mirror of
https://github.com/shadowsocks/ShadowsocksX-NG.git
synced 2026-11-06 18:34:18 +00:00
Global mode now deploys a minimal proxy_all ACL carrying only the fixed local safety rules, so public targets default through Shadowsocks while loopback/RFC1918/link-local/ULA/localhost/*.local/no-dot hosts stay direct for SOCKS, HTTP, and LAN-sharing clients. System proxy exceptions include that fixed scope; IPv6 system-exception limits are documented with the ACL as the routing guarantee. Mode switches keep the full-restart and rollback path. Closes #62