dsh-traffic-guard

Configuration

$NETGUARD_HOME/config.json (default ~/.dsh/netguard/config.json); see cli/config.example.json.

{
  "route": {
    "proxy_hosts": ["github.com", "*.githubusercontent.com", "huggingface.co"],
    "direct_hosts": ["*.deepseek.com", "*.npmmirror.com", "*.aliyun.com"]
  },
  "budget": { "per_call": 134217728, "per_day": 314572800 }
}

proxy_hosts are hosts allowed to use the proxy when direct stalls (not "must use proxy"). direct_hosts are hosts that never use the proxy and take precedence.