Install · Subscription · Config · Advanced · FAQ
This guide follows the shape of the configuration file itself: how YAML is organised, then subscriptions, proxy groups and rule providers, and finally the advanced switches like TUN and DNS. Every command and snippet was captured from actual Clash Verge Rev use, with version differences called out in the notes.
Whether you're on Windows, macOS, Android, or Linux, follow these 5 steps to entire your Clash setup and spin up using proxy services.
The key point:Go to the Download Center. Choose Clash Verge Rev for Windows/macOS, or FlClash for Android.
Double-click the installer to install.
Once launched, the Clash icon will appear in the system tray or notification bar.
Let me put it this way:Open the "Config / Subscription" page, paste your provider's subscription URL, and click load/upgrade.
Click "How fast it is Test" in the proxy panel and select a node with response time below 200ms.
Toggle the "System Proxy" switch. Your browser will now access blocked sites via Clash.
Choose your operating system to view granular installation steps and recommended clients.
Download Clash Verge Rev for Windows x64 (.exe) from the Download Center. Choose ARM64 for Qualcomm Snapdragon PCs.
Concretely:Double-click the .exe file. If Windows SmartScreen appears, click "More Info → Work Anyway" and follow the prompts.
After launching, go to "Settings → System Settings → Service Mode" and click "Install" (requires admin rights).
This unlocks TUN global proxy features.
Where this lands:Click "Subscriptions" on the left → "+" button → paste URL → click "Load". Your node list will appear shortly.
Switch to the "Proxies" page, click "⚡ How fast it is Test", and select a low-response time node.
Finally, toggle "System Proxy" in the top right.
Apple Menu → "About This Mac": choose arm64 for Apple M1/M2/M3 chips; choose x64 for Intel processors.
Open the .dmg file and drag the Clash Verge Rev icon into the "Applications" folder.
The key point:When opening for the first time, Right-click the icon → select "Open" → click "Open" again to bypass macOS Gatekeeper verification.
Click "Subscriptions" → "+" → paste URL → click "Load". Your nodes will be listed under the subscription.
Select a low-response time node in "Proxies" and toggle "System Proxy".
Let me put it this way:All system-proxy-aware apps (Safari, Chrome, etc.) will use the proxy.
Download the FlClash APK. The greater part of Android phones are best off use the Universal version; flagships after 2018 can use arm64-v8a for better performance.
Android blocks apps outside Google Play. Locate the APK file and select "Allow from this source" when prompted.
Concretely:Launch FlClash after installation; a swift guide will help you with the basic setup.
Click "Configs" in the left menu → "+" in the top right → select "Load from URL" → paste link → click "Save".
Return to the home page, select a proxy node, and click the "Spin up" button in the bottom right.
Where this lands:Click "OK" when the system prompts for VPN connection authorization.
Clash Verge Rev offers multiple Linux formats: .deb (Debian/Ubuntu), .rpm (Fedora/openSUSE), and .AppImage (Universal).
Do not skip this:Use the one matching your distro; choose .AppImage if unsure.
Debian / Ubuntu (.deb):
sudo dpkg -i clash-verge-rev_*.deb
sudo apt-get install -fAppImage (Universal):
chmod +x clash-verge-rev_*.AppImage
./clash-verge-rev_*.AppImageAfter launching, go to "Settings → System Settings → Service Mode" and click "Install".
This requires sudo; enter your password in the prompt. This unlocks TUN global transparent proxy.
sudo apt install policykit-1 and try again.
The key point:Click "Subscriptions" on the left → "+" → paste URL → click "Load". Wait for the nodes to load.
Work a how fast it is test in "Proxies", select a low-response time node, and toggle "System Proxy".
For terminal or system-wide traffic, also enable TUN Mode.
Visit Mihomo GitHub Releases to download the binary for your architecture. Common server versions:
mihomo-linux-amd64-*.gz (x86_64 Servers); mihomo-linux-arm64-*.gz (ARM Servers / Raspberry Pi).
gunzip mihomo-linux-amd64-*.gz
mv mihomo-linux-amd64-* /usr/local/bin/mihomo
chmod +x /usr/local/bin/mihomomkdir -p ~/.config/mihomo
# Place your config.yaml in this directory.
cp config.yaml ~/.config/mihomo/config.yamlConcretely:The config format is identical to GUI clients; it is possible to reuse your provider's YAML content.
Temporary Work:
mihomo -d ~/.config/mihomoConfigure Autostart (systemd): Save the following to /etc/systemd/system/mihomo.service
[Unit]
Description=Mihomo Proxy Service
After=network.target
[Service]
ExecStart=/usr/local/bin/mihomo -d /root/.config/mihomo
Restart=on-failure
[Install]
WantedBy=multi-user.targetsystemctl enable --now mihomoEnable external controllers in config.yaml to manage nodes via Yacd or MetaCubeX dashboards in your browser:
external-controller: 0.0.0.0:9090
secret: your-api-secret # Recommended: Set an access secret.After launching, visit http://<Server-IP>:9090/ui to access the dashboard.
The top recommended Clash client for iOS. Fully compatible with Clash/Mihomo configs, supports one-tap subscription loads, and offers a clean, feature-rich UI. Get it from clashplus.io or the App Store.
Do not skip this:The the greater part of established proxy tool on iOS. Supports SS, VMess, Trojan, VLESS, and more.
Compatible with Clash subscriptions. Requires a US Apple ID.
A serious advanced proxy tool supporting custom JS scripts and complex rules.
The key point:Also compatible with Clash subscriptions. Ideal for pro users on iOS.
A Subscription URL is an online config link from your proxy provider.
Clash uses it to without you fetch and upgrade all available nodes.
Log in to your provider's dashboard, find "Clash Subscription", and copy the full URL starting with https://.
Let me put it this way:Locate "Configs" (Clash Verge Rev) or "Subscriptions" (FlClash) in the sidebar.
Click "+" or "New" in the top right, paste the copied URL, and add a recognizable name.
Click "Load" or "Save". Clash will fetch and download the node configuration. Wait for the list to populate.
Concretely:Switch to the new config, go to "Proxies", click "How fast it is Test", select a low-response time node, and enable system proxy.
https://. Try enabling an existing proxy before importing.
Clash uses YAML files. Understanding core fields helps you customize proxy behavior, from ports to split rules.
Listens for both HTTP and SOCKS5. Preconfigured is 7890; can be changed in settings to avoid conflicts.
Defines all proxy nodes (SS, VMess, Trojan, VLESS, Hysteria2, TUIC, etc.). Without you populated via subscription.
Where this lands:Groups multiple nodes for strategies like url-test (auto-select), fallback, or load-balance.
Directs traffic based on Domain, IP, or GeoIP. The core of "Direct for Local, Proxy for Global."
Configures local and international DNS groups to prevent pollution and ensure accurate resolution. Essential for TUN mode.
Master these advanced features to maximize Clash efficiency and flexibility.
System proxies only work for proxy-aware apps.
Do not skip this:TUN mode uses a virtual NIC to capture all system traffic, perfect for games and non-proxy apps.
Clash Verge Rev: Install Service Mode first, then enable in "Settings → TUN Mode."; FlClash (Android): VPN mode is global by preconfigured; no extra setup needed.; We recommend configuring DNS alongside TUN to prevent leaks and protect privacy..
Group nodes into different strategies for intelligent switching.
url-test (Auto-select): Periodically tests how fast it is and switches to the fastest node.; fallback: Without you switches to a backup node if the primary one fails.; load-balance: Distributes traffic across multiple nodes to increase total bandwidth.; select: Yourself specify a node in the proxy panel..
Precisely control traffic flow via the rule engine, enabling direct connections for local sites and proxies for international services to balance how fast it is and privacy.
The key point:DOMAIN-SUFFIX: Matches domain suffixes, e.g., .google.com.; IP-CIDR: Matches IP ranges, used for local IP direct rules.; GEOIP,CN,DIRECT: Without you connects Chinese IPs straightforward while others use the proxy.; RULE-SET: References community-maintained rulesets (e.g., ACL4SSR)..
Reference externally hosted ruleset files via rule-providers to avoid manual maintenance.
One config for a constantly updated rule list.
Supports YAML/text rule files with customizable auto-upgrade intervals.; Recommended community rulesets: Loyalsoldier/clash-rules, ACL4SSR.; Reference multiple rulesets simultaneously and match them in top billing order..
Proper DNS configuration prevents pollution and leaks, ensuring accurate resolution—crucial for TUN mode.
Let me put it this way:Use local DNS (e.g., 223.5.5.5, 119.29.29.29) for domestic domains.; Use encrypted DNS (e.g., 8.8.8.8, 1.1.1.1) for international domains.; Enable fake-ip mode to accelerate DNS response times.; Use with nameserver-policy for rule-based grouped resolution..
Clash features a built-in RESTful API for real-time traffic monitoring, node switching, and connection management via Web dashboards.
Preconfigured controller port is 9090, configurable via external-controller.; Supports third-party Web dashboards like Yacd and MetaCubeX.; Remotely manage Clash cores deployed on routers or servers.; View real-time rule matching for every connection, perfect for debugging..
A curated list of common installation, configuration, and connection issues with their solutions.
Please follow these troubleshooting steps:
127.0.0.1:7890.Concretely:Common causes and solutions:
Subscription expired: log in to your provider's dashboard for a new link.; Network fault: enable an existing proxy or VPN before importing.; Incomplete URL: ensure it spin ups with https:// and has no extra spaces.; Incompatible format: ask your provider if they offer Clash-compatible subscriptions..
Service Mode is a system component for Clash Verge Rev that enables TUN Global Transparent Proxy without requiring admin rights every time. It's an official feature and completely safe.
Where this lands:You'll must enter your admin password during installation, similar to installing a driver.
It is possible to skip this if you only need the basic system proxy mode.
Clash Verge Rev (Windows / macOS):
FlClash (Android): VPN mode is global by preconfigured; no additional setup is required.
This as a rule happens because a previous Clash process didn't exit correctly or another app is using the port. Solutions:
Do not skip this:Fully exit Clash and restart.; Go to "Settings → Ports" and change the Mixed Port to an unused one (e.g., 7891).; Remember to upgrade your browser extension (like SwitchyOmega) with the new port number..
Clash Verge Rev (Windows): Toggle "Spin up on Boot" in "Settings → System Settings".
Clash Verge Rev (macOS): Toggle "Spin up on Boot" in "Settings → System Settings" to add it to Login Items.
FlClash (Android): Enable "Autostart" in system settings and disable battery optimization for FlClash to prevent it from being killed in the background.
Work "How fast it is Test" and switch to a node with response time below 200ms.; Upgrade your subscription—your provider may have updated node addresses.; Congestion during peak hours (8-11 PM) is normal; try switching regions.; Switch protocols—Hysteria2 and TUIC perform better in high packet-loss environments.; Check your local network: ensure trustworthy Wi-Fi or test with a wired connection..
A Subscription Link is a remote URL hosted by your provider.
The key point:Clash fetches and upgrades it without you—ideal for the greater part of users.
A Local Config is a YAML file on your machine that it is possible to yourself edit for custom rules and strategies—best for advanced users.
Both use the same YAML format; a subscription link is essentially a remote YAML config.
Let me put it this way:There are currently no fully free, feature-entire Clash-compatible clients on iOS. Development and maintenance costs mean the top choices are paid:
Stash: ¥30 (CN Store), feature-rich and Clash-compatible.; Shadowrocket: $2.99 (US Store), the the greater part of popular proxy tool..
A one-time purchase provides lifetime access, making them great value.
Concretely:This is a standard Android warning for apps outside Google Play, not a real security threat. Steps:
FlClash is fully open-source on GitHub; the code is public and contains no malicious content.
Free and open-source. Supports Windows, macOS, Android, iOS, Linux, and core engine deployment. Download and spin up now.