劫持所有53/853流量至基于dot/doh cloudflare/google 公共dns处理，代理流量dns数据包不经过任何国内dns处理以防被劫持 
tun:
  enable: true
  stack: mixed
  dns-hijack:
    - any:53
    - any:853

dns:
  enable: true
  ipv6: true
  listen: 0.0.0.0:53
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  fake-ip-filter:
    - "*.lan"
    - "*.srv.nintendo.net"
    - "*.stun.playstation.net"
    - "xbox.*.microsoft.com"
    - "*.xboxliv...