add more china ip range; extend timeout for direct access; if domain is china domain, do not go through proxy