# =====================================================================
# Clash Verge (Rev) - Tailscale AI Sandbox VPN 專屬設定檔
# 節點位置: 美國內華達州拉斯維加斯 (Google Cloud - 34.96.34.30)
# =====================================================================

mixed-port: 7897
allow-lan: true
mode: rule
log-level: info
ipv6: false

# 避免 Clash 攔截 Tailscale 自身的控制平面與 DERP 中繼流量 (防止迴圈)
dns:
  enable: true
  ipv6: false
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.ts.net"
    - "*.tailscale.com"
    - "controlplane.tailscale.com"
    - "login.tailscale.com"
    - "+.msftconnecttest.com"
    - "+.msftncsi.com"
  nameserver:
    - 223.5.5.5
    - 119.29.29.29
    - 8.8.8.8

proxies:
  # 方案一：透過 Tailscale 內網 SOCKS5 協定連線 (首選推薦)
  - name: "🇺🇸 AI-Sandbox-VPN (SOCKS5)"
    type: socks5
    server: 100.127.54.93
    port: 1080
    udp: false

  # 方案二：透過 Tailscale 內網 HTTP CONNECT 協定連線 (備用)
  - name: "🇺🇸 AI-Sandbox-VPN (HTTP)"
    type: http
    server: 100.127.54.93
    port: 1080

  # 方案三：使用 MagicDNS 域名連線
  - name: "🇺🇸 AI-Sandbox-VPN (MagicDNS)"
    type: socks5
    server: ai-sandbox-vpn.tail6d58b9.ts.net
    port: 1080
    udp: false

proxy-groups:
  - name: "🚀 節點選擇"
    type: select
    proxies:
      - "⚡ 自動選擇 (最低延遲)"
      - "🇺🇸 AI-Sandbox-VPN (SOCKS5)"
      - "🇺🇸 AI-Sandbox-VPN (HTTP)"
      - "🇺🇸 AI-Sandbox-VPN (MagicDNS)"
      - "DIRECT"

  - name: "⚡ 自動選擇 (最低延遲)"
    type: url-test
    url: "http://www.gstatic.com/generate_204"
    interval: 120
    tolerance: 50
    proxies:
      - "🇺🇸 AI-Sandbox-VPN (SOCKS5)"
      - "🇺🇸 AI-Sandbox-VPN (HTTP)"

rules:
  # 1. 強制放行 Tailscale 核心控制平面、DERP 中繼與內網網段 (極度重要！避免死鎖迴圈)
  - DOMAIN-SUFFIX,tailscale.com,DIRECT
  - DOMAIN-SUFFIX,tailscale.io,DIRECT
  - DOMAIN-SUFFIX,ts.net,DIRECT
  - IP-CIDR,100.64.0.0/10,DIRECT,no-resolve
  - IP-CIDR6,fd7a:115c:a1e0::/48,DIRECT,no-resolve
  - PROCESS-NAME,tailscaled,DIRECT
  - PROCESS-NAME,tailscaled.exe,DIRECT
  - PROCESS-NAME,tailscale-ipn.exe,DIRECT
  - PROCESS-NAME,Tailscale,DIRECT

  # 2. 區域網直連
  - IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
  - IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
  - IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
  - GEOIP,CN,DIRECT

  # 3. 其餘所有流量走 AI Sandbox VPN
  - MATCH,🚀 節點選擇
