CLASH Network Proxy · Rule Routing Engine

High-performance open-source proxy tool powered by a precision rule engine. Break down information barriers, hide your footprint, and reshape your digital freedom.

45K+GitHub Stars
10M+Global Deployments
TUNTransparent Proxy Mode

Use Cases

💻

Dev & Ops Connectivity

Tailored for developers. Seamlessly handles Git, Docker, and CLI traffic, solving slow package downloads and API timeouts to boost global collaboration efficiency.

🎮

Ultimate Gaming Acceleration

Built-in UDP penetration and TUN mode for low-level traffic interception. Smartly bypasses high-loss links to provide low-latency acceleration for console and PC gaming.

🔐

Full Privacy Protection

Uses advanced hybrid encryption to combat Deep Packet Inspection (DPI). Protects your data in high-strength tunnels, ensuring privacy on public Wi-Fi and against ISP hijacking.

Smart Routing Engine

Precision Routing Powered by Rules

The core strength of Clash is its Turing-complete rule system. Match traffic by domain suffix, keywords, IP (GeoIP), and more to precisely control every request.

Direct routing for local traffic (low latency), proxy tunnels for international content, and ad blocking to stop trackers—all automated at millisecond speeds in the core.

rules:   # Block ads and privacy trackers   - DOMAIN-SUFFIX,ads.example.com,REJECT   # Route tech sites through proxy tunnels   - DOMAIN-KEYWORD,openai,PROXY   - DOMAIN-SUFFIX,github.com,PROXY   # Direct connection for local IPs   - GEOIP,CN,DIRECT   # Final rule: Proxy all other traffic   - MATCH,PROXY

Supported Protocol Matrix

SHADOWSOCKS
VMESS / VLESS
TROJAN
SNELL
HYSTERIA 2
TUIC V5
WIREGUARD

Client Download

WINDOWS
MACOS
ANDROID
IOS
LINUX / CLI

Common Questions

This usually happens when another proxy (e.g., V2Ray or a leftover Clash process) is already running. End the process in Task Manager / Activity Monitor, or change `mixed-port` and `external-controller` in `config.yaml` to different ports.

TUN mode intercepts traffic at the network stack level, ideal for apps that don't support proxy settings (like UWP apps or certain games). Ensure the client runs as Admin/Root, and enable the `tun` module in your config with `enable: true` and `stack: system` (or gvisor).

Your ISP might be blocking the config hosting server. Try a different network (like a mobile hotspot) for the initial update, or use a URL converter. Also, ensure your system time is accurate to avoid TLS handshake failures.

Version Changelog

BUILD.2024.11
v1.18.0 - Matrix Update
  • Core refactoring with native support for Hysteria 2 and TUIC v5 protocols.
  • Optimized Garbage Collection (GC), reducing idle memory usage by approximately 40%.
BUILD.2024.08
v1.17.5 - Security Patch
  • Updated TLS fingerprinting (uTLS) to enhance immunity against Deep Packet Inspection (DPI).
  • Rule-Providers now support on-demand auto-update and memory differential hot-reloading.

Tech Blog

Upgrade Tutorials

Clash Meta Kernel Upgrade Guide: From Migration to Mastery

Detailed guide on seamlessly migrating legacy Clash configurations to Clash Meta. Covers config compatibility and TUN mode optimization.

Mar 2026  /  Deep Tech Read More →
Technical Analysis

Clash TUN Mode Deep Dive: Transparent Proxy Principles & Best Configs

In-depth analysis of TUN mode. Learn how to correctly enable transparent proxy on Windows, macOS, and Linux to route all traffic through Clash.

Apr 2026  /  Networking Read More →
Advanced Config

Clash Rule Routing Best Practices: Precise Control for Every Request

From basic rule syntax to advanced rule set management, learn how to build efficient, maintainable Clash configurations.

Feb 2026  /  Advanced Config Read More →
VIEW ALL POSTS