Quick Start

This page is for those who want it fast

Minimum explanations, maximum action. For the why — read Routing and DNS.

---

1. Routing

Settings → Routing settings → add rules or import the ready JSON:

Routing rules JSON (click to expand and copy)

[
  {
    "port": "443",
    "network": "udp",
    "outboundTag": "block",
    "enabled": true,
    "remarks": "Блокировка QUIC (UDP:443)"
  },
  {
    "port": "",
    "outboundTag": "direct",
    "ip": [
      "geoip:private"
    ],
    "enabled": true,
    "remarks": "Частные IP напрямую"
  },
  {
    "port": "",
    "outboundTag": "direct",
    "domain": [
      "geosite:private"
    ],
    "enabled": true,
    "remarks": "Частные сайты напрямую"
  },
  {
    "port": "",
    "outboundTag": "direct",
    "protocol": [
      "bittorrent"
    ],
    "enabled": true,
    "remarks": "Торрент напрямую"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "domain": [
      "dns.quad9.net",
      "doh.mullvad.net"
    ],
    "enabled": true,
    "remarks": "DOH через прокси"
  },
  {
    "port": "",
    "outboundTag": "block",
    "domain": [
      "geosite:category-ads-all"
    ],
    "enabled": true,
    "remarks": "Блокировать рекламу"
  },
  {
    "port": "",
    "outboundTag": "block",
    "domain": [
      "geosite:win-spy"
    ],
    "enabled": true,
    "remarks": "Блокировка телеметрии Windows"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "ip": [
      "geoip:telegram"
    ],
    "enabled": true,
    "remarks": "Обходить блокировку Telegram IP"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "domain": [
      "geosite:telegram"
    ],
    "enabled": true,
    "remarks": "Обходить блокировку Telegram сайт"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "ip": [
      "geoip:ru-blocked",
      "geoip:ru-blocked-community",
      "geoip:re-filter"
    ],
    "enabled": true,
    "remarks": "Обходить заблокированные в РФ IP"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "domain": [
      "geosite:ru-blocked-all"
    ],
    "enabled": true,
    "remarks": "Обходить заблокированные в РФ сайты"
  },
  {
    "port": "",
    "outboundTag": "proxy",
    "domain": [
      "geosite:google"
    ],
    "enabled": true,
    "remarks": "Google через прокси"
  },
  {
    "port": "",
    "outboundTag": "direct",
    "domain": [
      "geosite:category-ru"
    ],
    "enabled": true,
    "remarks": "Актуально при CDN за пределами РФ"
  },
  {
    "port": "",
    "outboundTag": "direct",
    "ip": [
      "geoip:ru"
    ],
    "enabled": true,
    "remarks": "Напрямую IP РФ"
  },
  {
    "port": "0-65535",
    "outboundTag": "proxy",
    "enabled": true,
    "remarks": "Остальное в прокси"
  }
]

---

2. Xray DNS

Settings → DNS settings V2ray → paste:

Xray DNS JSON (click to expand and copy)

{
  "hosts": {
    "dns.quad9.net": [
      "9.9.9.9",
      "149.112.112.112"
    ],
    "doh.mullvad.net": [
      "194.242.2.2"
    ]
  },
  "servers": [
    {
      "address": "https://dns.quad9.net/dns-query",
      "queryStrategy": "UseIPv4",
      "unexpectedIPs": [
        "geoip:private"
      ],
      "skipFallback": false
    },
    {
      "address": "https://doh.mullvad.net/dns-query",
      "queryStrategy": "UseIPv4",
      "unexpectedIPs": [
        "geoip:private"
      ],
      "skipFallback": false
    }
  ],
  "queryStrategy": "UseIPv4",
  "disableFallback": false,
  "disableCache": false,
  "serveStale": true,
  "serveExpiredTTL": 3600,
  "useSystemHosts": false,
  "tag": "dns_inbound"
}

---

3. sing-box DNS (if using TUN mode)

Settings → DNS settings sing-box → paste:

sing-box DNS JSON (click to expand and copy)

{
  "servers": [
    {
      "tag": "quad9-doh",
      "type": "https",
      "server": "9.9.9.9",
      "server_port": 443,
      "path": "/dns-query",
      "headers": {
        "Host": "dns.quad9.net"
      },
      "tls": {
        "enabled": true,
        "server_name": "dns.quad9.net",
        "utls": {
          "enabled": true,
          "fingerprint": "chrome"
        }
      },
      "detour": "proxy"
    }
  ],
  "rules": [
    {
      "rule_set": [
        "geosite-category-ads-all",
        "geosite-win-spy"
      ],
      "action": "predefined",
      "rcode": "NXDOMAIN"
    }
  ],
  "final": "quad9-doh",
  "strategy": "ipv4_only",
  "cache_capacity": 8192,
  "independent_cache": false
}

---

4. Verification

1. Restart connection: Ctrl+R
2. Open dnsleaktest.com → Extended test
3. Results should show only Quad9 and/or Mullvad
4. Open 2ip.ru → should show your Russian IP
5. Open youtube.com → should load via proxy

If everything works — congratulations! If not — see detailed verification and FAQ.