superxiao666/singbox repository overview

docker run -d \
  --name ros-proxy \
  --restart unless-stopped \
  --network sdwanDNSL3 \
  --ip x.x.x.x \
  --cap-add NET_ADMIN \
  --cap-add NET_RAW \
  --device /dev/net/tun:/dev/net/tun \
  --sysctl net.ipv4.ip_forward=1 \
  --sysctl net.ipv6.conf.all.disable_ipv6=0 \
  superxiao666/singbox

{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "tag": "remote",
        "address": "tls://8.8.8.8",
        "detour": "direct"
      },
      {
        "tag": "local",
        "address": "223.5.5.5",
        "detour": "direct"
      },
      {
        "tag": "block",
        "address": "rcode://success"
      }
    ],
    "rules": [
      {
        "outbound": "any",
        "server": "local"
      }
    ],
    "final": "remote"
  },
  "inbounds": [
    {
      "type": "mixed",
      "tag": "mixed-in",
      "listen": "0.0.0.0",
      "listen_port": 1080,
      "sniff": true,
      "sniff_override_destination": true
    }
  ],
  "outbounds": [
    {
      "type": "direct",
      "tag": "direct"
    },
    {
      "type": "block",
      "tag": "block"
    }
  ],
  "route": {
    "rules": [
      {
        "ip_is_private": true,
        "outbound": "direct"
      }
    ],
    "final": "direct",
    "auto_detect_interface": true
  }
}

/container add name=xiao-singbox \
    remote-image=superxiao666/singbox:latest \
    interface=你的veth接口 \
    logging=yes \
    start-on-boot=yes

/container add name=singbox \
    remote-image=superxiao666/singbox \
    interface=veth-singbox \
    root-dir=usb1/singbox \
    logging=yes start-on-boot=yes

/container print
/container logs 0   # 或你的编号

"rules": [
  {
    "network": "udp",
    "outbound": "block"
  },

  {
    "protocol": "dns",
    "action": "hijack-dns"
  }
]