Surfing

BOXMETA

Magisk, Kernelsu, APatch

English | 简体中文

---

This project is a Magisk, Kernelsu, APatch module for Clash/mihomo, sing-box, v2ray, xray, hysteria. It supports REDIRECT (TCP only), TPROXY (TCP + UDP) transparent proxy, TUN (TCP + UDP), and hybrid mode REDIRECT (TCP) + TUN (UDP) proxy.

Based on upstream integration for one-stop service, ready to use. Suitable for:

• Lazy people
• Beginners

The project's theme and configuration focus on Clash/mihomo.Meta.

This module needs to be used in a Magisk/Kernelsu environment. If you don't know how to configure the required environment, you might need applications like ClashForAndroid, v2rayNG, surfboard, SagerNet, AnXray.

Surfing User Declaration and Disclaimer

Welcome to use Surfing. Before using this project, please carefully read and understand the following statements and disclaimers. By using this project, you agree to accept the following terms and conditions. Hereinafter referred to as Surfing.

Disclaimer

1. This project is an open-source project for learning and research purposes only and does not provide any form of guarantee. Users must bear full responsibility for the risks and consequences of using this project.

2. This project is only for the convenience of simplifying the installation and configuration of Surfing for Clash services in the Android Magisk environment. It does not make any guarantees about the functionality and performance of Surfing. The developer of this project is not responsible for any problems or losses.

3. The use of this projects Surfing module may violate the laws and regulations of your region or the terms of service of service providers. You need to bear the risks of using this project on your own. The developer of this project is not responsible for your actions or the consequences of use.

4. The developer of this project is not responsible for any direct or indirect losses or damages resulting from the use of this project, including but not limited to data loss, device damage, service interruption, personal privacy leaks, etc.

Instructions for Use

1. Before using the Surfing module, please make sure you have carefully read and understood the usage instructions and related documents of Clash and Magisk and comply with their rules and terms.

2. Before using this project, back up your device data and related settings to prevent unexpected situations. The developer of this project is not responsible for your data loss or damage.

3. Please comply with local laws and regulations and respect the legitimate rights and interests of other users when using this project. It is forbidden to use this project for illegal, abusive, or infringing activities.

4. If you encounter any problems or have any suggestions when using this project, you are welcome to provide feedback to the developer of this project, but the developer is not obligated to resolve issues or respond to feedback.

Please decide whether to use the Surfing module only after clearly understanding and accepting the above statements and disclaimers. If you do not agree or cannot accept the above terms, please stop using this project immediately.

Applicable Law

During the use of this project, you must comply with the laws and regulations of your region. In case of any disputes, interpretation and resolution should be carried out in accordance with local laws and regulations.

Installation

• Download the module zip file from the Release page and install it via Magisk Manager, KernelSU Manager, or APatch.
• Version changes: 📲log

Uninstallation

• Uninstall the module from the Magisk Manager, Kernelsu Manager, or APatch application. 👉🏻Removal Command

Uninstalling this module through the manager will uninstall all corresponding service data. Web and other tile apps need to be uninstalled manually.

Wiki

1. First Use

• After installing the module for the first time, please first add your subscription URL to /data/adb/box_bll/clash/config.yaml, and then manually restart the device once.
• Toggle the module switch once and open the Web application on the desktop
• Due to network reasons, the rules/subscriptions may not be fully downloaded automatically. Please manually refresh the panel.
  • If the subscription fails to load, please try to switch the UA in the configuration file
  • If the above fails, ensure your network environment is normal.
• After the configuration and node fetching are complete, go to:
• Settings → Search Box, and search for the keyword "DNS." If similar options appear, select them:
  • Private DNS
  • Dedicated DNS
• And configure the custom domain:

1dot1dot1dot1.cloudflare-dns.com

• Web App:
  • It is purely a graphical tool for portable browsing and managing backend routing data, with no other unnecessary uses.

The module has an integrated GUI that can be accessed locally via a browser or online via the app. The two are essentially the same.

2. Control Operation

• Can control the start and stop via WiFi SSID network.
• Can control the operation service by turning the module switch on/off, with real-time effect.
• You can add the control switch tile of the module to the system status bar. If you cannot find the tile switch after installing the module and restarting the device, you can manually install the Apk Download source code

3. Routing Rules

GitHub Actions automatically builds at 6 AM Beijing Time every day to ensure the rules are up to date.

The routing rules are all linked online and automatically updated every 24 hours.

4. Subsequent Updates

• If you are using the default configuration, updates will be seamless.

• Supports online module updates from the client. No reboot is required after updating, but a reboot is still recommended.

• During updates, the configuration file will be backed up to:

  • config.yaml.bak

• User configuration will be backed up during the update to:

  • box.config.bak

• Your subscription URL will be automatically extracted and backed up to:

  • proxies/subscribe_urls_backup.txt
  • The backup will be automatically extracted and restored to the new configuration, suitable for those using the default configuration file.

• Module updates do not include:

  • Geo database files
  • Bin files
  • Web resources

Ps: The update mainly follows upstream updates and delivers some configurations.

5. Usage Issues

1. Proxy Specific Applications (Black/Whitelist)

• To proxy all applications except certain ones, open the /data/adb/box_bll/scripts/box.config file, set the proxy_mode value to blacklist (default), and add elements to the user_packages_list array. The format for elements is id:package_name, separated by spaces. For example, user_packages_list=("id:package_name" "id:package_name") to not proxy specific Android user applications.

• To only proxy specific applications, open the /data/adb/box_bll/scripts/box.config file, set the proxy_mode value to whitelist, and add elements to the user_packages_list array. The format for elements is id:package_name, separated by spaces. For example, user_packages_list=("id:package_name" "id:package_name") to only proxy specific Android user applications.

Android user group ID identifiers:

Standard User	ID
Owner	0
Second Space	10
App Clone	999

Typically, you can find all user group IDs and application package names in /data/user/. Do not use fake-ip mode when using black/whitelist.

2. Tun Mode

• Enabled by default
• Better routing traffic management
• Deprecated in v7.4.3

If you have special needs, you can turn it off by yourself. Please do not use the black and white list before using this mode.

3. Routing Rules

• Designed for mainland China usage
• Sufficient for most daily needs

If there are no strict requirements, the whitelist/blacklist is not very meaningful, and the default configuration of the module is enough.

4. Panel Management

• Magisk Font Module

May affect normal display of page fonts.

5. LAN Sharing

• Enable hotspot and let other devices connect.
• TUN Gateway: 172.20.0.1

To access the dashboard backend from other devices, visit: http://<Current WiFi/TUN Gateway>:9090/ui

6. Private DNS

• When enabled, please ensure the module service is running properly, otherwise, it may affect CN resolution and result in no internet connection.
• This is an optional feature ✅
• It is recommended to enable it.

This is to fully solve some IPv6 DNS request leaks under Wan0.

7. Host File

• No need to mount
  • Just delete the file.
• To remount
  • Create a new file in the etc folder.
• All modifications take effect immediately.
• When updating/installing, you can use the volume up and down keys to choose whether to mount.

Domain IP redirection.

---

Acknowledgments

CHIZI-0618

MetaCubeX

Loyalsoldier

> Thanks for providing valuable foundation for the implementation of this project. <