One JSON topology.

ads.example is blackholed, RFC1918 prefixes and internal.example go direct, and every other flow uses the native outbound. Replace the REALITY public key before config check.

{
  "log": { "level": "info" },
  "inbounds": [
    {
      "tag": "local",
      "type": "mixed",
      "address": ["127.0.0.1:1080"],
      "network": ["tcp", "udp"]
    }
  ],
  "outbounds": [
    {
      "tag": "proxy",
      "type": "native",
      "address": ["proxy.example.com:9443"],
      "token": "change-me",
      "transport": { "type": "raw" },
      "carrier": { "mode": "auto", "prefer": "quic", "udp_mode": "auto" },
      "mux": { "enabled": true },
      "security": {
        "type": "reality",
        "server_name": "example.com",
        "public_key": "REPLACE_WITH_SERVER_PUBLIC_KEY",
        "short_id": "abcd1234",
        "spider_x": "/"
      }
    },
    { "tag": "direct", "type": "direct" },
    { "tag": "block", "type": "blackhole" }
  ],
  "route": {
    "default_outbound": "proxy",
    "rules": [
      { "domain_suffixes": ["ads.example"], "outbound": "block" },
      { "ip_cidrs": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"], "outbound": "direct" },
      { "domain_suffixes": ["internal.example"], "outbound": "direct" }
    ]
  },
  "dns": {}
}

Ordinary CLI flows have no application identity, so both rules miss and traffic uses direct. An embedder that returns com.example.reader on Android with attribute profile=work selects direct. IDs that start with com.example.game. select block.

{
  "log": { "level": "info" },
  "inbounds": [
    {
      "tag": "local",
      "type": "mixed",
      "address": ["127.0.0.1:1080"],
      "network": ["tcp", "udp"]
    }
  ],
  "outbounds": [
    { "tag": "direct", "type": "direct" },
    { "tag": "block", "type": "blackhole" }
  ],
  "route": {
    "default_outbound": "direct",
    "rules": [
      {
        "app": {
          "ids": ["com.example.reader"],
          "platforms": ["android"],
          "attributes": { "profile": ["work"] }
        },
        "outbound": "direct"
      },
      {
        "app": { "id_prefixes": ["com.example.game."] },
        "outbound": "block"
      }
    ]
  },
  "dns": {}
}

remote-access uses route_mode rules. Authenticated user alice may open TCP/UDP to the two prefixes through direct. Every other accepted flow uses deny. This shows the route fields; it does not export a home LAN.

{
  "log": { "level": "info" },
  "inbounds": [
    {
      "tag": "remote-access",
      "type": "native",
      "address": ["0.0.0.0:9443"],
      "network": ["tcp", "udp"],
      "users": [{ "principal": "alice", "id": "change-me" }],
      "transport": { "type": "raw" },
      "mux": { "enabled": true },
      "route_mode": "rules"
    }
  ],
  "outbounds": [
    { "tag": "direct", "type": "direct", "network": ["tcp", "udp"] },
    { "tag": "deny", "type": "blackhole" }
  ],
  "route": {
    "default_outbound": "deny",
    "rules": [
      {
        "inbound": ["remote-access"],
        "principals": ["alice"],
        "network": ["tcp", "udp"],
        "ip_cidrs": ["192.168.50.0/24", "fd12:3456:789a::/64"],
        "outbound": "direct"
      }
    ]
  },
  "dns": {}
}

"mux": {
  "enabled": true,
  "max_sessions": 4,
  "max_streams_per_session": 128,
  "warm_spares": 1
}

"carrier": { "mode": "auto" },
"mux": {
  "enabled": true,
  "resume": true,
  "resume_timeout": "15s",
  "resume_buffer_size": 4194304
}