feat: 透明代理解决方案升级： 完美自适应 TPROXY/TUN/NAT 三种模式

1. 透明代理解决方案升级： 完美自适应 TPROXY/TUN/NAT 三种模式

2. 精简代码功能： 去掉DDNS等无关的功能，让插件足够精巧
3. 优先支持TPROXY模式透明代理（**支持IPv6透明代理**)

.gitignore

@@ -1 +1,3 @@
 node_modules
+repos/
+tests/

build.sh

@@ -34,11 +34,22 @@ generate_package() {
     echo "正在生成 release 安装包 ..."
     outdir="./release/"
     new_version="$1"
+    arch="${2:-arm64}"
     sed -i "s/vClash:.*/vClash:$new_version/" clash/clash/version
     echo -n "arm384" > clash/.valid
+
+    # 拷贝可执行文件，构建最小安装包
+    rm -rf ./clash/clash/bin
+    mkdir ./clash/clash/bin
+    bin_list="yq jq clash"
+    for fn in ${bin_list} ; do
+        cp ./bin/${fn}_for_${arch} ./clash/clash/bin/${fn}
+    done
     tar zcf ./release/clash_384.tar.gz clash/
     echo -n "hnd|arm384|arm386|p1axhnd.675x" > clash/.valid
     tar zcf ./release/clash.tar.gz clash/
+    rm -rf ./clash/clash/bin
+
 }
 
 # 更新ruleset内部的文件
@@ -105,11 +116,11 @@ generate_gfwlist() {
 case "$1" in
     go)
         [[ "$2" == "" ]] && echo "缺少版本号信息!" && exit 1
-        generate_package $2
+        generate_package $2 $3
         ;;
     pack)
         [[ "$2" == "" ]] && echo "缺少版本号信息!" && exit 1
-        generate_package $2
+        generate_package $2 $3
         git add ./
         git commit -m "docs: 提交$2版本离线包"
         git tag $2

clash/clash/config.yaml

@@ -1,31 +1,40 @@
 port: 7890
 socks-port: 1080 # SOCKS5代理端口，DNS请求会中转
 redir-port: 3333 # 透明代理端口
+tproxy-port: 3330 # TPROXY使用的透明代理端口 支持TCP和UDP
 mode: rule
 allow-lan: true
-
+routing-mark: 0xff
 # allow-lan=true时,最好设置内网访问IP,关闭IPv6监听
 # '*': bind all IP addresses
 # 192.168.122.11: bind a single IPv4 address
 # "[aaaa::a8aa:ff:fe09:57d8]": bind a single IPv6 addres
 bind-address: '*'
 # 不使用IPv6地址(配合上面的bind-address)
 ipv6: false
-
-external-controller: 0.0.0.0:9090
-external-ui: /koolshare/clash/dashboard/
+external-controller: 192.168.50.1:9090
+external-ui: /koolshare/clash/dashboard
 secret: route
-
-
+# 启用 tun 模式来路由全局流量
+tun:
+  enable: false
+  stack: system # 可选参数: system/gvisor/mixed
+  auto-route: true
+  auto-detect-interface: true
+  dns-hijack:
+    - 8.8.8.8:53
+    - tcp://8.8.8.8:53
+    - any:53
+    - tcp://any:53
 dns:
   enable: true
   ipv6: false
   enhanced-mode: fake-ip
   fake-ip-range: 198.18.0.1/16
-  listen: 0.0.0.0:7874
+  listen: 0.0.0.0:1053
   nameserver:
-    - 114.114.114.114
     - 223.5.5.5
+    - 114.114.114.114
     - https://doh.pub/dns-query
     - https://dns.alidns.com/dns-query
   fallback:
@@ -42,10 +51,8 @@ experimental:
   sniff-tls-sni: true
 profile:
   store-selected: true
-
 # 保留的proxy节点列表(启动配置文件不包含任何节点信息,节点信息通过 proxy-provider 提供)
 proxies: []
-
 proxy-providers:
   proxy-provider-http001:
     type: http
@@ -63,7 +70,6 @@ proxy-providers:
       enable: true
       url: http://www.gstatic.com/generate_204
       interval: 300
-
 proxy-groups:
   - name: 个人节点组
     type: select
@@ -256,7 +262,6 @@ proxy-groups:
     proxies:
       - DIRECT
       - ⭐默认节点组⭐
-
 rule-providers:
   Reject:
     type: http
@@ -602,7 +607,7 @@ rule-providers:
     interval: 86400
   MyBlacklist:
     type: http
-    behavior: classical   # domain, ipcidr or classical (仅限 Clash Premium 内核)
+    behavior: classical # domain, ipcidr or classical (仅限 Clash Premium 内核)
     url: https://raw.githubusercontent.com/vxiaov/vClash/ksmerlin386/clash/clash/ruleset/my_blacklist.yaml
     path: ./ruleset/my_blacklist.yaml
     interval: 86400
@@ -612,7 +617,6 @@ rule-providers:
     url: https://raw.githubusercontent.com/vxiaov/vClash/ksmerlin386/clash/clash/ruleset/my_whitelist.yaml
     path: ./ruleset/my_whitelist.yaml
     interval: 86400
-
 rules:
   - IP-CIDR,198.18.0.1/16,REJECT,no-resolve
   - DOMAIN-SUFFIX,local,DIRECT