Chapter 0
Preparation
Before starting the configuration, you need everything prepared: ① A graphical Clash client, and ② A subscription link provided by an airport. Both are indispensable.
① Download the client
Choose the corresponding client for your device. Without a client, you cannot use any proxy services.
- Windows / macOS → Clash Verge Rev
- Android → FlClash
- iOS (iPhone) → Shadowrocket
② Get subscription link
Obtain your exclusive Clash subscription link (URL) from your airport (proxy service provider). It's usually found in the "Subscription" or "Tutorial" pages of the provider's dashboard.
https://, and after importing, it yields a YAML formatted configuration file. If your airport only provides V2Ray or SSR format links, please read the "Subscription Format Conversion" section later.
Chapter 1
Clash Verge Rev Tutorial
Clash Verge Rev is currently the top choice for the Windows and macOS platforms. It is rewritten with the Tauri framework, takes an extremely small memory footprint, has built-in latest Meta (Mihomo) core, and features a modern UI.
1 Install the client
Go to GitHub Releases page to download
Visit the GitHub releases page of Clash Verge Rev and choose the corresponding system version to download:
- • • Windows: Download the
.exeor.msiinstaller - • • macOS (Apple Silicon M-chip): Download the
.dmgcontainingaarch64 - • • macOS (Intel chip): Download the
.dmgcontainingx64
Installation and Execution (macOS Extra Steps)
Windows users can double-click the installer and follow the prompts.
If macOS users encounter the "cannot be opened because it is from an unidentified developer" prompt:
- Open "System Settings" → "Privacy & Security"
- Find the app name at the bottom of the page and click "Open Anyway"
- Or run in the terminal:
xattr -cr /Applications/Clash\ Verge.app
2 Import airport subscription link
Copy Subscription Link
Log in to your airport dashboard, find the "Subscription" or "Clash Configuration" page, and copy the full subscription URL (a long link starting with https://).
Import in the "Profiles" Page
Open Clash Verge Rev, click "Profiles" in the left menu. Paste the subscription link into the top input box and click the "Download" button.
Enable Configuration
After the download is complete, a new configuration item will appear in the list. Single-click the configuration to highlight and activate it (the active state shows a blue border). At this point, the nodes are loaded.
3 Enable System Proxy and Proxy Mode
Click "Home" on the left to find the following two core switches:
System Proxy
When enabled, traffic from browsers and other software supporting the system proxy will automatically go through Clash. Must be enabled for daily use.
Proxy Mode
There are three modes, choose according to your actual needs:
4 Enable TUN Virtual Network Card Mode (Advanced · Optional)
TUN mode creates a virtual network interface in the system to take over all underlying TCP/UDP traffic, including those that the system proxy mode cannot cover:
Terminal / Command Line
npm, pip, curl, etc.
Git / Docker
Code pulling and image downloading
Game Clients
Steam, Epic, etc.
Steps to enable TUN mode:
- Click "Settings" on the left
- Find the "Clash Core" or "TUN Mode" section
- Turn on the "Enable TUN Mode" switch
- Windows requires right-clicking to run the software with Administrator privileges, or authorizing the installation of the Service Mode driver when prompted
- macOS requires allowing the application to add VPN configurations in "System Settings → Privacy & Security → VPN & Filters"
Chapter 2
FlClash Configuration Tutorial (Android)
FlClash is a new generation Clash client developed based on Flutter, with extremely simple interface, excellent performance, and memory usage much lower than the old Clash for Android. It is currently the top choice for the Android platform.
Download and install APK
Download the latest .apk file from GitHub Releases. For the vast majority of mobile phones, please select the arm64-v8a version. If an "Unknown Sources" prompt appears during installation, allow it in the phone settings.
Import subscription link
Open FlClash, click the "Profiles" tab at the bottom, click the "+" button in the top right corner, select "Import from URL", paste the Clash subscription link provided by the airport, and click confirm to download.
Select node and enable proxy
After the download is complete, click the "Proxy" tab to see all node strategy groups. Select the node you want to use (or use the auto speed test strategy group), then return to the homepage and click the main switch at the top to enable the VPN connection. The first use requires authorizing VPN permissions in the system pop-up.
(Optional) Set proxy mode
Go to "Settings" where you can switch the "Proxy Mode" to "Rule" (recommended), "Global", or "Direct". At the same time, you can enable the VPN virtual network card in "Settings → TUN Mode" to take over UDP and more traffic types.
Chapter 3
iOS Platform Configuration Tutorial
Shadowrocket
Commonly known as "Little Rocket" · ¥18 one-time purchase
The most popular proxy tool on the iOS platform. One-time purchase for permanent use. Fully supports Clash subscription formats, supporting Shadowsocks, VMess, VLESS, Trojan, Hysteria2 and all mainstream protocols.
Steps to import Clash subscription:
- 1. Use an Overseas Apple ID to purchase and download Shadowrocket from the App Store
- 2. Open the App, click "+" in the upper right corner → select "Subscribe"
- 3. Paste the subscription URL provided by the airport, and click "Done"
- 4. Return to the homepage and turn on the "Connect" switch at the top
Stash
Clash Ecosystem · Subscription / One-time purchase
An iOS client designed specifically for Clash, natively supporting Clash YAML configuration files. It features a complete rule engine, Override capability, and a beautiful UI, making it the top choice for advanced users with higher config requirements.
Steps to import Clash subscription:
- 1. Download Stash from the App Store (overseas Apple ID required)
- 2. Click "Profiles" → "Download from URL"
- 3. Paste the subscription link and click download
- 4. Select that profile, return to the homepage and enable the connection
Chapter 4
Advanced Configuration Tips
Subscription Format Conversion (V2Ray / SSR → Clash)
If your airport only provides subscriptions in V2Ray, ShadowsocksR (SSR), or Trojan formats which cannot be directly imported into Clash, you can use the following tools to online convert them to Clash YAML format:
ACL4SSR Online Subscription Conversion
The most widely used free conversion service, supporting the addition of elaborate routing rules
Sub-Converter (Self-hosted)
Can be self-deployed on a VPS to ensure privacy, supporting custom backend rules and templates
DNS Leak Protection Configuration
DNS Leak means: although your proxy is on, DNS query requests are still sent to the ISP's DNS servers, causing your access records to be monitored. The Meta core supports the following encrypted DNS schemes:
DNS over HTTPS, transmitting DNS queries securely via HTTPS. Most commonly used and combatible.
DNS over TLS, encrypted via TLS. Provides stronger privacy protection but slightly higher latency than DoH.
Returns a fake IP address; DNS requests are parsed directly by the proxy client, completely eliminating the risk of DNS leaks.
Example of DNS configuration in the Clash profile (YAML):
Custom Routing Rules
Clash's routing rules (Rules) determine whether each network request goes through a direct connection or proxy, and which strategy group it goes to. Rules match from top to bottom, and execute upon matching.
Common Rule Types Explanation:
| Rule Type | Example | Description |
|---|---|---|
| DOMAIN | DOMAIN,google.com,Proxy | Exact Domain Match |
| DOMAIN-SUFFIX | DOMAIN-SUFFIX,google.com,Proxy | Domain Suffix Match (including subdomains) |
| DOMAIN-KEYWORD | DOMAIN-KEYWORD,youtube,Proxy | Domain Keyword Match |
| IP-CIDR | IP-CIDR,192.168.0.0/16,DIRECT | IP Range Match |
| GEOIP | GEOIP,CN,DIRECT | Routing by IP Geo-location |
| RULE-SET | RULE-SET,reject,REJECT | Reference External Rule Sets (Recommended) |
| MATCH | MATCH,Proxy | Catch-all Rule, placed at the end |
In Clash Verge Rev, you can add custom rules in the "Override / Mixin" feature without modifying the original subscription file, preventing custom contents from being overwritten after each subscription update:
It is recommended to use Community Rule Sets (Rule Provider)
Manually maintaining a large number of domain rules is not recommended. It is better to reference rule sets maintained by the community, which automatically cover tens of thousands of precise rules:
Chapter 5
Frequently Asked Questions (FAQ)
npm install or git clone still cannot connect even with the proxy on, you need to enable TUN mode.
- Rule Mode: Recommended for daily use. Automatically judges based on the routing rules in the config file. Accessing Baidu, WeChat, etc. uses direct connection, while accessing Google, YouTube, etc. goes through the proxy.
- Global Mode: Forces all traffic to route through proxy nodes. Suitable for testing if a node is available. It will cause domestic websites to load slowly, not recommended for long-term use.
- Direct Mode: All traffic connects directly, equivalent to turning off the proxy completely.
- ① Incompatible link format: The airport may only provide V2Ray/SSR format subscriptions. Please use the ACL4SSR online conversion tool to convert it to Clash YAML format.
- ② Incomplete copied link: Make sure you copied the full link starting with
https://, without line breaks or extra spaces. - ③ Network cannot access the subscription URL: Some airport subscription links themselves require turning on a proxy to download first. Try manually adding a node first or changing the network environment to download.
- ④ Software version too old: Try again after updating the client to the latest version.
proxy-groups are proxy strategy groups, used to group multiple nodes into a "strategy" which can then be referenced by rules. Common types:
- •
select: Manual node selection. This is what you click to switch on the interface. - •
url-test: Performs regular speed tests and automatically selects the node with the lowest latency. - •
fallback: Failover. Automatically switches to the next node when the current one fails. - •
load-balance: Load balancing, distributing traffic among multiple nodes.
- ① Ensure the proxy mode is "Rule Mode" rather than Global, so Steam's domestic content connects directly.
- ② Add Steam CDN domains to your rules to go
DIRECT, or use community rule sets that contain Steam rules. - ③ If you need to accelerate Steam international content (like downloading games outside your home region), choose nodes with a latency below 100ms in the strategy group.