# Shadowrocket iOS Rules - 2026-07-17

Files:

- codex-china-direct-global-proxy.conf: full Shadowrocket config based on the provided default.conf. Includes General DNS/IPv6/QUIC changes and full rules.
- codex-china-direct-overlay.sgmodule: module/overlay version. Adds rules only; use with an existing config if you do not want to replace the whole config.

Policy intent:

- China domestic apps and services: DIRECT.
- Overseas services and final fallback: PROXY.
- Overseas public DNS endpoints: PROXY to reduce app-level DNS leakage.
- Chinese DoH providers: DIRECT for domestic resolution.
- UDP/443 QUIC: REJECT-NO-DROP.

Public import URLs:

- Full config: https://sr.382727.xyz/codex-china-direct-global-proxy.conf
- Optional module: https://sr.382727.xyz/codex-china-direct-overlay.sgmodule
- Full-config HTTPS QR code: https://sr.382727.xyz/codex-china-direct-global-proxy-https-qr.png

2026-07-17 additions:

- Added `nas.382727.xyz` as an explicit DIRECT rule in both the full config and module, so Synology DSM and DS apps do not route through the selected proxy node.
- Moved the public import endpoint to an independently certified HTTPS virtual host. HTTP requests are redirected to HTTPS.

2026-06-22 additions:

- Added direct rules for RiskBird/Meiya RiskBird enterprise search, Tianyancha, Traffic Management 12123, China Mobile, China Unicom, NetEase Cloud Music, WeChat Channels, Amap/Gaode, HeDuoHao, Quark/UC, Xiaomi/Mi Home/Mijia, Leke Fitness, Xiachufang, and DeepSeek.
- Expanded Tencent, Alibaba, ByteDance, and Pinduoduo direct coverage using public rule-list baselines, then normalized them for Shadowrocket. This covers broad app families such as WeChat/QQ/Tencent Cloud/Tencent Music, Taobao/Tmall/Alipay/Alibaba Cloud/Cainiao/Eleme/Quark/UC, Douyin/Toutiao/Xigua/Feishu/Doubao and Pinduoduo/Yangkeduo/PDD media domains.
- Expanded common China government and banking direct coverage, including national government service/tax/market-regulation/social-security domains, UnionPay/China UMS, and major China banks such as ICBC, CCB, ABC, BOC, BOCOM, CMB, Ping An, SPDB, CEB, CITIC, CIB, CMBC, PSBC, Huaxia, CGB, CZBank, Hengfeng, Bohai, Beijing, Shanghai, Nanjing, Ningbo, Jiangsu, SRCB, BJRCB, and GRCB.
- Expanded China Mobile app/payment coverage using China Mobile official pages plus public ChinaMax references. Added China Mobile Wallet/HeBao payment domains such as cmpay.com, cmft.com, cmft.com.cn, h5cmpassport.com, 12530.com, Fetion, Migu, CMCC, CMIC, CMIOT and 139-family domains. The full config also adds these China Mobile payment domains to skip-proxy.
- Audited 47 mainstream China app/ecosystem categories from blackmatrix7 Surge lists and added 2,928 deduplicated DIRECT rules. Categories include 12306, AirChina, AliPay, Alibaba, Baidu, Tieba, BiliBili, ByteDance/Douyin, Cainiao, China Mobile/Telecom/Unicom, CNKI, Dangdang, Didi, DingTalk, Dingxiangyuan, Douban, Eleme, Feizhu, Gaode, GovCN, Huawei, iQIYI, JingDong, Kingsoft/WPS, Kuaishou, Meituan, Migu, NetEase/NetEaseMusic, OPPO, Pinduoduo, Suning, Tencent/WeChat/TencentVideo, UC, UnionPay, VipShop, Vivo, Weibo, Xiaohongshu, Xiaomi, Youku, and Zhihu. Full ChinaMax was intentionally not imported because it contains broad non-domestic targets that would conflict with the "domestic direct, others proxy" policy.