global {
    wan_interface: bond0
    lan_interface: veth0
    log_level: debug
    dial_mode: domain
    allow_insecure: false
    auto_config_kernel_parameter: true
    # Mock development cannot enable the real NFQUEUE backend.
    nfqueue_enable: false
    tcp_check_url: 'https://www.gstatic.com/generate_204'
    tcp_check_http_method: HEAD
    udp_check_dns: 'dns.google.com:53,8.8.8.8,2001:4860:4860::8888'
    check_interval: 300s
    check_tolerance: 30ms
}

node {
    iris-1: 'socks5://10.10.10.1:2077'
}

group {
    iris {
        filter: name('iris-1')
        policy: fixed(0)
    }
}

routing {
    dport(22, 443, 80, 8080, 6443, 9090) -> iris
    fallback: direct
}