Free open-source proxy client for Windows, macOS, Android, iOS & Linux. Supports Shadowsocks, VMess, Trojan, VLESS, Hysteria2 — one-click subscription import with smart rule-based split tunneling.
Whether you stream 4K content, work remotely across borders, play low-latency games, or do academic research — Clash smart routing has you covered. The rule-based engine keeps local sites on a direct connection while international services get fast proxy access — no expensive commercial accelerator required.
Dedicated routing rules automatically match region-unlock nodes for smooth, buffer-free viewing.
Developer-tuned rule sets: push code fast, pull images, and join international video calls without dropping off.
Virtual network adapter captures all traffic — perfect for proxy-unaware game clients and console acceleration.
proxies: - name: "🇭🇰 Hong Kong Node 01" type: vmess server: hk1.example.com port: 443 network: ws tls: true - name: "🇺🇸 US Node 02" type: trojan server: us2.example.com port: 443 - name: "🇯🇵 Japan Node 03" type: ss cipher: aes-256-gcm # Subscription hosting — one-click import with auto-update proxy-providers: my-sub: type: http url: https://sub.example.com/... interval: 3600
Whether you use a proxy subscription service or self-hosted Shadowsocks, VMess, or Trojan nodes — Clash handles them all. From legacy encryption protocols to next-gen UDP transports — one YAML config file covers every proxy protocol, no extra plugins required.
Modern, intuitive UI. I've tried many tools, but Clash's rule config is the most powerful — import a YAML and you're set. It completely changed how I think about routing rules.
I often need international docs while working with local resources. Clash smart routing solved my workflow conflict perfectly — both run side by side without interference.
Open-source core was my top priority. No ads, no pop-ups, and minimal system resource usage. Runs in the background — you barely notice it's there.
With virtual network adapter support, I never worry about CLI tools or games bypassing the proxy again. Full traffic takeover is rock-solid and reliable.
Every core capability has been refined over years by the developer community, making Clash the go-to proxy client for technical users on Windows, macOS, Android, and beyond.
No reliance on system proxy settings — the virtual adapter intercepts all TCP/UDP traffic at the driver level, solving the problem of games and CLI tools that ignore proxy settings. Available on Windows, macOS, and Linux.
Auto node speed test
Smart sort & switch
DoH / DoT encrypted resolution
LAN direct connection auto-split
Route by domain, IP, geolocation, or process name — subscribe to community Clash rule sets and use them out of the box.
Configure and activate your smart proxy network in under a minute.
Go to the download page, pick the client for your operating system, and follow the standard installation steps.
Copy your provider's subscription URL or drag a local YAML config file into the client panel to import.
Select a node on the Proxies page, toggle System Proxy (desktop) or enable the VPN profile (iOS / Android), and enjoy unrestricted access.
Covers installation, config import, protocol support, TUN mode, and rule-based routing
Clash is an open-source, rule-based network proxy tool. Unlike a traditional VPN, its key advantage is smart split tunneling: local websites connect directly without detours, while international services route through proxy nodes — faster speeds, lower latency, and no need for full-tunnel proxying. Clash is fully open source, ad-free, and collects no user data, offering far greater transparency than most commercial VPN products. It supports Shadowsocks, VMess, Trojan, and all major proxy protocols.
Clash supports five major platforms: Windows (7/10/11), macOS (10.13+), Android (5.0+), iOS (via compatible clients like Stash or Shadowrocket), and Linux (Debian, Ubuntu, Arch, and other mainstream distros). Visit our download page, select the latest installer for your platform — completely free, no registration required.
There are two import methods: ① Subscription URL: copy your provider's Clash subscription link, paste the URL on the Profiles page, and click Download to auto-parse the node list; ② Local config file: drag a .yaml or .yml config into the client, or use Open File to import. We recommend setting an auto-update interval to keep your nodes current.
Clash (powered by the Mihomo core) supports virtually every mainstream proxy protocol, including Shadowsocks / ShadowsocksR, VMess / VLESS / Reality, Trojan, Hysteria / Hysteria2, TUIC v5, Snell, WireGuard, and standard HTTP(S) / SOCKS5 proxies. Whether you use a subscription service or self-hosted nodes, most configs import without issues.
System proxy only affects apps that respect proxy settings (like browsers) — game clients, command-line tools, and others bypass it. TUN mode creates a virtual network adapter that intercepts all TCP/UDP traffic at the driver level, delivering true global transparent proxying and solving the "app not using proxy" problem. Ideal for gaming acceleration and full-stack development environments.
Clash uses the rules field in your YAML config for granular split tunneling — by domain (DOMAIN / DOMAIN-SUFFIX / DOMAIN-KEYWORD), IP (IP-CIDR), geolocation (GEOIP), process name (PROCESS-NAME), and more. The community maintains many ready-to-use rule sets you can subscribe to via the rule-providers field, so you never have to maintain a massive rule list manually.
The Clash core (Mihomo) is a 100% open-source project hosted on GitHub — anyone can audit the source code. The client includes no data collection, analytics, or advertising modules. Your traffic flows only between your device and the proxy nodes you configure — never through a third-party server. Always download from this site or the official GitHub repository; avoid unverified third-party distributions.
Free & Open Source · 42,000+ GitHub Stars · 10M+ Downloads
Windows · macOS · Android · iOS · Linux — install once, free forever