TUN模式断流

[ShaneLee-9]

麻烦大佬们看看我的配置有没有什么问题。使用的命令行跑裸核，使用的TUN模式，隔一段时间会断流一下，访问所有网站都要等待加载，大概10秒左右恢复，查看日志，没有任何输出。
开始以为是 url-test 切换节点导致的，试过只用固定的节点，也会出现断流，但是用系统代理就没有这个问题了。
在 Win10 和 Win11 都尝试过，都是一样的，配置如下：

# yaml-language-server: #schema=https://raw.githubusercontent.com/dongchengjie/meta-json-schema/refs/heads/main/schemas/meta-json-schema.json

urlTestBase: &a1
  type: url-test
  url: http://www.gstatic.com/generate_204
  interval: 600
  tolerance: 50
  lazy: true
ruleProvidersBase: &a2
  type: http
  interval: 86400
  behavior: classical
  format: text


mixed-port: 7890
mode: rule
log-level: error
ipv6: false
unified-delay: true
tcp-concurrent: true

geodata-mode: true
geodata-loader: standard
geo-auto-update: true
geo-update-interval: 24
geox-url:
  geoip: "https://fastly.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geoip-lite.dat"  # lite 版本 GEOIP 体积小
  geosite: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/geosite.dat"
  mmdb: "https://testingcf.jsdelivr.net/gh/MetaCubeX/meta-rules-dat@release/country.mmdb"
external-controller: 127.0.0.1:9090
external-ui: ui
external-ui-url: "https://github.com/Zephyruso/zashboard/archive/refs/heads/gh-pages.zip" #从 GitHub Pages 分支获取
profile:
  store-selected: true
  store-fake-ip: true

hosts:
  o.andfx.cn: 117.161.4.177
# interface-name: WLAN
tun:
  enable: true
  stack: mixed
  device: ShaneMihomo
  dns-hijack: ["any:53", "tcp://any:53"]
  # auto-route: true
  # auto-detect-interface: false

dns:
  enable: true
  ipv6: false
  listen: :53
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  respect-rules: true
  cache-algorithm: arc
  # use-hosts: false
  # use-system-hosts: false
  nameserver:
    - https://dns.google/dns-query
    - https://cloudflare-dns.com/dns-query
  nameserver-policy:
    "geosite:cn": system://
    "geoip:PRIVATE,CN": system://
    "rule-set:shuangbao": system://
  proxy-server-nameserver:
    - https://dns.alidns.com/dns-query
    - https://doh.pub/dns-query
    # direct-nameserver:
    # - https://dns.alidns.com/dns-query
    # - https://doh.pub/dns-query
    # - system
  fake-ip-filter:
    - '*' # 匹配 localhost 这种地址中没有「.」的地址
    - +.lan
    - +.local
    - +.migu.cn
    - +.migudm.cn

sniffer:
  enable: false
  sniff:
    HTTP:
      ports: [80, 8080-8880]
      override-destination: true
    TLS:
      ports: [443, 8443]
    QUIC:
      ports: [443, 8443]
  skip-domain:
    - "Mijia Cloud"
    - "+.push.apple.com"

rule-providers:
  ai:
    <<: *a2
    path: ./ruleset/ai.yaml
    url: https://cdn.jsdelivr.net/gh/ACL4SSR/ACL4SSR@master/Clash/Ruleset/AI.list
  openAi:
    <<: *a2
    path: ./ruleset/openAi.yaml
    url: https://cdn.jsdelivr.net/gh/ACL4SSR/ACL4SSR@master/Clash/Ruleset/OpenAi.list
  gfw:
    <<: *a2
    path: ./ruleset/gfw.yaml
    url: https://cdn.jsdelivr.net/gh/ACL4SSR/ACL4SSR@master/Clash/ProxyGFWlist.list
  # 用于直连的分组
  shuangbao:
    type: inline
    behavior: classical
    payload:
      - PROCESS-NAME,Weixin.exe
      - PROCESS-NAME,WeChatAppEx.exe
      - PROCESS-NAME,Notion.exe
      - PROCESS-NAME,ssh.exe
      - DOMAIN-KEYWORD,ipfs
      - DOMAIN,www.sjwx.la
      - DOMAIN-KEYWORD,mostanswer
      - PROCESS-NAME,yidongbangong.exe
      - PROCESS-NAME,Photoshop.exe
rules:
  - GEOSITE,private,DIRECT
  - GEOSITE,cn,DIRECT
  - GEOIP,LAN,DIRECT,no-resolve
  - RULE-SET,shuangbao,DIRECT
  - RULE-SET,ai,🤖
  - RULE-SET,openAi,🤖
  - RULE-SET,gfw,🐱
  - GEOSITE,geolocation-!cn,🐱
  - GEOIP,PRIVATE,DIRECT
  - GEOIP,CN,DIRECT
  - IP-CIDR,112.48.0.0/16,DIRECT,no-resolve
  - MATCH,🐱

[kaixblo]

看着像是dns配置的问题

  nameserver:
    - 8.8.8.8
    - 1.1.1.1
  nameserver-policy:
    "geosite:cn": system://
    "geoip:PRIVATE,CN": system://
    "rule-set:shuangbao": system://
  proxy-server-nameserver:
    - https://223.5.5.5/dns-query
    - https://1.12.12.12/dns-query

google、cloudflare的doh好像都几乎用不了，老实用udp吧

一定要用的话，nameserver-policy和nameserver结构里要使用https://223.5.5.5/dns-query 这种ip形式的