fakeip-compat

With Fake-IP DNS enabled under a Mihomo or Clash TUN profile, every public hostname resolves into a reserved pool such as 198.18.0.0/16. The stock DSH http fetch provider classifies those as non-public and rejects the request on the spot, so all web scrapes and API calls fail silently. Local LAN debugging hits the same wall from the opposite direction. fakeip-compat is a focused compatibility layer built for exactly this setup.

It registers a proper fakeip-http provider through ctx.web.registerFetchProvider, depending only on node:dns/promises and undici with zero shell calls or subprocesses. When system resolution returns a Fake-IP address, the provider re-validates the hostname against trusted DoH endpoints (Cloudflare and Google), then pins transport to the DoH-verified real address set via the official pinning mechanism so no second resolution occurs at send time. Addresses inside lanCidr (default 192.168.0.0/16) transport pinned with TLS checks intact by default, and a lanInsecure toggle exists for self-signed local devices. Every other denial case, including other private ranges, mixed fake-and-real answers, and hosts-pinned names outside the LAN allowlist, retains the stock provider refusal semantics and error codes without opening an extra bypass path.

If you run Mihomo or Clash in TUN mode and rely on DSH for web fetches or live API debugging, this plugin eliminates the blanket Fake-IP false-positive rejections while keeping local dev machines reachable, a lightweight drop-in that simply makes the existing pipeline work again.