### Structure ```json { "dns": { "rules": [ { "inbound": [ "mixed-in" ], "network": "tcp", "protocol": [ "tls", "http", "quic" ], "domain": [ "test.com" ], "domain_suffix": [ ".cn" ], "domain_keyword": [ "test" ], "domain_regex": [ "^stun\\..+" ], "geosite": [ "cn" ], "source_geoip": [ "private" ], "source_ip_cidr": [ "10.0.0.0/24" ], "source_port": [ 12345 ], "port": [ 80, 443 ], "outbound": [ "direct" ], "server": "local" }, { "type": "logical", "mode": "and", "rules": [], "server": "local" } ] } } ``` !!! note "" You can ignore the JSON Array [] tag when the content is only one item ### Default Fields !!! note "" The default rule uses the following matching logic: (`domain` || `domain_suffix` || `domain_keyword` || `domain_regex` || `geosite`) && (`source_geoip` || `source_ip_cidr`) && `other fields` #### inbound Tags of [inbound](../inbound). #### network `tcp` or `udp`. #### domain Match full domain. #### domain_suffix Match domain suffix. #### domain_keyword Match domain using keyword. #### domain_regex Match domain using regular expression. #### geosite Match geosite. #### source_geoip Match source geoip. #### source_ip_cidr Match source ip cidr. #### source_port Match source port. #### port Match port. #### outbound Match outbound. #### server Tag of the target dns server. ### Logical Fields #### type `logical` #### mode `and` or `or` #### rules Included default rules. #### server Tag of the target dns server.