Clash Tutorial – Complete Guide from Beginner to Advanced
From installing a client to importing subscriptions, choosing nodes, routing rules, and TUN mode — everything you need to get Clash running smoothly.
What is Clash and how does it work?
Clash is a rule-based proxy tool built on the open-source Mihomo core. It runs a local proxy engine that forwards network requests to direct connection, proxy nodes, or rejection based on preset rules — transparent and fully controllable.
Smart rule-based routing
Trusted, local traffic connects directly, the rest is routed through proxy nodes, and ad requests are blocked. Rules are fully customizable — precise control over every request.
Multi-protocol support
Supports Shadowsocks, VMess, VLESS, Trojan, Hysteria2, TUIC, and virtually all mainstream proxy protocols.
Subscription management
One-click import and auto-update of provider node lists via subscription links — no manual config maintenance needed.
All platforms covered
Mature GUI clients for Windows, macOS, Android, iOS, and Linux — easy to use.
Pick your platform and install
Choose the client for your device, download, and follow the install prompts. We recommend clients marked "Recommended" first.
Download the installer
Go to the download page and download the Clash Verge Rev Windows x64 installer (.exe).
Install WebView2 Runtime (if prompted)
Windows 11 includes WebView2 built in. On Windows 10, if the first install says the runtime is missing, the app will guide you to download and install it — follow the prompts.
Run the installer
Double-click the .exe and follow the install wizard. If a UAC prompt appears, click Yes. The app launches automatically when installation completes.
Download the correct .dmg architecture
M1/M2/M3 Apple Silicon chips: choose Apple Silicon (.dmg). Pre-2020 Intel Macs: choose Intel x64 (.dmg).
Mount and drag to Applications
Double-click the .dmg and drag the Clash Verge icon into the Applications folder.
Allow to run (first launch)
On first open, macOS will say "cannot verify developer". Go to System Settings → Privacy & Security, find the blocked app message, and click "Open Anyway".
Download the APK
Go to the download page. Phones since 2016: choose ARM64-v8a (.apk). If unsure of architecture, choose Universal.
Allow installs from unknown sources
Go to Settings → Security → Install unknown apps, find your file manager or browser, and enable permission. Path varies slightly by brand.
Install and grant VPN permission
Tap the downloaded APK to install. On first launch, the app requests VPN permission — tap OK to grant it.
Download Clash Plus from the App Store
Open the App Store, search for Clash Plus, or tap the download page link to install (free).
Authorize VPN profile
On first use, iOS will ask to add a VPN configuration — enter your device passcode to confirm. This is a normal system security prompt.
Download the package for your distro
Debian/Ubuntu-based: choose .deb. Fedora/RHEL-based: choose .rpm. ARM64 devices: choose the matching architecture build.
Install
sudo dpkg -i clash-verge-rev_amd64.deb sudo apt-get install -f
sudo rpm -ivh clash-verge-rev_x86_64.rpm
Launch the app
Run clash-verge-rev from the app menu or terminal to launch the GUI.
Import your subscription link
A subscription link is a URL from your proxy provider containing all node information. After import, the client automatically parses it and generates the proxy list.
Get your subscription link
Log in to your proxy provider's dashboard, find Subscriptions or Config Download, and copy the Clash-format subscription URL. Links usually start with https://.
Import in the client
Open the Clash client, go to the Profiles tab, click New → Import from URL, paste your subscription link, and download.
Activate config and enable proxy
After import, click the profile to activate it (selected indicator appears). Go to the Proxies page, pick a node, then turn on the System Proxy toggle.
Set up auto-update (recommended)
In profile settings, find Auto Update Interval and set it to 24 hours — the client will pull latest nodes automatically.
Select nodes and proxy groups
After importing your subscription, the Proxies page lists all available nodes and proxy groups. Smart selection gives you the best speed and stability.
Proxy Group
Provider-preset node groups, usually including Auto Select (best latency) and Fallback (auto-switch when primary node fails).
Individual Node (Proxy)
A specific server from your provider. Manually select to lock to a particular node — good when you need strict latency control.
Latency test
On the Proxies page, click Speed Test or the ⚡ icon. The client tests all nodes and shows latency (ms) — prefer green, low-latency nodes.
Auto Select
Client periodically tests speed and auto-switches to the lowest-latency node — recommended for daily use, no manual maintenance needed.
Rules & Traffic Routing
Clash's core strength is rule-based routing — trusted, local traffic stays direct, the rest goes through the proxy, and ads are blocked. Subscription configs usually include complete rules out of the box.
DIRECT — Direct
Traffic matching direct-route domains and IPs connects directly to the target server — no proxy, lower latency, faster speed.
PROXY — Proxy
When matching blocked or restricted domains (Google, YouTube, Twitter, etc.), traffic is forwarded through proxy nodes.
REJECT — Block
Requests matching ad domains or tracking scripts are directly rejected for an ad-free browsing experience.
TUN Mode — Global Transparent Proxy
Standard System Proxy mode only works for apps that support proxy protocols (browsers, some apps). TUN mode creates a virtual network adapter that captures all network traffic — including games, CLI tools, and apps that don't support system proxy.
When to use TUN
When you need to proxy game traffic, CLI tools like git/curl, apps that don't support system proxy, or want all traffic routed through the proxy uniformly.
Important notes
TUN mode requires Administrator/Root privileges and captures all system network traffic. Make sure your rules are configured correctly to avoid routing direct-connection traffic through the proxy by mistake.
Enable TUN mode
In Clash Verge Rev, click Settings on the left → find the TUN Mode toggle and turn it on. First-time enable may require admin password to install the virtual network adapter driver.
Confirm virtual adapter is active
After enabling, the client status bar shows TUN is active. All device network traffic is now handled by Clash — no per-app proxy configuration needed.
Having trouble?
We've compiled a comprehensive FAQ covering 28 common issues — install errors, subscription failures, connection problems, TUN mode, rule configuration, and more — with full troubleshooting steps.
View Full FAQ