Skip to content

TUN

The TUN listener is intended for advanced users. General users should use the top-level TUN configuration.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
listeners:
- name: tun-in
  type: tun
  stack: mips
  # dns-mode: hijack
  dns-hijack:
  - 0.0.0.0:53
  # auto-detect-interface: false
  # auto-route: false
  # mtu: 9000
  inet4-address:
  - 198.19.0.1/30
  inet6-address:
  - "fdfe:dcba:9877::1/126"
  # strict-route: true
  # inet4-route-address:
  # - 0.0.0.0/1
  # - 128.0.0.0/1
  # inet6-route-address:
  # - "::/1"
  # - "8000::/1"
  # endpoint-independent-nat: false
  # include-uid:
  # - 0
  # include-uid-range:
  # - 1000-99999
  # exclude-uid:
  # - 1000
  # exclude-uid-range:
  # - 1000-99999
  # include-mac-address:
  # - 00:11:22:33:44:55
  # exclude-mac-address:
  # - 00:11:22:33:44:55
  # include-android-user:
  # - 0
  # - 10
  # include-package:
  # - com.android.chrome
  # exclude-package:
  # - com.android.captiveportallogin
  # congestion-controller: cubic

dns-mode

How the system DNS is configured. Available values: disabled / native / hijack. When left empty, the legacy behavior applies. See Top-level TUN configuration