购入某厂200mbps带宽的vps仅做了rust desk服务，属实有点浪费，某天发现个wire guard easy项目觉得很不错，可视化面板一键配置下发，配合daed岂不就是完美的中转机，这么一套操作下来就没有gost什么事了。
实测部署体验后发现配置简单，分流和防dns泄露完美，用grok补充了一下daed默认的dns和路由配置，确实能堪大用。
daed：GitHub - daeuniverse/daed: daed, A modern web dashboard for dae.
wg easy：GitHub - wg-easy/wg-easy: The easiest way to run WireGuard VPN + Web-based Admin UI.
daed的global配置只需要把wire guard easy的docker虚拟网卡加入接口绑定，开启utls+chrome指纹即可
daed dns优化：
upstream {
alidns: 'https://dns.alidns.com/dns-query'
cloudflare: 'https://1.1.1.1/dns-query'
alidns_udp: 'udp://223.5.5.5:53'
}
routing {
request {
qname(geosite:cn) -> alidns
qname(geosite:geolocation-!cn) -> cloudflare
fallback: cloudflare
}
response {
upstream(cloudflare) -> accept
upstream(alidns) && ip("240e::/16") -> cloudflare
upstream(alidns) && ip("2400:3200::/32") -> cloudflare
ip(geoip:private) && !qname(geosite:cn) -> cloudflare
ip(geoip:cn) -> accept
fallback: accept
}
}
daed 路由优化：
pname(NetworkManager) -> must_direct
pname(systemd-resolved) -> must_direct
pname(dnsmasq) -> must_direct
pname(resolved) -> must_direct
pname(tailscaled) -> must_direct
pname(wg-quick) -> must_direct
pname(openvpn) -> must_direct
pname(wireguard-go) -> must_direct
pname(mosdns) -> must_direct
pname(v2raya) -> must_direct
pname(dae) -> must_direct
pname(daed) -> must_direct
dip(127.0.0.0/8) -> direct
dip(10.0.0.0/8) -> direct
dip(172.16.0.0/12) -> direct
dip(192.168.0.0/16) -> direct
dip(169.254.0.0/16) -> direct
dip(129.204.197.247/32) -> direct
dip("::1/128") -> direct
dip("fc00::/7") -> direct
dip("fe80::/10") -> direct
dip(geoip:private) -> direct
dip(geoip:cn) -> direct
domain(geosite:cn) -> direct
domain(suffix: qq.com) -> direct
domain(suffix: weixin.qq.com) -> direct
domain(suffix: tencent.com) -> direct
domain(suffix: wechat.com) -> direct
domain(suffix: bilibili.com) -> direct
domain(suffix: bilibili.tv) -> direct
domain(suffix: hdslb.com) -> direct
domain(suffix: alicdn.com) -> direct
domain(suffix: alipay.com) -> direct
domain(suffix: taobao.com) -> direct
domain(suffix: tmall.com) -> direct
domain(suffix: jd.com) -> direct
domain(suffix: mi.com) -> direct
domain(suffix: xiaomi.com) -> direct
domain(suffix: xiaomi.net) -> direct
domain(suffix: 163.com) -> direct
domain(suffix: youdao.com) -> direct
domain(geosite:apple) && dip(geoip:cn) -> direct
fallback: proxy
dns泄露测试 DNS Leak Test - BrowserLeaks ：
ipcheck 测试 https://ipcheck.ing/#/ ：
