../assets/fonts/inter.css ../assets/fonts/noto-sans-sc.css ../assets/fonts/fontawesome/all.min.css
Install · Subscription · Config · Advanced · FAQ
Read this in order and you will have Clash installed, subscribed and routing on its own. Every advanced topic below also works as a standalone reference. Screenshots and config snippets all follow Clash Verge Rev; if you use a different client, watch for the few places that differ.
Whether you're on Windows, macOS, Android, or Linux, follow these 5 steps to full your Clash setup and launch using proxy services.
One more angle:Go to the Download Center. Choose Clash Verge Rev for Windows/macOS, or FlClash for Android.
Double-click the installer to install. Once launched, the Clash icon will appear in the system tray or notification bar.
Open the "Config / Subscription" page, paste your provider's subscription URL, and click bring in/refresh.
A detail worth adding:Click "Throughput Test" in the proxy panel and select a node with delay below 200ms.
Toggle the "System Proxy" switch. Your browser will now access blocked sites via Clash.
Choose your operating system to view thorough installation steps and recommended clients.
Download Clash Verge Rev for Windows x64 (.exe) from the Download Center. Choose ARM64 for Qualcomm Snapdragon PCs.
Double-click the .exe file. If Windows SmartScreen appears, click "More Info → Execute Anyway" and follow the prompts.
Said differently:After launching, go to "Settings → System Settings → Service Mode" and click "Install" (requires admin rights). This unlocks TUN global proxy features.
Click "Subscriptions" on the left → "+" button → paste URL → click "Bring in". Your node list will appear shortly.
Switch to the "Proxies" page, click "⚡ Throughput Test", and select a low-delay node. Finally, toggle "System Proxy" in the top right.
Apple Menu → "About This Mac": choose arm64 for Apple M1/M2/M3 chips; choose x64 for Intel processors.
Open the .dmg file and drag the Clash Verge Rev icon into the "Applications" folder.
When opening for the first time, Right-click the icon → select "Open" → click "Open" again to bypass macOS Gatekeeper verification.
Worth noting:Click "Subscriptions" → "+" → paste URL → click "Bring in". Your nodes will be listed under the subscription.
Select a low-delay node in "Proxies" and toggle "System Proxy". All system-proxy-aware apps (Safari, Chrome, etc.) will use the proxy.
Download the FlClash APK. The majority of Android phones ought to use the Universal version; flagships after 2018 can use arm64-v8a for better performance.
One more angle:Android blocks apps outside Google Play. Locate the APK file and select "Allow from this source" when prompted.
Launch FlClash after installation; a fast guide will help you with the basic setup.
Click "Configs" in the left menu → "+" in the top right → select "Bring in from URL" → paste link → click "Save".
A detail worth adding:Return to the home page, select a proxy node, and click the "Launch" button in the bottom right. Click "OK" when the system prompts for VPN connection authorization.
Clash Verge Rev offers multiple Linux formats: .deb (Debian/Ubuntu), .rpm (Fedora/openSUSE), and .AppImage (Universal). Use the one matching your distro; choose .AppImage if unsure.
Debian / Ubuntu (.deb):
sudo dpkg -i clash-verge-rev_*.deb
sudo apt-get install -f
AppImage (Universal):
chmod +x clash-verge-rev_*.AppImage
./clash-verge-rev_*.AppImage
After launching, go to "Settings → System Settings → Service Mode" and click "Install".
Said differently:This requires sudo; enter your password in the prompt. This unlocks TUN global transparent proxy.
sudo apt install policykit-1 and try again.
Click "Subscriptions" on the left → "+" → paste URL → click "Bring in". Wait for the nodes to load.
Execute a throughput test in "Proxies", select a low-delay node, and toggle "System Proxy". For terminal or system-wide traffic, also enable TUN Mode.
Visit Mihomo GitHub Releases to download the binary for your architecture. Common server versions:
mihomo-linux-amd64-*.gz (x86_64 Servers)mihomo-linux-arm64-*.gz (ARM Servers / Raspberry Pi)gunzip mihomo-linux-amd64-*.gz
mv mihomo-linux-amd64-* /usr/local/bin/mihomo
chmod +x /usr/local/bin/mihomo
mkdir -p ~/.config/mihomo
# Place your config.yaml in this directory.
cp config.yaml ~/.config/mihomo/config.yaml
The config format is identical to GUI clients; you are able to reuse your provider's YAML content.
Temporary Execute:
mihomo -d ~/.config/mihomo
Configure Autostart (systemd): Save the following to /etc/systemd/system/mihomo.service
[Unit]
Description=Mihomo Proxy Service
After=network.target
[Service]
ExecStart=/usr/local/bin/mihomo -d /root/.config/mihomo
Restart=on-failure
[Install]
WantedBy=multi-user.target
systemctl enable --now mihomo
Enable external controllers in config.yaml to manage nodes via Yacd or MetaCubeX dashboards in your browser:
external-controller: 0.0.0.0:9090
secret: your-api-secret # Recommended: Set an access secret.
Worth noting:After launching, visit http://<Server-IP>:9090/ui to access the dashboard.
The top recommended Clash client for iOS. Fully compatible with Clash/Mihomo configs, supports one-tap subscription bring ins, and offers a clean, feature-rich UI. Get it from clashplus.io or the App Store.
One more angle:The the majority of established proxy tool on iOS. Supports SS, VMess, Trojan, VLESS, and more. Compatible with Clash subscriptions. Requires a US Apple ID.
A capable advanced proxy tool supporting custom JS scripts and complex rules. Also compatible with Clash subscriptions. Ideal for pro users on iOS.
A Subscription URL is an online config link from your proxy provider. Clash uses it to on its own fetch and refresh all available nodes.
Log in to your provider's dashboard, find "Clash Subscription", and copy the full URL starting with https://.
A detail worth adding:Locate "Configs" (Clash Verge Rev) or "Subscriptions" (FlClash) in the sidebar.
Click "+" or "New" in the top right, paste the copied URL, and add a recognizable name.
Click "Bring in" or "Save". Clash will fetch and download the node configuration. Wait for the list to populate.
Said differently:Switch to the new config, go to "Proxies", click "Throughput Test", select a low-delay node, and enable system proxy.
https://. Try enabling an existing proxy before importing.
Clash uses YAML files. Understanding core fields helps you customize proxy behavior, from ports to split rules.
Listens for both HTTP and SOCKS5. Out of the box is 7890; can be changed in settings to avoid conflicts.
Defines all proxy nodes (SS, VMess, Trojan, VLESS, Hysteria2, TUIC, etc.). On its own populated via subscription.
In practice that means:Groups multiple nodes for strategies like url-test (auto-select), fallback, or load-balance.
Directs traffic based on Domain, IP, or GeoIP. The core of "Direct for Local, Proxy for Global."
Configures local and international DNS groups to prevent pollution and ensure accurate resolution. Essential for TUN mode.
Master these advanced features to maximize Clash efficiency and flexibility.
System proxies only work for proxy-aware apps. TUN mode uses a virtual NIC to capture all system traffic, perfect for games and non-proxy apps.
Group nodes into different strategies for intelligent switching.
Precisely control traffic flow via the rule engine, enabling direct connections for local sites and proxies for international services to balance throughput and privacy.
.google.com.Reference externally hosted ruleset files via rule-providers to avoid manual maintenance. One config for a constantly updated rule list.
Proper DNS configuration prevents pollution and leaks, ensuring accurate resolution—crucial for TUN mode.
fake-ip mode to accelerate DNS response times.nameserver-policy for rule-based grouped resolution.Clash features a built-in RESTful API for real-time traffic monitoring, node switching, and connection management via Web dashboards.
external-controller.A curated list of common installation, configuration, and connection issues with their solutions.
Worth noting:Please follow these troubleshooting steps:
127.0.0.1:7890.Common causes and solutions:
https:// and has no extra spaces.Service Mode is a system component for Clash Verge Rev that enables TUN Global Transparent Proxy without requiring admin rights every time. It's an official feature and completely safe.
One more angle:You'll have to enter your admin password during installation, similar to installing a driver. You are able to skip this if you only need the basic system proxy mode.
Clash Verge Rev (Windows / macOS):
FlClash (Android): VPN mode is global by out of the box; no additional setup is required.
This typically happens because a previous Clash process didn't exit correctly or another app is using the port. Solutions:
7891).Clash Verge Rev (Windows): Toggle "Launch on Boot" in "Settings → System Settings".
Clash Verge Rev (macOS): Toggle "Launch on Boot" in "Settings → System Settings" to add it to Login Items.
FlClash (Android): Enable "Autostart" in system settings and disable battery optimization for FlClash to prevent it from being killed in the background.
A Subscription Link is a remote URL hosted by your provider. Clash fetches and refreshs it on its own—ideal for the majority of users.
A detail worth adding:A Local Config is a YAML file on your machine that you are able to by hand edit for custom rules and strategies—best for advanced users.
Both use the same YAML format; a subscription link is essentially a remote YAML config.
There are currently no fully free, feature-full Clash-compatible clients on iOS. Development and maintenance costs mean the top choices are paid:
Said differently:A one-time purchase provides lifetime access, making them great value.
This is a standard Android warning for apps outside Google Play, not a real security threat. Steps:
FlClash is fully open-source on GitHub; the code is public and contains no malicious content.
Free and open-source. Supports Windows, macOS, Android, iOS, Linux, and core engine deployment. Download and launch now.