include-all: true
exclude-type: DIRECT
filter: "(?i)^(?!.*(?:🇭🇰|🇯🇵|🇺🇸|🇸🇬|🇨🇳|港|hk|hongkong|台|tw|taiwan|日|jp|japan|新|sg|singapore|美|us|unitedstates)).*"

- name: ⚡自动选择
type: url-test
include-all: true
exclude-type: DIRECT
tolerance: 10

rules:
- RULE-SET,private_ip,DIRECT,no-resolve
- RULE-SET,github_domain,🛫 节点选择
- "RULE-SET,LocalAreaNetwork,DIRECT"
- "RULE-SET,UnBan,DIRECT"
- "RULE-SET,BanAD,REJECT"
- "RULE-SET,BanProgramAD,REJECT"
- "RULE-SET,GoogleFCM,DIRECT"
- "RULE-SET,GoogleCN,DIRECT"
- "RULE-SET,SteamCN,DIRECT"
- "RULE-SET,Bing,DIRECT"
- "RULE-SET,OneDrive,DIRECT"
- "RULE-SET,Microsoft,DIRECT"
- "RULE-SET,Apple,DIRECT"
- "RULE-SET,Telegram,🛫 节点选择"
- "RULE-SET,OpenAi,🛫 节点选择"
- "RULE-SET,NetEaseMusic,DIRECT"
- "RULE-SET,Epic,🎮 游戏平台"
- "RULE-SET,Origin,🎮 游戏平台"
- "RULE-SET,Sony,🎮 游戏平台"
- "RULE-SET,Steam,🎮 游戏平台"
- "RULE-SET,Nintendo,🎮 游戏平台"
- "RULE-SET,YouTube,🛫 节点选择"
- "RULE-SET,Netflix,🛫 节点选择"
- "RULE-SET,Bahamut,🛫 节点选择"
- "RULE-SET,BilibiliHMT,DIRECT"
- "RULE-SET,Bilibili,DIRECT"
- "RULE-SET,ChinaMedia,DIRECT"
- "RULE-SET,ProxyMedia,🛫 节点选择"
- "RULE-SET,ProxyGFWlist,🛫 节点选择"
- "DOMAIN-KEYWORD,github,🛫 节点选择"
- "RULE-SET,ChinaDomain,DIRECT"
- "RULE-SET,ChinaCompanyIp,DIRECT"
- "RULE-SET,Download,DIRECT"
- RULE-SET,twitter_domain,🛫 节点选择
- RULE-SET,youtube_domain,🛫 节点选择
- RULE-SET,google_domain,🛫 节点选择
- RULE-SET,telegram_domain,🛫 节点选择
- RULE-SET,netflix_domain,🛫 节点选择
- RULE-SET,bahamut_domain,🛫 节点选择
- RULE-SET,spotify_domain,🛫 节点选择
- RULE-SET,bilibili_domain,DIRECT
- RULE-SET,cn_domain,DIRECT
- RULE-SET,geolocation-!cn,🐟 漏网之鱼

- RULE-SET,google_ip,🛫 节点选择
- RULE-SET,netflix_ip,🛫 节点选择
- RULE-SET,telegram_ip,🛫 节点选择
- RULE-SET,twitter_ip,🛫 节点选择
- RULE-SET,cn_ip,DIRECT
- MATCH,🐟 漏网之鱼

rule-anchor:
ip: &ip {type: http, interval: 86400, behavior: ipcidr, format: mrs}
domain: &domain {type: http, interval: 86400, behavior: domain, format: mrs}
rule-providers:
private_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/private.mrs"
cn_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/cn.mrs"
biliintl_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/biliintl.mrs"
ehentai_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/ehentai.mrs"
github_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/github.mrs"
twitter_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/twitter.mrs"
youtube_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/youtube.mrs"
google_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/google.mrs"
telegram_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/telegram.mrs"
netflix_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/netflix.mrs"
bilibili_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bilibili.mrs"
bahamut_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/bahamut.mrs"
spotify_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/spotify.mrs"
pixiv_domain:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/pixiv.mrs"
geolocation-!cn:
<<: *domain
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geosite/geolocation-!cn.mrs"

private_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/private.mrs"
cn_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/cn.mrs"
google_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/google.mrs"
netflix_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/netflix.mrs"
twitter_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/twitter.mrs"
telegram_ip:
<<: *ip
url: "https://raw.githubusercontent.com/MetaCubeX/meta-rules-dat/meta/geo/geoip/telegram.mrs"

LocalAreaNetwork:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/LocalAreaNetwork.list
path: ./ruleset/LocalAreaNetwork.list
behavior: classical
interval: 86400
format: text
type: http
UnBan:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/UnBan.list
path: ./ruleset/UnBan.list
behavior: classical
interval: 86400
format: text
type: http
BanAD:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanAD.list
path: ./ruleset/BanAD.list
behavior: classical
interval: 86400
format: text
type: http
BanProgramAD:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/BanProgramAD.list
path: ./ruleset/BanProgramAD.list
behavior: classical
interval: 86400
format: text
type: http
GoogleFCM:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/GoogleFCM.list
path: ./ruleset/GoogleFCM.list
behavior: classical
interval: 86400
format: text
type: http
GoogleCN:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/GoogleCN.list
path: ./ruleset/GoogleCN.list
behavior: classical
interval: 86400
format: text
type: http
SteamCN:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/SteamCN.list
path: ./ruleset/SteamCN.list
behavior: classical
interval: 86400
format: text
type: http
Bing:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Bing.list
path: ./ruleset/Bing.list
behavior: classical
interval: 86400
format: text
type: http
OneDrive:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/OneDrive.list
path: ./ruleset/OneDrive.list
behavior: classical
interval: 86400
format: text
type: http
Microsoft:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Microsoft.list
path: ./ruleset/Microsoft.list
behavior: classical
interval: 86400
format: text
type: http
Apple:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Apple.list
path: ./ruleset/Apple.list
behavior: classical
interval: 86400
format: text
type: http
Telegram:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Telegram.list
path: ./ruleset/Telegram.list
behavior: classical
interval: 86400
format: text
type: http
OpenAi:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list # https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/OpenAi.list
path: ./ruleset/OpenAi.list
behavior: classical
interval: 86400
format: text
type: http
NetEaseMusic:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/NetEaseMusic.list
path: ./ruleset/NetEaseMusic.list
behavior: classical
interval: 86400
format: text
type: http
Epic:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Epic.list
path: ./ruleset/Epic.list
behavior: classical
interval: 86400
format: text
type: http
Origin:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Origin.list
path: ./ruleset/Origin.list
behavior: classical
interval: 86400
format: text
type: http
Sony:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Sony.list
path: ./ruleset/Sony.list
behavior: classical
interval: 86400
format: text
type: http
Steam:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Steam.list
path: ./ruleset/Steam.list
behavior: classical
interval: 86400
format: text
type: http
Nintendo:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Nintendo.list
path: ./ruleset/Nintendo.list
behavior: classical
interval: 86400
format: text
type: http
YouTube:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/YouTube.list
path: ./ruleset/YouTube.list
behavior: classical
interval: 86400
format: text
type: http
Netflix:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Netflix.list
path: ./ruleset/Netflix.list
behavior: classical
interval: 86400
format: text
type: http
Bahamut:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Bahamut.list
path: ./ruleset/Bahamut.list
behavior: classical
interval: 86400
format: text
type: http
BilibiliHMT:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/BilibiliHMT.list
path: ./ruleset/BilibiliHMT.list
behavior: classical
interval: 86400
format: text
type: http
Bilibili:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Ruleset/Bilibili.list
path: ./ruleset/Bilibili.list
behavior: classical
interval: 86400
format: text
type: http
ChinaMedia:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaMedia.list
path: ./ruleset/ChinaMedia.list
behavior: classical
interval: 86400
format: text
type: http
ProxyMedia:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyMedia.list
path: ./ruleset/ProxyMedia.list
behavior: classical
interval: 86400
format: text
type: http
ProxyGFWlist:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ProxyGFWlist.list
path: ./ruleset/ProxyGFWlist.list
behavior: classical
interval: 86400
format: text
type: http
ChinaDomain:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaDomain.list
path: ./ruleset/ChinaDomain.list
behavior: domain
interval: 86400
format: text
type: http
ChinaCompanyIp:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/ChinaCompanyIp.list
path: ./ruleset/ChinaCompanyIp.list
behavior: ipcidr
interval: 86400
format: text
type: http
Download:
url: https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/Download.list
path: ./ruleset/Download.list
behavior: classical
interval: 86400
format: text
type: http

附录

最近在研究规则代理的问题,因为有时候总会有代理走不上的情况,个人用的话开个全局或者用proxychains也还行,但是挂在路由器上的代理要是规则没写好,那就g

简单来着只要进入https://nexconvert.com/

1写你在机场买的节点链接(担心安全问题就不要用,用不怕,怕不用)

2远程配置写https://raw.githubusercontent.com/ACL4SSR/ACL4SSR/master/Clash/config/ACL4SSR_Online_Full.ini

3然后把链接复制到clash,下载即可

这样只是优化你的规则,并且会抹掉最前面的dns字段,在openclash上使用时可能会造成一些问题

不过我现在已经不用订阅转换了,最开头自己写规则是因为当时作者还没有把 ChatGPT 相关网站加进去,现在已经有了。还有一方面是订阅转换的网站不开代理不一样连得上,有时候还挺难受的

自定义规则:https://yattazen.com/tutorial/clash-custom-config.html

图形化编辑教程:https://www.jamesdailylife.com/clash_2022

clash官方说明:https://docs.cfw.lbyczf.com/contents/ui/profiles/rules.html

看来之前的风波真挺大,教程全没了

Q&A

  • 链接到wifi后图标如下显示无法连接到Internet,但是可以上网

    MA2V~V8_F1__KD7_OEF_MOD.png

    https://github.com/vernesong/OpenClash/issues/6

    https://github.com/vernesong/OpenClash/issues/2239

    解决方法

    1
    2
    DOMAIN-SUFFIX,msftconnecttest.com,🚀 节点选择
    DOMAIN-SUFFIX,msftncsi.com,🚀 节点选择

    需要让这两个网站走代理,修改规则即可

  • 重启 openclash 插件之后无法科学上网,打开谷歌或者有关提示 dns 解析错误或者 ip 找不到,有时候等待十几分钟或几个小时就好了

    最终的解决办法是在配置文件前面添加上dns字段。原因是订阅转换之后导致自带的dns字段被抹掉了,openclash日志显示会自动补全,但是可能自动补全的这个无法使用。但日志时不时输出一句更新内核失败,从 raw.github 什么什么的链接失败,可能也会有点影响,github 上有一个相关的 issue 可以解决那个问题

    下面是订阅转换之后的配置文件

    1
    2
    3
    4
    5
    6
    7
    8
    9
    port: 7890
    socks-port: 7891
    allow-lan: true
    mode: Rule
    log-level: info
    external-controller: :9090
    proxies:
    ……………………
    ……………………

    只需要加上dns字段即可

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    83
    84
    85
    86
    87
    88
    port: 7890
    socks-port: 7891
    allow-lan: true
    mode: Rule
    log-level: info
    external-controller: :9090
    dns:
    enable: true
    ipv6: false
    listen: 127.0.0.1:8853
    enhanced-mode: fake-ip
    nameserver:
    - https://223.5.5.5/dns-query
    - https://223.6.6.6/dns-query
    - https://doh.pub/dns-query
    fake-ip-filter:
    - "*.lan"
    - stun.*.*.*
    - stun.*.*
    - time.windows.com
    - time.nist.gov
    - time.apple.com
    - time.asia.apple.com
    - "*.ntp.org.cn"
    - "*.openwrt.pool.ntp.org"
    - time1.cloud.tencent.com
    - time.ustc.edu.cn
    - pool.ntp.org
    - ntp.ubuntu.com
    - ntp.aliyun.com
    - ntp1.aliyun.com
    - ntp2.aliyun.com
    - ntp3.aliyun.com
    - ntp4.aliyun.com
    - ntp5.aliyun.com
    - ntp6.aliyun.com
    - ntp7.aliyun.com
    - time1.aliyun.com
    - time2.aliyun.com
    - time3.aliyun.com
    - time4.aliyun.com
    - time5.aliyun.com
    - time6.aliyun.com
    - time7.aliyun.com
    - "*.time.edu.cn"
    - time1.apple.com
    - time2.apple.com
    - time3.apple.com
    - time4.apple.com
    - time5.apple.com
    - time6.apple.com
    - time7.apple.com
    - time1.google.com
    - time2.google.com
    - time3.google.com
    - time4.google.com
    - music.163.com
    - "*.music.163.com"
    - "*.126.net"
    - musicapi.taihe.com
    - music.taihe.com
    - songsearch.kugou.com
    - trackercdn.kugou.com
    - "*.kuwo.cn"
    - api-jooxtt.sanook.com
    - api.joox.com
    - joox.com
    - y.qq.com
    - "*.y.qq.com"
    - streamoc.music.tc.qq.com
    - mobileoc.music.tc.qq.com
    - isure.stream.qqmusic.qq.com
    - dl.stream.qqmusic.qq.com
    - aqqmusic.tc.qq.com
    - amobile.music.tc.qq.com
    - "*.xiami.com"
    - "*.music.migu.cn"
    - music.migu.cn
    - "*.msftconnecttest.com"
    - "*.msftncsi.com"
    - localhost.ptlogin2.qq.com
    - "*.*.*.srv.nintendo.net"
    - "*.*.stun.playstation.net"
    - xbox.*.*.microsoft.com
    - "*.ipv6.microsoft.com"
    - "*.*.xboxlive.com"
    - speedtest.cros.wr.pvp.net
    proxies:

    这里还有一份dns设置

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    mixed-port: 7890
    allow-lan: true
    bind-address: '*'
    mode: rule
    log-level: info
    external-controller: '127.0.0.1:9090'
    dns:
    enable: true
    ipv6: false
    default-nameserver: [223.5.5.5, 119.29.29.29]
    enhanced-mode: fake-ip
    fake-ip-range: 198.18.0.1/16
    use-hosts: true
    nameserver: ['https://doh.pub/dns-query', 'https://dns.alidns.com/dns-query']
    fallback: ['https://doh.dns.sb/dns-query', 'https://dns.cloudflare.com/dns-query', 'https://dns.twnic.tw/dns-query', 'tls://8.8.4.4:853']
    fallback-filter: { geoip: true, ipcidr: [240.0.0.0/4, 0.0.0.0/32] }
    proxies:

    应该都是可以的,我只试了前者。切换之后用了一会儿之后,再使用没有dns字段的配置文件也可以正常使用代理了,可能是,他自己记住了?也或许不是这个 dns 的问题

  • 无法访问解析到保留地址的域名

    例如你自己买了一个域名,你把他解析到了192.168.x.x10.x.x.x这种局域网保留地址上,openwrt默认是不解析的,要把网络->DHCP/DNS->过滤器->重绑定保护关闭即可

一些相关链接

https://www.right.com.cn/forum/forum.php?mod=viewthread&tid=8276453&highlight=%B6%A8%D6%C6openwrt

https://github.com/kiddin9/OpenWrt_x86-r2s-r4s-r5s-N1

https://supes.top

op/