clash/README.md

272 lines
7.2 KiB
Markdown
Raw Normal View History

2018-06-22 16:44:28 +00:00
<h1 align="center">
2021-12-09 09:54:53 +00:00
<img src="Meta.png" alt="Meta Kennel" width="200">
2022-01-06 02:49:26 +00:00
<br>Meta Kernel<br>
2018-06-22 16:44:28 +00:00
</h1>
2022-01-06 02:49:26 +00:00
<h3 align="center">Another Clash Kernel.</h3>
2018-06-22 16:44:28 +00:00
<p align="center">
2021-12-04 12:40:09 +00:00
<a href="https://goreportcard.com/report/github.com/Clash-Mini/Clash.Meta">
<img src="https://goreportcard.com/badge/github.com/Clash-Mini/Clash.Meta?style=flat-square">
2018-06-22 16:44:28 +00:00
</a>
2021-09-20 09:22:40 +00:00
<img src="https://img.shields.io/github/go-mod/go-version/Dreamacro/clash?style=flat-square">
2021-12-04 12:40:09 +00:00
<a href="https://github.com/Clash-Mini/Clash.Meta/releases">
<img src="https://img.shields.io/github/release/Clash-Mini/Clash.Meta/all.svg?style=flat-square">
2018-06-22 16:44:28 +00:00
</a>
2021-12-04 12:40:09 +00:00
<a href="https://github.com/Clash-Mini/Clash.Meta">
<img src="https://img.shields.io/badge/release-Meta-00b4f0?style=flat-square">
2021-09-20 09:22:40 +00:00
</a>
2018-06-22 16:44:28 +00:00
</p>
2018-06-10 14:50:03 +00:00
## Features
- Local HTTP/HTTPS/SOCKS server with authentication support
- VMess, Shadowsocks, Trojan, Snell protocol support for remote connections
- Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP.
2021-09-20 09:22:40 +00:00
- Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes
- Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency
- Remote providers, allowing users to get node lists remotely instead of hardcoding in config
- Netfilter TCP redirecting. Deploy Clash on your Internet gateway with `iptables`.
- Comprehensive HTTP RESTful API controller
2018-08-14 10:06:56 +00:00
## Getting Started
Documentations are now moved to [GitHub Wiki](https://github.com/Dreamacro/clash/wiki).
2021-11-17 08:03:47 +00:00
## Advanced usage for this branch
2022-01-05 09:04:56 +00:00
2021-11-17 08:03:47 +00:00
### DNS configuration
Support `geosite` with `fallback-filter`.
2022-01-05 09:04:56 +00:00
Restore `Redir remote resolution`.
Support resolve ip with a `Proxy Tunnel`.
```yaml
proxy-groups:
- name: DNS
type: url-test
use:
- HK
url: http://cp.cloudflare.com
interval: 180
lazy: true
```
2021-11-17 08:03:47 +00:00
```yaml
dns:
enable: true
use-hosts: true
ipv6: false
2022-01-05 09:04:56 +00:00
enhanced-mode: redir-host
2021-11-17 08:03:47 +00:00
fake-ip-range: 198.18.0.1/16
listen: 127.0.0.1:6868
default-nameserver:
- 119.29.29.29
- 114.114.114.114
nameserver:
- https://doh.pub/dns-query
- tls://223.5.5.5:853
fallback:
2022-01-05 09:04:56 +00:00
- 'https://1.0.0.1/dns-query#DNS' # append the proxy adapter name or group name to the end of DNS URL with '#' prefix.
- 'tls://8.8.4.4:853#DNS'
2021-11-17 08:03:47 +00:00
fallback-filter:
geoip: false
geosite:
- gfw # `geosite` filter only use fallback server to resolve ip, prevent DNS leaks to unsafe DNS providers.
domain:
- +.example.com
ipcidr:
- 0.0.0.0/32
```
### TUN configuration
2021-12-04 12:40:09 +00:00
2021-11-17 08:03:47 +00:00
Supports macOS, Linux and Windows.
2021-12-04 12:40:09 +00:00
Built-in [Wintun](https://www.wintun.net) driver.
2021-11-17 08:03:47 +00:00
```yaml
# Enable the TUN listener
tun:
enable: true
2022-01-05 09:04:56 +00:00
stack: gvisor # only gvisor
dns-hijack:
- 0.0.0.0:53 # additional dns server listen on TUN
2021-11-17 08:03:47 +00:00
auto-route: true # auto set global route
```
### Rules configuration
- Support rule `GEOSITE`.
2021-12-04 16:48:35 +00:00
- Support rule-providers `RULE-SET`.
2021-11-17 08:03:47 +00:00
- Support `multiport` condition for rule `SRC-PORT` and `DST-PORT`.
- Support `network` condition for all rules.
- Support source IPCIDR condition for all rules, just append to the end.
2021-12-04 12:40:09 +00:00
- The `GEOSITE` databases via https://github.com/Loyalsoldier/v2ray-rules-dat.
2021-11-17 08:03:47 +00:00
```yaml
rules:
2021-12-04 12:40:09 +00:00
2021-11-17 08:03:47 +00:00
# network(tcp/udp) condition for all rules
- DOMAIN-SUFFIX,bilibili.com,DIRECT,tcp
- DOMAIN-SUFFIX,bilibili.com,REJECT,udp
# multiport condition for rules SRC-PORT and DST-PORT
- DST-PORT,123/136/137-139,DIRECT,udp
# rule GEOSITE
- GEOSITE,category-ads-all,REJECT
- GEOSITE,icloud@cn,DIRECT
- GEOSITE,apple@cn,DIRECT
- GEOSITE,apple-cn,DIRECT
- GEOSITE,microsoft@cn,DIRECT
- GEOSITE,facebook,PROXY
- GEOSITE,youtube,PROXY
- GEOSITE,geolocation-cn,DIRECT
- GEOSITE,geolocation-!cn,PROXY
# source IPCIDR condition for all rules in gateway proxy
#- GEOSITE,geolocation-!cn,REJECT,192.168.1.88/32,192.168.1.99/32
- GEOIP,telegram,PROXY,no-resolve
- GEOIP,private,DIRECT,no-resolve
- GEOIP,cn,DIRECT
- MATCH,PROXY
```
### Proxies configuration
2022-01-05 09:04:56 +00:00
Active health detection `urltest / fallback` (based on tcp handshake, multiple failures within a limited time will actively trigger health detection to use the node)
Support `Policy Group Filter`
```yaml
proxy-groups:
- name: 🚀 HK Group
type: select
use:
- ALL
filter: 'HK'
- name: 🚀 US Group
type: select
use:
- ALL
filter: 'US'
proxy-providers:
ALL:
type: http
url: "xxxxx"
interval: 3600
path: "xxxxx"
health-check:
enable: true
interval: 600
url: http://www.gstatic.com/generate_204
```
2021-11-17 08:03:47 +00:00
Support outbound transport protocol `VLESS`.
The XTLS only support TCP transport by the XRAY-CORE.
```yaml
proxies:
- name: "vless-tcp"
type: vless
server: server
port: 443
uuid: uuid
network: tcp
servername: example.com # AKA SNI
# flow: xtls-rprx-direct # xtls-rprx-origin # enable XTLS
# skip-cert-verify: true
- name: "vless-ws"
type: vless
server: server
port: 443
uuid: uuid
udp: true
network: ws
servername: example.com # priority over wss host
# skip-cert-verify: true
ws-path: /path
ws-headers:
Host: example.com
```
### IPTABLES auto-configuration
Only work on Linux OS who support `iptables`, Clash will auto-configuration iptables for tproxy listener when `tproxy-port` value isn't zero.
If `TPROXY` is enabled, the `TUN` must be disabled.
```yaml
# Enable the TPROXY listener
tproxy-port: 9898
# Disable the TUN listener
tun:
enable: false
```
2021-12-04 11:59:41 +00:00
Create user given name `Clash.Meta`.
2021-11-17 08:03:47 +00:00
2022-01-06 02:49:26 +00:00
Run Meta Kernel by user `Clash.Meta` as a daemon.
2021-11-17 08:03:47 +00:00
Create the systemd configuration file at /etc/systemd/system/clash.service:
2021-12-04 11:59:41 +00:00
2021-11-17 08:03:47 +00:00
```
[Unit]
2022-01-06 02:49:26 +00:00
Description=Clash.Meta Daemon, Another Clash Kernel.
2021-11-17 08:03:47 +00:00
After=network.target
[Service]
Type=simple
2021-12-04 11:59:41 +00:00
User=Clash.Meta
Group=Clash.Meta
2021-11-17 08:03:47 +00:00
CapabilityBoundingSet=cap_net_admin
AmbientCapabilities=cap_net_admin
Restart=always
2021-12-04 11:59:41 +00:00
ExecStart=/usr/local/bin/Clash.Meta -d /etc/Clash.Meta
2021-11-17 08:03:47 +00:00
[Install]
WantedBy=multi-user.target
```
Launch clashd on system startup with:
```shell
2021-12-04 12:40:09 +00:00
$ systemctl enable Clash.Meta
2021-11-17 08:03:47 +00:00
```
Launch clashd immediately with:
2021-12-04 12:50:57 +00:00
2021-11-17 08:03:47 +00:00
```shell
2021-12-04 12:40:09 +00:00
$ systemctl start Clash.Meta
2021-11-17 08:03:47 +00:00
```
### Display Process name
2021-12-04 12:40:09 +00:00
2021-11-17 08:03:47 +00:00
Clash add field `Process` to `Metadata` and prepare to get process name for Restful API `GET /connections`.
2021-12-04 12:40:09 +00:00
To display process name in GUI please use [Dashboard For Meta](https://github.com/Clash-Mini/Dashboard).
2020-12-26 16:14:24 +00:00
2021-12-04 12:50:57 +00:00
![img.png](https://github.com/Clash-Mini/Dashboard/raw/master/View/Dashboard-Process.png)
## Development
2021-12-04 12:50:57 +00:00
If you want to build an application that uses clash as a library, check out the
the [GitHub Wiki](https://github.com/Dreamacro/clash/wiki/use-clash-as-a-library)
## Credits
2018-08-11 20:22:14 +00:00
2021-12-04 12:40:09 +00:00
* [Dreamacro/clash](https://github.com/Dreamacro/clash)
* [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2)
* [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core)
2021-09-20 09:22:40 +00:00
* [WireGuard/wireguard-go](https://github.com/WireGuard/wireguard-go)
2021-11-17 11:55:14 +00:00
* [yaling888/clash-plus-pro](https://github.com/yaling888/clash)
2018-09-16 15:08:04 +00:00
## License
2018-08-11 20:22:14 +00:00
This software is released under the GPL-3.0 license.
[![FOSSA Status](https://app.fossa.io/api/projects/git%2Bgithub.com%2FDreamacro%2Fclash.svg?type=large)](https://app.fossa.io/projects/git%2Bgithub.com%2FDreamacro%2Fclash?ref=badge_large)