From 3174e711a07c8e224f7f503174cac5b22cd6542a Mon Sep 17 00:00:00 2001
From: oruke <orukefeng@gmail.com>
Date: Wed, 29 Apr 2026 15:06:21 +0800
Subject: [PATCH] =?UTF-8?q?fix(clash):=20Tailscale=20=E8=BF=9B=E7=A8=8B?=
 =?UTF-8?q?=E5=85=A8=E5=B1=80=E7=9B=B4=E8=BF=9E=EF=BC=8C=E4=BF=AE=E5=A4=8D?=
 =?UTF-8?q?=E6=89=93=E6=B4=9E=E8=A2=AB=E4=BB=A3=E7=90=86=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Tailscale 打洞 UDP 是纯 IP 连接(非域名)，域名规则无法匹配，
导致落入漏网之鱼→PROXY→通过美国VPS出去，打洞到了美国IP。
添加 PROCESS-NAME,tailscaled,DIRECT 和 find-process-mode: always
确保 tailscaled 进程所有流量直连。
---
 clash/config.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/clash/config.yaml b/clash/config.yaml
index ec54fca..b02bb8f 100644
--- a/clash/config.yaml
+++ b/clash/config.yaml
@@ -3,6 +3,7 @@ log-level: info
 ipv6: false
 geodata-mode: true
 tcp-concurrent: true
+find-process-mode: always
 
 #自定义 geodata url
 geox-url:
@@ -476,6 +477,8 @@ rules:
   - DOMAIN-SUFFIX,tail87372.ts.net,🏡 家庭内网
 
   # ─── Tailscale 强制直连 (最高优先，防止打洞失败) ───
+  # 域名规则只能匹配控制面，打洞UDP是纯IP连接，必须用进程名全局绕过
+  - PROCESS-NAME,tailscaled,DIRECT
   - RULE-SET,tailscale-custom,Tailscale
 
   # ─── 广告拦截 ───