TUN Mode and Permissions FAQ
Does TUN fail to start, lack permissions, or cause DNS and routing problems? Check whether the system proxy meets your needs, then review administrator or VPN permissions, drivers, and routes, and rule out traffic-capture conflicts with other network tools.
First confirm that you actually need TUN
Only move on to permissions, routing, and DNS when the system proxy cannot cover the target traffic.
When Should I Enable TUN Mode?TUN is useful when an app ignores the system proxy, UDP traffic must be captured, or more system traffic needs rule-based handling. Browsers and other apps that already honor the system proxy usually do not need it.What If TUN Requires Administrator, VPN, or Driver Permission?TUN creates a virtual network interface and changes routes, so desktop systems may require administrator privileges and mobile devices usually require VPN authorization.How Do I Troubleshoot DNS or Routing Problems After Enabling TUN?Common TUN issues include DNS traffic not reaching Clash, bypassed or looping routes, LAN addresses being captured incorrectly, and inconsistent IPv6 handling.