GeoIP / GeoSite¶

The Geo rules the tunnel uses live inside the imported Xray config and are resolved against the geoip.dat / geosite.dat databases. The app ships with built-in databases and can download updated ones from the geoipurl / geositeurl headers (supported on iOS, Android and desktop OSes); a freshly downloaded database replaces the built-in one for the engine.

Categories in bundled databases¶

Extracted directly from the bundled .dat files updated on 7 October 2026 (Apple 2.0.19 / build 361, Android 2.0.5 / build 479, Windows/Linux 2.0.2 / build 250). This is a snapshot of these database versions; app updates or provider downloads can change the available categories.

Platforms	Dataset	GeoIP categories	GeoSite categories
iOS / iPadOS / macOS / tvOS / Android	RU	3	9
Windows / Linux x64 / Linux ARM64	Full	260	1549

Use geoip:<category> for IP rules and geosite:<category> for domain rules. For example, geoip:ru is present in both datasets. Names below omit the prefix. A country in GeoIP does not imply a category with the same name in GeoSite.

Apple / Android — RU¶

`geoip.dat` — 3 categories¶

private, ru, tor

`geosite.dat` — 9 categories¶

category-ads, category-gov-ru, category-ru, direct, ipcheck, private, proxy, tor, torrent

Windows / Linux — full databases¶

`geoip.dat` — 260 categories¶

ad, ae, af, ag, ai, al, am, ao, aq, ar, as, at, au, aw, ax, az, ba, bb, bd, be, bf, bg, bh, bi, bj,
bl, bm, bn, bo, bq, br, bs, bt, bv, bw, by, bz, ca, cc, cd, cf, cg, ch, ci, ck, cl, cloudflare,
cloudfront, cm, cn, co, cr, cu, cv, cw, cx, cy, cz, de, dj, dk, dm, do, dz, ec, ee, eg, eh, er, es,
et, facebook, fastly, fi, fj, fk, fm, fo, fr, ga, gb, gd, ge, gf, gg, gh, gi, gl, gm, gn, google,
gp, gq, gr, gs, gt, gu, gw, gy, hk, hm, hn, hr, ht, hu, id, ie, il, im, in, io, iq, ir, is, it, je,
jm, jo, jp, ke, kg, kh, ki, km, kn, kp, kr, kw, ky, kz, la, lb, lc, li, lk, lr, ls, lt, lu, lv, ly,
ma, mc, md, me, mf, mg, mh, mk, ml, mm, mn, mo, mp, mq, mr, ms, mt, mu, mv, mw, mx, my, mz, na, nc,
ne, netflix, nf, ng, ni, nl, no, np, nr, nu, nz, om, pa, pe, pf, pg, ph, pk, pl, pm, pn, pr,
private, ps, pt, pw, py, qa, re, ro, rs, ru, rw, sa, sb, sc, sd, se, sg, sh, si, sj, sk, sl, sm, sn,
so, sr, ss, st, sv, sx, sy, sz, tc, td, telegram, tf, tg, th, tj, tk, tl, tm, tn, to, tor, tr, tt,
tv, tw, twitter, tz, ua, ug, um, us, uy, uz, va, vc, ve, vg, vi, vn, vu, wf, ws, xk, ye, yt, za, zm,
zw

`geosite.dat` — 1549 categories¶

0x0, 115, 1337x, 17zuoye, 18comic, 2ch, 2gis, 2kgames, 36kr, 4399, 4chan, 4pda, 4plebs, 51job,
54647, 58tongcheng, 5ch, 6park, 7tv, 800best, 8btc, 928plus, 9news, 9to5, aamgame, abc, abema,
accuweather, acer, acfun, actalis, activision, activision-blizzard, adblock, adblockplus, addthis,
addtoany, adguard, adidas, adjust, adobe, adobe-activation, aerogard, afdian, afp, agilebits, agora,
aiqicha, airbnb, airchina, airwick, aisiku, aixcoder, akamai, akiko, alibaba, alibabacloud,
aligames, aliyun, aliyun-drive, aljazeera, alphabet, amap, amazon, amazontrust, amc, amd, amp,
amplitude, anaconda, anandtech, android, anexia, anime, anker, annas-archive, anon-v, anthropic, ap,
apa, aparat, apifox, apipost, apkcombo, apkmirror, apkpure, apple, apple-cn, apple-dev,
apple-intelligence, apple-music, apple-pki, apple-podcasts, apple-tvplus, apple-update, appledaily,
applysquare, aptoide, archive, archiveofourown, archivetoday, archlinux, arphic, artstation, asahi,
askdiandian, asobo, asproex, asus, atlassian, att, attwatchtv, autodesk, autoru, auxgroup, avaxhome,
aviasales, avito, avmoo, awempire, aws, aws-cn, azure, b3log, bahamut, baidu, baishancloud,
baltamatica, bamtech, bandcamp, bandwagonhost, bangumi, barrons, bbc, bdsmhub, beats, beget, beisen,
bestbuy, bestchange, bestore, bestv, betboom, bethesda, betterexplained, bilibili, bilibili-cdn,
bilibili-game, bilibili2, binance, bing, bitauto, bitflyer, bitly, bitsquare, bitwarden, bjyouth,
blender, blizzard, blogspot, bloomberg, bluearchive, bluepoch, bluepoch-games, bluesky, blurams,
bmw, boboporn, boc, bohemia, bongacams, booking, books, boomerang, bootcdn, bootstrap,
borneoschematics, boslife, boxun, boylove, braveux, brazzers, bridgestone, brightcove, brilliant,
broadcom, btdig, bttzyw, bushiroad, buymeacoffee, buypass, bybit, bytedance, bytedance-ai-!cn,
c-span, cabletv, cainiao, calgoncarbon, cambridge, camwhores, canon, canonical, canva,
capitalonline, carrotquest, cas, casimages, catchplay, category-acg, category-ads, category-ads-all,
category-ads-ir, category-ai-!cn, category-ai-chat-!cn, category-ai-cn, category-ai-ru,
category-android-app-download, category-anticensorship, category-antivirus, category-automobile-cn,
category-bank-cn, category-bank-ir, category-bank-jp, category-bank-mm, category-bank-ru,
category-betting-ru, category-blog-cn, category-bourse-ir, category-browser-!cn, category-cas,
category-cdn-!cn, category-cdn-cn, category-collaborate-cn, category-communication,
category-companies, category-consent-management, category-container, category-cryptocurrency,
category-ddns, category-dev, category-dev-cn, category-documents-cn, category-doh,
category-ecommerce, category-ecommerce-ru, category-education-cn, category-education-ir,
category-education-ru, category-electronic-cn, category-emby, category-enhance-gaming,
category-enterprise-query-platform-cn, category-entertainment, category-entertainment-cn,
category-entertainment-ru, category-finance, category-food-cn, category-forums, category-forums-ir,
category-forums-ru, category-game-accelerator-cn, category-game-platforms-download, category-games,
category-games-!cn, category-games-cn, category-gov-ir, category-gov-ru, category-hospital-cn,
category-httpdns-cn, category-insurance-ir, category-ip-geo-detect, category-ipfs, category-ir,
category-logistics-cn, category-media, category-media-cn, category-media-ir, category-media-ru,
category-media-ru-blocked, category-medicine-ru, category-mobile-repair, category-mooc-cn,
category-netdisk-!cn, category-netdisk-cn, category-network-security-cn, category-news-ir,
category-novel, category-ntp, category-ntp-cn, category-ntp-jp, category-number-verification-cn,
category-olympiad-in-informatics, category-orgs, category-outsource-cn,
category-password-management, category-payment-ir, category-porn, category-proxy-tunnels,
category-pt, category-public-tracker, category-remote-control, category-retail-ru, category-ru,
category-scholar-!cn, category-scholar-cn, category-scholar-hk, category-scholar-ir,
category-scholar-uk, category-securities-cn, category-shopping-ir, category-social-media-!cn,
category-social-media-cn, category-social-media-ir, category-speedtest, category-stun,
category-tech-ir, category-tech-media, category-tech-media-ru, category-tm, category-travel-ir,
category-travel-ru, category-urlshortner, category-voip, category-vpnservices, category-web-archive,
category-wiki-cn, cavporn, cbs, ccb, cctv, cdek, cdn77, ceno, cerebras, cern, certinomis, certum,
changyou, chaoxing, chatango, chatwhores, cheetahmobile, chegg, chesscom, china-list, chinabroadnet,
chinamobile, chinanews, chinapost, chinapower, chinaso, chinatelecom, chinatower, chinaunicom,
chinaz, cian, cisco, citic, citizenlab, cityu-hk, ciweimao, ck101, clarivate, clearasil, clearbit,
clips4sale, cloudcone, cloudconvert, cloudflare, cloudflare-cn, cloudflare-ipfs, cloudinary,
cloudns, clubhouse, cmb, cn, cnb, cnbc, cnbeta, cnblogs, cnet, cnki, cnn, code, codeberg,
codecademy, codeforces, coding, coinone, collabora, colorfulclouds, comfy, comfy-ui-launcher,
comodo, comssone, connectivity-check, contentful, coolapk, coomer, copymanga, corel, costco,
coupang, coursera, cowlevel, cowtransfer, craigslist, creativecommons, csdn, csis, ctexcel, ctrip,
ctyun, cuhk, cuinc, curseforge, cursor, cuttly, cybertrust, cygames, cylink, dailymail, dailymotion,
dandanplay, dandanzan, dangdang, dart, dazn, dcard, ddmaicai, debian, decryptipastore, dedao,
deepin, deepseek, deezer, dell, demonoid, deppon, deribit, dettol, deviantart, dewu, didi, digicert,
digitalocean, digitalplayground, dingdatech, dingtalk, discord, discourse, discoveryplus, discuz,
disney, disqus, divar, dji, dlercloud, dlsite, dmit, dmm, dmm-porn, dnspod, docker, doi, dola,
dongchedi, dongjiao, douban, doubao, douyin, douyu, dowjones, dribbble, dropbox, drweb, dslreports,
duckduckgo, duitang, duolingo, duowan, durex, duyaoss, dw, dwion, dyna, dynu, dzen, ea, eastmoney,
easylist, ebay, ebuyer, economist, eduhk, edx, egghead, ehentai, electron, eleme, elevenlabs,
elsevier, embark, embedly, embl, emojipedia, eneba, enfa, entermediadb, entrust, envato, envybox,
epicbrowser, epicgames, epochmediagroup, erolabs, escapefromtarkov, eset, espn, espressif, esri,
ethereum, everbright, evernote, f-droid, facebook, facebook-dev, faceit, falungong, familymart,
fandom, fans66, fansta, farfetch, faronics, fastlane, fastly, faststone, fcbox, fedora, feedly,
feishu, fengxing, fflogs, fibank, ficbook, figma, filimo, finish, firebase, firefox, flatpak,
flibusta, flickr, flowus, flowwow, flutter, flyio, focuschina, fonbet, fontawesome, fontexplorer,
fonts, fontshop, fontsinuse, forbes, formula1, forza, fox, fqnovel, framer, freebuff, freecodecamp,
freenode, ft, ftv, funpay, futu, fzdm, gaijin, gamersky, gamesplanet, gandi, ganji, gannett, garena,
gateio, geetest, gemfury, genotek-ru, geolocation-!cn, geolocation-cn, gettyimages, getui, gfw,
gfycat, ggsel, giffgaff, gigabyte, gimy, gismeteo, gitbook, gitee, github, github-copilot, github1s,
gitlab, gitv, globalsign, globalvoices, globo, glyphs, gmo-internet, godaddy, gofundme, gog, golang,
goodreads, google, google-cn, google-deepmind, google-gemini, google-play, google-registry,
google-registry-tld, google-scholar, google-trust-services, googlefcm, goproxy, gracg, grapheneos,
gravatar, greatfire, gree, groq, group-ib, growingio, gucci, guo, guokr, habr, haier,
hainanairlines, haitang, hamivideo, hanyi, harpercollins, hashicorp, haskell, haveibeenpwned, hbo,
hcaptcha, hdrezka, headhunter, hentaichen, hentaivn, herogame, heroku, hetzner, heyzo, hikvision,
hinet, hinet-eca, hisense, hitun, hkbn, hkbu, hkedcity, hketgroup, hkgolden, hkt, hku, hkust, hm,
homebrew, homedepot, hongkongpost, honor, hooligapps, hotstar, hoyoverse, hp, hpe, hsbc, hsbc-cn,
huanghuagang, huawei, huawei-dev, huaweicloud, hubblephone, huffpost, hugecore, huggingface,
hujiang, hulu, humblebundle, hunantv, huobi, hupu, hupun, hurricaneelectric, huya, ibkr, ibm,
icable, icbc, icloud, icloudprivaterelay, ideco-ru, identrust, idg, ieee, ifanr, ifast, iflytek,
ihuman, iina, ikea, illgames, illusion, illusion-nonofficial, imagebam, imagecurl, imageshack,
imagetwist, imdb, imgbb, imgix, imgur, imperialcollege, infowars, infrapedia, inoreader, inshot,
insider, instagram, intel, intel-dev, intercom, internet-archive, intsig, intuit, ipip, iqiyi, isgd,
ishumei, itchio, itiger, itunes, ixbt, ixsystems, iyf, jable, japonx, java, javbus, javcc, javdb,
javwide, jd, jetbrains, jetbrains-ai, jfrog, jianshu, jibencaozuo, jiemian, jiguang, jinshuju,
jiyukobo, jkf, jlc, johren, jquery, jsdelivr, jtexpress, juejin, jushuitan, justav, justmysocks,
jutongbao, jwplayer, kaggle, kakao, kanzhongguo, kaspersky, kechuang, keep, kemono, kernel, keybase,
khanacademy, kick, kindle, kindle4rss, kingkonglive, kingsoft, kinopoisk, kinopub, kkbox, kktv,
kodi, kodik, konachan, konami, kontur, koolearn, kraken, ku6, kuaidi100, kuaikan, kuaishou,
kuaiyikeji, kubakuba, kubernetes, kucoin, kugou, kurogames, kuwo, kyodonews, lagou, landian,
lantern, lanzou, laracasts, lark, lark-global, lastfm, lastpass, launchpad, lavteam, le, lenovo,
lethalhardcore, letsencrypt, lg, lianjia, liberapay, libgen, liepin, lifewire, ligastavok, lighter,
lihkg, likee, limelight, linakesi, line, linguee, linkedin, linotype, linux, linuxdo, lisiku, litv,
livejournal, liveperson, lizhi, lkcoffee, localbitcoins, localizejs, logitech, londonreal,
longbridge, louisvuitton, lowiro, ltn, lumion, lysol, madshi, mafengwo, magnit, mailcom, mailru,
mailru-group, mainichi, manhuagui, manhuaren, manorama, manoto, manus, maocloud, mapbox, marvel,
mastercard, masterclass, matrix, matters, mcdonalds, mdn, meadjohnson, mediachinesegroup, medium,
meduza, mega, megafon, meipian, meitu, meituan, meizu, messenger, meta, metabrainz, metacritic,
metart, miaomiaozhe, microsoft, microsoft-dev, microsoft-pki, midea, mihoyo, mihoyo-cn, mikrotik,
mindbox, mindgeek, mindgeek-porn, mini, miniso, miraheze, missav, misskey, misskey-universe, mit,
mixi, mobile01, mocha, modrinth, mogujie, mojang, moji, momo, mongodb, monotype, moonvy, morisawa,
mortein, mosmetro, motorola, movefree, moxing, mozilla, msi, msn, mts-ru, mubi, mucinex, mudvod,
muji, musixmatch, mvideo, mxroute, mydirtyhobby, myfonts, myoffice-ru, myradio, mytvsuper, mzed,
n26, n3ro, narwal, nationalgeographic, naver, nbcuniversal, neowin, netcraze, netcup, netease,
netflav, netflix, netlify, neuralink, newegg, newgrounds, newscorp, newsmax, nexitally, nexo, nexon,
nexusmods, nga, nginx, ngrok, nhk, nic-ru, nicegram, niconico, nike, nikkan-gendai, nikke, nikkei,
nintendo, nist, nixos, nodejs, nodeseek, noip, nordstrom, nordvpn, notion, now, nowcoder, npmjs,
nudevista, nurofen, nutaku, nvidia, nyaa, nypost, nytimes, oan, oculus, ogury, ok, okaapps, okjike,
okko, okx, olevod, onedrive, onekey, oneplus, ookla-speedtest, op, openai, opencollective,
openjsfoundation, openrec, opensourceinsights, openspeedtest, openstreetmap, openweather, openwrt,
openx, oppo, oracle, oreilly, organicmaps, origin, oschina, oskelly, osu, otpbank, oup,
overclockers-ru, ozon, pagecdn, panasonic, pandanet, paofuyun, paskoocheh, pastebin, patreon,
pawchive, paypal, pbs, pccw, pchome, pearson, peppy, perl, perplexity, petrochina, pgyer, phoenix,
picacg, picsee, pikpak, pinduoduo, pingan, pingcap, pinggy, pingpe, pingsx, pinkcore, pinterest,
piratebay, pixhost, pixiv, pixnet, playboy, playcover, playstation, plex, plutotv, pocketcasts, poe,
polocloud, polymer, polyu, polyv, pornhub, pornpros, positive-technologies, postimages, pptv,
primevideo, private, progress, projectpoi, projectsekai, proquest, protonmail, pstorage, ptt, pubg,
pubmatic, pugpig, purikonejp, python, qcc, qcloud, qianxin, qihoo360, qimao, qingcloud, qingtingfm,
qiniu, qixin, qnap, qt, qualcomm, quantil, quip, quora, qwant, qweather, radiko, raiffeisenbank,
rakuten, rarbg, razer, rb, reabble, readthedocs, reagroup, realclear, realitykings, realtype,
rebrandly, reddit, redhat, redis, redotpay, redtube, regru, remnawave, renren, reurl, reuters,
rferl, riot, roblox, rockstar, roku, rossiyasegodnya, rostelecom, rsshub, rsshub-3rd, rt, rthk,
ruanmei, ruby, rubychina, ruleoflaw, rumble, rust, ruten, rutracker, rutube, safepal, sakurafrp,
salesforce, samsung, sankei, sb, sber, scala, scaleflex, scenesource, schoopia, schwab, sci,
sci-hub, sciencedirect, scmp, scp, seasun, secom, sectigo, segment, segmentfault, sehuatang,
selectel, sentry, servicepipe, setapp, setn, sf-express, shadowsockscom, shanbay, sharethis,
shireyishunjian, shopee, shopify, shorturl, showtimeanytime, shuqi, signal, sina, singtaonewscorp,
sinopec, sitepoint, skillshare, sky, skyeng, skyperfect, slack, slideshare, sling, smartone, smena,
smtiaojiaoshi, smzdm, snap, snapcraft, snapp, snk, snodehome, softbank, softether, sogou, sohu,
sokolov, sonemic, sony, sonypictures, soundcloud, soundofhope, sourceforge, sourcehut, soyjakparty,
spacemail, spaceship, spacex, spankbang, speedtest, spiceworks, spotify, springer, squareup,
squirrelvpn, sslcom, ssrcloud, st, stackexchange, stackpath, stage1st, standardchartered, starbucks,
starfieldtech, starplus, startpage, starworld, staticfile, steam, steaminventoryhelper,
steamunlocked, steemit, sto-express, straitsx, streamable, strepsils, strikingly, stripe, subscene,
suishouji, sumkoo, suning, supercell, supersonic, surflite, suruga-ya, svp, swag, swift, swisssign,
sxl, symantec, symantec-pki, synology, t2-ru, taboola, taihe, taikang, tailscale, take-two,
talkatone, taomee, taptap, target, taylorfrancis, tbank-ru, tcl, teambition, teamspeak, teamviewer,
technogym, techpowerup, techtimes, ted, telegram, telekom, temp-mail, tencent, tencent-dev,
tencent-games, tencent-tme, tendcloud, terabox, termux, tesla, test, test-ipv6, tex, tgbus,
theboringcompany, theguardian, theinitium, thelinuxfoundation, theporndude, thescoregroup, thesun,
thetimes, thetype, thomsonreuters, threads, tiancity, tianyancha, tidal, tidelift, tiktok, tilda,
timeweb, tinyurl, tld-!cn, tld-cn, tld-opennic, tld-ru, tmdb, tmtpost, tokyo-sports, tokyo-toshokan,
tonec, tongcheng, tongfang, tor, torproject, trackernetwork, trae, translatewiki, trello, trustasia,
trustwallet, trustwave, truyen-hentai, tsquare, tube8, tubi, tumblr, tutanota, tvb, tvdb, tver,
twca, twilio, twitch, twitter, typekit, typenetwork, typography, uber, ubiquiti, ubisoft, ubuntu,
ubuntukylin, uc, ucloud, ucoz, udacity, udemy, udn, umeng, unext, unionpay, unity, unitychina,
uoliv, upai, usersdrive, uu-chat, v2ray, v8, vancl, vanish, vaptcha, veet, vercel, verisign,
verisign-pki, verizon, vgtime, viber, vilavpn, vimeo, visa, visualarts, viu, vivo, vixengroup, vk,
vmware, voanews, vodafone, vokino, volcengine, volmoe, volvo, voxmedia, vpngate, vrcdn, vrchat,
vrzwk, vultr, w3schools, wallhaven, walmart, wanfang, wangsu, wanmei, wantmedia, wargaming, wasu,
watchout, wbgames, weathercn, webex, webnovel, webtype, weiphone, wenshushu, westerndigital,
whatsapp, wholefoodsmarket, whoosh, wikidot, wikihow, wikimedia, wildberries, win-extra, win-spy,
win-update, windsurf, windy, wink, winline, wise, wisekey, wish, wistia, wiwide, wix, wjx, wolai,
woolite, wordpress, wps, wsj, wwe, wynd, x, x5, xai, xbox, xd, xda, xdty, xedge, xhamster,
xiaoheihe, xiaohongshu, xiaomi, xiaomi-ai, xiaomi-iot, xiaoyuzhou, ximalaya, xingkongwuxianmedia,
xingrz, xnxx, xtom, xueersi, xueqiu, xunlei, xvideos, yahoo, yandex, ycombinator, ymtc, ynet,
ynoproject, yokaverse, yomiuri, yostar, youjizz, youku, youmind, youporn, youquan, youtube, youzan,
yto-express, yuanbei, yuanfudao, yuewen, yuketang, yundaex, yunfanjiasu, yunlaopo, yy, z-library,
z3x-team, zaobao, zb, zdns, zee, zeetv, zendesk, zeplin, zhangtao, zhihu, zhimeishe, zhubajie,
ziroom, zoho, zoom, zotero, zscaler, zte, zto-express, zuoyebang, zynga

File checksums¶

Dataset	File	SHA256
Apple / Android	`geoip.dat`	`9a93cdd25bd3434f073e5d3c2d51c38987a5045af06016cf859350cb40ba7be0`
Apple / Android	`geosite.dat`	`fcb76cadea848965ccfc15a1648370029f8e2272a63bc2c4e6f6258673c2d048`
Windows / Linux	`geoip.dat`	`391b522361c52804e486a98b53d97f3d9c1d3e4e4217bb34954774a0b456b9fd`
Windows / Linux	`geosite.dat`	`282b6613f2a09e2c5b2ba357808abb7bb697f7f5c6cc957d8e5dc92bdc27fbbf`

Geo database preparation before connection¶

On iOS, iPadOS, macOS, tvOS, Android, Windows and Linux, connecting includes a “Preparing geo databases…” phase. A missing TUN during preparation does not mean disconnection: the button remains in the connecting state until preparation and core startup finish.

Verified provider databases are cached separately for each URL for 24 hours after a successful HTTP 200 or 304. Reconnecting uses fresh cache without an HTTP request; on Apple 364+ and Android 493+, verified prepared sets and category checks are reused until the source files or category selection change. Windows/Linux retain their existing preparation behavior. Changing the URL, a corrupt file or cache expiry triggers another download/check. Refreshing a subscription or manually refreshing databases requests the current version immediately, regardless of cache age.

If a provider database cannot be downloaded or lacks required categories, the app checks its bundled databases. It connects with those when all categories are available. Otherwise it offers cancellation or connection without geo-based rules; geo rules are never removed without the user's consent.

Optimized geo files: useChunkFiles and useTags¶

Available on iOS/iPadOS, macOS (Mac Catalyst) and tvOS from 2.0.21 (364), and Android/Android TV from 2.0.6 (493). Windows and Linux are unchanged and use full databases; these fields have no effect there.

{
  "useChunkFiles": true,
  "useTags": ["geoip:ru", "geosite:youtube"]
}

Field	Default	Meaning
`useChunkFiles`	`false`	Accepts JSON `true`/`false` and strings `"true"`/`"false"`. Enables trimming before passing geo files to Xray. Alias: `UseChunkFiles`.
`useTags`	`[]`	An array of additional categories with mandatory `geoip:` or `geosite:` prefixes. Alias: `UseTags`. Adds categories to the selection; does not create routing rules. Ignored when trimming is disabled.

The client retains the union of categories referenced by the subscription JSON (routing and DNS), its applied routing profile, active user exclusions, and useTags. Attributes such as geosite:google@cn retain the complete category with its attributes; Xray applies the attribute filter. Standard ext:geoip.dat:tag, ext-ip:geoip.dat:tag, and ext:geosite.dat:tag references are also included.

The prepared set belongs to the subscription. Switching between its servers reuses that set without cutting or parsing geo files again. Switching subscriptions reuses each subscription's cached set. Changed source content or a changed selection triggers preparation of a new set. All configurations retained in the subscription contribute references, so the set remains usable by every server.

Full originals are cached by source URL and shared between subscriptions using the same URL. Original ETags and SHA-256 values are kept separately from derived files. A fresh original cache is reused for 24 hours. During revalidation of a cached original, an optional adjacent .dat.sha256 file (64 hexadecimal characters) can avoid downloading unchanged content. Otherwise ETag/HTTP 304 is used when available. Trimming never overwrites the original or its HTTP metadata. Without server hashes or ETags, a freshness check may require downloading the original again.

If the provider database cannot be downloaded or lacks a category required by a rule, the client checks its bundled database. If that also lacks required categories, it offers connection without geo rules, requiring user consent. A missing category referenced only in useTags is skipped with a diagnostic warning. If trimming fails but the selected full databases are valid and complete, the client uses those full databases.