mixed-port: 7897
allow-lan: false
mode: rule
log-level: info
dns:
enable: true
enhanced-mode: fake-ip
fake-ip-filter-mode: whitelist # 关键：改成白名单
fake-ip-filter:
- "+.cursor.sh"
- "+.cursor.com"
- "+.cursorapi.com"
nameserver:
- 223.5.5.5
default-nameserver:
- 223.5.5.5
proxy-server-nameserver:
- "10.x.x.36#best"
- "10.x.x.11#best"
nameserver-policy:
"+.8t.com":
- "10.x.x.36#best"
- "10.x.x.11#best"
# 关键修复：开启嗅探，从 TLS SNI 还原域名，避免 Cursor 用 DoH/IP 缓存直连 AWS 时绕过代理
sniffer:
enable: true
force-dns-mapping: true
parse-pure-ip: true
sniff:
TLS:
ports: [443]
HTTP:
ports: [80, 8080-8880]
override-destination: true
force-domain:
- "+.cursor.sh"
- "+.cursor.com"
- "+.cursorapi.com"
- "+.cursor-cdn.com"
- "+.cursorvm.com"
proxies:
- name: company-http
type: http
server: proxy
port: 3128
username: user
password: "pass"
interface-name: best
proxy-groups:
- name: PROXY
type: select
proxies:
- company-http
- DIRECT
rules:
- DOMAIN-SUFFIX,cursor.sh,PROXY
- DOMAIN-SUFFIX,cursor.com,PROXY
- DOMAIN-SUFFIX,cursorapi.com,PROXY
- DOMAIN-SUFFIX,googleapis.com,PROXY
- MATCH,DIRECT