Мобильный интернет (БС)

Для обхода Белых Списков (когда связь глушат и работает только Яндекс, Озон и Макс), нужен сервер, который входит в диапазоны этих белых списков.

Например: Furk, LastDep, Glush, SouthNetworks, Ledokol, VME_Boost, Shadow. Для проверки работы с вашими операторами на вашей местности, пользуйтесь тестовым периодом.

В этом конфиге весь трафик идёт через группу PROXY с зарубежными IP, все .ru, .su и .рф сайты не из белых списков и YouTube идут через серверы в РФ, чтобы не было рекламы, а если все эти серверы RU-PROXY недоступны, поток переключается на зарубежные PROXY. Белосписочные сайты идут мимо тоннелей напрямую в DIRECT.

mode: rule
# Proxy Mode: MIXED (TCP via TPROXY port 7894, UDP via TUN)
tproxy-port: 7894
tun:
  enable: true
  device: clash-tun
  stack: gvisor # если пинги идут плохо, пробуйте system и mixed
  auto-route: false
  auto-redirect: false
  auto-detect-interface: false
ipv6: false
log-level: error
allow-lan: false
unified-delay: true
tcp-concurrent: true
external-controller: 0.0.0.0:9090
external-ui: ./ui
external-ui-url: "<https://github.com/Zephyruso/zashboard/releases/latest/download/dist-cdn-fonts.zip>"

hosts:
  app.4pda.to: 31.131.253.250

dns:
  enable: true
  ipv6: false
  listen: 0.0.0.0:7874
  enhanced-mode: fake-ip # или пробуйте redir-host
  nameserver:
    - 77.88.8.8
    - 77.88.8.2
  nameserver-policy:
    "+.lan": system
    "msftconnecttest.com": system
    "msftncsi.com": system

keep-alive-idle: 15
keep-alive-interval: 15

profile:
  store-selected: true

routing-mark: 2

sniffer:
  enable: true
  force-dns-mapping: true
  parse-pure-ip: true
  sniff:
    HTTP:
      ports:
      - 80
      - 8080-8880
      override-destination: true
    TLS:
      ports:
      - 443
      - 8443

proxy-providers:

  LastDep:
    type: http
    url: "<https://sub>.../***" # << ссылка подписки
    path: ./proxy_providers/lastdep.yaml
    interval: 10800
    health-check:
      enable: true
      url: <https://gstatic.com/generate_204>
      interval: 300
      timeout: 5000
      expected-status: 204
    header:
      User-Agent: [mihomo/1.19.24] # или [SSClash/4.4.0] или [Happ]
      x-hwid: [Router]
      x-device-os: [OpenWrt]
      x-ver-os: ["25.12.2"]
      x-device-model: [Huasifei WH3000 Pro]

proxy-groups:

  - name: PROXY
    type: url-test
    url: '<https://www.gstatic.com/generate_204>'
    interval: 300
    timeout: 5000
    icon: <https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Proxy.png>
    include-all: true
    exclude-filter: "🇷🇺|Russia|Россия"

  - name: PROXY-RU
    type: url-test
    url: '<http://ya.ru>'
    interval: 300
    timeout: 5000
    icon: <https://fastly.jsdelivr.net/gh/Koolson/Qure@master/IconSet/Color/Russia.png>
    include-all: true
    filter: "🇷🇺|Russia|Россия"

  - name: RU
    type: url-test
    interval: 300
    timeout: 5000
    proxies: [PROXY-RU, PROXY]

rule-providers:

  whitelist:
    behavior: domain
    format: text
    type: http
    url: "<https://raw.githubusercontent.com/hxehex/russia-mobile-internet-whitelist/refs/heads/main/whitelist.txt>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/cidrwhitelist.txt

  vk:
    behavior: classical
    type: http
    url: "<https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/VK/VK.yaml>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/vk.yaml

  yandex:
    behavior: classical
    type: http
    url: "<https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/Yandex/Yandex.yaml>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/yandex.yaml

  russia-outside:
    behavior: classical
    type: http
    format: text
    url: "<https://raw.githubusercontent.com/itdoginfo/allow-domains/main/Russia/outside-clashx.lst>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/russia-outside.yaml

  russia-inside:
    behavior: classical
    type: http
    format: text
    url: "<https://raw.githubusercontent.com/itdoginfo/allow-domains/main/Russia/inside-clashx.lst>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/russia-inside.yaml

  youtube:
    behavior: classical
    type: http
    url: "<https://raw.githubusercontent.com/blackmatrix7/ios_rule_script/master/rule/Clash/YouTube/YouTube.yaml>"
    interval: 86400
    proxy: PROXY
    path: ./ruleset/youtube.yaml

rules:

# 2GIS
  - DOMAIN-SUFFIX,2gis.ru,DIRECT
  - DOMAIN-SUFFIX,2gis.com,DIRECT

# Alfa
  - DOMAIN-SUFFIX,alfabank.ru,DIRECT
  - DOMAIN-SUFFIX,servicecdn.ru,DIRECT
  - DOMAIN-SUFFIX,mirconnect.ru,DIRECT
  - DOMAIN-SUFFIX,otm-r.ru,DIRECT

# T-Bank
  - DOMAIN-SUFFIX,appsflyersdk.com,REJECT
  - DOMAIN-SUFFIX,app-measurement.com,REJECT
  - DOMAIN-KEYWORD,t-bank-app,DIRECT
  - DOMAIN-SUFFIX,t-bank.ru,DIRECT
  - DOMAIN-SUFFIX,tbank.ru,DIRECT
  - DOMAIN-KEYWORD,tinkoff,DIRECT
  - DOMAIN-SUFFIX,tinsurance.ru,DIRECT
  - DOMAIN-SUFFIX,t-static.ru,DIRECT
  - DOMAIN-SUFFIX,cdn-tinkoff.ru,DIRECT
  - DOMAIN-SUFFIX,t2.ru,DIRECT

# Markets
  - DOMAIN-SUFFIX,wildberries.ru,DIRECT
  - DOMAIN-SUFFIX,wb.ru,DIRECT
  - DOMAIN-SUFFIX,paywb.com,DIRECT
  - DOMAIN-SUFFIX,wbbasket.ru,DIRECT
  - DOMAIN-SUFFIX,avito.ru,DIRECT
  - DOMAIN-SUFFIX,avito.st,DIRECT
  - DOMAIN-SUFFIX,ozon.ru,DIRECT
  - DOMAIN-SUFFIX,ozone.ru,DIRECT

# Sber
  - DOMAIN-SUFFIX,mindbox.ru,DIRECT
  - DOMAIN-SUFFIX,adriver.ru,REJECT
  - DOMAIN-SUFFIX,otello.ru,DIRECT
  - DOMAIN-KEYWORD,sberbank,DIRECT
  - DOMAIN-SUFFIX,sber.ru,DIRECT
  - DOMAIN-SUFFIX,mail.ru,DIRECT
  - DOMAIN-SUFFIX,imgsmail.ru,DIRECT
  - DOMAIN-SUFFIX,ok.ru,DIRECT

# VK
  - DOMAIN-SUFFIX,vkvideo.ru,DIRECT
  - DOMAIN-SUFFIX,vk-portal.net,DIRECT
  - DOMAIN-SUFFIX,vk.com,DIRECT
  - DOMAIN-SUFFIX,vk.ru,DIRECT
  - DOMAIN-SUFFIX,vk-analytics.ru,DIRECT
  - DOMAIN-SUFFIX,vk.link,DIRECT

# YouTube & Google Play
  - DOMAIN-SUFFIX,gvt1.com,PROXY
  - RULE-SET,youtube,RU

# White
  - DOMAIN-SUFFIX,qms.ru,DIRECT
  - DOMAIN-SUFFIX,oneme.ru,DIRECT
  - DOMAIN-SUFFIX,okcdn.ru,DIRECT
  - DOMAIN-SUFFIX,mycdn.me,DIRECT
  - DOMAIN-SUFFIX,dzen.ru,DIRECT
  - DOMAIN-SUFFIX,gosuslugi.ru,DIRECT
  - DOMAIN-SUFFIX,government.ru,DIRECT
  - DOMAIN-SUFFIX,gu-st.ru,DIRECT
  - DOMAIN-SUFFIX,kinopoisk.ru,DIRECT
  - DOMAIN-SUFFIX,lemanapro.ru,DIRECT
  - DOMAIN-SUFFIX,lenta.ru,DIRECT
  - DOMAIN-SUFFIX,lmru.tech,DIRECT
  - DOMAIN-SUFFIX,max.ru,DIRECT
  - DOMAIN-SUFFIX,mradx.net,DIRECT
  - DOMAIN-SUFFIX,pochta.ru,DIRECT
  - DOMAIN-SUFFIX,rambler.ru,DIRECT
  - DOMAIN-SUFFIX,rbc.ru,DIRECT
  - DOMAIN-SUFFIX,res-nsdi.ru,DIRECT
  - DOMAIN-SUFFIX,rustore.ru,DIRECT
  - DOMAIN-SUFFIX,inappstory.ru,DIRECT
  - DOMAIN-SUFFIX,rutube.ru,DIRECT
  - DOMAIN-SUFFIX,rutubelist.ru,DIRECT
  - DOMAIN-SUFFIX,rzd.ru,DIRECT
  - DOMAIN-SUFFIX,taximaxim.ru,DIRECT
  - DOMAIN-SUFFIX,tutu.ru,DIRECT
  - DOMAIN-SUFFIX,userapi.com,DIRECT
  - DOMAIN-SUFFIX,vtb.ru,DIRECT
  - DOMAIN-SUFFIX,xn--80ajghhoc2aj1c8b.xn--p1ai,DIRECT # честныйзнак.рф
  - DOMAIN-SUFFIX,ya.ru,DIRECT
  - DOMAIN-SUFFIX,yastatic.net,DIRECT
  - DOMAIN-SUFFIX,gov.ru,DIRECT
  - DOMAIN-KEYWORD,yandex,DIRECT
  - RULE-SET,whitelist,DIRECT
  - RULE-SET,vk,DIRECT
  - RULE-SET,yandex,DIRECT
  - RULE-SET,russia-outside,DIRECT
  - RULE-SET,russia-inside,PROXY
  - DOMAIN-SUFFIX,d-cd.net,RU
  - DOMAIN-SUFFIX,ru,RU
  - DOMAIN-SUFFIX,su,RU
  - DOMAIN-SUFFIX,рф,RU
  - MATCH,PROXY