Clash Download CenterClients for every platform and setup guides

Routing rules send different traffic to the appropriate policy instead of routing every request through the same proxy. Select rule mode in your client, then define match conditions in the config’s rules section. Rules are checked from top to bottom, and the first match determines where traffic goes. Put MATCH last as the fallback. PROXY in this example must refer to an existing proxy group; copying the name alone is not enough. Unlike global mode, rule mode can keep local services direct. Compared with per-app routing, domain rules are better suited to apps that connect to multiple services.

Proxy groups separate routing rules from the proxy endpoints they use. Define a group under proxy-groups, then select its proxy in the client. Use select for manual choice; url-test selects automatically based on probes to a specified URL. The example’s subscription must already be defined in a proxy provider. Unlike assigning a node to each rule, proxy groups let you keep your rule structure when changing subscriptions. Probe results only show connectivity to that target; they don’t predict download speeds across all websites. If access is unreliable, check the actual connection logs.

DNS settings affect domain resolution and rule matching. Use a core that supports the relevant fields, enable DNS in its settings, then choose the fake-ip enhanced mode. It returns a virtual IP to the app, then the core maps it back to the original domain when handling the connection. With redir-host, the core returns the actual resolved address. The key difference is how domain mappings work, not a simple ranking of speed. If a LAN device or app is incompatible, add the relevant domains to fake-ip-filter. Enabling this section alone does not route all system DNS queries through the core; check the system’s DNS path too.

TUN mode uses a virtual network interface to capture traffic, making it useful for apps that ignore system proxy settings. On a supported client, install or start the required service, then enable TUN. The example fields are for compatible mihomo cores; check the documentation for other cores. Unlike a system proxy, TUN affects routing and DNS, so missing permissions, another VPN, or a network adapter change can break connectivity. First confirm that the subscription works with the system proxy, then enable the virtual interface. If LAN access stops working, check route exclusions rather than deleting all routing rules.

Subscriptions give clients proxy details to manage, whether hosted remotely or stored locally. Many graphical clients let you import a full config from a URL. The example instead shows a local proxy provider: its file must follow the provider format, so you can’t use any full config as a substitute. Providers keep node sources separate from custom rules, but you’ll need to maintain the proxy group references yourself. Before updating, save the current working config and check whether the client preserves overrides. Subscription links often contain access credentials; remove the full URL before sharing screenshots or logs.