Frequently Asked Questions

Clash is a rule-based cross-platform proxy tool. It doesn't provide nodes—it routes network requests to proxy nodes or direct connections based on your config rules, so "what should proxy does, what should go direct does." It's popular for its flexible rule system and broad protocol support.

Clash Download Hub is a Clash download and documentation portal that brings together client downloads, config tutorials, rule-based routing guides, and FAQs in one place. Clash is an open-source project; related names and copyrights belong to the original authors. This site provides objective introductions and documentation only—see our Disclaimer.

The Clash core and major clients are fully open source and free with no ads. Note that Clash is a proxy client only—it does not include any nodes or bandwidth. You need to provide your own subscription or node details. This site does not provide or sell any node services.

In short:

• Core: Handles actual proxying and routing—the classic Clash core and its successor Mihomo (aka Clash.Meta).
• Client (GUI): Provides a graphical interface on top of the core, such as Clash Verge Rev, FlClash, ClashX Meta, and ClashMeta for Android.

You typically download a "client" that bundles the corresponding core.

No. This site only provides software download guides and documentation. We do not sell or operate any node or proxy services. Obtain nodes through your own provider or self-hosted setup.

Platform recommendations below—see the full list on the Downloads page:

• Windows / macOS / Linux: We recommend Clash Verge Rev—user-friendly UI, full features, powered by Mihomo core.
• Android: We recommend ClashMeta for Android—choose the ARM64 build for devices from 2016 onward.
• iOS / iPadOS: Get a Clash-compatible client from the App Store.

This is macOS security for unsigned apps—not actual damage. Go to System Settings → Privacy & Security, find the prompt, and click "Open Anyway"; or Control-click the app icon and choose "Open".

Some proxy software gets false positives. Confirm you downloaded from an official source, choose "Run anyway" on SmartScreen if needed, or whitelist the install folder in your antivirus. Verify checksums provided by the official release.

Most phones from 2016 onward are 64-bit—choose the arm64-v8a build; only very old devices need armeabi-v7a. When in doubt, try arm64-v8a first.

Related clients may only be listed in certain App Store regions and availability can change with policy. This is an App Store regional restriction beyond our control—check what's actually available in your region's App Store.

A subscription URL is a link your client visits to automatically fetch and update nodes and rules. It's usually provided by your node provider or generated after self-hosting. This site does not provide subscription URLs.

Two common methods:

1. Subscription URL (recommended): Copy the link into the client's Profiles page and download—enable auto-update for best results.
2. Local file: Drag an existing config.yaml into the client window, or choose "Import from File".

See Setup Guide · Import Subscription & Config for detailed steps.

Enable auto-update in subscription settings and set an interval—24 hours is common. When your provider's nodes change, the client syncs automatically.

Four core sections: basic settings, proxies (nodes), proxy-groups (policy groups), and rules (routing rules). Full details and examples in Setup Guide · Config File Structure.

Policy groups organize nodes into selectable groups. Common types: select (manual), url-test (auto fastest), fallback (failover), load-balance (load balancing). Rules typically point to a policy group.

Clash matches each connection against rules top to bottom, deciding proxy, direct, or reject based on domain, IP range, GEOIP, process, and other conditions—first match wins. This automatically splits domestic and overseas traffic.

• rule: Route by rules—recommended for daily use.
• global: All traffic through proxy—for incomplete rules or temporary full proxy.
• direct: All traffic direct—temporarily disables proxy.

TUN mode creates a virtual network adapter that captures all system traffic, including apps that ignore system proxy (some games, CLI tools). Enable it when you need global transparent proxying—first use usually requires admin/system permissions. See Setup Guide · TUN Mode.

Native support for Shadowsocks, ShadowsocksR, VMess, VLESS, Trojan, Snell, and more—plus HTTP / SOCKS5 / TUN inbound modes, all managed from one config.

On the Proxy / Policy Groups page, select a policy group and pick your node; for url-test groups, the client auto-selects the lowest-latency node.

• Check if nodes are valid and subscription hasn't expired, try switching nodes;
• Switch to global mode to test if the proxy itself works;
• Make sure system proxy and TUN mode aren't both enabled at the same time;
• Check that system time is accurate (some protocols are time-sensitive).

Usually routed as direct or rejected by rules. Check rules order and add DOMAIN-SUFFIX,xxx,PROXY before MATCH if needed. Rule types reference: Setup Guide · Rule Types.

Usually the subscription URL itself is unreachable. Try opening the link in a browser first; some subscriptions need an active proxy to fetch—try switching network or nodes before updating.

• Try other nodes or regions, or use url-test for auto-selection;
• Avoid peak hours and confirm your local broadband is fine;
• Check for other apps consuming bandwidth.

Disable system proxy first to avoid stacking with TUN; confirm the virtual network adapter driver is installed with proper permissions; check for conflicts with other VPN, firewall, or security software.

The Clash core is fully open source and publicly auditable—no backdoors or hidden data collection; traffic flows only between your device and nodes you configure. Real security depends on the trustworthiness of your nodes—choose trusted sources and keep subscription URLs private.

This is a static information site—no registration, no accounts, and we don't collect your nodes, subscriptions, or configs. Details in our Privacy Policy.

Use related software only within the laws of your country or region, for legitimate purposes such as software development, network debugging, cross-border work, and academic research. You are solely responsible for any illegal or improper use—this site bears no liability.