Route, send direct, or reject traffic by domain, IP, GeoIP, process, or rule set instead of forcing every use case through one policy.
GPL-3.0 Open Source · Traceable Releases · File Verification
OSS·Multi-Proto·Rules Cross-Platform Client
Clash is a cross-platform, high-performance proxy tool that supports multiple protocols and rule-based routing. It works on Windows, macOS, Android, iOS, and Linux, helping users access the internet quickly and securely and meet cross-border connectivity and acceleration needs.
Core Features
From Routing Rules to Traffic Control
Clash brings subscriptions, rules, policy groups, DNS, and TUN into one clear, controllable workflow.
Routing Controls
Route Every Connection by Rule
Clash can evaluate domains, IP addresses, GeoIP data, processes, and rule sets to apply direct, proxy, or reject policies from your configuration.
- Match rules by domain, IP address, region, or process
- Manage nodes, policy groups, and rules in YAML
- Select nodes or use latency testing, failover, and load balancing
- Use Proxy Group definitions to organize different scenarios
- Works with common configuration patterns from the original Clash, Premium, and Mihomo
config.yaml
1port: 7890
2socks-port: 7891
3allow-lan: true
4mode: Rule
5
6proxies:
7 - name: "Shadowsocks-Node"
8 type: ss
9 server: server.example.com
10
11rules:
12 - DOMAIN-SUFFIX,google.com,Proxy
Protocol Compatibility
Common Outbound Protocols in the Clash Ecosystem
Protocol support varies by the core and version bundled with each Clash client. The list below reflects the capabilities of today's mainstream Mihomo core; clients built on the original Clash may support only a subset.
Shadowsocks
SS outbound with UDP and plugin support
VMess
UUID authentication with multiple transports and TLS
VLESS
XTLS Vision, Reality, and multiple transports
Trojan
TLS outbound with WS and gRPC support
Hysteria 2
QUIC outbound with port hopping and obfuscation
TUIC
QUIC outbound with UDP forwarding
WireGuard
Standard Peer, MTU, and DNS configuration
Snell
PSK, version, and obfuscation settings
AnyTLS
TLS outbound with idle-session management
SOCKS5
Authentication, TLS, and UDP forwarding
HTTP / HTTPS
HTTP outbound with optional TLS for HTTPS
View More
Explore outbound nodes and protocol fields
Recommended Clients
Clash Client Picks by Platform
Choose a platform to see the recommended client's supported platforms, core or tool type, and maintenance status. The iOS option is labeled as a third-party app with its App Store availability.
Clash Verge Rev
Supported platforms: Windows / macOS / Linux
A maintained, cross-platform desktop client built on Mihomo and a strong option to compare first for a new Windows setup.
- Core:
- Mihomo
- Maintenance status:
- Actively maintained
System proxy and TUN
Supports the system proxy, proxy guard, and TUN (virtual network adapter) modes.
Visual editing
Edit proxy nodes and rules through the graphical interface.
Backup and sync
Supports local backups plus WebDAV backup and synchronization.
Clash Verge Rev
Supported platforms: Windows / macOS / Linux
A maintained, cross-platform desktop client built on Mihomo, with macOS installers for Intel and Apple Silicon.
- Core:
- Mihomo
- Maintenance status:
- Actively maintained
System proxy and TUN
Supports the system proxy, proxy guard, and TUN (virtual network adapter) modes.
Visual editing
Edit proxy nodes and rules through the graphical interface.
Backup and sync
Supports local backups plus WebDAV backup and synchronization.
Clash Verge Rev
Supported platforms: Windows / macOS / Linux
A maintained, cross-platform desktop client built on Mihomo, with Linux package formats to choose for your distribution.
- Core:
- Mihomo
- Maintenance status:
- Actively maintained
System proxy and TUN
Supports the system proxy, proxy guard, and TUN (virtual network adapter) modes.
Visual editing
Edit proxy nodes and rules through the graphical interface.
Backup and sync
Supports local backups plus WebDAV backup and synchronization.
FlClash
Supported platforms: Windows / macOS / Linux / Android
A cross-platform client built on Flutter and ClashMeta, with a similar interface and configuration workflow on Android and desktop devices.
- Core:
- ClashMeta
- Maintenance status:
- Actively maintained
Adaptive layout and themes
Adapts to different screen sizes and offers multiple color themes.
WebDAV data sync
Supports data synchronization through WebDAV.
One-step subscription import
Supports importing subscription configurations in one step.
Shadowrocket
Supported platforms: iOS / iPadOS
A widely used third-party rule-based proxy tool for iOS and iPadOS; availability depends on the App Store region and current release.
- Type:
- Independent rule-based proxy tool
- Store status:
- Currently available in the U.S. App Store
Rule matching
Supports domain, domain suffix, keyword, CIDR IP range, and GeoIP rules.
Traffic statistics
View traffic and speed for Wi‑Fi, cellular, direct, and proxied connections.
Rule file import
Import rule files from a URL or iCloud Drive.
Want to compare more clients?
The download center lists more clients, release sources, and installation options by platform. Site-hosted backups also include version and SHA256 details.
Getting Started
Connect in Three Steps
Download and install a client for your platform, import a subscription, then choose a node and enable the appropriate system proxy, TUN, or VPN connection.
01
Download and Install a Clash Client
For Windows, macOS, or Linux, start with Clash Verge Rev; for Android, start with FlClash. iOS has no official Clash client, so start with Shadowrocket and compare Stash as another third-party option.
02
Import Your Subscription URL
Copy a subscription URL supported by your chosen client, paste it into its Profiles or Subscriptions screen, refresh it, and confirm the node list loads.
03
Choose a Node and Enable the Proxy
Choose an available node. On desktop, enable the system proxy or TUN as needed; on Android and iOS, follow the system prompt to allow and start the VPN connection. Then open a target site and confirm the connection behaves as expected for the selected routing mode.
Use Cases
Which Connections Should Get Their Own Route?
Region-specific access, streaming, social media and e-commerce operations, AI tools, development, and remote work have different routing needs. Explore the cards below for each use case's routing priorities and practical considerations.
Route Traffic by Region
Separate research sites, account dashboards, and everyday services by region or service.
Keep local services directStreaming Media
Create a dedicated policy for video, music, and live-streaming services.
Check the account region firstSocial Media Operations
Keep social apps, creator dashboards, and messaging tools on one consistent egress route.
Avoid unnecessary route changesAI Tools
Group AI assistants, model consoles, and developer documentation under one policy.
Prioritize reliable long-lived connectionsE-commerce Operations
Create separate rules for storefronts, ads, payments, logistics, and support tools.
Keep account egress consistentDevelopment and Testing
Route code repositories, package managers, APIs, and test environments independently.
Identify which process sends the requestRemote Work
Give meetings, collaborative documents, company dashboards, and remote connections their own policy.
Review VPN and TUN routingCross-Platform Network Routing
Reuse a similar subscription and routing approach across desktop and mobile devices.
Verify permissions on each platformFrequently Asked Questions
Common Questions About Clash
How is Clash different from a VPN? Is a subscription URL required, and which client should you choose? Find those answers, then review the proxy core, TUN mode, maintenance status, and security before choosing how to download and configure it.
Ready to Get Started?Download Clash for Free
79M+ package downloads. Leave network restrictions behind and explore the open internet.