# Taiwan / Taichung - 2026-10-22 v4
# Select your existing HiNet Taiwan node (211.72.215.12), then Global Routing: Config.
# All Internet traffic uses PROXY. Only private/local networks use DIRECT.
# Keep the Taiwan Location v4 module enabled and sync the Taichung coordinates.
# Reuse your trusted local CA in this profile; no private CA is distributed.
# This file contains neither node credentials nor a shared certificate.

[General]
bypass-system = false
compatibility-mode = 3
skip-proxy = localhost,127.0.0.1
dns-server = https://dns.hinet.net/dns-query#proxy
fallback-dns-server = https://101.101.101.101/dns-query#proxy
direct-dns-server = https://dns.hinet.net/dns-query#proxy
dns-direct-system = false
dns-fallback-system = false
always-ip-address = true
hijack-dns = :53
ipv6 = false
prefer-ipv6 = false
udp-policy-not-supported-behaviour = REJECT
block-quic = all
close-if-proxy-chain-missing = true
# An IP-literal Taiwan node avoids a local DNS lookup to bootstrap the proxy.
# Tunnel-wide enforcement must also be enabled in Settings > Tunnel on iPhone.

[Rule]
# Force explicit DNS traffic through the same selected Taiwan node.
DST-PORT,53,PROXY
DST-PORT,853,PROXY
# Keep local IPv4 devices reachable; no China/GEOIP direct rules.
IP-CIDR,127.0.0.0/8,DIRECT,no-resolve
IP-CIDR,10.0.0.0/8,DIRECT,no-resolve
IP-CIDR,172.16.0.0/12,DIRECT,no-resolve
IP-CIDR,192.168.0.0/16,DIRECT,no-resolve
IP-CIDR,169.254.0.0/16,DIRECT,no-resolve
IP-CIDR6,::/0,REJECT,no-resolve
FINAL,PROXY

[Host]
dns.hinet.net = 168.95.1.1

[MITM]
enable = true
h2 = true
hostname = gs-loc.apple.com, gs-loc-cn.apple.com, gsp-ssl.ls.apple.com, bluedot.is.autonavi.com, bluedot.is.autonavi.com.gds.alibabadns.com, iphone-tokyo-location.pages.dev