一个自动分类的DNS服务器

upstream_group:
  direct:
    nameservers: ["223.5.5.5"]
    outbound: "direct"             # 不使用代理
  proxy:
    nameservers: ["https://dns.google/dns-query"]
    outbound: "proxy"              # 使用 SOCKS5 代理

outbound:
  - tag: "proxy"
    type: "socks5"
    enable: true
    server: "127.0.0.1"
    port: 1080
    username: ""                   # 可选
    password: ""                   # 可选
  - tag: "file_download"           # 文件下载专用代理
    type: "socks5"
    enable: true
    server: "127.0.0.1"
    port: 1080

# Optimized DNS Server Configuration  
# Based on best practices from sing-box, Xray-core, mihomo  
  
# Server Configuration  
server:  
  port: 10053  
  protocol: udp  # or: tcp, both  
  bind: 0.0.0.0  # Listen address  
  
# Bootstrap DNS for resolving nameserver hostnames  
bootstrap:  
  nameservers:  
    - 223.5.5.5  
    - 119.29.29.29  
  
# Upstream DNS Groups  
upstream_group:  
  # Foreign DNS through proxy (no ECS for privacy)  
  proxy:  
    nameservers:  
      - https://1.1.1.1/dns-query  
      - https://8.8.8.8/dns-query  
    outbound: hk  
  
  # Foreign DNS through proxy with ECS (for CDN optimization)  
  proxy_ecs:  
    nameservers:  
      - https://8.8.8.8/dns-query  
      - https://8.8.4.4/dns-query  
    outbound: hk  
  
  # Foreign DNS through proxy with ECS (for CDN optimization)  
  proxy_us:  
    nameservers:  
      - https://1.1.1.1/dns-query  
      - https://8.8.8.8/dns-query  
    outbound: us  
  
  
  # Domestic DNS (direct connection)  
  direct:  
    nameservers:  
      - 240e:f:a::6  
      - 61.134.1.4  
      - 218.30.19.40  
      - 240e:f:a00b::6  
      - 223.5.5.5  
      - 119.29.29.29  
    outbound: direct  
  
# Outbound (SOCKS5 Proxies)  
outbound:  
  - tag: direct  
    type: direct  # Built-in, no proxy  
  
  - tag: file_download  
    type: socks5  
    enable: true  
    server: 10.115.15.1  
    port: 17890  
    username: hk  
    password: hk  
  
  - tag: hk  
    type: socks5  
    enable: true  
    server: 10.115.15.1  
    port: 17890  
    username: hk  
    password: hk  
  
  - tag: us  
    type: socks5  
    enable: true  
    server: 10.115.15.1  
    port: 17891  
    username: us  
    password: us  
  
# ECS (EDNS Client Subnet) Global Configuration  
ecs:  
  enable: true  
  default_ipv4: 113.132.219.0/24  
  default_ipv6: 240e:358:a07:94c2:d589:ebf2:9d2:be0e/64  
  ipv4_prefix: 24  # Send /24 prefix (hides last octet for privacy)  
  ipv6_prefix: 64  # Send /64 prefix  
  
# Cache Configuration  
cache:  
  dns_cache:  
    enable: true  
    clear: false  # IMPORTANT: Don't clear in production  
    type: redis  # or: memory  
  
  category_cache:  
    enable: true  
    clear: false  
    type: redis  
    ttl: 604800  # 7 days (categories rarely change)  
  
# Redis Configuration  
redis:  
  server: 10.115.15.25  
  port: 6379  
  database: 8  
  password: "violet-dns-secure-2024"  
  max_retries: 3  
  pool_size: 10  
  
# Domain Categorization Policy  
category_policy:  
  preload:  
    file: 'https://github.com/v2fly/domain-list-community/releases/latest/download/dlc.dat'  
    domain_group:  
      ads_site:  
        - category-ads-all  
      ai_site:  
        - category-ai-chat-!cn  
      game_domain:  
        - category-games  
      proxy_site:  
        - google  
      direct_site:  
  
  
# Query Routing Policy (matched top-down)  
query_policy:  
  # Block ads and trackers  
  - name: ads_site  
    group: block  
    options:  
      block_type: nxdomain  # or: noerror, 0.0.0.0  
      block_ttl: 60  # Block record TTL in seconds  
  
  # Game domains (low latency needed)  - name: game_domain  
    group: direct  
    options:  
      strategy: prefer_ipv4  
  
  - name: ai_site  
    group: proxy_us  
    options:  
      strategy: prefer_ipv4  
      disable_https: true  
  
  # Foreign sites through proxy  
  - name: proxy_site  
    group: proxy  
    options:  
      strategy: prefer_ipv4  
      expected_ips:  # Only accept non-CN IPs  
        - geoip:!cn  
        - geoip:private  
      fallback_group: direct  
  
  # Domestic sites direct  
  - name: direct_site  
    group: direct  
    options:  
      strategy: prefer_ipv4  
      expected_ips:  
        - geoip:cn  
  
  # Unknown domains: intelligent fallback  
  - name: unknown  
    group: proxy_ecs_fallback  
    options:  
      strategy: prefer_ipv4  
      auto_categorize: true  # Update category_cache based on result  
  
# Fallback Configuration (for proxy_ecs_fallback policy)  
fallback:  
  geoip: 'https://raw.githubusercontent.com/Loyalsoldier/geoip/release/GeoLite2-Country.mmdb'  
  asn: 'https://raw.githubusercontent.com/Loyalsoldier/geoip/release/GeoLite2-ASN.mmdb'  
  update: '0 0 7 * * *'  # Update at 3 AM daily  
  strategy: race  # Race both proxy_ecs and proxy  
  rule:  
    - geoip:cn  
    - geoip:private  
    - asn:4134  # China Telecom  
    - asn:4837  # China Unicom  
    - asn:9808  # China Mobile  
  # If IP matches rule → use direct, else use proxy  
# Logging Configuration  
log:  
  level: info           # 日志级别: debug, info, warn, error  
  format: json           # 日志格式: json (结构化), text (带颜色的文本)  
  output: stdout         # 输出位置: stdout (控制台), file (默认violet-dns.log), 或自定义路径  
  max_size: 100          # 单个日志文件最大大小 (MB)，默认 100MB  max_age: 7             # 日志文件保留天数，默认 7 天  
  max_backups: 10        # 保留的旧日志文件数量，默认 10 个  
  compress: true         # 是否压缩旧日志文件 (gzip)  total_size_limit: 500  # 所有日志文件总大小限制 (MB)，超过后自动删除最旧的文件