fakeip-compat

Usage

Configuration

Key	Default	Notes
lanCidr	192.168.0.0/16	LAN allowlist. System-resolved results inside it transport pinned.
fakeV4Cidr / fakeV6Cidr	198.18.0.0/16 / fdfe:dcba:9876::/48	Local Fake-IP pools. Match them to the Clash Verge config.
dohEndpoints	1.1.1.1/dns-query, 8.8.8.8/resolve	Trusted DoH (JSON API) over direct IP-literal endpoints. First fully successful endpoint wins.
dohTimeoutMs	8000	Budget for one DoH lookup.
lanInsecure	false	Skip TLS check on the LAN path only. Turn it on for self-signed devices.
maxResponseBytes / maxBodyChars / timeoutMs / maxRedirects / userAgent	5000000 / 100000 / 30000 / 5 / official UA	Same meaning as the official provider.

Settings UI

The plugin registers a fakeip-compat settings section and a browser card of the same name (lib/client.js, hand-written, no build step). After a DSH restart the card shows under Settings → Plugins → Plugin configuration. Every field in the table above edits there. Saves apply at once with no restart. Invalid input (such as a bad CIDR) blocks the save. A bad runtime edit keeps the last valid value and never breaks an in-flight fetch. Environments without a settings service (such as headless) fall back to the merged config.

Configuration

Key	Default	Notes
lanCidr	192.168.0.0/16	LAN allowlist. System-resolved results inside it transport pinned.
fakeV4Cidr / fakeV6Cidr	198.18.0.0/16 / fdfe:dcba:9876::/48	Local Fake-IP pools. Match them to the Clash Verge config.
dohEndpoints	1.1.1.1/dns-query, 8.8.8.8/resolve	Trusted DoH (JSON API) over direct IP-literal endpoints. First fully successful endpoint wins.
dohTimeoutMs	8000	Budget for one DoH lookup.
lanInsecure	false	Skip TLS check on the LAN path only. Turn it on for self-signed devices.
maxResponseBytes / maxBodyChars / timeoutMs / maxRedirects / userAgent	5000000 / 100000 / 30000 / 5 / official UA	Same meaning as the official provider.