Proxy Modes and System Proxy FAQ
Do some apps stay offline after enabling the system proxy, does a port-in-use error appear, or does networking fail to recover after you exit Clash? Start with the differences between Rule, Global, and Direct modes, then check the system proxy, listening ports, browser-specific proxies, DoH, and extensions.
First determine whether traffic enters the client
The system proxy, per-app proxies, browser extensions, and TUN create different traffic paths.
What Is the Difference Between Rule, Global, and Direct Modes?Rule mode matches policies through rules. Global mode sends most traffic to the selected policy group. Direct mode tries to keep traffic from passing through proxy nodes.What If an App Still Bypasses Clash After the System Proxy Is Enabled?The system proxy affects only apps that honor the operating system's proxy settings. Some games, command-line tools, store apps, and standalone proxy software may ignore it.What If a Local Port Is in Use and the Proxy Port Cannot Start?Clash clients commonly open HTTP, SOCKS, mixed-port, and external-controller ports. A port conflict can break the system proxy or control dashboard.What If the Network Still Does Not Work After Exiting Clash?After Clash exits, connectivity may fail because of a stale system proxy, TUN/VPN interface, changed DNS, a browser's manual proxy, or another proxy tool still controlling traffic.What If a Browser Bypasses Clash Because of Its Own Proxy, DoH, or an Extension?A browser can bypass the system proxy because of a proxy extension, built-in secure DNS, a developer-tools network proxy, a user profile, or an enterprise policy.