change a lot, stable now

cgproxy.conf

@@ -1,8 +1,14 @@
-## any process in this cgroup will be proxied
-## must start with slash '/'
-proxy_cgroup="/proxy.slice"
-# proxy_cgroup="/user.slice"
+########################################################################
+## cgroup transparent proxy
+## any process in cgroup_proxy will be proxied, and cgroup_noproxy is the opposite
+## note: v2ray should not run in a proxied cgroup
+## cgroup must start with slash '/'
+# cgroup_proxy="/" 
+cgroup_proxy="/proxy.slice" 
+cgroup_noproxy="/noproxy.slice"
 
+
+########################################################################
 ## listening port of another proxy process, for example v2ray 
 port=12345
 
@@ -11,14 +17,12 @@ enable_tcp=true
 enable_udp=true
 enable_ipv4=true
 enable_ipv6=true
+enable_dns=true # due to v2ray bug https://github.com/v2ray/v2ray-core/issues/1432
 
-## v2ray outbound mark, depend on your v2ray setting
-## only useful if v2ray process is also in proxy_cgroup, for example, you want to proxy whole userspace,
-## and v2ray is also running in the same userspace
-## otherwise ignore this
-v2ray_outbound_mark=0xff # 255
 
+########################################################################
 ## do not modify this if you don't known what you are doing
 table=100
-mark=0x01
+mark_proxy=0x01
+mark_noproxy=0xff
 mark_newin=0x02