Client Insights · Configuration Practices · Connectivity Troubleshooting
Clash Tech Blog Setup and Fixes
Practical configurations for Clash and Mihomo, client release observations, and analysis of complex failures, covering developer tools, streaming, remote work, DNS, TUN, and rule-based routing. A useful next step after the basic tutorials when you need to diagnose a specific issue.
Popular topics
Showing 9 of 92 articles
Article list
- 92
- articles
- 239
- tags
- Latest update
Installation and migration
FlClash v0.9.0: DNS and profile migration
Missing DNS toggles or custom overrides in FlClash v0.9.0? Back up, migrate DNS fields and independent custom profiles, verify final configs after switching and restarting, and restore a working subscription if migration fails.Connection troubleshootingMihomo macOS TUN: ENOTSOCK and high CPU
macOS Mixed TUN repeatedly logs ENOTSOCK with high CPU? Check the actual core and the v1.19.32 fix, back up and upgrade, grant permissions again, then verify the error loop and connectivity. Restore the configuration if this fails.Installation and migrationShared Accounts for Downloading Shadowrocket
Shadowrocket may not be available to download in the App Store in some regions. Below are Apple ID sharing links and screenshots showing how to sign in, download, and sign out of the shared account.Connection troubleshootingOpenClash: fix Tailscale DNS conflicts
OpenClash proxying the router's own traffic conflicts with Tailscale DNS: a device works by IP but not its full ts.net name? Compare two resolvers, check the v0.48.002 module, restart and verify, then restore the original settings if needed.Installation and migrationClash Verge Rev: stuck update download
Update download stuck or Cancel ineffective in Clash Verge Rev? Check download and installation stages, the v2.5.8 cache, source switching and cancellation fixes; export a backup, upgrade normally, verify settings and keep a recovery path.Connection troubleshootingClash Verge Rev: ambiguous nodes are grey
Clash Verge Rev shows ambiguous greyed-out nodes when collections share node names? Check sources and group scope, back up, upgrade to official v2.5.8, then verify selection and latency. If it fails, keep your configuration and return to a working setup.Configuration practicesFlClash ignores geox-url: Geo data fixes
Changed geox-url in a subscription, but FlClash still uses other Geo data? Compare Resources with the final config, set trusted URLs for the right types, sync and test rules. Restore the original URL and working config if needed.Connection troubleshootingFlClash: delay tests fail after rename
FlClash connects but shows Timeout after a subscription renames nodes? Compare the new node, group and real requests, then reselect and check persistence. Keep the original Profile and use a separate copy if needed.Connection troubleshootingFlClash Android DNS fails: no servers
Older FlClash builds may fail to resolve domains when Android temporarily reports no DNS servers. Compare direct access with the VPN off and inspect DNS logs, then check the v0.8.99 fix, verify it, and keep a recovery path.Connection troubleshootingWhy Does Clash Verge Rev Turn Off DNS Override After Restart?
Confirmed DNS Override turns off after restart with the same subscription? Check protected DNS fields, update Clash Verge Rev to v2.5.7, verify running config, and keep a rollback.Connection troubleshootingClash Verge Rev Windows Service Security Check Failed?
Clash Verge Rev rejects its Windows service core and switches to Sidecar, leaving standard users unable to enable TUN. Copy the original error to identify the path, distinguish directory permissions from a C: drive root warning, then recover and verify using the official guidance.Connection troubleshootingClash Verge Rev: macOS TUN breaks DNS
Domains fail after enabling TUN in Clash Verge Rev on macOS? Compare DNS in the subscription, runtime, and base configs. If a leftover dns block is confirmed, back up, remove it following project guidance, and verify.Connection troubleshootingFlClash local provider nodes missing?
FlClash type: file nodes missing? Check runtime paths, try inline for small trusted lists, verify rules and roll back. Based on a Windows report.Connection troubleshootingClash Party Changed macOS DNS to 223.5.5.5? How to Restore It
A macOS user reported that Clash Party v2.0.3 still used 223.5.5.5 after selecting system-default DNS. Check system resolution settings, disable the relevant mode, and restore network settings. Retest after changes and restore the original settings if they fail.Security and privacyHow to Handle the Clash Party rule-providers Command-Injection Risk
Clash Party v2.0.3 fixes possible command execution through malicious rule-providers configurations. Close suspicious resources, disable the configuration, and upgrade from the official source. Disconnect and preserve evidence if unknown processes or alerts appear; do not run a PoC for verification.Security and privacyHow should you handle the Clash Verge Rev Windows service privilege-escalation risk?
Clash Verge Rev's Windows service has a privilege-escalation risk. GHSA-99qg-xv7m-jf4v affects <=2.5.4; the patched build is v2.5.4+autobuild.0908.bbab52d.Connection troubleshootingHow do you fix a Mihomo OpenVPN tls-auth handshake timeout?
Older Mihomo versions may time out during the handshake after 4 retransmissions when using OpenVPN tls-auth with non-SHA1 auth. Back up and upgrade to v1.19.31, then verify requests with the original configuration. If problems arise, restore the old core without weakening authentication.Installation and migrationShould You Upgrade to Clash Verge Rev v2.5.4-rc?
Back up and verify the TUN fixes and portable-mode migration in Clash Verge Rev v2.5.4-rc. GHSA-99qg-xv7m-jf4v affects the Windows service; do not roll that service back to v2.5.2. Includes safe steps to restore connectivity.Connection troubleshootingHow to Handle a Lost EasyTier Outbound Connection in Mihomo v1.19.31
Mihomo v1.19.31's EasyTier outbound may lose connectivity without self-recovery; stable v1.19.32 includes the fix. Check the symptoms, back up before upgrading, verify recovery, and roll back if problems occur.Connection troubleshootingHow Do You Fix the Core Exiting After Windows Sleep in FlClash?
FlClash 0.8.97 may exit Core after an IPC timeout under Windows Modern Standby; v0.8.98 fixes this and Geo information not refreshing. Retest with the original configuration and roll back the entire installation if problems occur.Installation and migrationHow to Fix an OpenClash Core Download Failure
If OpenClash core checks, downloads, verification, or file moves fail, use the first error to check CPU architecture, storage, time, and CA certificates. Recover through official retry options, GitHub download proxying, or manual upload, while keeping the old core and configuration copies.Security and privacyHow Should Clash Party Users Handle the Built-in Sub-Store Risk?
Risk reports for the Sub-Store built into Clash Party cover 2.11.4–2.37.1. Check the backend version, disable it, update to 2.38.0 or later, and allow access only from the local machine. Preserve evidence if you suspect abnormal activity; do not enable vulnerable versions.Installation and migrationHow to Upgrade to FlClash 0.8.97: Helper, VPN, and Rollback Guide
FlClash 0.8.97 reworks the interface, desktop Helper, Android VPN, and core process. Back up your Profile, then verify system proxy, TUN, subscriptions, and clean network recovery on your platform; if anything fails, roll back from the pre-upgrade backup.Connection troubleshootingHow to Fix Clash Verge Rev Freezing with a Large Subscription on Linux
If Ubuntu GNOME freezes immediately after switching to a subscription with many nodes and policy groups, inspect AppIndicator and GJS logs and disable the tray policy-group menu. Retest desktop responsiveness, node selection, and connectivity, and keep a way to restore the original settings.Connection troubleshootingHow to fix a port conflict in Clash Verge Rev
Does Clash Verge Rev report address already in use? Check the process using mixed-port and any reserved ports, then address a leftover core or another program. Verify the system proxy and direct access after quitting.Connection troubleshootingClash Verge Rev Profiles Disappeared After Restart: Backup and Recovery
Subscriptions or custom settings disappeared after restarting Clash Verge Rev v2.5.2? Stop writes and save a copy, locate the data directory, and restore from a complete backup. Check the configuration and real requests without overwriting the only remaining data.Connection troubleshootingHow to Fix Mihomo REALITY authentication failed
After upgrading to Xray 26.7.11+, if Mihomo reports REALITY authentication failed, compare minClientVer with the client version, assess the risk, then fix, verify, and keep a rollback path.Connection troubleshootingWhat to Do When Clash Verge Rev Blocks Windows Shutdown or Restart
If Clash Verge Rev blocks Windows 10/11 shutdown, compare a full application exit with Service IPC logs to locate the problem. Disable the malfunctioning service, restore normal shutdown, and check official security advisories before choosing a verifiably safe recovery option.Installation and migrationHow to Fix FlClash 0.8.96 Not Launching
FlClash 0.8.96 won't start? Troubleshoot by whether MSVCP140.dll or VCRUNTIME140.dll is missing, or DesktopCoreFailure appears.Connection troubleshootingHow to Fix a Clash Verge Rev TUN Loopback Crash
If Clash Verge Rev TUN on Windows reports reject loopback, high CPU usage, or core crashes, check the outbound adapter and pin the actual physical interface. Verify that the error loop stops, real requests work, and network access recovers after disabling it.Configuration practicesFixing invalid domain in Mihomo v1.19.30
Fix Mihomo v1.19.30 invalid domain errors in fake-ip-filter or skip-domain by replacing bad asterisks with valid wildcards or hostnames, then validate and keep a rollback.Connection troubleshootingWhy Does Every FlClash Batch Latency Test Show Timeout?
If FlClash batch tests on Windows show Timeout while single-node tests and browsing work, confirm a false group result, upgrade to v0.8.96, retest, and keep a rollback.Connection troubleshootingHow to Fix Telegram Bypassing OpenClash
If OpenClash browsing works but Telegram fails without dashboard records, remove an empty Source Traffic Access Control entry, restart, and verify records and WAN egress.Connection troubleshootingWhat to Do When OpenClash Cannot Resolve an IPv6 Node Domain
If node resolution fails in OpenClash and public IPv6 DNS returns 198.18.x, check the OUTPUT counters and the v0.47.156 fix. After upgrading, verify resolution, proxying, and direct access; restore the original settings if problems occur.Connection troubleshootingWhat to Do When Clash Party Fails Configuration Validation After a Subscription Update
Clash Party v2.0.1 validates subscriptions before updates. If invalid content overwrote a working Profile, preserve its state, restore it, upgrade, and verify rejection.Connection troubleshootingWhat to Do When Memory Keeps Growing After Opening Clash Party Logs
If memory rises after opening logs in Clash Party 1.9.6 or 2.0.0, fully restart the app and compare the trends. The logging change was reverted, so v2.0.1 does not prove that fix is present. Check official records and security updates before upgrading.Connection troubleshootingWhat to Do When Clash TUN Triggers “This Site Wants to Access Your Local Network”
After enabling TUN in Clash Verge Rev, if Chrome asks for local-network access and images, video, or verification widgets fail, check the fdfe IPv6 logs, then disable Fake IPv6 or filter only the affected domains.Installation and migrationOpenClash Update Failed? Troubleshooting APK Testing and Installation
“Pre-update test failed” and “Package installation failed” after an OpenClash APK download require different checks. Use the logs to inspect apk-tools support, system package status, and official installation commands, then retest after recovery while keeping the original version and configuration.Development and AIHow to Fix Repeated Reconnecting in Codex: Troubleshooting the Clash Proxy
If Codex App or CLI keeps showing Reconnecting, check service status, Clash connection records, the system proxy, WebSocket, and the HTTP proxy. Retest the same failing request, then verify a complete response and network access after quitting.Connection troubleshootingHow to Fix Clash Verge Rev TUN on a macOS Mobile Hotspot
If a Mac on an iPhone Personal Hotspot connects directly but Clash Verge Rev TUN reports an empty interface, identify the outgoing adapter and fix it with a persistent override. Check the fields, DNS, and real requests. If problems arise, remove the override and restore the original settings.Connection troubleshootingHow to Fix Clash Verge Rev TUN Failing to Start on macOS
If the system proxy works on macOS but TUN reports permission or service errors, check the app location, version, and helper service. Reinstall the service through official options and retest authorization and real requests. If it still fails, keep TUN off and use the system proxy.Connection troubleshootingHow to Fix a Clash Verge Rev Core Communication Error and Blank Proxies Page
If the homepage reports a core communication error and the proxy page is empty, check whether the core still forwards traffic, then inspect the version, duplicate processes, ports, and firewall. Restore interface communication based on the actual error and retain subscriptions and configurations rather than reinstalling blindly.Client insightsClash Verge Rev or Clash Nyanpasu: Which Should You Choose?
Choose Clash Verge Rev for straightforward subscription use on Windows or macOS; compare Nyanpasu for frequent overrides and advanced settings, then weigh maintenance and workflow.Client insightsStash, Shadowrocket, or Surge on iOS: Which Should You Choose?
Compare Shadowrocket, Stash, and Surge by subscription use, rule editing, and script automation to find the proxy app that fits your workflow.Client insightsVerge Rev, FlClash, or ClashX Pro on macOS: Which Should You Choose?
Choosing a Mac client depends on your daily workflow: full desktop management, cross-platform consistency, or a lightweight menu-bar app. Compare the permissions, configuration management, and maintenance status for those workflows, then verify the choice with your usual tasks.Scenario insightsClash Routing for Research: Troubleshooting Google Scholar and Zotero
Scholar searches, full-text downloads, Zotero item sync, and attachment sync may come from different programs. Find the domain, exit, and error for the failing action, then handle browser, desktop-proxy, or sync settings as appropriate rather than only changing nodes.Scenario insightsRouting Zoom, Teams, and Slack with Clash: Troubleshooting Remote Meetings and Sign-In
Logging into Zoom, Teams, or Slack does not prove that meeting media, files, and persistent messaging connections work. Check capture and exits for the failing action, keep company systems on the organization’s required VPN, and retest with real meetings and file transfers.Security and privacyDoes Clash Leak Your Real IP? How to Check DNS, WebRTC, and IPv6 Leaks
Local addresses or differing regions on a test page do not alone prove a leak. Check exit IP, DNS, WebRTC, and IPv6 separately to identify requests bypassing Clash. Change only confirmed problems and compare results before and after the fix.Security and privacyAre Remote Clash Rule Sets Safe? Checking rule-providers Sources, Updates, and Tampering Risks
Audit rule-providers by source, update history, rollback file, and diffs. They cannot read account passwords directly, but can change which egress a domain uses.Security and privacyCan You Share a Clash Configuration File? Redacting Subscriptions, Node Passwords, and secret
A complete configuration usually cannot be shared as-is because it may contain a subscription token, node passwords, and the controller secret. For troubleshooting, create a separate minimal, readable, redacted copy.Installation and migrationInstalling Clash Verge Rev on Ubuntu: DEB, System Proxy, and Startup
Ubuntu installation requires a DEB package matching the architecture. Import a subscription, select a node, and verify the system proxy before configuring TUN service or autostart as needed. Keep recoverable configurations when handling permission, desktop-environment, or service problems.Installation and migrationHow to Migrate from ClashX Pro to Clash Verge Rev
Migrating from ClashX to Clash Verge Rev requires keeping subscriptions, custom rules, and settings you actually use. Exit the old instance, confirm direct macOS access, then import and verify in the new client. Do not copy caches and the old core as a bundle.Connection troubleshootingHow to Fix a Clash TLS Handshake Failure: Certificates, Time, and SNI
TLS errors can arise during subscription downloads, node handshakes, or target-site access, each requiring different certificate, time, and SNI checks. Record the complete handshake failed error and target, fix the relevant stage, and keep certificate verification enabled.Installation and migrationHow to Upgrade OpenClash Without Losing Configuration: Plugins, Cores, Subscriptions, Backup, and Restore
Back up the OpenClash plugin, core, configuration, and overrides separately, then upgrade one layer at a time and stop at the first failure to avoid a home-wide outage.Development and AIHow to Route VS Code Dev Containers Through Clash
Dev Container builds, Git inside the container, and extension downloads may come from different processes. Check the host proxy address, build variables, or container environment according to the error location, set NO_PROXY for internal access, and verify downloads and runtime separately.Development and AIpip or Conda Download Timeouts? The Right Way to Use a Clash Proxy in a Python Environment
pip, Conda, and git+https use different proxy sources. Test the original request with a temporary proxy in a new terminal and use resolution, connection, or certificate errors to locate the problem. Once the test works, save settings for the relevant tool and keep a cleanup method.Client insightsClash Verge Rev, FlClash, or Clash Party: Which Should You Choose?
Clash Verge Rev focuses on desktop use, FlClash offers consistent controls across platforms, and Mihomo Party (now Clash Party) integrates advanced tools. Choose based on platform support, maintenance, configuration processing, and network recovery after quitting.Development and AISlow or Interrupted Hugging Face Model Downloads? A Guide to Clash, Git LFS, and Cache Configuration
If the Hugging Face website works but model downloads fail, check Hub metadata, Xet or Git LFS file requests, and local caches separately. Handle the actual timeout, interruption, or storage error while keeping copies of files that remain usable.Client insightsMihomo, Clash Meta, and the Original Clash: Differences, Configuration Compatibility, and Migration
Mihomo is the name later adopted by Clash Meta; GUI-client and core versions need separate checks. Compare the fields, protocols, and maintenance status of original Clash and the current project, then use configuration validation and actual rule results to judge migration.Client insightsHow to Migrate from Clash for Windows to Clash Verge Rev
When migrating from Clash for Windows to Clash Verge Rev, keep subscriptions and custom rules, quit the old instance, and confirm direct Windows connectivity. After importing, reselect policy groups, recreate overrides for their original purposes, and verify real tasks and network recovery on exit.Security and privacyWhat to Do If a Clash Subscription Link Leaks: Token Reset, Log Redaction, and Converter-Site Risks
Once a subscription URL is public, renaming it in the client does nothing. Invalidate the old token first, then remove copies left in screenshots, logs, and converter sites.Scenario insightsSharing Clash Verge Rev on a LAN: Allow LAN and Firewall Settings
Allow LAN only lets other devices connect to the proxy port on your computer; it does not automatically turn Windows into a router. You must configure the computer's LAN address, listening scope, and firewall together.TutorialsManaging Multiple Clash Verge Rev Configurations: Automatic Subscription Updates, Switching, and Backups
Managing multiple Profile entries requires knowing the active configuration, purpose, and last update time. Keep a working configuration without overrides, check automatic updates and rules and nodes after switching, back up subscriptions and custom files, and test restoration.Installation and migrationInstalling FlClash on Android: APK, Subscription Import, and Background Operation
After installing FlClash, grant VPN access, update the subscription, and choose a node. Change battery/background permissions only for lock-screen disconnects; test each stage.Configuration practicesResolving DNS Conflicts Between OpenClash and AdGuard Home
When OpenClash and AdGuard Home coexist, competing for port 53 or pointing upstream to each other can cause failures. Check actual listeners and query direction, choose one-way forwarding, and verify filtering, routing, and resolution recovery after shutdown.TutorialsEnabling Clash Verge Rev TUN: Windows Setup and Connectivity Recovery
If the browser works through the system proxy but terminals, store apps, or games have no connection records, check service permissions and test TUN capture. Use the original node and target in Connections, check LAN access and networking after shutdown, and return to the system proxy if problems appear.Installation and migrationHow to Download and Install Clash Verge Rev on Windows
Choose the correct x64 or ARM64 installer from GitHub Release, switch to Chinese in Settings without a separate pack, import a subscription, select a node, and test system proxy.Security and privacyImporting a Clash Subscription Link: Format Detection, Update Failures, and Leak Response
A subscription name in Profiles does not mean the configuration is loaded. Check its format and HTTP errors, update it, and select it as the current configuration. Inspect nodes and requests in Proxies and Connections. Reset leaked links and replace their copies on your devices.Installation and migrationHow to Download and Install Clash for Mac: Chip Selection and First-Time Setup
A Mac installer must match the Apple or Intel chip. Handle Gatekeeper prompts, app startup failures, and page-loading failures separately. After importing a subscription, verify connections through the system proxy, and remove old proxy settings when uninstalling or switching clients.Connection troubleshootingCan't Reach ChatGPT or Claude Through Clash? Troubleshooting Sign-In and Timeouts
Investigate login loops, Access Denied, timeouts, and interrupted long replies through the relevant request. Fix the node selection and inspect the actual exit, browser session, service restrictions, and sustained connection. Check proxy capture if the app has no records in Connections.Connection troubleshootingTroubleshooting Clash Node Timeouts: Latency Tests, Node Switching, and Frequent Disconnects
Timeout only means the test request timed out, not that the node necessarily failed. Reproduce real access with the same node, inspect rules and logs, compare one node, one protocol, and the whole subscription, and test the real task on another network.TutorialsChoosing a Clash Proxy Mode: Rule, Global, Direct, and How to Switch
Compare Rule, Global, and Direct modes, their system proxy and TUN boundaries, legacy Script limits, and troubleshooting steps for traffic that has already entered Clash.Development and AIRouting Docker and WSL2 Through Clash: Image Pull Timeouts and Network Configuration
docker pull, WSL2 downloads, and requests inside containers come from different processes. Check the host address and relevant proxy settings for the error location, pass variables separately to builds or containers, and use NO_PROXY to keep database and internal-service access direct.Development and AIConfiguring Cursor with a Clash Proxy: Fixing Sign-In, Model Connectivity, MCP, and Terminal Timeouts
Cursor login, model replies, MCP, and the terminal may use different proxies. Use Network Diagnostics and connection records to locate the failing action, then address browser sessions, remote authentication, or subprocess environments. Verify complete replies and tool calls.TutorialsHow to Use Clash: Clients, Mihomo, Subscription Links, and Nodes Explained
After installing a client, you still need your own subscription or local configuration. Learn what the core, nodes, and policy groups do, update the configuration, select a node, and check the first connection with a webpage and Connections, using actual errors to locate settings.TutorialsUsing Clash for macOS: Subscriptions, System Proxy, TUN, and Permissions
If the macOS system proxy works but a particular program has no connection records, test TUN and check network-extension and helper-service permissions. After sleep, network changes, or restart, inspect the original target in Connections and troubleshoot the core, permissions, or network as appropriate.TutorialsClash Verge Rev Tutorial: Importing Subscriptions, Switching Nodes, and Configuring the System Proxy
After installing Clash Verge Rev, use the Profiles, Proxies, System Proxy, and Connections pages to import the subscription, select a node, configure the system proxy, and inspect connection records.TutorialsUsing Clash on Android: APK Installation, Subscription Import, and Reliable Background Operation
Check Android APK architecture, installation source, VPN permission, and subscription updates separately. After foreground access works, test background operation through locking and network changes. Adjust the current client’s battery and autostart permissions only if it disconnects while locked.Configuration practicesClash TUN vs. System Proxy: DNS Overrides and Fake-IP Settings
The system proxy handles only applications that read proxy settings, while TUN captures more traffic at the system network layer. Check whether the failing application appears in the connection records before deciding whether you need TUN, DNS overrides, or Fake-IP.Configuration practicesWriting Clash Rules: rule-providers, Overrides, and Subscription-Safe Configuration
If the main page opens but some content fails, find the domain and matched rule in Connections. Adjust the specific rule, its order, or the Profile override, and confirm that it still applies after subscription updates. Manage large, frequently updated lists with rule-providers.Configuration practicesConfiguring Automatic Node Selection in Clash: url-test, fallback, and Latency Tolerance
Use url-test for automatic low-latency selection and fallback for a fixed primary/backup order. Health checks do not replace real tasks: compare browsing, long replies, and downloads with a fixed node, then adjust the test address, interval, and tolerance.Configuration practicesOpenClash Tutorial: Installing on OpenWrt, Importing Subscriptions, and Whole-Home Proxy Setup
On a first OpenClash installation, check the plugin, architecture, and core version, and start the service only after importing and selecting a valid configuration. Check main- or secondary-router gateway and DNS settings, test one client before adding devices, and keep shutdown and recovery methods.Scenario insightsRouting ChatGPT, Gemini, and Claude with Clash
Route ChatGPT, Gemini, and Claude websites, sign-ins, and model APIs with stable policies, adding rules from real connection records to prevent egress changes.Development and AIGit, npm, or Docker Not Using Clash? Terminal Proxy Setup and Timeout Fixes
Git, npm, and Docker use different proxy sources; terminal variables do not automatically fix docker pull. Verify the local port, then check environment variables, configuration files, or daemon proxy settings for the relevant tool. Clear test settings after successful downloads and check direct access after exit.Scenario insightsRouting Netflix, YouTube, and Disney+ with Clash
A correct catalog, successful playback authorization, and stable video transfer are separate results. Fix an exit matching the account region, find failing domains in real playback records, and configure policies per platform. For television failures, separately check the gateway, resolution, and network protocol.Scenario insightsSlow Steam Downloads or High Discord Voice Latency? Clash Game Routing and UDP Settings
The Steam store, game-content downloads, Discord voice, and actual gameplay traffic are not one connection. Test them separately to determine whether you need domain rules, process rules, or TUN.Configuration practicesResolving Tailscale and Clash Conflicts: TUN, LAN, and Route Priority
If Tailscale and Clash work separately but fail together, compare routes and resolution. Test tailnet addresses, device names, advertised subnets, and public access separately, define the default exit and actual exclusions, and avoid both tools competing for the same route.Connection troubleshootingClash Is Connected but There Is No Internet: Troubleshooting DNS, Fake-IP, and Rules
Connected status does not prove the target request succeeded. Check the relevant settings for local-proxy errors, resolution failures, node timeouts, or TUN-only disconnections. Compare the system proxy, direct access, and Connections, and record the rule, exit, and log error.Connection troubleshootingClash Subscription Import Failed? Fixing Invalid YAML, Expired Links, and Formats
If importing a subscription fails, distinguish download errors, YAML syntax, and fields supported by the core. Check the HTTP status and response content, compare the original copy with the final configuration, restore a loadable configuration, and retest.Connection troubleshootingNo Internet After Closing Clash? Resetting the Windows System Proxy and WinHTTP
If connectivity fails after Clash exits, check Windows manual proxy, PAC, WinHTTP, and terminal variables. TUN leftovers require service and route checks; keep affected or unknown-version services disabled, then verify direct browser and terminal access and access after restart.Security and privacyHow to Access the Clash Dashboard Remotely and Safely
Dashboard connects to a control interface that can switch nodes, change configuration, and close connections. For remote use, restrict the listen address, set a secret, and access it only through a private network or tunnel.Showing 9 of 92 articles