Setup Clash in 5 Minutes – Visual Guide for All Platforms

Go to the Download Page. Two actively maintained free clients are available for Windows:

Open Clash Verge Rev. Click "Profiles" in the left navigation bar, then:

1. Click "New" or the input box in the top right
2. Paste the Clash subscription URL provided by your service
3. Click "Import" or press Enter
4. Wait for the download to complete; the configuration will appear in the list
5. Click "Use this profile" on the right side of the configuration to activate it

https://your-airport.com/api/v1/client/subscribe?token=xxxxxxxx&flag=clash

Click "Proxies" in the left navigation to see all available nodes and policy groups:

• Click any policy group (e.g., "Proxy") and choose a low-latency node from the list
• Click the lightning bolt icon on the right for a manual speed test to see real-time latency
• The "Auto Select" policy will automatically switch to the best node based on latency—ideal for users who prefer zero manual management

Find the "System Proxy" switch in the top right of Clash Verge Rev and click to turn it on (it will turn blue).

• System Proxy mode automatically configures Windows settings, taking effect immediately for browsers and other apps that support system proxies
• By default, Clash listens on 127.0.0.1:7890 (HTTP) and 127.0.0.1:7891 (SOCKS5)
• Verify: Visit google.com in your browser; if it opens, you're all set

TUN mode proxies all traffic, including games and CLI tools that don't support system proxies. Recommended for advanced users:

1. In the Clash Verge Rev Settings page, find and enable the "TUN Mode" switch
2. A Windows UAC prompt will appear; click "Yes" to grant administrator privileges (required for the virtual network interface)
3. Once TUN Mode is active, you can turn off the System Proxy switch; TUN will handle all traffic

Go to the Download Page. Two actively maintained free clients are available for macOS:

When first opening your client, macOS may say "Cannot be opened because the developer cannot be verified." This is normal for open-source apps (both Clash Verge Rev and FlClash are unsigned by Apple). There are two ways to resolve this:

sudo xattr -r -d com.apple.quarantine /Applications/ClashVergeRev.app

sudo xattr -r -d com.apple.quarantine /Applications/FlClash.app

Open Clash Verge Rev. Click "Profiles" in the left navigation bar:

1. Click the "New" button
2. Paste your provider's subscription URL into the input box
3. (Optional) Enter a name to help distinguish multiple subscriptions
4. Click "Import" and wait for the file to download
5. Click the profile to set it as active

After selecting a node on the "Proxies" page, turn on the "System Proxy" switch in the top right:

• macOS will prompt for network permissions; click "OK" to authorize
• Clash Verge Rev will automatically configure macOS proxy settings, taking effect immediately for Safari, Chrome, and other browsers
• A Clash status icon will appear in the menu bar for quick node switching

To proxy all traffic (including CLI tools and games that don't support system proxies), enable Enhanced Mode:

1. Find "TUN Mode" or "Enhanced Mode" in Settings
2. Enable it; you may be asked to install a system extension (confirm with your password)
3. Allow the system extension in "Privacy & Security"
4. Restart Clash Verge Rev for TUN mode to take effect

Go to the Download Page. Three recommended Android clients are available:

• FlClash (Recommended): Download FlClash-0.8.93-android-arm64-v8a.apk — ideal for most modern phones (2016 and later), Material Design 3 UI, cross-platform consistency across Windows / macOS / Android / Linux
• Clash Meta for Android / CMFA (Universal): Download the universal APK — compatible with ARM64, ARMv7, and x86_64. Best if you're unsure of your device's architecture
• Surfboard (Lightweight): Download the universal APK — Material You design, fully compatible with Clash YAML subscriptions, ideal for users who prefer a lightweight experience

Open the app (FlClash / CMFA / Surfboard) and click "Profiles" in the bottom navigation:

1. Click the "+" button in the top right and select "URL"
2. Enter a name in the label field and paste your provider's link into the URL field
3. Click the save icon in the top right, then click "Update" to download
4. Once downloaded, click the dot next to the profile name to set it as active

1. Click "Proxies" in the bottom navigation to view and select nodes in the policy groups
2. Click the speed test icon next to a node to check latency; choose a low-latency node
3. Return to the home screen and click the large "Stopped" button (Play icon)
4. A VPN connection authorization prompt will appear; click "OK"
5. The status will change to "Running," and a VPN icon will appear in the notification bar

FlClash and CMFA use the Android VPN API by default, achieving global proxy effects similar to TUN without extra config. For finer control:

• Customize proxy mode (Rule/Global/Direct) in "Settings → Override"
• We recommend enabling "Bypass private networks" to keep local traffic off the proxy
• Set which apps use the proxy in "Settings → Access Control" (per-app filtering); Surfboard users can configure this in the "App Proxy" section

1. Open the App Store, click your avatar in the top right, scroll to the bottom, and click "Sign Out"
2. Sign in with a US or HK Apple ID (you can borrow one or register your own)
3. Search for "Stash" or "Shadowrocket," purchase, and download
4. After downloading, you can switch back to your original Apple ID; the purchased app will remain

1. Open Stash and click "Home" at the bottom
2. Click "Add Configuration File" → "Download from URL"
3. Paste your Clash subscription URL and click "Download"
4. The profile will automatically become active once downloaded
5. Select a node on the "Policy Groups" page or use Auto Select

1. Open Shadowrocket and click the "+" icon in the top right
2. For "Type," select "Subscribe"
3. Paste your provider's subscription URL and add a label
4. Click "Done" in the top right and wait for the nodes to load
5. Choose a low-latency node from the list

After importing and selecting a node, toggle the switch next to "Not Connected" on the home screen:

• iOS will prompt "Shadowrocket Would Like to Add VPN Configurations"; click "Allow" and confirm with Face ID or your passcode
• The status will change to "Connected," and a VPN icon will appear in the status bar
• Verify: Visit google.com in Safari to ensure it's working correctly

Go to the Download Page. Two actively maintained free clients are available for Linux:

sudo apt install ./Clash%20Verge_2.4.7_amd64.deb

sudo rpm -i Clash%20Verge-2.4.7-1.x86_64.rpm

paru -S clash-verge-rev
# Or use yay
yay -S clash-verge-rev

sudo apt install ./FlClash-0.8.93-linux-amd64.deb

Operations are identical to the Windows and macOS versions:

1. Open Clash Verge Rev (or FlClash) and go to the "Profiles" page
2. Click "New" and paste your provider's subscription URL
3. Click "Import" and wait for the download to complete
4. Click the profile to set it as active

Clash on Linux offers two proxy methods:

export http_proxy="http://127.0.0.1:7890"
export https_proxy="http://127.0.0.1:7890"
export all_proxy="socks5://127.0.0.1:7891"

You can also enable TUN Mode for global transparent proxying (requires root). Find the TUN option in settings and toggle it on.

Go to the Download Page → Core / CLI and choose the binary for your target OS and architecture:

• Linux x86_64 server / VPS / NAS: Download mihomo-linux-amd64.gz (compressed) or mihomo-linux-amd64.deb (Debian/Ubuntu package — recommended)
• Linux ARM64 (Raspberry Pi, ARM servers): Download mihomo-linux-arm64.gz from GitHub Releases
• Windows x64: Download mihomo-windows-amd64.zip

Mihomo is driven by a single YAML configuration file (config.yaml). There are two ways to get one:

mkdir -p ~/.config/mihomo
curl -L "https://your-airport.com/api/v1/client/subscribe?token=xxxx&flag=clash" \
     -o ~/.config/mihomo/config.yaml

mixed-port: 7890
allow-lan: false
mode: rule
log-level: info
external-controller: 127.0.0.1:9090

dns:
  enable: true
  enhanced-mode: fake-ip
  nameserver:
    - 8.8.8.8
    - 1.1.1.1

proxies:
  - name: "my-node"
    type: vmess
    server: example.com
    port: 443
    uuid: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
    alterId: 0
    cipher: auto
    tls: true

proxy-groups:
  - name: "Proxy"
    type: select
    proxies: ["my-node", "DIRECT"]

rules:
  - MATCH,Proxy

Installing via the .deb package on Debian / Ubuntu automatically registers a systemd service with startup and process supervision:

# Install the .deb package (auto-registers systemd service)
sudo apt install ./mihomo-linux-amd64.deb

# Place your config file in the service directory
sudo mkdir -p /etc/mihomo
sudo cp ~/.config/mihomo/config.yaml /etc/mihomo/config.yaml

# Enable and start the mihomo service
sudo systemctl enable --now mihomo

# Check status
systemctl status mihomo

# Follow logs in real time
journalctl -u mihomo -f

# Stop the service
sudo systemctl stop mihomo

# Restart after config changes
sudo systemctl restart mihomo

# Disable autostart
sudo systemctl disable mihomo

# View last 100 log lines
journalctl -u mihomo -n 100

If you prefer not to use the .deb package, extract the compressed binary and run it directly:

# Extract and make executable
gunzip mihomo-linux-amd64.gz
chmod +x mihomo-linux-amd64
sudo mv mihomo-linux-amd64 /usr/local/bin/mihomo

# Create config directory
mkdir -p ~/.config/mihomo
# (Place config.yaml in ~/.config/mihomo/)

# Run in foreground (for debugging)
mihomo -d ~/.config/mihomo

# Run in background
nohup mihomo -d ~/.config/mihomo > ~/.config/mihomo/mihomo.log 2>&1 &
echo $! > ~/.config/mihomo/mihomo.pid

To create a systemd unit manually (when not using .deb):

[Unit]
Description=Mihomo Clash Meta Service
After=network.target

[Service]
Type=simple
ExecStart=/usr/local/bin/mihomo -d /etc/mihomo
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable --now mihomo

On Windows, run Mihomo through PowerShell directly or register a Task Scheduler task for auto-start:

# Extract the zip archive
Expand-Archive mihomo-windows-amd64.zip -DestinationPath .\mihomo

# Enter directory
cd .\mihomo

# Create config directory and place config.yaml there
New-Item -ItemType Directory -Force "$env:USERPROFILE\.config\mihomo"

# Run in foreground
.\mihomo.exe -d "$env:USERPROFILE\.config\mihomo"

Register as a Task Scheduler task for auto-start at login:

$action = New-ScheduledTaskAction `
    -Execute "C:\path\to\mihomo.exe" `
    -Argument "-d `"$env:USERPROFILE\.config\mihomo`""
$trigger = New-ScheduledTaskTrigger -AtLogOn
$settings = New-ScheduledTaskSettingsSet -ExecutionTimeLimit 0
Register-ScheduledTask -TaskName "Mihomo" `
    -Action $action -Trigger $trigger `
    -Settings $settings -RunLevel Highest -Force

Docker is the cleanest way to deploy Mihomo on a server — no manual dependency management required:

services:
  mihomo:
    image: metacubex/mihomo:latest
    container_name: mihomo
    restart: unless-stopped
    network_mode: host          # Required for TUN mode
    cap_add:
      - NET_ADMIN               # Required for TUN mode
    devices:
      - /dev/net/tun:/dev/net/tun
    volumes:
      - ./config:/root/.config/mihomo  # Mount config directory
    environment:
      - TZ=UTC

# Place config.yaml in ./config/ then start
docker compose up -d

# Follow logs
docker compose logs -f mihomo

# Update image and restart
docker compose pull && docker compose up -d

# Stop and remove container
docker compose down

Mihomo has a built-in RESTful API. Use an open-source web dashboard to monitor traffic, switch nodes, and view connections in real time—no command line needed.

First, make sure the external controller is enabled in your config:

external-controller: 127.0.0.1:9090   # Change to 0.0.0.0:9090 for remote access
secret: "your-secret-key"              # API secret (always set one for remote access!)

# Optional: embed dashboard locally
external-ui: ui
external-ui-url: "https://github.com/MetaCubeX/metacubexd/archive/refs/heads/gh-pages.zip"

After starting Mihomo, open any of the following dashboards in a browser and enter your controller address and secret:

• MetaCubeXD (recommended): d.metacubex.one
• Yacd-meta: yacd.metacubex.one
• Local embedded dashboard (after setting external-ui): http://127.0.0.1:9090/ui