新一代核心 sing-box 跨平台全功能配置指南：从 JSON 语法解构到 DNS 防泄漏实战

[ 系统网络层 / 用户流量输入 (Inbounds: Tun / SOCKS / Mixed) ]
       │
       ▼
[ sing-box 核心路由器 (Route Engine: Geosite / GeoIP / Process) ]
       ├── 国内域名/私有网段 ──> Direct 出站 (直连本地电信/联通/移动)
       ├── 广告阻断规则集 ──> Block 出站 (丢弃)
       └── 跨境/AI目标 ──> 闪电鼠 VLESS Reality 专线 Outbound
       │
       ▼
[ 远程智能 DNS 防泄漏解析 ──> 终结 WebRTC 与 DNS 污染风险 ]

{
  "log": { "level": "warn", "timestamp": true },
  "dns": {
    "servers": [
      { "tag": "dns_proxy", "address": "https://1.1.1.1/dns-query", "detour": "shandianshu-out" },
      { "tag": "dns_direct", "address": "223.5.5.5", "detour": "direct" }
    ],
    "rules": [
      { "outbound": "any", "server": "dns_direct" },
      { "clash_mode": "Direct", "server": "dns_direct" },
      { "geosite": "cn", "server": "dns_direct" }
    ],
    "strategy": "prefer_ipv4"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "inet4_address": "172.19.0.1/30",
      "auto_route": true,
      "strict_route": true,
      "sniff": true
    }
  ]
}