Add bridge outbound

2026-10-18 03:54:05 +00:00 · 2026-08-30 17:41:42 +08:00
parent 01e5196c12
commit 1e2f1d04da
34 changed files with 3581 additions and 7 deletions
@@ -0,0 +1,69 @@
+---
+icon: material/new-box
+---
+
+!!! question "Since sing-box 1.14.0"
+
+# Bridge
+
+!!! quote ""
+
+    Requires privileges. Supported on Linux, macOS, rooted Android, and jailbroken iOS.
+
+    For graphical clients: on macOS, only available in the standalone version and requires the
+    Root Helper; on Android, requires root permission; on iOS, requires jailbreak.
+
+`bridge` is the L3 counterpart of the `direct` outbound: it forwards L3 connections
+(TCP, UDP and ICMP) directly out of a network interface. Route L3 traffic to it from a TUN
+or other L3 endpoints via the `route` action in
+[Pre-match](/configuration/shared/pre-match/); L4 connections will be rejected.
+
+### Structure
+
+```json
+{
+  "type": "bridge",
+  "tag": "bridge-out",
+
+  "interface": "",
+  "bridge_name": "",
+  "iproute2_table_index": 0,
+  "iproute2_rule_index": 0
+}
+```
+
+### Fields
+
+#### interface
+
+Interface name for forwarded traffic to egress.
+
+The default interface will be used by default.
+
+Forwarded traffic will be dropped while the interface is unavailable.
+
+#### bridge_name
+
+Custom bridge TUN interface name prefix, `bridge` is used by default.
+
+Not effective on Apple platforms.
+
+#### iproute2_table_index
+
+!!! quote ""
+
+    Only supported on Linux, and only takes effect when `interface` is set.
+
+Linux iproute2 table index for pinned egress routes.
+
+`2200` + instance index is used by default.
+
+#### iproute2_rule_index
+
+!!! quote ""
+
+    Only supported on Linux.
+
+Linux iproute2 rule start index.
+
+`100` is used by default.
@@ -0,0 +1,67 @@
+---
+icon: material/new-box
+---
+
+!!! question "自 sing-box 1.14.0 起"
+
+# Bridge
+
+!!! quote ""
+
+    需要特权。支持 Linux、macOS、rooted Android 和越狱 iOS。
+
+    对于图形客户端：macOS 仅独立版本可用，且需要 Root Helper；Android 需要 root 权限；iOS 需要越狱。
+
+`bridge` 是 `direct` 出站的 L3 版本：它将 L3 连接（TCP、UDP 和 ICMP）直接从网络接口转发出去。
+通过[预匹配](/zh/configuration/shared/pre-match/)中的 `route` 动作，将 L3 流量从 TUN
+或其他 L3 endpoints 路由到它；L4 连接将被拒绝。
+
+### 结构
+
+```json
+{
+  "type": "bridge",
+  "tag": "bridge-out",
+
+  "interface": "",
+  "bridge_name": "",
+  "iproute2_table_index": 0,
+  "iproute2_rule_index": 0
+}
+```
+
+### 字段
+
+#### interface
+
+转发流量流出的网络接口名称。
+
+默认使用默认接口。
+
+接口不可用期间，转发流量将被丢弃。
+
+#### bridge_name
+
+自定义 bridge TUN 接口名前缀，默认使用 `bridge`。
+
+在 Apple 平台上无效。
+
+#### iproute2_table_index
+
+!!! quote ""
+
+    仅支持 Linux，且仅在设置了 `interface` 时生效。
+
+用于固定出口路由的 Linux iproute2 路由表索引。
+
+默认使用 `2200` + 实例索引。
+
+#### iproute2_rule_index
+
+!!! quote ""
+
+    仅支持 Linux。
+
+Linux iproute2 规则起始索引。
+
+默认使用 `100`。
@@ -18,6 +18,7 @@
 | Type           | Format                         |
 |----------------|--------------------------------|
 | `direct`       | [Direct](./direct/)             |
+| `bridge`       | [Bridge](./bridge/)             |
 | `block`        | [Block](./block/)               |
 | `socks`        | [SOCKS](./socks/)               |
 | `http`         | [HTTP](./http/)                 |
@@ -18,6 +18,7 @@
 | 类型             | 格式                             |
 |----------------|--------------------------------|
 | `direct`       | [Direct](./direct/)             |
+| `bridge`       | [Bridge](./bridge/)             |
 | `block`        | [Block](./block/)               |
 | `socks`        | [SOCKS](./socks/)               |
 | `http`         | [HTTP](./http/)                 |