ClashRS

-  Flexible traffic routing rules based off source/destination IP/Domain/GeoIP etc.
-  Local anti spoofing DNS with support of UDP/TCP/DoH/DoT remote, and expose it as a local UDP/TCP/DoH/DoT server.
-  Run as an HTTP/Socks5 proxy, or utun device as a home network gateway.
-  Shadowsocks/Trojan/Vmess/Wireguard(userspace)/Tor/Tuic/Socks5(TCP/UDP) outbound support with different underlying trasports(gRPC/TLS/H2/WebSocket/etc.).
-  Dynamic remote rule/proxy loader.

Demo configuration file:
allow-lan: true
mode: rule
log-level: debug
external-controller: 127.0.0.1:6170
mixed-port: 8899

dns:
  enable: true
  listen: 127.0.0.1:53533
  default-nameserver:
    - 114.114.114.114
    - 8.8.8.8
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  nameserver:
    - 114.114.114.114 # default value
    - 8.8.8.8 # default value
    - tls://dns.google:853 # DNS over TLS
    - https://1.1.1.1/dns-query # DNS over HTTPS

proxies:
  - name: ss-2022
    type: ss
    server: 127.0.0.1
    port: 8390
    cipher: 2022-blake3-aes-256-gcm
    password: ss2022blake

rules:
  - MATCH, ss-2022