diff --git a/clash_base.yaml b/clash_base.yaml
index 9e59a91..e3fe14b 100644
--- a/clash_base.yaml
+++ b/clash_base.yaml
@@ -19,3 +19,48 @@ sniffer:
   skip-domain:
     - 'Mijia Cloud'
     - '+.push.apple.com'
+
+# === DNS ===
+# 聚合订阅必须保留各机场专用 DNS, 否则私有节点域名解析失败 → 节点全部超时。
+# 新增机场: 把该机场官方订阅 dns.nameserver-policy 里的 域名->解析服务器 照抄到下面。
+hosts:
+  mtalk.google.com: 108.177.125.188
+  tagss13.pro: 104.26.5.84
+  tagxx.vip: 103.135.249.37
+
+dns:
+  enable: true
+  listen: '0.0.0.0:1053'
+  default-nameserver: [119.29.29.29, 223.5.5.5, 180.184.1.1]
+  enhanced-mode: redir-host
+  use-hosts: true
+  use-system-hosts: true
+  nameserver: ['https://223.6.6.6/dns-query', 'https://doh.pub/dns-query']
+  nameserver-policy:
+    # cloud-nodes 机场 (anytls) —— 专用明文 DNS
+    '+.cloud-nodes.com': '124.221.68.73:1053'
+    # sankuaei / aixifan7498 / afdiancdn 机场 (ss+obfs) —— 专用 DoH (带端口/token 必须照抄)
+    '*.sankuaei.com':
+      - 'https://anycast.bytecdns.com/913b04c3'
+      - 'https://anycast.soufunimgs.com/5428ab28'
+      - 'https://anycast.jllyzx.com/8c28d4s7'
+      - 'https://anycast.pzwzs.com/3b04c545'
+      - 'https://anycast.qccnb.com/a192b791'
+      - 'https://anycast.xhspic.com/8c28d4s7'
+      - 'https://91c7e35b.qluomcd.com:4443/5428ab28'
+    '*.aixifan7498.com':
+      - 'https://anycast.bytecdns.com/913b04c3'
+      - 'https://anycast.soufunimgs.com/5428ab28'
+      - 'https://anycast.jllyzx.com/8c28d4s7'
+      - 'https://anycast.pzwzs.com/3b04c545'
+      - 'https://anycast.qccnb.com/a192b791'
+      - 'https://anycast.xhspic.com/8c28d4s7'
+      - 'https://91c7e35b.qluomcd.com:4443/5428ab28'
+    '*.afdiancdn.org':
+      - 'https://anycast.bytecdns.com/913b04c3'
+      - 'https://anycast.soufunimgs.com/5428ab28'
+      - 'https://anycast.jllyzx.com/8c28d4s7'
+      - 'https://anycast.pzwzs.com/3b04c545'
+      - 'https://anycast.qccnb.com/a192b791'
+      - 'https://anycast.xhspic.com/8c28d4s7'
+      - 'https://91c7e35b.qluomcd.com:4443/5428ab28'