1
{
2
  "log": {
3
    "level": "info",
4
    "timestamp": true
5
  },
6
  "dns": {
7
    "rules": [
8
      {
9
        "clash_mode": "Proxy",
10
        "server": "remote"
11
      },
12
      {
13
        "clash_mode": "Direct",
14
        "server": "remote"
15
      },
16
      {
17
        "rule_set": [
18
          "geosite-cn",
19
          "geoip-cn"
20
        ],
21
        "server": "remote"
22
      }
23
    ],
24
    "servers": [
25
      {
26
        "type": "https",
27
        "server": "1.1.1.1",
28
        "detour": "warp-local",
29
        "tag": "remote"
30
      },
31
      {
32
        "type": "https",
33
        "server": "223.5.5.5",
34
        "tag": "local"
35
      },
36
      {
37
        "type": "hosts",
38
        "path": [],
39
        "predefined": {},
40
        "tag": "block"
41
      },
42
      {
43
        "type": "local"
44
      }
45
    ],
46
    "strategy": "prefer_ipv4"
47
  },
48
  "inbounds": [
49
    {
50
      "interface_name": "sing-box-tun",
51
      "address": [
52
        "172.18.0.1/30",
53
        "fdfe:dcba:9876::1/126"
54
      ],
55
      "route_address": [
56
        "0.0.0.0/1",
57
        "128.0.0.0/1",
58
        "::/1",
59
        "8000::/1"
60
      ],
61
      "route_exclude_address": [
62
        "192.168.0.0/16",
63
        "10.0.0.0/8",
64
        "172.16.0.0/12",
65
        "172.19.0.0/12",
66
        "fc00::/7",
67
        "172.18.0.1/30"
68
      ],
69
      "auto_route": true,
70
      "auto_redirect": true,
71
      "strict_route": true,
72
      "type": "tun"
73
    }
74
  ],
75
  "outbounds": [
76
    {
77
      "type": "socks",
78
      "tag": "warp-local",
79
      "server": "127.0.0.1",
80
      "server_port": 40000
81
    },
82
    {
83
      "type": "direct",
84
      "tag": "direct"
85
    }
86
  ],
87
  "route": {
88
    "final": "warp-local",
89
    "auto_detect_interface": true,
90
    "default_domain_resolver": "local",
91
    "rules": [
92
      {
93
        "action": "sniff"
94
      },
95
      {
96
        "protocol": "dns",
97
        "action": "hijack-dns"
98
      },
99
      {
100
        "clash_mode": "Direct",
101
        "outbound": "direct"
102
      },
103
      {
104
        "clash_mode": "Proxy",
105
        "outbound": "warp-local"
106
      },
107
      {
108
        "domain": [
109
          "my.dnshe.com",
110
          "fonts.googleapis.com"
111
        ],
112
        "outbound": "direct"
113
      },
114
      {
115
        "rule_set": [
116
          "geosite-cn",
117
          "geoip-cn"
118
        ],
119
        "outbound": "direct"
120
      },
121
      {
122
        "ip_is_private": true,
123
        "outbound": "direct"
124
      },
125
      {
126
        "process_path": [
127
          "/usr/bin/warp-svc"
128
        ],
129
        "outbound": "direct"
130
      }
131
    ],
132
    "rule_set": [
133
      {
134
        "tag": "geoip-cn",
135
        "type": "remote",
136
        "format": "binary",
137
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geoip/rule-set/geoip-cn.srs",
138
        "download_detour": "warp-local"
139
      },
140
      {
141
        "tag": "geosite-cn",
142
        "type": "remote",
143
        "format": "binary",
144
        "url": "https://raw.githubusercontent.com/SagerNet/sing-geosite/rule-set/geosite-cn.srs",
145
        "download_detour": "warp-local"
146
      }
147
    ]
148
  },
149
  "experimental": {
150
    "cache_file": {
151
      "enabled": true
152
    }
153
  }
154
}

1
systemctl enable --now warp-svc
2
systemctl enable --now sing-box

1
warp-cli registration new <你的Zero Trust组织名>
2
warp-cli registration token "com.cloudflare.warp://<你的组织名>.cloudflareaccess.com/auth?token=<token>"    --------可选
3
warp-cli connect  --------可选