Policies¶
Policies determine which traffic goes through a proxy, which goes direct, and which is blocked. Each policy consists of a match condition and an outbound mode.
Adding a Rule¶
- Click Add Rule
- Select the rule type (domain, domain suffix, IP CIDR, process name, rule set, etc.)
- Fill in the match content
- Select the outbound mode: Proxy / Direct / Block
- Save
Rule Conditions Reference
For all supported match conditions, see Rule Conditions Reference.
Rule Priority¶
Rules are matched from top to bottom — once a match is found, subsequent rules are skipped. Drag to reorder.
Recommended ordering:
- Specific rules (exact domains, IPs) at the top
- Broad rules (entire rule sets) at the bottom
Example
Final Outbound¶
Set the default behavior for traffic that doesn't match any rule at the bottom of the page:
| Outbound | Description |
|---|---|
| Direct | Unmatched traffic connects directly |
| Block | Unmatched traffic is blocked |
| Proxy | Unmatched traffic goes through proxy |
Import Rules¶
Click Import to quickly add rules from:
- Preset Templates — Rover's built-in routing templates (proxy foreign / direct domestic / balanced)
- Current Profile — Extract existing rules from the active subscription
What are Preset Templates?
Rover includes three preset templates covering common routing scenarios. See Preset Templates.
Using Built-in Rule Sets¶
When adding a rule, you can select the Rule Set type to reference an existing rule set (including built-in GeoIP, GeoSite, ACL4SSR, etc.).
Built-in rule sets are grouped by category and support search filtering. See Built-in Rule Sets.
Enable / Disable¶
Each rule has a toggle on the left side. You can quickly enable or disable a rule without deleting it. Disabled rules are not written to config.json.
Drag to Reorder¶
Press and hold the drag handle on the left side of a rule row, then drag up or down to change its position. The core restarts automatically after reordering.