Upload 14 files

app/data/Dockerfile

@@ -0,0 +1,133 @@
+# 使用官方Python 3.9 Alpine作为基础镜像（轻量级）
+FROM python:3.9-alpine
+
+# 设置工作目录
+WORKDIR /app
+
+# 安装系统依赖
+# 添加 yaml-dev 提供编译PyYAML所需的libyaml
+# 添加 unzip 用于解压 Yacd
+RUN apk add --no-cache \
+    curl \
+    ca-certificates \
+    tzdata \
+    tar \
+    gzip \
+    python3-dev \
+    musl-dev \
+    libffi-dev \
+    yaml-dev \
+    unzip \
+    # 不再需要 py3-yaml
+    # py3-yaml \
+    # 添加调试工具
+    file \
+    libc-utils \
+    strace
+
+# 设置时区为亚洲/上海
+ENV TZ=Asia/Shanghai
+
+# 创建必要的目录 (不再需要在这里 chmod，因为 COPY 会处理)
+RUN mkdir -p ./clash_core ./subconverter ./data
+
+# 下载并安装Clash Meta，保留原始文件名
+RUN echo "Downloading Clash Meta..." && \
+    curl -L -f -o /tmp/clash-meta.gz "https://github.com/MetaCubeX/Clash.Meta/releases/download/v1.16.0/clash.meta-linux-amd64-v1.16.0.gz" && \
+    echo "Extracting Clash Meta..." && \
+    gunzip -c /tmp/clash-meta.gz > ./clash_core/clash.meta-linux-amd64 && \
+    echo "Setting Clash Meta permissions..." && \
+    chmod +x ./clash_core/clash.meta-linux-amd64 && \
+    # 确保Linux可执行属性已设置
+    ls -la ./clash_core/clash.meta-linux-amd64 && \
+    # 显示文件类型
+    file ./clash_core/clash.meta-linux-amd64 && \
+    echo "Verifying Clash Meta exists..." && \
+    test -f ./clash_core/clash.meta-linux-amd64 && \
+    echo "Cleaning up Clash Meta download..." && \
+    rm /tmp/clash-meta.gz
+
+# 下载并完整解压subconverter
+RUN echo "Downloading subconverter..." && \
+    curl -L -f -o /tmp/subconverter.tar.gz "https://github.com/tindy2013/subconverter/releases/download/v0.7.2/subconverter_linux64.tar.gz" && \
+    echo "Extracting subconverter archive..." && \
+    tar -xzf /tmp/subconverter.tar.gz -C ./subconverter --strip-components=1 && \
+    echo "Setting subconverter permissions..." && \
+    chmod +x ./subconverter/subconverter && \
+    # 确保Linux可执行属性已设置
+    ls -la ./subconverter/subconverter && \
+    # 显示文件类型
+    file ./subconverter/subconverter && \
+    echo "Verifying subconverter exists..." && \
+    test -f ./subconverter/subconverter && \
+    echo "Cleaning up subconverter download..." && \
+    rm /tmp/subconverter.tar.gz
+
+# 复制Python依赖列表
+COPY requirements.txt ./
+
+# 升级 pip
+RUN pip install --upgrade pip
+
+# 安装Cython（用于编译PyYAML）
+RUN echo "Installing Cython for PyYAML build..." && \
+    pip install --no-cache-dir Cython
+
+# 安装Python依赖（包括PyYAML，现在应该能成功编译了）
+RUN echo "Installing Python dependencies..." && \
+    pip install --no-cache-dir -r requirements.txt
+
+# 可选：删除构建依赖以减小镜像体积
+RUN apk del python3-dev musl-dev libffi-dev yaml-dev
+
+# 下载并准备 Yacd UI 文件 (从 Yacd-meta 的 gh-pages 分支)
+RUN echo "Downloading Yacd-meta UI (gh-pages branch)..." && \
+    YACD_DIR=/app/app/static/yacd && \
+    mkdir -p ${YACD_DIR} && \
+    # 下载 gh-pages 分支的 zip 压缩包
+    curl -L -f -o /tmp/yacd-gh-pages.zip "https://github.com/MetaCubeX/Yacd-meta/archive/refs/heads/gh-pages.zip" && \
+    echo "Extracting Yacd-meta UI (gh-pages)..." && \
+    # 解压到临时目录
+    unzip -q /tmp/yacd-gh-pages.zip -d /tmp && \
+    # 将解压后的 gh-pages 目录下的 *所有内容* 移动到目标位置
+    # 注意：解压后的文件夹名通常是 {repo_name}-{branch_name}，即 Yacd-meta-gh-pages
+    mv /tmp/Yacd-meta-gh-pages/* ${YACD_DIR}/ && \
+    echo "Cleaning up Yacd-meta download..." && \
+    rm /tmp/yacd-gh-pages.zip && \
+    rm -rf /tmp/Yacd-meta-gh-pages
+
+# 在容器内创建空的 minimal_pref.yml 文件
+RUN touch /app/subconverter/minimal_pref.yml
+
+# 添加 COPY data 目录
+COPY data/ ./data/
+# 添加日志确认文件复制
+RUN echo "${GREEN}Contents of /app/data after copy:${NC}" && ls -la ./data
+
+# 设置环境变量
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    FLASK_APP=app.main \
+    FLASK_ENV=production \
+    FLASK_PORT=7860 \
+    CLASH_PROXY_PORT=7890 \
+    CLASH_API_PORT=9090 \
+    PORT=7860
+
+# 复制应用代码和静态文件
+COPY app/ ./app/
+
+# 复制启动脚本并赋予执行权限
+COPY entrypoint.sh ./
+RUN chmod +x ./entrypoint.sh
+
+# 给脚本和二进制文件执行权限 (可以简化)
+# RUN chmod +x ./clash_core/clash.meta-linux-amd64 || true
+# RUN chmod +x ./subconverter/subconverter || true
+# 确保在下载后就已设置
+
+# 暴露端口
+EXPOSE $FLASK_PORT $CLASH_PROXY_PORT $CLASH_API_PORT
+
+# 使用entrypoint脚本启动应用
+ENTRYPOINT ["/app/entrypoint.sh"] 

app/data/app/__init__.py

@@ -0,0 +1,2 @@
+# Simple Clash Relay - Python Package
+# 这个文件用于标识当前目录为一个Python包 

app/data/app/auth.py

@@ -0,0 +1,44 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+"""
+认证模块 - 提供API访问认证功能
+"""
+
+import os
+import logging
+import functools
+from flask import request, jsonify
+
+logger = logging.getLogger(__name__)
+
+# 从环境变量获取API密钥
+API_KEY = os.environ.get("API_KEY", "changeme")
+
+def authenticate(func):
+    """
+    用于API路由的认证装饰器
+    
+    Args:
+        func: 被装饰的视图函数
+        
+    Returns:
+        函数: 包含认证逻辑的包装函数
+    """
+    @functools.wraps(func)
+    def wrapper(*args, **kwargs):
+        # 获取请求头中的API Key
+        api_key = request.headers.get("X-API-Key")
+        
+        # 验证API Key
+        if not api_key or api_key != API_KEY:
+            logger.warning(f"API认证失败：{'未提供API Key' if not api_key else 'API Key无效'}")
+            return jsonify({
+                "success": False,
+                "error": "未提供API Key或API Key无效"
+            }), 401
+        
+        # 认证通过，调用原始视图函数
+        return func(*args, **kwargs)
+    
+    return wrapper 

app/data/app/clash_manager.py

@@ -0,0 +1,377 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+"""
+Clash管理器 - 负责Clash Core进程的启动、停止和API调用
+"""
+
+import os
+import time
+import signal
+import logging
+import subprocess
+import requests
+import json
+from .debug_tools import run_debug_diagnostics
+
+logger = logging.getLogger(__name__)
+
+class ClashManager:
+    """管理Clash Core进程和与其API的交互"""
+    
+    def __init__(self, config_path, clash_path, api_port=9090, proxy_port=7890):
+        """
+        初始化Clash管理器
+        
+        Args:
+            config_path: Clash配置文件路径
+            clash_path: Clash可执行文件路径
+            api_port: Clash API监听端口
+            proxy_port: Clash代理监听端口
+        """
+        self.config_path = os.path.abspath(config_path)
+        self.clash_path = os.path.abspath(clash_path)
+        self.api_port = api_port
+        self.proxy_port = proxy_port
+        self.api_base_url = f"http://127.0.0.1:{api_port}"
+        self.clash_process = None
+        
+        # 确保Clash可执行文件存在
+        if not os.path.exists(clash_path):
+            raise FileNotFoundError(f"Clash可执行文件未找到: {clash_path}")
+    
+    def start_clash(self):
+        """启动Clash Core进程"""
+        if self.clash_process and self.clash_process.poll() is None:
+            logger.info("Clash Core已经在运行中")
+            return
+        
+        # 确保配置文件存在
+        if not os.path.exists(self.config_path):
+            # 检查目录是否存在
+            config_dir = os.path.dirname(self.config_path)
+            if not os.path.exists(config_dir):
+                try:
+                    os.makedirs(config_dir, exist_ok=True)
+                    logger.info(f"创建了配置目录: {config_dir}")
+                except Exception as e:
+                    logger.error(f"无法创建配置目录: {str(e)}")
+            
+            # 如果目录存在但文件不存在，尝试创建一个基础配置
+            try:
+                with open(self.config_path, "w", encoding="utf-8") as f:
+                    f.write(self._get_base_config())
+                logger.info(f"创建了基础配置文件: {self.config_path}")
+            except Exception as e:
+                logger.error(f"无法创建配置文件: {str(e)}")
+                raise FileNotFoundError(f"Clash配置文件未找到且无法创建: {self.config_path}")
+        
+        # 验证配置文件内容
+        self._validate_config_file()
+        
+        # 运行调试诊断
+        logger.info("运行环境诊断...")
+        try:
+            diagnostics = run_debug_diagnostics(self.clash_path, self.config_path)
+            if not diagnostics.get("clash_binary", {}).get("is_executable", False):
+                logger.warning("Clash Core不是可执行文件，尝试设置执行权限")
+                try:
+                    os.chmod(self.clash_path, 0o755)
+                    logger.info("已设置执行权限")
+                except Exception as e:
+                    logger.error(f"设置执行权限失败: {str(e)}")
+        except Exception as e:
+            logger.error(f"运行诊断时出错: {str(e)}")
+        
+        # 设置Clash命令行参数 (兼容Clash Meta)
+        cmd = [
+            self.clash_path,
+            "-f", self.config_path,
+            "-d", os.path.dirname(self.config_path)
+        ]
+        
+        # 为Clash Meta添加额外参数
+        if "meta" in self.clash_path.lower():
+            # Clash Meta特有参数
+            cmd.extend([
+                "-ext-ctl", f"127.0.0.1:{self.api_port}",
+                # 如果需要可以添加更多Clash Meta特有参数
+            ])
+        else:
+            # 原始Clash参数
+            cmd.extend([
+                "-ext-ctl", f"127.0.0.1:{self.api_port}",
+                "-ext-ui", "" # 禁用外部UI
+            ])
+        
+        # 启动Clash进程
+        logger.info(f"正在启动Clash Core: {' '.join(cmd)}")
+        
+        # 首先尝试检查Clash可执行文件是否存在并且可执行
+        if not os.path.exists(self.clash_path):
+            raise FileNotFoundError(f"Clash可执行文件未找到: {self.clash_path}")
+        
+        # 检查Clash文件是否有执行权限
+        try:
+            # 尝试设置执行权限
+            os.chmod(self.clash_path, 0o755)
+            logger.info(f"已设置Clash Core的执行权限")
+        except Exception as e:
+            logger.warning(f"无法设置执行权限: {str(e)}, 尝试继续执行...")
+        
+        # 启动进程并捕获输出
+        try:
+            self.clash_process = subprocess.Popen(
+                cmd,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                universal_newlines=True
+            )
+            
+            # 等待Clash启动
+            logger.info("等待Clash Core启动...")
+            time.sleep(2)
+            
+            # 检查进程是否成功启动
+            if self.clash_process.poll() is not None:
+                # 如果进程已经退出，获取错误输出
+                stdout, stderr = self.clash_process.communicate()
+                logger.error(f"Clash启动失败，退出代码: {self.clash_process.returncode}")
+                logger.error(f"标准输出: {stdout}")
+                logger.error(f"错误输出: {stderr}")
+                
+                # 如果没有错误输出，尝试读取配置文件周围的日志
+                if not stderr.strip():
+                    try:
+                        # 查看配置文件内容
+                        with open(self.config_path, 'r', encoding='utf-8') as f:
+                            config_content = f.read()
+                        logger.error(f"配置文件内容预览 (前100字符): {config_content[:100]}")
+                    except Exception as file_err:
+                        logger.error(f"读取配置文件失败: {str(file_err)}")
+                
+                # 创建更有意义的错误消息
+                error_message = stderr or stdout or "无错误信息，可能是程序无法执行或立即崩溃"
+                raise RuntimeError(f"Clash启动失败: {error_message}")
+            
+            # 进程仍在运行，验证API是否可访问
+            logger.info("进程仍在运行，验证API...")
+            
+            try:
+                # 尝试多次连接API，有时需要一些时间
+                max_retries = 3
+                for i in range(max_retries):
+                    try:
+                        self._call_api("GET", "/version")
+                        logger.info("Clash API已就绪")
+                        return  # 成功，退出函数
+                    except Exception as api_err:
+                        if i < max_retries - 1:
+                            logger.warning(f"API连接尝试 {i+1}/{max_retries} 失败: {str(api_err)}，重试...")
+                            time.sleep(1)
+                        else:
+                            # 最后一次尝试失败，捕获并记录错误
+                            stdout, stderr = self.clash_process.communicate(timeout=1)
+                            logger.error(f"API连接失败，标准输出: {stdout}")
+                            logger.error(f"API连接失败，错误输出: {stderr}")
+                            # 杀掉进程并抛出异常
+                            self.stop_clash()
+                            raise RuntimeError(f"无法连接到Clash API: {str(api_err)}，进程输出: {stderr or stdout}")
+            except Exception as e:
+                # 捕获其他异常
+                self.stop_clash()
+                raise RuntimeError(f"验证API时出错: {str(e)}")
+                
+        except (subprocess.SubprocessError, OSError) as e:
+            # 进程启动失败
+            logger.error(f"启动Clash进程时出错: {str(e)}")
+            raise RuntimeError(f"无法启动Clash进程: {str(e)}")
+    
+    def stop_clash(self):
+        """停止Clash Core进程"""
+        if self.clash_process and self.clash_process.poll() is None:
+            logger.info("正在停止Clash Core...")
+            
+            # 尝试优雅地终止进程
+            self.clash_process.terminate()
+            
+            # 等待进程终止
+            try:
+                self.clash_process.wait(timeout=5)
+            except subprocess.TimeoutExpired:
+                # 如果进程没有及时终止，强制结束
+                logger.warning("Clash进程未响应终止信号，强制结束...")
+                self.clash_process.kill()
+            
+            self.clash_process = None
+            logger.info("Clash Core已停止")
+    
+    def restart_clash(self):
+        """重启Clash Core进程"""
+        logger.info("正在重启Clash Core...")
+        self.stop_clash()
+        time.sleep(1)  # 给进程一些时间完全终止
+        self.start_clash()
+        logger.info("Clash Core已重启")
+    
+    def get_nodes(self):
+        """
+        获取所有可用的代理节点名称列表
+        
+        Returns:
+            list: 节点名称列表
+        """
+        response = self._call_api("GET", "/proxies")
+        proxies = response.get("proxies", {})
+        
+        # 过滤出实际的代理节点（排除DIRECT, REJECT等内置代理和策略组）
+        node_names = []
+        for name, proxy in proxies.items():
+            if proxy.get("type") not in ["Direct", "Reject", "Selector", "URLTest", "Fallback", "LoadBalance"]:
+                node_names.append(name)
+        
+        return node_names
+    
+    def switch_node(self, node_name):
+        """
+        切换到指定的代理节点
+        
+        Args:
+            node_name: 节点名称
+            
+        Raises:
+            ValueError: 如果节点名称无效
+        """
+        # 获取所有节点以验证目标节点存��
+        all_nodes = self.get_nodes()
+        if node_name not in all_nodes:
+            raise ValueError(f"无效的节点名称: {node_name}")
+        
+        # 切换GLOBAL策略组到指定节点
+        # 注意：这里假设使用GLOBAL作为顶级策略组，你可能需要根据实际配置调整
+        try:
+            self._call_api("PUT", "/proxies/GLOBAL", json={"name": node_name})
+            logger.info(f"已切换到节点: {node_name}")
+        except Exception as e:
+            raise RuntimeError(f"切换节点失败: {str(e)}")
+    
+    def get_current_node(self):
+        """
+        获取当前使用的节点名称
+        
+        Returns:
+            str: 当前节点名称
+        """
+        # 获取GLOBAL策略组的当前选择
+        # 注意：这里假设使用GLOBAL作为顶级策略组，你可能需要根据实际配置调整
+        response = self._call_api("GET", "/proxies/GLOBAL")
+        return response.get("now", "unknown")
+    
+    def _call_api(self, method, endpoint, **kwargs):
+        """
+        调用Clash的API
+        
+        Args:
+            method: HTTP方法 (GET, POST, PUT等)
+            endpoint: API端点路径
+            **kwargs: 传递给requests的其他参数
+            
+        Returns:
+            dict: API响应的JSON数据
+            
+        Raises:
+            RuntimeError: 如果API调用失败
+        """
+        url = f"{self.api_base_url}{endpoint}"
+        logger.debug(f"调用Clash API: {method} {url}")
+        
+        try:
+            response = requests.request(method, url, timeout=10, **kwargs)
+            response.raise_for_status()
+            return response.json()
+        except requests.RequestException as e:
+            logger.error(f"Clash API调用失败: {str(e)}")
+            raise RuntimeError(f"Clash API调用失败: {str(e)}")
+    
+    def __del__(self):
+        """析构函数，确保进程在对象销毁时被终止"""
+        self.stop_clash()
+    
+    def _validate_config_file(self):
+        """验证配置文件内容，确保基本配置存在"""
+        try:
+            with open(self.config_path, "r", encoding="utf-8") as f:
+                content = f.read()
+            
+            # 检查文件大小
+            if len(content) < 10:
+                logger.warning(f"配置文件内容过短: {len(content)} 字节")
+                # 尝试使用基础配置替换
+                with open(self.config_path, "w", encoding="utf-8") as f:
+                    f.write(self._get_base_config())
+                logger.info("已使用基础配置替换")
+                return
+            
+            # 检查基本配置是否存在 (非严格YAML解析，简单文本检查)
+            missing_configs = []
+            if "mixed-port:" not in content and "port:" not in content:
+                missing_configs.append("端口配置")
+            
+            if "proxies:" not in content:
+                missing_configs.append("代理配置")
+            
+            if missing_configs:
+                logger.warning(f"配置文件缺少: {', '.join(missing_configs)}")
+                # 如果缺少关键配置，尝试修复
+                has_patch = False
+                
+                if "mixed-port:" not in content and "port:" not in content:
+                    content = f"mixed-port: {self.proxy_port}\n" + content
+                    has_patch = True
+                
+                if "external-controller:" not in content:
+                    content = f"external-controller: 127.0.0.1:{self.api_port}\n" + content
+                    has_patch = True
+                
+                if "proxies:" not in content:
+                    content += "\nproxies:\n  - name: DIRECT\n    type: Direct\n"
+                    has_patch = True
+                
+                if has_patch:
+                    with open(self.config_path, "w", encoding="utf-8") as f:
+                        f.write(content)
+                    logger.info("已修补配置文件")
+        
+        except Exception as e:
+            logger.error(f"验证配置文件时出错: {str(e)}")
+            # 如果验证失败，尝试使用基础配置
+            try:
+                with open(self.config_path, "w", encoding="utf-8") as f:
+                    f.write(self._get_base_config())
+                logger.info("已使用基础配置替换")
+            except Exception as write_err:
+                logger.error(f"无法写入基础配置: {str(write_err)}")
+    
+    def _get_base_config(self):
+        """返回基础Clash配置"""
+        return f"""# 基础Clash配置
+mixed-port: {self.proxy_port}
+allow-lan: true
+mode: Rule
+log-level: info
+external-controller: 127.0.0.1:{self.api_port}
+secret: ""
+
+proxies:
+  - name: DIRECT
+    type: Direct
+
+proxy-groups:
+  - name: GLOBAL
+    type: select
+    proxies:
+      - DIRECT
+
+rules:
+  - MATCH,DIRECT
+""" 

app/data/app/data/config.yaml

@@ -0,0 +1,618 @@
+mixed-port: 7890
+allow-lan: false
+bind-address: '*'
+mode: rule
+log-level: info
+external-controller: '127.0.0.1:9090'
+unified-delay: true
+tcp-concurrent: true
+dns:
+    enable: true
+    ipv6: false
+    default-nameserver: [223.5.5.5, 119.29.29.29]
+    enhanced-mode: fake-ip
+    fake-ip-range: 198.18.0.1/16
+    use-hosts: true
+    nameserver: ['https://dns.alidns.com/dns-query', 'https://doh.pub/dns-query']
+    fallback: ['https://dns.alidns.com/dns-query', 'https://doh.pub/dns-query']
+    fallback-filter: { geoip: true, ipcidr: [240.0.0.0/4, 0.0.0.0/32] }
+proxies:
+    - { name: '剩余流量：88.25 GB', type: vless, server: pq.aws48.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: 6T-kYBf65ERaEAhxIyHL1FCfu0QR6P2XQMtcvUgzSjM, short-id: 70ad150d } }
+    - { name: '距离下次重置剩余：6 天', type: vless, server: pq.aws48.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: 6T-kYBf65ERaEAhxIyHL1FCfu0QR6P2XQMtcvUgzSjM, short-id: 70ad150d } }
+    - { name: 套餐到期：2025-10-10, type: vless, server: pq.aws48.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: 6T-kYBf65ERaEAhxIyHL1FCfu0QR6P2XQMtcvUgzSjM, short-id: 70ad150d } }
+    - { name: '🇸🇬AWS新加坡01 | 高速专线推荐', type: vless, server: pq.aws48.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: 6T-kYBf65ERaEAhxIyHL1FCfu0QR6P2XQMtcvUgzSjM, short-id: 70ad150d } }
+    - { name: '🇸🇬AWS新加坡02 | 高速专线推荐', type: vless, server: pq.aws49.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: xOnY2ykLrcFMIhp7GBQu1mSH7yIW-yCc1ThJnVVtKDc, short-id: 5b6762be } }
+    - { name: '🇸🇬AWS新加坡03 | 高速专线推荐', type: vless, server: pq.aws50.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: tv.apple.com, reality-opts: { public-key: O5WC6waWDGR_ElOHmhqEQGUWDufcFxTuu7BPhwW1sE4, short-id: e1df2a15 } }
+    - { name: '🇸🇬AWS新加坡04 | 高速专线推荐', type: vless, server: pq.aws54.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: download-porter.hoyoverse.com, reality-opts: { public-key: asLJREsp9L0JbURQPIhFxc6bZIgpunEOjOJeHv3YcEs, short-id: b0fbe0f0 } }
+    - { name: '🇯🇵AWS日本东京01 | 高速专线推荐', type: vless, server: pq.aws51.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: N86yyW-L91vOtC9qgJcYAhnva9M4WT3vclSnsQo4A2k, short-id: 79fd451e } }
+    - { name: '🇯🇵AWS日本东京02 | 高速专线推荐', type: vless, server: pq.aws52.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: tv.apple.com, reality-opts: { public-key: gkeUZppVQzutjGsRcsGMW8OrPHboJ3qRFpIvj8lcUj4, short-id: c174618d } }
+    - { name: '🇯🇵AWS日本东京03 | 高速专线推荐', type: vless, server: pq.aws55.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: download-porter.hoyoverse.com, reality-opts: { public-key: zZJg13rJNHw6Zq2TGATm8UAnTmqD97i8qzrXcJFyEls, short-id: d4f2d377 } }
+    - { name: 🇺🇸美国圣何塞0.1倍-可长期下载, server: 192.9.130.120, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞01-hy2, server: 64.181.238.32, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞02-hy2, server: 192.9.157.98, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞03-hy2, server: 64.181.243.177, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞04-hy2, server: 146.235.201.189, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞05-hy2, server: 146.235.212.192, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞06-hy2, server: 138.2.229.162, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞07-hy2, server: 167.234.208.240, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞08-hy2, server: 192.18.133.190, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: tv.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞09-hy2, server: 167.234.210.122, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国圣何塞10-hy2, server: 146.235.203.34, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇦🇪迪拜2 | 高速专线-hy2', server: 193.123.76.84, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国-1倍 | 高速专线-hy2', server: 193.122.98.107, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国3-1倍 | 高速专线-hy2', server: 146.56.164.36, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国4-1倍 | 高速专线-hy2', server: 193.123.246.244, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国5-1倍 | 高速专线-hy2', server: 193.123.249.0, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国6-2倍 | 高速专线-hy2', server: 193.123.240.119, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国7-2倍 | 高速专线-hy2', server: 193.123.250.219, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国8-2倍 | 高速专线-hy2', server: 193.123.231.148, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国9-2倍 | 高速专线-hy2', server: 152.69.225.196, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇰🇷韩国10-2倍 | 高速专线-hy2', server: 146.56.100.103, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇩🇪德国 | 高速专线-hy2', server: 132.145.239.250, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇩🇪德国2 | 高速专线-hy2', server: 141.147.19.58, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇨🇭��士苏黎世 | 高速专线-hy2', server: 152.67.95.183, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇦🇺澳大利亚 | 高速专线-hy2', server: 152.69.180.226, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇦🇺澳大利亚2 | 高速专线-hy2', server: 158.179.18.251, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇦🇺澳大利亚3 | 高速专线-hy2', server: 159.13.35.245, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡 | 高速专线-hy2', server: 152.69.220.212, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡2 | 高速专线-hy2', server: 158.178.236.104, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: api.push.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡3 | 高速专线-hy2', server: 140.245.35.78, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡4 | 高速专线-hy2', server: 140.245.37.170, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡5 | 高速专线-hy2', server: 140.245.46.17, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇸🇬新加坡6 | 高速专线-hy2', server: 140.245.36.207, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: '🇺🇸美国凤凰城 | 高速专线-hy2', server: 129.146.95.165, port: 35000, ports: 35000-39000, mport: 35000-39000, udp: true, skip-cert-verify: true, sni: www.apple.com, type: hysteria2, password: c193b455-1a17-43fa-bd5e-f467208b6747 }
+    - { name: 🇺🇸美国阿什本02-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us2.globals-download.com, network: ws, ws-opts: { path: /pq/us2, headers: { Host: us2.globals-download.com } } }
+    - { name: 🇺🇸美国阿什本03-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us3.globals-download.com, network: ws, ws-opts: { path: /pq/us3, headers: { Host: us3.globals-download.com } } }
+    - { name: 🇺🇸美国阿什本04-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us4.globals-download.com, network: ws, ws-opts: { path: /pq/us4, headers: { Host: us4.globals-download.com } } }
+    - { name: 🇺🇸美国阿什本05-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us5.globals-download.com, network: ws, ws-opts: { path: /pq/us5, headers: { Host: us5.globals-download.com } } }
+    - { name: 🇺🇸美国阿什本06-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us6.globals-download.com, network: ws, ws-opts: { path: /pq/us6, headers: { Host: us6.globals-download.com } } }
+    - { name: 🇺🇸美国阿什本07-0.1倍, type: vless, server: 104.18.20.20, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, servername: us7.globals-download.com, network: ws, ws-opts: { path: /pq/us7, headers: { Host: us7.globals-download.com } } }
+    - { name: 🇰🇷韩国首尔01, type: vless, server: 193.123.226.5, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: edge, servername: buylite.music.apple.com, reality-opts: { public-key: 8nT5x5OM-97ibWMfu5y0mrvWdmuwVeg_f_RE5Ycl_yw, short-id: c5835b1f } }
+    - { name: 🇰🇷韩国首尔02, type: vless, server: 193.122.114.15, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: buylite.music.apple.com, reality-opts: { public-key: azYFzTtT4e2UwpmBzZICle8qJOLjN8kc5bq8i8aVSj0, short-id: c289c65d } }
+    - { name: 🇰🇷韩国首尔03, type: vless, server: 131.186.22.238, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.music.apple.com, reality-opts: { public-key: P--AseuV7sGvgy7YJ8iX58GxeP5-M2oq0Mq2YxPAXRs, short-id: f00d40f38482 } }
+    - { name: '🇭🇰香港HKT1 | 三网推荐', type: vless, server: pq.hkt1.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: download.globals-download.com }
+    - { name: '🇭🇰香港HKT2 | 三网推荐', type: vless, server: pq.hkt2.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: download.globals-download.com }
+    - { name: '🇭🇰香港HKT3 | 三网推荐', type: vless, server: pq.hkt3.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: download.globals-download.com }
+    - { name: '🇭🇰香港HKT4 | 三网推荐', type: vless, server: pq.hkt4.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: download.globals-download.com }
+    - { name: '🇹🇼台湾 | 避免晚高峰使用', type: vless, server: pq.hinet.tw1.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: download.yydjc.top }
+    - { name: '🇹🇼台湾2 | 避免晚高峰使用', type: vless, server: pq.hinet.tw2.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: download.yydjc.top }
+    - { name: '🇹🇼台湾3 | 避免晚高峰使用', type: vless, server: pq.hinet.tw3.yydjc.top, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: download.yydjc.top }
+    - { name: 🇯🇵日本高速01-0.1倍, type: vless, server: 172.67.79.136, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/jp1, headers: { Host: jp1.xn--ghqu5fm27b67w.com } } }
+    - { name: 🇮🇳印度01-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/in1, headers: { Host: in1_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇮🇳印度02-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/in2, headers: { Host: in2_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇮🇳印度03-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/in3, headers: { Host: in3_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇮🇳印度04-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/in4, headers: { Host: in4_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇺🇸美国洛杉矶01-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/us1, headers: { Host: us1_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇺🇸美国洛杉矶02-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/us2, headers: { Host: us2_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇺🇸美国洛杉矶03-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/us3, headers: { Host: us3_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇺🇸美国洛杉矶04-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: chrome, network: ws, ws-opts: { path: /pq/us4, headers: { Host: us4_pq_user_vip_api.pqvip.top } } }
+    - { name: 🇺🇸美国洛杉矶05-0.01倍, type: vless, server: 23.227.38.0, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: '', client-fingerprint: ios, network: ws, ws-opts: { path: /pq/us5, headers: { Host: us5_pq_user_vip_api.pqvip.top } } }
+    - { name: '🇺🇸美国圣何塞01 | 三网推荐', type: vless, server: 146.235.208.162, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: dcpqjs.yydjc.top }
+    - { name: '🇺🇸美国圣何塞02 | 三网推荐', type: vless, server: 64.181.225.150, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: dcpqjs.yydjc.top }
+    - { name: '🇺🇸美国圣何塞03 | 三网推荐', type: vless, server: 192.9.129.206, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: dcpqjs.yydjc.top }
+    - { name: '🇺🇸美国圣何塞04 | 三网推荐', type: vless, server: 64.181.233.90, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: dcpqjs.yydjc.top }
+    - { name: '🇺🇸美国圣何塞05 | 三网推荐', type: vless, server: 146.235.228.34, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: dcpqjs.yydjc.top }
+    - { name: 🇸🇬新加坡, type: vless, server: 140.245.43.199, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: tv.apple.com, reality-opts: { public-key: Wmz2q2twfWYu6FrO5xU1M87LO5KjkyGif0AuPLNMPW0, short-id: a86103965ac913f2 } }
+    - { name: 🇸🇬新加坡2, type: vless, server: 140.245.58.56, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: tv.apple.com, reality-opts: { public-key: Wmz2q2twfWYu6FrO5xU1M87LO5KjkyGif0AuPLNMPW0, short-id: a86103965ac913f2 } }
+    - { name: 🇸🇬新加坡3, type: vless, server: 213.35.108.22, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.music.apple.com, reality-opts: { public-key: IPno1w9GUxhRN2JY_yIka2DNlnuJHQeb3_0yOCM4pQg, short-id: 3ae54db4833c } }
+    - { name: 🇸🇬新加坡4, type: vless, server: 168.138.165.109, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: ios, servername: buylite.music.apple.com, reality-opts: { public-key: kR-_5J2EPiB9nrdgyXjgzfJQnxQodkGeV_jgKOEnlEM, short-id: fc814374abba } }
+    - { name: 🇯🇵日本东京, type: vless, server: 152.70.99.180, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.music.apple.com, reality-opts: { public-key: IHJ7w7m13QsYPFq8eppdqyTyeLmXzTtOG9EGu_-ep2c, short-id: 49824283a241 } }
+    - { name: 🇬🇧英国伦敦, type: vless, server: 130.162.163.216, port: 443, uuid: c193b455-1a17-43fa-bd5e-f467208b6747, udp: true, tls: true, skip-cert-verify: false, flow: xtls-rprx-vision, client-fingerprint: chrome, servername: buylite.tv.apple.com, reality-opts: { public-key: b5WuWodd3tB9cHWUJuoEFNvgYVOcLuDyjaxHy70umU4, short-id: '50211843' } }
+proxy-groups:
+    - { name: 赔钱机场, type: select, proxies: [自动选择, 故障转移, '剩余流量：88.25 GB', '距离下次重置剩余：6 天', 套餐到期：2025-10-10, '🇸🇬AWS新加坡01 | 高速专线推荐', '🇸🇬AWS新加坡02 | 高速专线推荐', '🇸🇬AWS新加坡03 | 高速专线推荐', '🇸🇬AWS新加坡04 | 高速专线推荐', '🇯🇵AWS日本东京01 | 高速专线推荐', '🇯🇵AWS日本东京02 | 高速专线推荐', '🇯🇵AWS日本东京03 | 高速专线推荐', 🇺🇸美国圣何塞0.1倍-可长期下载, 🇺🇸美国圣何塞01-hy2, 🇺🇸美国圣何塞02-hy2, 🇺🇸美国圣何塞03-hy2, 🇺🇸美国圣何塞04-hy2, 🇺🇸美国圣何塞05-hy2, 🇺🇸美国圣何塞06-hy2, 🇺🇸美国圣何塞07-hy2, 🇺🇸美国圣何塞08-hy2, 🇺🇸美国圣何塞09-hy2, 🇺🇸美国圣何塞10-hy2, '🇦🇪迪拜2 | 高速专线-hy2', '🇰🇷韩国-1倍 | 高速专线-hy2', '🇰🇷韩国3-1倍 | 高速专线-hy2', '🇰🇷韩国4-1倍 | 高速专线-hy2', '🇰🇷韩国5-1倍 | 高速专线-hy2', '🇰🇷韩国6-2倍 | 高速专线-hy2', '🇰🇷韩国7-2倍 | 高速专线-hy2', '🇰🇷韩国8-2倍 | 高速专线-hy2', '🇰🇷韩国9-2倍 | 高速专线-hy2', '🇰🇷韩国10-2倍 | 高速专线-hy2', '🇩🇪德国 | 高速专线-hy2', '🇩🇪德国2 | 高速专线-hy2', '🇨🇭瑞士苏黎世 | 高速专线-hy2', '🇦🇺澳大利亚 | 高速专线-hy2', '🇦🇺澳大利亚2 | 高速专线-hy2', '🇦🇺澳大利亚3 | 高速专线-hy2', '🇸🇬新加坡 | 高速专线-hy2', '🇸🇬新加坡2 | 高速专线-hy2', '🇸🇬新加坡3 | 高速专线-hy2', '🇸🇬新加坡4 | 高速专线-hy2', '🇸🇬新加坡5 | 高速专线-hy2', '🇸🇬新加坡6 | 高速专线-hy2', '🇺🇸美国凤凰城 | 高速专线-hy2', 🇺🇸美国阿什本02-0.1倍, 🇺🇸美国阿什本03-0.1倍, 🇺🇸美国阿什本04-0.1倍, 🇺🇸美国阿什本05-0.1倍, 🇺🇸美国阿什本06-0.1倍, 🇺🇸美国阿什本07-0.1倍, 🇰🇷韩国首尔01, 🇰🇷韩国首尔02, 🇰🇷韩国首尔03, '🇭🇰香港HKT1 | 三网推荐', '🇭🇰香港HKT2 | 三网推荐', '🇭🇰香港HKT3 | 三网推荐', '🇭🇰香港HKT4 | 三网推荐', '🇹🇼台湾 | 避免晚高峰使用', '🇹🇼台湾2 | 避免晚高峰使用', '🇹🇼台湾3 | 避免晚高峰使用', 🇯🇵日本高速01-0.1倍, 🇮🇳印度01-0.01倍, 🇮🇳印度02-0.01倍, 🇮🇳印度03-0.01倍, 🇮🇳印度04-0.01倍, 🇺🇸美国洛杉矶01-0.01倍, 🇺🇸美国洛杉矶02-0.01倍, 🇺🇸美国洛杉矶03-0.01倍, 🇺🇸美国洛杉矶04-0.01倍, 🇺🇸美国洛杉矶05-0.01倍, '🇺🇸美国圣何塞01 | 三网推荐', '🇺🇸美国圣何塞02 | 三网推荐', '🇺🇸美国圣何塞03 | 三网推荐', '🇺🇸美国圣何塞04 | 三网推荐', '🇺🇸美国圣何塞05 | 三网推荐', 🇸🇬新加坡, 🇸🇬新加坡2, 🇸🇬新加坡3, 🇸🇬新加坡4, 🇯🇵日本东京, 🇬🇧英国伦敦] }
+    - { name: 自动选择, type: url-test, proxies: ['剩余流量：88.25 GB', '距离下次重置剩余：6 天', 套餐到期：2025-10-10, '🇸🇬AWS新加坡01 | 高速专线推荐', '🇸🇬AWS新加坡02 | 高速专线推荐', '🇸🇬AWS新加坡03 | 高速专线推荐', '🇸🇬AWS新加坡04 | 高速专线推荐', '🇯🇵AWS日本东京01 | 高速专线推荐', '🇯🇵AWS日本东京02 | 高速专线推荐', '🇯🇵AWS日本东京03 | 高速专线推荐', 🇺🇸美国圣何塞0.1倍-可长期下载, 🇺🇸美国圣何塞01-hy2, 🇺🇸美国圣何塞02-hy2, 🇺🇸美国圣何塞03-hy2, 🇺🇸美国圣何塞04-hy2, 🇺🇸美国圣何塞05-hy2, 🇺🇸美国圣何塞06-hy2, 🇺🇸美国圣何塞07-hy2, 🇺🇸美国圣何塞08-hy2, 🇺🇸美国圣何塞09-hy2, 🇺🇸美国圣何塞10-hy2, '🇦🇪迪拜2 | 高速专线-hy2', '🇰🇷韩国-1倍 | 高速专线-hy2', '🇰🇷韩国3-1倍 | 高速专线-hy2', '🇰🇷韩国4-1倍 | 高速专线-hy2', '🇰🇷韩国5-1倍 | 高速专线-hy2', '🇰🇷韩国6-2倍 | 高速专线-hy2', '🇰🇷韩国7-2倍 | 高速专线-hy2', '🇰🇷韩国8-2倍 | 高速专线-hy2', '🇰🇷韩国9-2倍 | 高速专线-hy2', '🇰🇷韩国10-2倍 | 高速专线-hy2', '🇩🇪德国 | 高速专线-hy2', '🇩🇪德国2 | 高速专线-hy2', '🇨🇭瑞士苏黎世 | 高速专线-hy2', '🇦🇺澳大利亚 | 高速专线-hy2', '🇦🇺澳大利亚2 | 高速专线-hy2', '🇦🇺澳大利亚3 | 高速专线-hy2', '🇸🇬新加坡 | 高速专线-hy2', '🇸🇬新加坡2 | 高速专线-hy2', '🇸🇬新加坡3 | 高速专线-hy2', '🇸🇬新加坡4 | 高速专线-hy2', '🇸🇬新加坡5 | 高速专线-hy2', '🇸🇬新加坡6 | 高速专线-hy2', '🇺🇸美国凤凰城 | 高速专线-hy2', 🇺🇸美国阿什本02-0.1倍, 🇺🇸美国阿什本03-0.1倍, 🇺🇸美国阿什本04-0.1倍, 🇺🇸美国阿什本05-0.1倍, 🇺🇸美国阿什本06-0.1倍, 🇺🇸美国阿什本07-0.1倍, 🇰🇷韩国首尔01, 🇰🇷韩国首尔02, 🇰🇷韩国首尔03, '🇭🇰香港HKT1 | 三网推荐', '🇭🇰香港HKT2 | 三网推荐', '🇭🇰香港HKT3 | 三网推荐', '🇭🇰香港HKT4 | 三网推荐', '🇹🇼台湾 | 避免晚高峰使用', '🇹🇼台湾2 | 避免晚高峰使用', '🇹🇼台湾3 | 避免晚高峰使用', 🇯🇵日本高速01-0.1倍, 🇮🇳印度01-0.01倍, 🇮🇳印度02-0.01倍, 🇮🇳印度03-0.01倍, 🇮🇳印度04-0.01倍, 🇺🇸美国洛杉矶01-0.01倍, 🇺🇸美国洛杉矶02-0.01倍, 🇺🇸美国洛杉矶03-0.01倍, 🇺🇸美国洛杉矶04-0.01倍, 🇺🇸美国洛杉矶05-0.01倍, '🇺🇸美国圣何塞01 | 三网推荐', '🇺🇸美国圣何塞02 | 三网推荐', '🇺🇸美国圣何塞03 | 三网推荐', '🇺🇸美国圣何塞04 | 三网推荐', '🇺🇸美国圣何塞05 | 三网推荐', 🇸🇬新加坡, 🇸🇬新加坡2, 🇸🇬新加坡3, 🇸🇬新加坡4, 🇯🇵日本东京, 🇬🇧英国伦敦], url: 'http://www.gstatic.com/generate_204', interval: 86400 }
+    - { name: 故障转移, type: fallback, proxies: ['剩余流量：88.25 GB', '距离下次重置剩余：6 天', 套餐到期：2025-10-10, '🇸🇬AWS新加坡01 | 高速专线推荐', '🇸🇬AWS新加坡02 | 高速专线推荐', '🇸🇬AWS新加坡03 | 高速专线推荐', '🇸🇬AWS新加坡04 | 高速专线推荐', '🇯🇵AWS日本东京01 | 高速专线推荐', '🇯🇵AWS日本东京02 | 高速专线推荐', '🇯🇵AWS日本东京03 | 高速专线推荐', 🇺🇸美国圣何塞0.1倍-可长期下载, 🇺🇸美国圣何塞01-hy2, 🇺🇸美国圣何塞02-hy2, 🇺🇸美国圣何塞03-hy2, 🇺🇸美国圣何塞04-hy2, 🇺🇸美国圣何塞05-hy2, 🇺🇸美国圣何塞06-hy2, 🇺🇸美国圣何塞07-hy2, 🇺🇸美国圣何塞08-hy2, 🇺🇸美国圣何塞09-hy2, 🇺🇸美国圣何塞10-hy2, '🇦🇪迪拜2 | 高速专线-hy2', '🇰🇷韩国-1倍 | 高速专线-hy2', '🇰🇷韩国3-1倍 | 高速专线-hy2', '🇰🇷韩国4-1倍 | 高速专线-hy2', '🇰🇷韩国5-1倍 | 高速专线-hy2', '🇰🇷韩国6-2倍 | 高速专线-hy2', '🇰🇷韩国7-2倍 | 高速专线-hy2', '🇰🇷韩国8-2倍 | 高速专线-hy2', '🇰🇷韩国9-2倍 | 高速专线-hy2', '🇰🇷韩国10-2倍 | 高速专线-hy2', '🇩🇪德国 | 高速专线-hy2', '🇩🇪德国2 | 高速专线-hy2', '🇨🇭瑞士苏黎世 | 高速专线-hy2', '🇦🇺澳大利亚 | 高速专线-hy2', '🇦🇺澳大利亚2 | 高速专线-hy2', '🇦🇺澳大利亚3 | 高速专线-hy2', '🇸🇬新加坡 | 高速专线-hy2', '🇸🇬新加坡2 | 高速专线-hy2', '🇸🇬新加坡3 | 高速专线-hy2', '🇸🇬新加坡4 | 高速专线-hy2', '🇸🇬新加坡5 | 高速专线-hy2', '🇸🇬新加坡6 | 高速专线-hy2', '🇺🇸美国凤凰城 | 高速专线-hy2', 🇺🇸美国阿什本02-0.1倍, 🇺🇸美国阿什本03-0.1倍, 🇺🇸美国阿什本04-0.1倍, 🇺🇸美国阿什本05-0.1倍, 🇺🇸美国阿什本06-0.1倍, 🇺🇸美国阿什本07-0.1倍, 🇰🇷韩国首尔01, 🇰🇷韩国首尔02, 🇰🇷韩国首尔03, '🇭🇰香港HKT1 | 三网推荐', '🇭🇰香港HKT2 | 三网推荐', '🇭🇰香港HKT3 | 三网推荐', '🇭🇰香港HKT4 | 三网推荐', '🇹🇼台湾 | 避免晚高峰使用', '🇹🇼台湾2 | 避免晚高峰使用', '🇹🇼台湾3 | 避免晚高峰使用', 🇯🇵日本高速01-0.1倍, 🇮🇳印度01-0.01倍, 🇮🇳印度02-0.01倍, 🇮🇳印度03-0.01倍, 🇮🇳印度04-0.01倍, 🇺🇸美国洛杉矶01-0.01倍, 🇺🇸美国洛杉矶02-0.01倍, 🇺🇸美国洛杉矶03-0.01倍, 🇺🇸美国洛杉矶04-0.01倍, 🇺🇸美国洛杉矶05-0.01倍, '🇺🇸美国圣何塞01 | 三网推荐', '🇺🇸美国圣何塞02 | 三网推荐', '🇺🇸美国圣何塞03 | 三网推荐', '🇺🇸美国圣何塞04 | 三网推荐', '🇺🇸美国圣何塞05 | 三网推荐', 🇸🇬新加坡, 🇸🇬新加坡2, 🇸🇬新加坡3, 🇸🇬新加坡4, 🇯🇵日本东京, 🇬🇧英国伦敦], url: 'http://www.gstatic.com/generate_204', interval: 7200 }
+rules:
+    - 'DOMAIN-SUFFIX,services.googleapis.cn,赔钱机场'
+    - 'DOMAIN-SUFFIX,xn--ngstr-lra8j.com,赔钱机场'
+    - 'DOMAIN,safebrowsing.urlsec.qq.com,DIRECT'
+    - 'DOMAIN,safebrowsing.googleapis.com,DIRECT'
+    - 'DOMAIN,developer.apple.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,digicert.com,赔钱机场'
+    - 'DOMAIN,ocsp.apple.com,赔钱机场'
+    - 'DOMAIN,ocsp.comodoca.com,赔钱机场'
+    - 'DOMAIN,ocsp.usertrust.com,赔钱机场'
+    - 'DOMAIN,ocsp.sectigo.com,赔钱机场'
+    - 'DOMAIN,ocsp.verisign.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,apple-dns.net,赔钱机场'
+    - 'DOMAIN,testflight.apple.com,赔钱机场'
+    - 'DOMAIN,sandbox.itunes.apple.com,赔钱机场'
+    - 'DOMAIN,itunes.apple.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,apps.apple.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blobstore.apple.com,赔钱机场'
+    - 'DOMAIN,cvws.icloud-content.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mzstatic.com,DIRECT'
+    - 'DOMAIN-SUFFIX,itunes.apple.com,DIRECT'
+    - 'DOMAIN-SUFFIX,icloud.com,DIRECT'
+    - 'DOMAIN-SUFFIX,icloud-content.com,DIRECT'
+    - 'DOMAIN-SUFFIX,me.com,DIRECT'
+    - 'DOMAIN-SUFFIX,aaplimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,cdn20.com,DIRECT'
+    - 'DOMAIN-SUFFIX,cdn-apple.com,DIRECT'
+    - 'DOMAIN-SUFFIX,akadns.net,DIRECT'
+    - 'DOMAIN-SUFFIX,akamaiedge.net,DIRECT'
+    - 'DOMAIN-SUFFIX,edgekey.net,DIRECT'
+    - 'DOMAIN-SUFFIX,mwcloudcdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,mwcname.com,DIRECT'
+    - 'DOMAIN-SUFFIX,apple.com,DIRECT'
+    - 'DOMAIN-SUFFIX,apple-cloudkit.com,DIRECT'
+    - 'DOMAIN-SUFFIX,apple-mapkit.com,DIRECT'
+    - 'DOMAIN-SUFFIX,126.com,DIRECT'
+    - 'DOMAIN-SUFFIX,126.net,DIRECT'
+    - 'DOMAIN-SUFFIX,127.net,DIRECT'
+    - 'DOMAIN-SUFFIX,163.com,DIRECT'
+    - 'DOMAIN-SUFFIX,360buyimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,36kr.com,DIRECT'
+    - 'DOMAIN-SUFFIX,acfun.tv,DIRECT'
+    - 'DOMAIN-SUFFIX,air-matters.com,DIRECT'
+    - 'DOMAIN-SUFFIX,aixifan.com,DIRECT'
+    - 'DOMAIN-KEYWORD,alicdn,DIRECT'
+    - 'DOMAIN-KEYWORD,alipay,DIRECT'
+    - 'DOMAIN-KEYWORD,taobao,DIRECT'
+    - 'DOMAIN-SUFFIX,amap.com,DIRECT'
+    - 'DOMAIN-SUFFIX,autonavi.com,DIRECT'
+    - 'DOMAIN-KEYWORD,baidu,DIRECT'
+    - 'DOMAIN-SUFFIX,bdimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,bdstatic.com,DIRECT'
+    - 'DOMAIN-SUFFIX,bilibili.com,DIRECT'
+    - 'DOMAIN-SUFFIX,bilivideo.com,DIRECT'
+    - 'DOMAIN-SUFFIX,caiyunapp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,clouddn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,cnbeta.com,DIRECT'
+    - 'DOMAIN-SUFFIX,cnbetacdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,cootekservice.com,DIRECT'
+    - 'DOMAIN-SUFFIX,csdn.net,DIRECT'
+    - 'DOMAIN-SUFFIX,ctrip.com,DIRECT'
+    - 'DOMAIN-SUFFIX,dgtle.com,DIRECT'
+    - 'DOMAIN-SUFFIX,dianping.com,DIRECT'
+    - 'DOMAIN-SUFFIX,douban.com,DIRECT'
+    - 'DOMAIN-SUFFIX,doubanio.com,DIRECT'
+    - 'DOMAIN-SUFFIX,duokan.com,DIRECT'
+    - 'DOMAIN-SUFFIX,easou.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ele.me,DIRECT'
+    - 'DOMAIN-SUFFIX,feng.com,DIRECT'
+    - 'DOMAIN-SUFFIX,fir.im,DIRECT'
+    - 'DOMAIN-SUFFIX,frdic.com,DIRECT'
+    - 'DOMAIN-SUFFIX,g-cores.com,DIRECT'
+    - 'DOMAIN-SUFFIX,godic.net,DIRECT'
+    - 'DOMAIN-SUFFIX,gtimg.com,DIRECT'
+    - 'DOMAIN,cdn.hockeyapp.net,DIRECT'
+    - 'DOMAIN-SUFFIX,hongxiu.com,DIRECT'
+    - 'DOMAIN-SUFFIX,hxcdn.net,DIRECT'
+    - 'DOMAIN-SUFFIX,iciba.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ifeng.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ifengimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ipip.net,DIRECT'
+    - 'DOMAIN-SUFFIX,iqiyi.com,DIRECT'
+    - 'DOMAIN-SUFFIX,jd.com,DIRECT'
+    - 'DOMAIN-SUFFIX,jianshu.com,DIRECT'
+    - 'DOMAIN-SUFFIX,knewone.com,DIRECT'
+    - 'DOMAIN-SUFFIX,le.com,DIRECT'
+    - 'DOMAIN-SUFFIX,lecloud.com,DIRECT'
+    - 'DOMAIN-SUFFIX,lemicp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,licdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,luoo.net,DIRECT'
+    - 'DOMAIN-SUFFIX,meituan.com,DIRECT'
+    - 'DOMAIN-SUFFIX,meituan.net,DIRECT'
+    - 'DOMAIN-SUFFIX,mi.com,DIRECT'
+    - 'DOMAIN-SUFFIX,miaopai.com,DIRECT'
+    - 'DOMAIN-SUFFIX,microsoft.com,DIRECT'
+    - 'DOMAIN-SUFFIX,microsoftonline.com,DIRECT'
+    - 'DOMAIN-SUFFIX,miui.com,DIRECT'
+    - 'DOMAIN-SUFFIX,miwifi.com,DIRECT'
+    - 'DOMAIN-SUFFIX,mob.com,DIRECT'
+    - 'DOMAIN-SUFFIX,netease.com,DIRECT'
+    - 'DOMAIN-SUFFIX,office.com,DIRECT'
+    - 'DOMAIN-SUFFIX,office365.com,DIRECT'
+    - 'DOMAIN-KEYWORD,officecdn,DIRECT'
+    - 'DOMAIN-SUFFIX,oschina.net,DIRECT'
+    - 'DOMAIN-SUFFIX,ppsimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,pstatp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qcloud.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qdaily.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qdmm.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qhimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qhres.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qidian.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qihucdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qiniu.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qiniucdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qiyipic.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qq.com,DIRECT'
+    - 'DOMAIN-SUFFIX,qqurl.com,DIRECT'
+    - 'DOMAIN-SUFFIX,rarbg.to,DIRECT'
+    - 'DOMAIN-SUFFIX,ruguoapp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,segmentfault.com,DIRECT'
+    - 'DOMAIN-SUFFIX,sinaapp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,smzdm.com,DIRECT'
+    - 'DOMAIN-SUFFIX,snapdrop.net,DIRECT'
+    - 'DOMAIN-SUFFIX,sogou.com,DIRECT'
+    - 'DOMAIN-SUFFIX,sogoucdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,sohu.com,DIRECT'
+    - 'DOMAIN-SUFFIX,soku.com,DIRECT'
+    - 'DOMAIN-SUFFIX,speedtest.net,DIRECT'
+    - 'DOMAIN-SUFFIX,sspai.com,DIRECT'
+    - 'DOMAIN-SUFFIX,suning.com,DIRECT'
+    - 'DOMAIN-SUFFIX,taobao.com,DIRECT'
+    - 'DOMAIN-SUFFIX,tencent.com,DIRECT'
+    - 'DOMAIN-SUFFIX,tenpay.com,DIRECT'
+    - 'DOMAIN-SUFFIX,tianyancha.com,DIRECT'
+    - 'DOMAIN-SUFFIX,tmall.com,DIRECT'
+    - 'DOMAIN-SUFFIX,tudou.com,DIRECT'
+    - 'DOMAIN-SUFFIX,umetrip.com,DIRECT'
+    - 'DOMAIN-SUFFIX,upaiyun.com,DIRECT'
+    - 'DOMAIN-SUFFIX,upyun.com,DIRECT'
+    - 'DOMAIN-SUFFIX,veryzhun.com,DIRECT'
+    - 'DOMAIN-SUFFIX,weather.com,DIRECT'
+    - 'DOMAIN-SUFFIX,weibo.com,DIRECT'
+    - 'DOMAIN-SUFFIX,xiami.com,DIRECT'
+    - 'DOMAIN-SUFFIX,xiami.net,DIRECT'
+    - 'DOMAIN-SUFFIX,xiaomicp.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ximalaya.com,DIRECT'
+    - 'DOMAIN-SUFFIX,xmcdn.com,DIRECT'
+    - 'DOMAIN-SUFFIX,xunlei.com,DIRECT'
+    - 'DOMAIN-SUFFIX,yhd.com,DIRECT'
+    - 'DOMAIN-SUFFIX,yihaodianimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,yinxiang.com,DIRECT'
+    - 'DOMAIN-SUFFIX,ykimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,youdao.com,DIRECT'
+    - 'DOMAIN-SUFFIX,youku.com,DIRECT'
+    - 'DOMAIN-SUFFIX,zealer.com,DIRECT'
+    - 'DOMAIN-SUFFIX,zhihu.com,DIRECT'
+    - 'DOMAIN-SUFFIX,zhimg.com,DIRECT'
+    - 'DOMAIN-SUFFIX,zimuzu.tv,DIRECT'
+    - 'DOMAIN-SUFFIX,zoho.com,DIRECT'
+    - 'DOMAIN-KEYWORD,amazon,赔钱机场'
+    - 'DOMAIN-KEYWORD,google,赔钱机场'
+    - 'DOMAIN-KEYWORD,gmail,赔钱机场'
+    - 'DOMAIN-KEYWORD,youtube,赔钱机场'
+    - 'DOMAIN-KEYWORD,facebook,赔钱机场'
+    - 'DOMAIN-SUFFIX,fb.me,赔钱机场'
+    - 'DOMAIN-SUFFIX,fbcdn.net,赔钱机场'
+    - 'DOMAIN-KEYWORD,twitter,赔钱机场'
+    - 'DOMAIN-KEYWORD,instagram,赔钱机场'
+    - 'DOMAIN-KEYWORD,dropbox,赔钱机场'
+    - 'DOMAIN-SUFFIX,twimg.com,赔钱机场'
+    - 'DOMAIN-KEYWORD,blogspot,赔钱机场'
+    - 'DOMAIN-SUFFIX,youtu.be,赔钱机场'
+    - 'DOMAIN-KEYWORD,whatsapp,赔钱机场'
+    - 'DOMAIN-KEYWORD,admarvel,REJECT'
+    - 'DOMAIN-KEYWORD,admaster,REJECT'
+    - 'DOMAIN-KEYWORD,adsage,REJECT'
+    - 'DOMAIN-KEYWORD,adsmogo,REJECT'
+    - 'DOMAIN-KEYWORD,adsrvmedia,REJECT'
+    - 'DOMAIN-KEYWORD,adwords,REJECT'
+    - 'DOMAIN-KEYWORD,adservice,REJECT'
+    - 'DOMAIN-SUFFIX,appsflyer.com,REJECT'
+    - 'DOMAIN-KEYWORD,domob,REJECT'
+    - 'DOMAIN-SUFFIX,doubleclick.net,REJECT'
+    - 'DOMAIN-KEYWORD,duomeng,REJECT'
+    - 'DOMAIN-KEYWORD,dwtrack,REJECT'
+    - 'DOMAIN-KEYWORD,guanggao,REJECT'
+    - 'DOMAIN-KEYWORD,lianmeng,REJECT'
+    - 'DOMAIN-SUFFIX,mmstat.com,REJECT'
+    - 'DOMAIN-KEYWORD,mopub,REJECT'
+    - 'DOMAIN-KEYWORD,omgmta,REJECT'
+    - 'DOMAIN-KEYWORD,openx,REJECT'
+    - 'DOMAIN-KEYWORD,partnerad,REJECT'
+    - 'DOMAIN-KEYWORD,pingfore,REJECT'
+    - 'DOMAIN-KEYWORD,supersonicads,REJECT'
+    - 'DOMAIN-KEYWORD,uedas,REJECT'
+    - 'DOMAIN-KEYWORD,umeng,REJECT'
+    - 'DOMAIN-KEYWORD,usage,REJECT'
+    - 'DOMAIN-SUFFIX,vungle.com,REJECT'
+    - 'DOMAIN-KEYWORD,wlmonitor,REJECT'
+    - 'DOMAIN-KEYWORD,zjtoolbar,REJECT'
+    - 'DOMAIN-SUFFIX,9to5mac.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,abpchina.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,adblockplus.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,adobe.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,akamaized.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,alfredapp.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,amplitude.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ampproject.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,android.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,angularjs.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,aolcdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,apkpure.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,appledaily.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,appshopper.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,appspot.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,arcgis.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,archive.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,armorgames.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,aspnetcdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,att.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,awsstatic.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,azureedge.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,azurewebsites.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,bing.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,bintray.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,bit.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,bit.ly,赔钱机场'
+    - 'DOMAIN-SUFFIX,bitbucket.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,bjango.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,bkrtx.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blog.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blogcdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blogger.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blogsmithmedia.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blogspot.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,blogspot.hk,赔钱机场'
+    - 'DOMAIN-SUFFIX,bloomberg.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,box.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,box.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,cachefly.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,chromium.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,cl.ly,赔钱机场'
+    - 'DOMAIN-SUFFIX,cloudflare.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,cloudfront.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,cloudmagic.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,cmail19.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,cnet.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,cocoapods.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,comodoca.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,crashlytics.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,culturedcode.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,d.pr,赔钱机场'
+    - 'DOMAIN-SUFFIX,danilo.to,赔钱机场'
+    - 'DOMAIN-SUFFIX,dayone.me,赔钱机场'
+    - 'DOMAIN-SUFFIX,db.tt,赔钱机场'
+    - 'DOMAIN-SUFFIX,deskconnect.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,disq.us,赔钱机场'
+    - 'DOMAIN-SUFFIX,disqus.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,disquscdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,dnsimple.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,docker.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,dribbble.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,droplr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,duckduckgo.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,dueapp.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,dytt8.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,edgecastcdn.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,edgekey.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,edgesuite.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,engadget.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,entrust.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,eurekavpt.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,evernote.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,fabric.io,赔钱机场'
+    - 'DOMAIN-SUFFIX,fast.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,fastly.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,fc2.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,feedburner.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,feedly.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,feedsportal.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,fiftythree.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,firebaseio.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,flexibits.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,flickr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,flipboard.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,g.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,gabia.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,geni.us,赔钱机场'
+    - 'DOMAIN-SUFFIX,gfx.ms,赔钱机场'
+    - 'DOMAIN-SUFFIX,ggpht.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ghostnoteapp.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,git.io,赔钱机场'
+    - 'DOMAIN-KEYWORD,github,赔钱机场'
+    - 'DOMAIN-SUFFIX,globalsign.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,gmodules.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,godaddy.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,golang.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,gongm.in,赔钱机场'
+    - 'DOMAIN-SUFFIX,goo.gl,赔钱机场'
+    - 'DOMAIN-SUFFIX,goodreaders.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,goodreads.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,gravatar.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,gstatic.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,gvt0.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,hockeyapp.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,hotmail.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,icons8.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ifixit.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ift.tt,赔钱机场'
+    - 'DOMAIN-SUFFIX,ifttt.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,iherb.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,imageshack.us,赔钱机场'
+    - 'DOMAIN-SUFFIX,img.ly,赔钱机场'
+    - 'DOMAIN-SUFFIX,imgur.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,imore.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,instapaper.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ipn.li,赔钱机场'
+    - 'DOMAIN-SUFFIX,is.gd,赔钱机场'
+    - 'DOMAIN-SUFFIX,issuu.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,itgonglun.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,itun.es,赔钱机场'
+    - 'DOMAIN-SUFFIX,ixquick.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,j.mp,赔钱机场'
+    - 'DOMAIN-SUFFIX,js.revsci.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,jshint.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,jtvnw.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,justgetflux.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,kat.cr,赔钱机场'
+    - 'DOMAIN-SUFFIX,klip.me,赔钱机场'
+    - 'DOMAIN-SUFFIX,libsyn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,linkedin.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,line-apps.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,linode.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,lithium.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,littlehj.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,live.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,live.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,livefilestore.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,llnwd.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,macid.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,macromedia.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,macrumors.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mashable.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mathjax.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,medium.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mega.co.nz,赔钱机场'
+    - 'DOMAIN-SUFFIX,mega.nz,赔钱机场'
+    - 'DOMAIN-SUFFIX,megaupload.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,microsofttranslator.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mindnode.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,mobile01.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,modmyi.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,msedge.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,myfontastic.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,name.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,nextmedia.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,nsstatic.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,nssurge.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,nyt.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,nytimes.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,omnigroup.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,onedrive.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,onenote.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ooyala.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,openvpn.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,openwrt.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,orkut.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,osxdaily.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,outlook.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ow.ly,赔钱机场'
+    - 'DOMAIN-SUFFIX,paddleapi.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,parallels.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,parse.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,pdfexpert.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,periscope.tv,赔钱机场'
+    - 'DOMAIN-SUFFIX,pinboard.in,赔钱机场'
+    - 'DOMAIN-SUFFIX,pinterest.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,pixelmator.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,pixiv.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,playpcesor.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,playstation.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,playstation.com.hk,赔钱机场'
+    - 'DOMAIN-SUFFIX,playstation.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,playstationnetwork.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,pushwoosh.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,rime.im,赔钱机场'
+    - 'DOMAIN-SUFFIX,servebom.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,sfx.ms,赔钱机场'
+    - 'DOMAIN-SUFFIX,shadowsocks.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,sharethis.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,shazam.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,skype.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,smartdns赔钱机场.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,smartmailcloud.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,sndcdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,sony.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,soundcloud.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,sourceforge.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,spotify.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,squarespace.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,sstatic.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,st.luluku.pw,赔钱机场'
+    - 'DOMAIN-SUFFIX,stackoverflow.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,startpage.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,staticflickr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,steamcommunity.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,symauth.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,symcb.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,symcd.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tapbots.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tapbots.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,tdesktop.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,techcrunch.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,techsmith.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,thepiratebay.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,theverge.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,time.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,timeinc.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,tiny.cc,赔钱机场'
+    - 'DOMAIN-SUFFIX,tinypic.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tmblr.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,todoist.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,trello.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,trustasiassl.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tumblr.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,tumblr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tweetdeck.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,tweetmarker.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,twitch.tv,赔钱机场'
+    - 'DOMAIN-SUFFIX,txmblr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,typekit.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,ubertags.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ublock.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,ubnt.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ulyssesapp.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,urchin.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,usertrust.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,v.gd,赔钱机场'
+    - 'DOMAIN-SUFFIX,v2ex.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,vimeo.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,vimeocdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,vine.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,vivaldi.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,vox-cdn.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,vsco.co,赔钱机场'
+    - 'DOMAIN-SUFFIX,vultr.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,w.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,w3schools.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,webtype.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wikiwand.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wikileaks.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,wikimedia.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,wikipedia.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wikipedia.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,windows.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,windows.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,wire.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wordpress.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,workflowy.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wp.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wsj.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,wsj.net,赔钱机场'
+    - 'DOMAIN-SUFFIX,xda-developers.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,xeeno.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,xiti.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,yahoo.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,yimg.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,ying.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,yoyo.org,赔钱机场'
+    - 'DOMAIN-SUFFIX,ytimg.com,赔钱机场'
+    - 'DOMAIN-SUFFIX,telegra.ph,赔钱机场'
+    - 'DOMAIN-SUFFIX,telegram.org,赔钱机场'
+    - 'IP-CIDR,91.108.4.0/22,赔钱机场,no-resolve'
+    - 'IP-CIDR,91.108.8.0/21,赔钱机场,no-resolve'
+    - 'IP-CIDR,91.108.16.0/22,赔钱机场,no-resolve'
+    - 'IP-CIDR,91.108.56.0/22,赔钱机场,no-resolve'
+    - 'IP-CIDR,149.154.160.0/20,赔钱机场,no-resolve'
+    - 'IP-CIDR6,2001:67c:4e8::/48,赔钱机场,no-resolve'
+    - 'IP-CIDR6,2001:b28:f23d::/48,赔钱机场,no-resolve'
+    - 'IP-CIDR6,2001:b28:f23f::/48,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.232.181.162/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.241.147.226/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.253.253.226/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.253.255.162/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.253.255.34/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,120.253.255.98/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,180.163.150.162/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,180.163.150.34/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,180.163.151.162/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,180.163.151.34/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,203.208.39.0/24,赔钱机场,no-resolve'
+    - 'IP-CIDR,203.208.40.0/24,赔钱机场,no-resolve'
+    - 'IP-CIDR,203.208.41.0/24,赔钱机场,no-resolve'
+    - 'IP-CIDR,203.208.43.0/24,赔钱机场,no-resolve'
+    - 'IP-CIDR,203.208.50.0/24,赔钱机场,no-resolve'
+    - 'IP-CIDR,220.181.174.162/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,220.181.174.226/32,赔钱机场,no-resolve'
+    - 'IP-CIDR,220.181.174.34/32,赔钱机场,no-resolve'
+    - 'DOMAIN,injections.adguard.org,DIRECT'
+    - 'DOMAIN,local.adguard.org,DIRECT'
+    - 'DOMAIN-SUFFIX,local,DIRECT'
+    - 'IP-CIDR,127.0.0.0/8,DIRECT'
+    - 'IP-CIDR,172.16.0.0/12,DIRECT'
+    - 'IP-CIDR,192.168.0.0/16,DIRECT'
+    - 'IP-CIDR,10.0.0.0/8,DIRECT'
+    - 'IP-CIDR,17.0.0.0/8,DIRECT'
+    - 'IP-CIDR,100.64.0.0/10,DIRECT'
+    - 'IP-CIDR,224.0.0.0/4,DIRECT'
+    - 'IP-CIDR6,fe80::/10,DIRECT'
+    - 'DOMAIN-SUFFIX,cn,DIRECT'
+    - 'DOMAIN-KEYWORD,-cn,DIRECT'
+    - 'GEOIP,CN,DIRECT'
+    - 'MATCH,赔钱机场'

app/data/app/debug_tools.py

@@ -0,0 +1,177 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+"""
+调试工具 - 用于分析 Clash Core 的运行环境
+"""
+
+import os
+import sys
+import subprocess
+import logging
+import platform
+import json
+
+logger = logging.getLogger(__name__)
+
+def check_binary(binary_path):
+    """检查二进制文件，并返回详细信息"""
+    results = {
+        "path": binary_path,
+        "exists": os.path.exists(binary_path),
+        "size": 0,
+        "permissions": "",
+        "file_type": "",
+        "ldd_output": "",
+        "system_info": get_system_info()
+    }
+    
+    if results["exists"]:
+        try:
+            # 获取文件大小
+            results["size"] = os.path.getsize(binary_path)
+            
+            # 获取文件权限
+            results["permissions"] = oct(os.stat(binary_path).st_mode)[-3:]
+            
+            # 检查是否可执行
+            results["is_executable"] = os.access(binary_path, os.X_OK)
+            
+            # 获取文件类型 (file 命令)
+            try:
+                file_output = subprocess.check_output(["file", binary_path], universal_newlines=True)
+                results["file_type"] = file_output.strip()
+            except Exception as e:
+                results["file_type_error"] = str(e)
+            
+            # 获取库依赖 (ldd 命令)
+            try:
+                ldd_output = subprocess.check_output(["ldd", binary_path], universal_newlines=True)
+                results["ldd_output"] = ldd_output.strip()
+            except Exception as e:
+                results["ldd_error"] = str(e)
+            
+            # 尝试直接执行获取版本或帮助
+            try:
+                version_output = subprocess.check_output([binary_path, "-v"], stderr=subprocess.STDOUT, universal_newlines=True, timeout=2)
+                results["version_output"] = version_output.strip()
+            except Exception as e:
+                results["version_error"] = str(e)
+                
+                # 如果 -v 失败，尝试 --version
+                try:
+                    version_output = subprocess.check_output([binary_path, "--version"], stderr=subprocess.STDOUT, universal_newlines=True, timeout=2)
+                    results["version_output"] = version_output.strip()
+                except Exception as e2:
+                    results["version_error_alt"] = str(e2)
+            
+        except Exception as e:
+            results["error"] = str(e)
+    
+    return results
+
+def get_system_info():
+    """获取系统信息"""
+    info = {
+        "platform": platform.platform(),
+        "system": platform.system(),
+        "release": platform.release(),
+        "version": platform.version(),
+        "architecture": platform.machine(),
+        "python_version": sys.version,
+        "cwd": os.getcwd(),
+        "env": {key: value for key, value in os.environ.items()}
+    }
+    return info
+
+def check_clash_environment(clash_path, config_path):
+    """检查 Clash 运行环境"""
+    results = {
+        "clash_binary": check_binary(clash_path),
+        "config_file": {
+            "path": config_path,
+            "exists": os.path.exists(config_path),
+            "size": 0,
+            "content_preview": ""
+        },
+        "directory_info": {}
+    }
+    
+    # 检查配置文件
+    if results["config_file"]["exists"]:
+        try:
+            results["config_file"]["size"] = os.path.getsize(config_path)
+            with open(config_path, 'r', encoding='utf-8') as f:
+                content = f.read(1000)  # 读取前1000个字符
+                results["config_file"]["content_preview"] = content
+        except Exception as e:
+            results["config_file"]["error"] = str(e)
+    
+    # 检查目录结构
+    dirs_to_check = [
+        os.path.dirname(clash_path),
+        os.path.dirname(config_path),
+        ".",
+        "./data",
+        "./clash_core",
+        "./subconverter"
+    ]
+    
+    for dir_path in dirs_to_check:
+        try:
+            if os.path.exists(dir_path):
+                files = os.listdir(dir_path)
+                results["directory_info"][dir_path] = {
+                    "exists": True,
+                    "files": files,
+                    "permissions": oct(os.stat(dir_path).st_mode)[-3:]
+                }
+            else:
+                results["directory_info"][dir_path] = {
+                    "exists": False
+                }
+        except Exception as e:
+            results["directory_info"][dir_path] = {
+                "error": str(e)
+            }
+    
+    return results
+
+def run_debug_diagnostics(clash_path, config_path):
+    """运行调试诊断，并记录结果"""
+    logger.info("运行调试诊断...")
+    
+    try:
+        results = check_clash_environment(clash_path, config_path)
+        logger.info("诊断完成")
+        
+        # 将结果保存到文件
+        diagnostics_file = "clash_diagnostics.json"
+        with open(diagnostics_file, 'w', encoding='utf-8') as f:
+            json.dump(results, f, indent=2, ensure_ascii=False)
+        logger.info(f"诊断结果已保存到 {diagnostics_file}")
+        
+        # 打印关键信息
+        if results["clash_binary"]["exists"]:
+            logger.info(f"Clash 二进制文件: {results['clash_binary']['path']}")
+            logger.info(f"  - 大小: {results['clash_binary']['size']} 字节")
+            logger.info(f"  - 权限: {results['clash_binary']['permissions']}")
+            logger.info(f"  - 文件类型: {results['clash_binary']['file_type']}")
+            logger.info(f"  - 可执行: {results['clash_binary'].get('is_executable', False)}")
+        else:
+            logger.error(f"Clash 二进制文件不存在: {results['clash_binary']['path']}")
+        
+        if results["config_file"]["exists"]:
+            logger.info(f"配置文件: {results['config_file']['path']}")
+            logger.info(f"  - 大小: {results['config_file']['size']} 字节")
+            preview = results["config_file"].get("content_preview", "")
+            if preview:
+                logger.info(f"  - 内容预览: {preview[:100]}...")
+        else:
+            logger.error(f"配置文件不存在: {results['config_file']['path']}")
+        
+        return results
+    
+    except Exception as e:
+        logger.error(f"诊断过程中出错: {str(e)}")
+        return {"error": str(e)} 

app/data/app/main.py

@@ -0,0 +1,521 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+"""
+Simple Clash Relay - Flask 应用入口
+"""
+
+import os
+import logging
+from flask import Flask, request, jsonify, Response, redirect, send_from_directory
+from .clash_manager import ClashManager
+from .sub_manager import SubscriptionManager
+from .auth import authenticate
+import requests
+from functools import wraps
+
+# 配置日志
+logging.basicConfig(
+    level=logging.INFO,
+    format="%(asctime)s - %(name)s - %(levelname)s - %(message)s"
+)
+logger = logging.getLogger(__name__)
+
+# 从环境变量加载配置
+SUB_URL = os.environ.get("SUB_URL")
+API_KEY = os.environ.get("API_KEY", "changeme")
+FLASK_PORT = int(os.environ.get("FLASK_PORT", 7860))  # 默认端口改为7860
+CLASH_PROXY_PORT = int(os.environ.get("CLASH_PROXY_PORT", 7890))
+CLASH_API_PORT = int(os.environ.get("CLASH_API_PORT", 9090))
+
+# 初始化Flask应用
+app = Flask(__name__, static_folder='static')
+
+# 初始化管理器
+clash_manager = None
+sub_manager = None
+initialization_error = None
+
+@app.before_request
+def initialize_once():
+    """应用首次请求前的初始化"""
+    global clash_manager, sub_manager, initialization_error
+    
+    # 使用类变量确保只初始化一次
+    if not getattr(initialize_once, '_initialized', False):
+        logger.info("正在初始化应用 (首次请求)...")
+        
+        config_path = os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml")
+        
+        # 首先检查是否存在有效的本地配置文件
+        if os.path.exists(config_path) and os.path.getsize(config_path) > 0:
+            logger.info("检测到有效的本地配置文件，直接使用它启动Clash")
+            try:
+                # 初始化Clash管理器并使用本地配置文件
+                clash_manager = ClashManager(
+                    config_path=config_path,
+                    clash_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "clash_core", "clash.meta-linux-amd64"),
+                    api_port=CLASH_API_PORT,
+                    proxy_port=CLASH_PROXY_PORT
+                )
+                
+                # 启动Clash Core
+                clash_manager.start_clash()
+                logger.info("成功使用本地配置文件启动Clash Core")
+                initialize_once._initialized = True
+                return
+            except Exception as e:
+                logger.warning(f"使用本地配置文件启动失败，将尝试从订阅加载: {str(e)}")
+                # 继续尝试从订阅加载
+        
+        # 初始化订阅管理器
+        sub_manager = SubscriptionManager(
+            sub_url=SUB_URL,
+            config_path=config_path
+        )
+        
+        # 加载订阅并转换为Clash配置
+        try:
+            sub_manager.load_and_convert_sub()
+            logger.info("成功加载并转换订阅")
+        except Exception as e:
+            err_msg = f"加载订阅失败: {str(e)}"
+            logger.error(err_msg)
+            initialization_error = err_msg
+            initialize_once._initialized = True # 标记已初始化，即使失败
+            return
+        
+        # 初始化Clash管理器
+        clash_manager = ClashManager(
+            config_path=config_path,
+            clash_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "clash_core", "clash.meta-linux-amd64"),
+            api_port=CLASH_API_PORT,
+            proxy_port=CLASH_PROXY_PORT
+        )
+        
+        # 启动Clash Core
+        try:
+            clash_manager.start_clash()
+            logger.info("成功启动Clash Core")
+        except Exception as e:
+            err_msg = f"启动Clash Core失败: {str(e)}"
+            logger.error(err_msg)
+            initialization_error = err_msg
+        
+        initialize_once._initialized = True # 标记已初始化
+
+@app.route("/api/nodes", methods=["GET"])
+@authenticate
+def get_nodes():
+    """获取可用节点列表"""
+    global clash_manager, initialization_error
+    
+    if clash_manager is None:
+        return jsonify({
+            "success": False, 
+            "error": f"Clash未启动: {initialization_error or '未知错误'}"
+        }), 503
+    
+    try:
+        nodes = clash_manager.get_nodes()
+        return jsonify({"success": True, "nodes": nodes})
+    except Exception as e:
+        logger.error(f"获取节点列表失败: {str(e)}")
+        return jsonify({"success": False, "error": str(e)}), 500
+
+@app.route("/api/switch", methods=["PUT"])
+@authenticate
+def switch_node():
+    """切换到指定节点"""
+    global clash_manager, initialization_error
+    
+    if clash_manager is None:
+        return jsonify({
+            "success": False, 
+            "error": f"Clash未启动: {initialization_error or '未知错误'}"
+        }), 503
+    
+    data = request.get_json()
+    if not data or "node" not in data:
+        return jsonify({"success": False, "error": "缺少'node'参数"}), 400
+    
+    node_name = data["node"]
+    try:
+        clash_manager.switch_node(node_name)
+        return jsonify({"success": True, "message": f"已切换到节点: {node_name}"})
+    except Exception as e:
+        logger.error(f"切换到节点 {node_name} 失败: {str(e)}")
+        return jsonify({"success": False, "error": str(e)}), 500
+
+@app.route("/api/current", methods=["GET"])
+@authenticate
+def get_current_node():
+    """获取当前使用的节点"""
+    global clash_manager, initialization_error
+    
+    if clash_manager is None:
+        return jsonify({
+            "success": False, 
+            "error": f"Clash未启动: {initialization_error or '未知错误'}"
+        }), 503
+    
+    try:
+        current_node = clash_manager.get_current_node()
+        return jsonify({"success": True, "current_node": current_node})
+    except Exception as e:
+        logger.error(f"获取当前节点失败: {str(e)}")
+        return jsonify({"success": False, "error": str(e)}), 500
+
+@app.route("/api/refresh", methods=["POST"])
+@authenticate
+def refresh_subscription():
+    """刷新订阅并重新加载Clash配置"""
+    global clash_manager, sub_manager, initialization_error
+    
+    try:
+        # 尝试重新加载订阅
+        if sub_manager is None:
+            sub_manager = SubscriptionManager(
+                sub_url=SUB_URL,
+                config_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml")
+            )
+        
+        sub_manager.load_and_convert_sub()
+        
+        if clash_manager is None:
+            clash_manager = ClashManager(
+                config_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml"),
+                clash_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "clash_core", "clash.meta-linux-amd64"),
+                api_port=CLASH_API_PORT,
+                proxy_port=CLASH_PROXY_PORT
+            )
+            clash_manager.start_clash()
+            initialization_error = None
+            return jsonify({"success": True, "message": "订阅已刷新，Clash已启动"})
+        else:
+            clash_manager.restart_clash()
+            initialization_error = None
+            return jsonify({"success": True, "message": "订阅已刷新，Clash已重启"})
+    except Exception as e:
+        error_msg = f"刷新订阅失败: {str(e)}"
+        logger.error(error_msg)
+        initialization_error = error_msg
+        return jsonify({"success": False, "error": error_msg}), 500
+
+@app.route("/health", methods=["GET"])
+def health_check():
+    """健康检查接口"""
+    return jsonify({"status": "ok"})
+
+# --- 代理路由 --- 
+
+# 弃用/proxy路由，Clash的代理端口由外部直接访问
+# 如果需要在Hugging Face部署，代理通常通过Clash API的节点选择完成
+
+# --- 调试路由 --- 
+
+@app.route("/debug/clean", methods=["POST"])
+@authenticate
+def debug_clean():
+    """清理并重新初始化配置"""
+    global clash_manager, sub_manager, initialization_error
+    
+    try:
+        if clash_manager is not None:
+            clash_manager.stop_clash()
+            clash_manager = None
+        
+        config_path = os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml")
+        raw_config_path = f"{config_path}.raw"
+        
+        files_to_delete = [config_path, raw_config_path]
+        deleted_files = []
+        
+        for file_path in files_to_delete:
+            if os.path.exists(file_path):
+                try:
+                    os.remove(file_path)
+                    deleted_files.append(os.path.basename(file_path))
+                except OSError as e:
+                    logger.warning(f"删除文件失败: {file_path}, 错误: {e}")
+        
+        # 重新初始化并启动
+        initialize_once._initialized = False # 强制下次请求时重新初始化
+        initialize_once()
+        
+        status_msg = "已清理并重新初始化" if initialization_error is None else f"已清理但初始化失败: {initialization_error}"
+        return jsonify({"success": True, "message": status_msg, "deleted_files": deleted_files})
+    
+    except Exception as e:
+        logger.error(f"清理配置时出错: {str(e)}")
+        return jsonify({"success": False, "error": str(e)}), 500
+
+@app.route("/debug/config", methods=["GET"])
+@authenticate
+def debug_show_config():
+    """获取并显示当前Clash配置文件内容"""
+    config_path = os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml")
+    
+    if not os.path.exists(config_path):
+        return jsonify({"success": False, "error": "配置文件不存在"}), 404
+        
+    try:
+        with open(config_path, "r", encoding="utf-8") as f:
+            content = f.read()
+        return jsonify({"success": True, "content": content})
+    except Exception as e:
+        logger.error(f"读取配置文件时出错: {str(e)}")
+        return jsonify({"success": False, "error": str(e)}), 500
+
+# --- Yacd UI & Clash API 反向代理路由 --- 
+
+@app.route('/ui/')
+def yacd_index():
+    """提供Yacd UI的入口文件"""
+    # return send_from_directory('static/yacd', 'index.html')
+    # 重定向到包含 index.html 的目录，确保相对路径正确加载
+    return redirect('/ui/index.html', code=301)
+
+@app.route('/ui/<path:path>')
+def yacd_static(path):
+    """提供Yacd UI的静态文件 (CSS, JS, images)"""
+    return send_from_directory(os.path.join(app.static_folder, 'yacd'), path)
+
+@app.route('/clashapi/<path:subpath>', methods=['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS', 'HEAD', 'PATCH'])
+def clash_api_proxy(subpath):
+    """反向代理请求到内部的Clash API"""
+    global clash_manager, initialization_error, API_KEY
+    
+    # 1. 认证检查 (Yacd 使用 Authorization: Bearer <key> 或 ?token=<key>)
+    auth_header = request.headers.get('Authorization')
+    token = request.args.get('token')
+    provided_key = None
+    
+    if auth_header and auth_header.startswith('Bearer '):
+        provided_key = auth_header.split(' ', 1)[1]
+    elif token:
+        provided_key = token
+        
+    if provided_key != API_KEY:
+        logger.warning(f"Clash API代理认证失败，路径: {subpath}")
+        return jsonify({"message": "Authentication required"}), 401
+    
+    # 2. 检查Clash是否运行
+    if clash_manager is None or clash_manager.clash_process is None or clash_manager.clash_process.poll() is not None:
+        logger.error(f"Clash API不可用，无法代理请求: {subpath}")
+        return jsonify({
+            "success": False, 
+            "error": f"Clash API未运行: {initialization_error or '内部错误'}"
+        }), 503
+
+    # 3. 构建目标URL
+    target_url = f"http://127.0.0.1:{CLASH_API_PORT}/{subpath}"
+    if request.query_string:
+        target_url += '?' + request.query_string.decode('utf-8')
+        
+    logger.debug(f"代理Clash API请求到: {target_url}")
+    
+    # 4. 转发请求
+    try:
+        # 准备请求头，移除Host，保留Yacd可能发送的认证头
+        req_headers = {key: value for key, value in request.headers if key.lower() != 'host'}
+        
+        # 对于WebSocket连接 (Clash API 日志/流量)
+        if request.headers.get('Upgrade', '').lower() == 'websocket':
+            # 这里需要一个更复杂的WebSocket代理实现，暂时返回错误
+            logger.warning("不支持的WebSocket代理请求")
+            return jsonify({"error": "WebSocket proxy not supported"}), 501
+        
+        # 普通HTTP请求
+        resp = requests.request(
+            method=request.method,
+            url=target_url,
+            headers=req_headers,
+            data=request.get_data(),
+            cookies=request.cookies,
+            allow_redirects=False,
+            stream=True, # 对于大响应或流式响应
+            timeout=30 # 添加超时
+        )
+        
+        # 5. 构建并返回响应
+        excluded_headers = ['content-encoding', 'content-length', 'transfer-encoding', 'connection']
+        resp_headers = [(name, value) for name, value in resp.raw.headers.items()
+                        if name.lower() not in excluded_headers]
+        
+        # 使用iter_content流式传输响应体，以支持大数据和流
+        response = Response(resp.iter_content(chunk_size=8192), resp.status_code, resp_headers)
+        return response
+    
+    except requests.exceptions.ConnectionError as e:
+        logger.error(f"连接Clash API失败 ({target_url}): {str(e)}")
+        return jsonify({"error": f"无法连接到内部Clash API: {str(e)}"}), 502 # Bad Gateway
+    except requests.exceptions.Timeout as e:
+        logger.error(f"请求Clash API超时 ({target_url}): {str(e)}")
+        return jsonify({"error": f"请求内部Clash API超时: {str(e)}"}), 504 # Gateway Timeout
+    except Exception as e:
+        logger.error(f"代理Clash API请求时发生意外错误: {str(e)}")
+        return jsonify({"error": f"代理请求时发生意外错误: {str(e)}"}), 500
+
+# --- 基础路由 --- 
+
+@app.route('/', methods=['GET'])
+def index():
+    """首页 - 提供简单说明和调试链接"""
+    global initialization_error
+    
+    status = "运行中" if initialization_error is None else "初始化失败"
+    error_msg = "" if initialization_error is None else f"<p style='color:red'>错误: {initialization_error}</p>"
+    
+    # 检查Yacd UI是否可用
+    yacd_link = "<a href='/ui/' class='button'>访问高级控制面板 (Yacd)</a>"
+    
+    return f"""
+    <html>
+        <head>
+            <title>Simple Clash Relay</title>
+            <style>
+                body {{ font-family: Arial, sans-serif; padding: 20px; }}
+                h1 {{ color: #333; }}
+                .status {{ padding: 10px; border-radius: 5px; display: inline-block; }}
+                .running {{ background-color: #dff0d8; color: #3c763d; }}
+                .error {{ background-color: #f2dede; color: #a94442; }}
+                .container {{ max-width: 800px; margin: 0 auto; }}
+                .button {{ 
+                    display: inline-block; 
+                    padding: 8px 16px; 
+                    background-color: #337ab7; 
+                    color: white; 
+                    text-decoration: none;
+                    border-radius: 4px;
+                    margin-right: 10px;
+                    margin-bottom: 10px; /* 添加底部间距 */
+                }}
+                .button.danger {{ background-color: #d9534f; }}
+                .button.warning {{ background-color: #f0ad4e; }}
+                .debug-section {{ 
+                    margin-top: 20px; 
+                    padding: 15px; 
+                    border: 1px dashed #ccc; 
+                    background-color: #f9f9f9; 
+                }}
+                pre {{ max-height: 300px; overflow: auto; background-color: #eee; padding: 10px; border-radius: 4px; }}
+            </style>
+            <script>
+                function requestWithApiKey(url, method = 'POST') {{
+                    const apiKey = prompt('请输入API密钥 (默认为 changeme)', 'changeme');
+                    if (apiKey === null) return; // 用户取消
+
+                    fetch(url, {{
+                        method: method,
+                        headers: {{ 'X-API-Key': apiKey }}
+                    }})
+                    .then(response => response.json())
+                    .then(data => {{
+                        alert(data.success ? data.message : '失败: ' + data.error);
+                        if(data.success) location.reload();
+                    }})
+                    .catch(error => alert('请求失败: ' + error));
+                }}
+                
+                function viewConfig() {{
+                    const apiKey = prompt('请输入API密钥 (默认为 changeme)', 'changeme');
+                    if (apiKey === null) return;
+                    
+                    fetch('/debug/config', {{
+                        headers: {{ 'X-API-Key': apiKey }}
+                    }})
+                    .then(response => response.json())
+                    .then(data => {{
+                        const configDiv = document.getElementById('config-content');
+                        configDiv.innerHTML = ''; // 清空之前的内容
+                        if (data.success) {{
+                            const pre = document.createElement('pre');
+                            pre.textContent = data.content;
+                            configDiv.appendChild(pre);
+                        }} else {{
+                            const errorP = document.createElement('p');
+                            errorP.style.color = 'red';
+                            errorP.textContent = '获取配置失败: ' + data.error;
+                            configDiv.appendChild(errorP);
+                        }}
+                    }})
+                    .catch(error => {{
+                        const configDiv = document.getElementById('config-content');
+                        configDiv.innerHTML = '<p style="color:red">请求失败: ' + error + '</p>';
+                    }});
+                }}
+            </script>
+        </head>
+        <body>
+            <div class='container'>
+                <h1>Simple Clash Relay</h1>
+                <p>状态: <span class='status {"running" if initialization_error is None else "error"}'>{status}</span></p>
+                {error_msg}
+                
+                <h2>控制面板</h2>
+                {yacd_link}
+                
+                <h2>基本操作</h2>
+                <button class="button warning" onclick="requestWithApiKey('/api/refresh')">刷新订阅并重启Clash</button>
+                
+                <div class="debug-section">
+                    <h3>调试选项</h3>
+                    <button class="button" onclick="viewConfig()">查看当前配置文件</button>
+                    <button class="button danger" onclick="if(confirm('确定要清理配置并重启服务吗？此操作不可逆！')) requestWithApiKey('/debug/clean')">清理配置并重启</button>
+                    <div id="config-content" style="margin-top: 15px;"></div>
+                </div>
+                
+                <h2>帮助</h2>
+                <p>API密钥可在 .env 文件或环境变量中设置 (API_KEY)。默认为 'changeme'。</p>
+                <p>高级控制面板 (Yacd) 需要在设置中配置 API 地址为 /clashapi 并提供密钥。</p>
+                <p>更多信息请参考项目文档或README。</p>
+            </div>
+        </body>
+    </html>
+    """
+
+@app.route("/api/use_local_config", methods=["POST"])
+@authenticate
+def use_local_config():
+    """直接使用本地的config.yaml文件，跳过订阅转换"""
+    global clash_manager, sub_manager, initialization_error
+    
+    try:
+        config_path = os.path.join(os.path.dirname(os.path.dirname(__file__)), "data", "config.yaml")
+        
+        # 检查文件是否存在
+        if not os.path.exists(config_path):
+            return jsonify({"success": False, "error": "本地配置文件不存在"}), 404
+            
+        # 停止当前的Clash服务（如果正在运行）
+        if clash_manager is not None:
+            clash_manager.stop_clash()
+        
+        # 重新初始化Clash管理器并使用本地配置文件启动
+        clash_manager = ClashManager(
+            config_path=config_path,
+            clash_path=os.path.join(os.path.dirname(os.path.dirname(__file__)), "clash_core", "clash.meta-linux-amd64"),
+            api_port=CLASH_API_PORT,
+            proxy_port=CLASH_PROXY_PORT
+        )
+        
+        # 启动Clash Core
+        clash_manager.start_clash()
+        initialization_error = None
+        
+        logger.info("成功使用本地配置文件启动Clash Core")
+        return jsonify({"success": True, "message": "已使用本地配置文件启动服务"})
+        
+    except Exception as e:
+        error_msg = f"使用本地配置文件失败: {str(e)}"
+        logger.error(error_msg)
+        initialization_error = error_msg
+        return jsonify({"success": False, "error": error_msg}), 500
+
+if __name__ == "__main__":
+    # 如果直接运行此文件，将初始化应用并启动Flask服务器
+    initialize_once()
+    logger.info(f"启动Flask服务器，监听端口: {FLASK_PORT}")
+    app.run(host="0.0.0.0", port=FLASK_PORT) 
+    app.run(host="0.0.0.0", port=FLASK_PORT) 

app/data/app/sub_manager.py

@@ -0,0 +1,462 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+"""
+订阅管理器 - 负责下载订阅内容并转换为Clash配置
+"""
+
+import os
+import logging
+import subprocess
+import requests
+import time
+from urllib.parse import urlparse
+
+logger = logging.getLogger(__name__)
+
+class SubscriptionManager:
+    """管理订阅链接的下载和配置转换"""
+    
+    def __init__(self, sub_url, config_path):
+        """
+        初始化订阅管理器
+        
+        Args:
+            sub_url: 订阅链接URL
+            config_path: 生成的Clash配置文件保存路径
+        """
+        self.sub_url = sub_url
+        self.config_path = os.path.abspath(config_path)
+        self.subconverter_path = os.path.join(
+            os.path.dirname(os.path.dirname(os.path.abspath(__file__))),
+            "subconverter", "subconverter"
+        )
+        
+        # 检查是否设置了订阅链接
+        if not sub_url:
+            raise ValueError("未设置订阅链接 (SUB_URL)")
+        
+        # 确保配置目录存在
+        os.makedirs(os.path.dirname(self.config_path), exist_ok=True)
+        
+        # 检查subconverter可执行文件是否存在
+        if not os.path.exists(self.subconverter_path):
+            raise FileNotFoundError(f"subconverter可执行文件未找到: {self.subconverter_path}")
+    
+    def load_and_convert_sub(self):
+        """
+        下载订阅内容并转换为Clash配置
+        
+        Returns:
+            str: 生成的Clash配置文件路径
+            
+        Raises:
+            RuntimeError: 如果下载或转换失败
+        """
+        # 下载订阅内容
+        sub_content = self._download_subscription()
+        
+        # 保存订阅内容到临时文件
+        temp_file = f"{self.config_path}.raw"
+        with open(temp_file, "w", encoding="utf-8") as f:
+            f.write(sub_content)
+        
+        # 使用subconverter转换为Clash配置
+        self._convert_to_clash(temp_file)
+        
+        # 修改配置文件以确保端口设置正确
+        self._patch_config()
+        
+        # 清理临时文件
+        try:
+            os.remove(temp_file)
+        except OSError:
+            pass
+        
+        return self.config_path
+    
+    def _download_subscription(self):
+        """
+        下载订阅内容
+        
+        Returns:
+            str: 订阅内容文本
+            
+        Raises:
+            RuntimeError: 如果下载失败
+        """
+        logger.info(f"正在下载订阅: {self._mask_url(self.sub_url)}")
+        
+        try:
+            headers = {
+                "User-Agent": "ClashforWindows/0.19.0",
+                "Accept": "*/*",
+            }
+            response = requests.get(self.sub_url, headers=headers, timeout=30)
+            response.raise_for_status()
+            content = response.text
+            
+            if not content or len(content) < 10:
+                raise RuntimeError("下载的订阅内容为空或过短")
+            
+            logger.info(f"成功下载订阅，大小: {len(content)} 字节")
+            return content
+        
+        except requests.RequestException as e:
+            logger.error(f"下载订阅失败: {str(e)}")
+            raise RuntimeError(f"下载订阅失败: {str(e)}")
+    
+    def _convert_to_clash(self, input_file):
+        """
+        使用subconverter将订阅内容转换为Clash配置
+        
+        Args:
+            input_file: 包含订阅内容的文件路径
+            
+        Raises:
+            RuntimeError: 如果转换失败
+        """
+        logger.info(f"正在将订阅转换为Clash配置")
+        logger.info(f"输入文件: {input_file}, 配置路径: {self.config_path}")
+        
+        # 确保数据目录存在
+        data_dir = os.path.dirname(self.config_path)
+        os.makedirs(data_dir, exist_ok=True)
+        
+        # 准备subconverter命令 - 使用 -i/-o 并强制指定空白配置
+        minimal_pref_path = os.path.join(os.path.dirname(self.subconverter_path), "minimal_pref.yml")
+        
+        cmd = [
+            self.subconverter_path,
+            "-i", input_file,        # 输入文件
+            "-o", self.config_path,  # 输出文件
+            "-t", "clash",            # 目标格式
+            "--config", minimal_pref_path # 强制使用空白配置，避免默认行为
+        ]
+        
+        logger.info(f"执行命令: {' '.join(cmd)}")
+        
+        # 检查 subconverter 是否存在 (之前的代码已修复)
+        if not os.path.exists(self.subconverter_path):
+            # ... (省略 subconverter 未找到的回退逻辑) ...
+            logger.error(f"subconverter未找到: {self.subconverter_path}. 无法转换配置。")
+            raise RuntimeError(f"无法转换配置 (subconverter未找到)")
+        
+        # --- 正式执行 subconverter ---
+        try:
+            # 执行subconverter
+            process = subprocess.Popen(
+                cmd,
+                stdout=subprocess.PIPE,
+                stderr=subprocess.PIPE,
+                universal_newlines=True,
+                cwd=os.path.dirname(self.subconverter_path) # 尝试在subconverter目录下运行
+            )
+            stdout, stderr = process.communicate(timeout=60) 
+            
+            # 记录完整的 subconverter 输出用于调试
+            logger.info(f"subconverter STDOUT:\n---\n{stdout}\n---") 
+            if stderr:
+                logger.warning(f"subconverter STDERR:\n---\n{stderr}\n---")
+            
+            # 检查 subconverter 返回码
+            if process.returncode != 0:
+                logger.error(f"subconverter执行失败，返回码: {process.returncode}.")
+                # ... (省略 subconverter 失败的回退逻辑) ...
+                raise RuntimeError(f"subconverter转换失败(code {process.returncode})。 Subconverter STDERR: {stderr[:200]}...")
+            else:
+                # subconverter 返回码为 0，表示理论上成功
+                logger.info("subconverter成功执行 (返回码 0)")
+                # 验证输出文件是否存在且非空
+                if os.path.exists(self.config_path) and os.path.getsize(self.config_path) > 0:
+                    logger.info(f"配置文件已生成，路径: {self.config_path}，大小: {os.path.getsize(self.config_path)} 字节")
+                else:
+                    logger.error(f"subconverter执行成功，但配置文件不存在或为空: {self.config_path}. 请检查subconverter日志了解详情。")
+                    # 检查STDERR中是否有线索
+                    error_detail = stderr if stderr else "(无错误输出)"
+                    raise RuntimeError(f"subconverter执行成功但未生成有效配置文件。 Subconverter STDERR: {error_detail[:500]}...")
+        
+        except subprocess.TimeoutExpired:
+             logger.error(f"执行subconverter超时 (超过60秒)")
+             raise RuntimeError("subconverter执行超时")
+        except (subprocess.SubprocessError, OSError) as e:
+            logger.error(f"执行subconverter时发生错误: {str(e)}")
+            raise RuntimeError(f"配置转换失败: {str(e)}")
+    
+    def _add_clash_headers(self):
+        """添加基本的Clash配置头"""
+        return """# 自动生成的Clash配置
+port: 7890
+socks-port: 7891
+mixed-port: 7890
+allow-lan: true
+mode: Rule
+log-level: info
+external-controller: 127.0.0.1:9090
+secret: ""
+
+"""
+    
+    def _patch_config(self):
+        """
+        修改配置文件以确保端口设置正确，并兼容Clash Meta
+        """
+        # 检查配置文件是否存在
+        if not os.path.exists(self.config_path):
+            logger.warning(f"配置文件不存在，无法修补: {self.config_path}")
+            return
+        
+        try:
+            # 读取配置内容
+            with open(self.config_path, "r", encoding="utf-8") as f:
+                config_content = f.read()
+            
+            # 确保配置包含必要的端口设置
+            has_patch = False
+            
+            # 这里需要检查配置是否为有效的YAML并进行适当修补
+            # 为简单起见，我们只检查和添加一些基本端口配置
+            
+            if "mixed-port:" not in config_content and "port:" not in config_content:
+                # 添加混合端口配置
+                config_content = "mixed-port: 7890\n" + config_content
+                has_patch = True
+            
+            # 不要添加重复的external-controller配置
+            if "external-controller:" not in config_content:
+                # 添加API控制器配置 (兼容Clash Meta)
+                config_content = "external-controller: 127.0.0.1:9090\n" + config_content
+                has_patch = True
+            
+            # Clash Meta特定配置
+            if "find-process-mode:" not in config_content:
+                config_content = "find-process-mode: strict\n" + config_content
+                has_patch = True
+            
+            # 确保启用了API
+            if "secret:" not in config_content:
+                config_content = "secret: ''\n" + config_content
+                has_patch = True
+            
+            # 尝试解析YAML并修复代理组引用问题
+            try:
+                import yaml
+                logger.info("正在使用PyYAML解析和修复配置")
+                
+                # 解析配置
+                config_yaml = yaml.safe_load(config_content)
+                
+                # 检查解析结果是否为有效字典
+                if not isinstance(config_yaml, dict):
+                    logger.error("配置文件解析结果不是有效的YAML字典，无法进行修复")
+                    # 使用简单的文本分析，避免添加重复的配置
+                    has_proxy_groups = "proxy-groups:" in config_content
+                    has_global_group = "GLOBAL" in config_content or "- name: GLOBAL" in config_content
+                    if not has_proxy_groups and not has_global_group:
+                        logger.info("未检测到proxy-groups或GLOBAL策略组，添加基本的GLOBAL策略组")
+                        config_content += "\nproxy-groups:\n  - name: GLOBAL\n    type: select\n    proxies:\n      - DIRECT\n"
+                        has_patch = True
+                    else:
+                        logger.info("检测到已有proxy-groups或GLOBAL配置，跳过添加")
+                else:
+                    # --- 开始修复逻辑 ---
+                    groups_fixed = False
+                    proxies_list = config_yaml.get("proxies")
+                    
+                    # 1. 检查代理列表是否有效
+                    if not proxies_list or not isinstance(proxies_list, list):
+                        logger.error("配置文件缺少有效的 'proxies' 列表或列表为空！将仅使用 DIRECT 代理。请检查原始订阅内容。")
+                        # 设置一个最小化的 proxies 和 proxy-groups
+                        # 不要在 proxies 中显式定义 DIRECT，Clash 内置了它
+                        config_yaml["proxies"] = []
+                        config_yaml["proxy-groups"] = [{
+                            "name": "GLOBAL",
+                            "type": "select",
+                            "proxies": ["DIRECT"] # 直接引用内置的 DIRECT
+                        }]
+                        proxy_names = {"DIRECT", "REJECT"} # 仍然需要知道内置名称
+                        groups_fixed = True # 标记需要重新生成配置内容
+                        has_patch = True
+                    else:
+                        # 2. 代理列表有效，获取所有代理节点名称
+                        proxy_names = set()
+                        valid_proxies_list = []
+                        for proxy in proxies_list:
+                            if isinstance(proxy, dict) and "name" in proxy:
+                                proxy_names.add(proxy["name"])
+                                valid_proxies_list.append(proxy) # 只保留有效的代理定义
+                            else:
+                                logger.warning(f"配置文件中的 'proxies' 列表包含无效条目: {proxy}")
+                        
+                        # 如果所有条目都无效，则回退
+                        if not valid_proxies_list:
+                            logger.error("配置文件中的 'proxies' 列表所有条目均无效！将仅使用 DIRECT 代理。")
+                            config_yaml["proxies"] = [{"name": "DIRECT", "type": "direct"}]
+                            config_yaml["proxy-groups"] = [{
+                                "name": "GLOBAL",
+                                "type": "select",
+                                "proxies": ["DIRECT"]
+                            }]
+                            proxy_names = {"DIRECT", "REJECT"}
+                            groups_fixed = True
+                            has_patch = True
+                        else:
+                            config_yaml["proxies"] = valid_proxies_list # 更新为仅包含有效代理的列表
+                            # 添加内置代理
+                            proxy_names.add("DIRECT")
+                            proxy_names.add("REJECT")
+                    
+                    # 3. 修复或添加代理组
+                    proxy_groups = config_yaml.get("proxy-groups", [])
+                    if not isinstance(proxy_groups, list):
+                        logger.warning("'proxy-groups' 不是一个列表，将重新创建")
+                        proxy_groups = []
+                        config_yaml["proxy-groups"] = proxy_groups
+                        groups_fixed = True
+                        
+                    has_global = False
+                    valid_groups = []
+                    for group in proxy_groups:
+                        if not isinstance(group, dict) or "name" not in group or "type" not in group:
+                            logger.warning(f"'proxy-groups' 中包含无效组定义: {group}")
+                            groups_fixed = True
+                            continue # 跳过无效组
+                            
+                        if "proxies" in group:
+                            if not isinstance(group["proxies"], list):
+                                logger.warning(f"代理组 '{group['name']}' 的 'proxies' 不是列表，设置为 ['DIRECT']")
+                                group["proxies"] = ["DIRECT"]
+                                groups_fixed = True
+                            else:
+                                # 删除组中引用的不存在的代理
+                                original_group_proxies = group["proxies"].copy()
+                                group["proxies"] = [p for p in group["proxies"] if p in proxy_names or p == group["name"]]
+                                if len(group["proxies"]) != len(original_group_proxies):
+                                    removed = set(original_group_proxies) - set(group["proxies"])
+                                    if removed:
+                                        logger.warning(f"删除代理组 '{group['name']}' 中的无效引用: {', '.join(removed)}")
+                                        groups_fixed = True
+                                
+                                # 确保代理组至少有一个有效代理
+                                if not group["proxies"]:
+                                    logger.warning(f"为空代理组 '{group['name']}' 添加默认代理: DIRECT")
+                                    group["proxies"].append("DIRECT")
+                                    groups_fixed = True
+                        else:
+                             # 如果组定义没有proxies列表（例如 url-test），通常是正常的
+                             pass
+                             
+                        valid_groups.append(group)
+                        if group["name"] == "GLOBAL":
+                            has_global = True
+                        
+                    # 更新为只包含有效组定义的列表
+                    config_yaml["proxy-groups"] = valid_groups
+                    
+                    # 4. 如果没有 GLOBAL 组，添加一个
+                    if not has_global:
+                        logger.info("添加 GLOBAL 策略组")
+                        # 确定要放入 GLOBAL 组的代理 (所有已知真实代理 + DIRECT)
+                        global_proxies = [p for p in proxy_names if p not in ("DIRECT", "REJECT")]
+                        global_proxies.sort() # 可选：排序
+                        global_proxies.insert(0, "DIRECT") # 将 DIRECT 放前面
+                        
+                        config_yaml["proxy-groups"].insert(0, {
+                            "name": "GLOBAL",
+                            "type": "select",
+                            "proxies": global_proxies
+                        })
+                        groups_fixed = True
+                        has_patch = True
+                    
+                    # 5. 如果进行了修复，重新序列化 YAML
+                    if groups_fixed:
+                        try:
+                            config_content = yaml.dump(config_yaml, sort_keys=False, allow_unicode=True, default_flow_style=None)
+                            has_patch = True # 确保标记为已修改
+                        except Exception as dump_err:
+                            logger.error(f"重新序列化 YAML 失败: {dump_err}")
+                            # 序列化失败，放弃修复，依赖原始 content + 基础 patch
+                            # 重新读取原始content，只应用基础patch
+                            with open(self.config_path, "r", encoding="utf-8") as f:
+                                config_content = f.read()
+                            if "mixed-port:" not in config_content and "port:" not in config_content: config_content = "mixed-port: 7890\n" + config_content
+                            if "external-controller:" not in config_content: config_content = "external-controller: 127.0.0.1:9090\n" + config_content
+                            if "find-process-mode:" not in config_content: config_content = "find-process-mode: strict\n" + config_content
+                            if "secret:" not in config_content: config_content = "secret: ''\n" + config_content
+                            has_patch = True # 标记基础 patch 已应用
+                            
+            # --- 处理 YAML 导入或解析错误的回退逻辑 ---
+            except ImportError as e:
+                logger.error(f"导入PyYAML模块失败: {str(e)}. 无法执行详细配置修复。")
+                # 使用简单的文本分析，避免添加重复的配置
+                has_proxy_groups = "proxy-groups:" in config_content
+                has_global_group = "GLOBAL" in config_content or "- name: GLOBAL" in config_content
+                if not has_proxy_groups and not has_global_group:
+                    logger.info("未检测到proxy-groups或GLOBAL策略组，添加基本的GLOBAL策略组")
+                    config_content += "\nproxy-groups:\n  - name: GLOBAL\n    type: select\n    proxies:\n      - DIRECT\n"
+                    has_patch = True
+                else:
+                    logger.info("检测到已有proxy-groups或GLOBAL配置，跳过添加")
+            except Exception as yaml_err:
+                logger.error(f"处理YAML配置时出错: {str(yaml_err)}. 无法执行详细配置修复。")
+                # 使用简单的文本分析，避免添加重复的配置
+                has_proxy_groups = "proxy-groups:" in config_content
+                has_global_group = "GLOBAL" in config_content or "- name: GLOBAL" in config_content
+                if not has_proxy_groups and not has_global_group:
+                    logger.info("未检测到proxy-groups或GLOBAL策略组，添加基本的GLOBAL策略组")
+                    config_content += "\nproxy-groups:\n  - name: GLOBAL\n    type: select\n    proxies:\n      - DIRECT\n"
+                    has_patch = True
+                else:
+                    logger.info("检测到已有proxy-groups或GLOBAL配置，跳过添加")
+            
+            # --- 写回文件 ---
+            if has_patch:
+                logger.info("检测到配置更改，正在写回文件...")
+                try:
+                    with open(self.config_path, "w", encoding="utf-8") as f:
+                        f.write(config_content)
+                    logger.info("已修补配置文件并成功保存")
+                except Exception as write_err:
+                    logger.error(f"写回配置文件失败: {write_err}")
+                    # 记录错误，但允许程序继续
+            else:
+                logger.info("配置文件无需修补")
+        
+        # 这个 except 对应最外层的 try
+        except Exception as e:
+            logger.error(f"修补配置文件过程中发生意外错误: {str(e)}")
+    
+    def _mask_url(self, url):
+        """
+        遮蔽URL中的敏感信息用于日志记录
+        
+        Args:
+            url: 原始URL
+            
+        Returns:
+            str: 遮蔽后的URL
+        """
+        try:
+            parsed = urlparse(url)
+            netloc = parsed.netloc
+            
+            # 如果URL包含用户名和密码，则遮蔽密码
+            if "@" in netloc:
+                userpass, host = netloc.split("@", 1)
+                if ":" in userpass:
+                    user, _ = userpass.split(":", 1)
+                    netloc = f"{user}:***@{host}"
+            
+            masked_url = url.replace(parsed.netloc, netloc)
+            
+            # 确保不显示完整的token或密钥
+            if "?" in masked_url:
+                base, query = masked_url.split("?", 1)
+                masked_url = f"{base}?****"
+            
+            return masked_url
+        
+        except Exception:
+            # 如果解析失败，返回更简单的遮蔽
+            return f"{url[:10]}...{url[-5:]}" if len(url) > 15 else "***"