The full syntax

Every token, plus the one asymmetry that trips people up.

The full list

Include	Exclude	Value	Quota
`cr.…`	`nocr.…`	cr.de,au	normal
`state.…`	`nostate.…`	state.arizona	2×
`city.…`	`nocity.…`	city.berlin	2×
`asn.…`	`noasn.…`	asn.39603 / noasn.as20947	2×
`sessid.…`	—	sessid.a91f2c	normal
`sessttl.…`	—	sessttl.60	normal
`anon.…`	—	anon.1	normal

The ASN asymmetry

⚠ The two sides are written differently

Including a network uses a bare number: asn.39603. Excluding one carries an as prefix: noasn.as20947.

It is the only token whose two sides are written differently. Anyone inferring it from the other tokens gets it wrong — and a wrong one is not rejected, just ignored.

Combining

Different tokens are joined with ;, several values for one token with ,.

gt-8f21c4__cr.de;city.berlin,hamburg;sessid.123

The anonymous pool

anon.1 selects the anonymous pool.