Clash Smart Routing Proxy
Free & Open Source

Clash is a free, open-source proxy client with a built-in rule engine for smart traffic splitting. Supports Shadowsocks, VMess, VLESS, Trojan, Hysteria 2, and more across all major platforms. Import your subscription link and get started in minutes.

Download Client Now View Setup Guide
All-Platform Coverage:
Windows macOS Android iOS Linux
Core Features Multi-Platform Download Quick Start Rule Engine FAQ Open Source Community

Core Product Features Learn More

1

Smart Rule-Based Routing

Powerful built-in rule engine for fine-grained control based on domain, IP, and process. Automatically separate domestic and global traffic for faster speeds.

Core Version 1.0+
2

Comprehensive Protocol Support

Fully compatible with major proxy protocols like Shadowsocks, VMess, Trojan, and Snell for encrypted transmission in any network environment.

High Compatibility
3

Ultimate Performance

Built with Go for low memory footprint and high concurrency. Ensures stable and fast performance even in complex network conditions.

Powered by Go

Download for All Platforms View All

Clash Verge Rev

Windows 10 / 11 · x64 / ARM64
EXE

Clash Verge Rev

macOS 12+ · Intel / Apple Silicon
DMG

FlClash

Android 5+ · arm64 / x86_64
APK

Stash / Shadowrocket

iOS 15+ · App Store (Non-Mainland)
Tutorial

Clash Verge Rev

Linux · deb / rpm / AppImage
DEB

How the Clash Rule Engine Works

Supported Protocols
Shadowsocks ShadowsocksR VMess VLESS Trojan Snell Hysteria 2 TUIC WireGuard Reality HTTP / HTTPS SOCKS5 Shadowsocks ShadowsocksR VMess VLESS Trojan Snell Hysteria 2 TUIC WireGuard Reality HTTP / HTTPS SOCKS5

Three Steps to Get Started

From installation to activation, complete your Clash configuration in 5 minutes for a stable, high-speed proxy experience.

01

Choose Platform & Download

Select the Clash client for your OS: Clash Verge Rev is recommended for Windows; macOS supports both Intel and Apple Silicon; FlClash is ideal for Android. Download the latest stable official versions here, secure and bundle-free.

Go to Download
02

Paste Subscription & Auto-Import

Paste the subscription link from your provider into the "Profiles" page. The client automatically fetches nodes and routing rules—no manual server IP, port, or protocol setup required. Update once to keep nodes current.

View Setup Guide
03

Enable Proxy & Smart Routing

Enable System Proxy or TUN Mode. The Clash engine automatically determines the best path for each request: domestic sites stay fast via direct connection, while global traffic is stabilized via proxy for seamless access to Google, YouTube, GitHub, and ChatGPT.

Learn Rule Configuration

Who Uses Clash?

From individual developers to corporate teams, millions of users choose Clash as their primary open-source proxy client.

Developers & Tech Enthusiasts

Access GitHub, npm Registry, Docker Hub, Google Developer Console, and Stack Overflow without hurdles. Use the Clash rule engine to fine-tune exit strategies by process or domain. TUN mode handles all CLI traffic, making it an essential tool for daily coding.

Enterprise Remote Work

Stable proxy links secure cross-border business communications. Multi-node Fallback auto-failover ensures uninterrupted access to SaaS tools like Zoom, Slack, Google Workspace, and Notion.

Privacy-Conscious Users

Encrypt data through a secure tunnel to prevent ISP monitoring and MITM sniffing. Protect your accounts and personal info on public Wi-Fi at airports and hotels.

Content Creators & Media Fans

Unlock popular streaming services like Netflix, Disney+, YouTube Premium, Hulu, and Spotify. Enjoy seamless access to Twitter/X, Instagram, Reddit, and TikTok Global with low-latency 4K streaming. Rule subscriptions update automatically to ensure uninterrupted access without manual switching.

FAQ

A summary of the most searched Clash questions, from installation to protocol selection. Check out our full tutorials for more depth.

View Full Usage Guide

Clash is an open-source, rule-based network proxy tool. Unlike traditional VPNs that encrypt all traffic, Clash supports fine-grained routing: domestic sites stay fast via direct connection, specific domains go through a proxy, and other traffic follows your rules. It supports major protocols like Shadowsocks, VMess, Trojan, VLESS, and Hysteria 2, is compatible with Windows, macOS, Android, iOS, and Linux, and is entirely free.

Windows users are recommended to use Clash Verge Rev. Download the EXE installer from this site, install it, paste your subscription link into the "Profiles" page and click update. Then, select a node on the "Proxies" page and enable "System Proxy." The whole process takes about 3 minutes and requires no command line. Supports Windows 10/11 (including ARM64).

Clash clients based on the Mihomo core support all major proxy protocols, including Shadowsocks (SS)、ShadowsocksR (SSR)、VMess、VLESS、Trojan、Snell、Hysteria、Hysteria 2、TUIC、WireGuard、Reality、HTTP(S)、SOCKS5 and more. Proxy groups support Fallback (auto-failover), URLTest (latency optimization), LoadBalance, and Rule Provider subscriptions, catering to both service provider users and self-hosters.

Clash is completely free. All clients are open-source on GitHub under various licenses, with no subscription fees, feature walls, or ads. The Clash core (Mihomo) and clients like Clash Verge Rev and FlClash are free to download. Note that Clash is a client tool; you need a proxy service (like a provider subscription or your own node) to use it, which may incur costs.

Rules are the brain of Clash, determining where traffic goes (Proxy, Direct, or Reject). Rules support matching by domain (DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD), IP range (IP-CIDR), GeoIP (location), and process name (PROCESS-NAME). Most provider subscriptions include a full rule set; for customization, add higher-priority rules to the rules field in your config file. See our tutorials for details.

Android users are recommended to download the FlClash APK from this site. Its Material You design is easy to use and supports arm64-v8a and x86_64. iOS users can find compatible clients like Stash on the App Store (requires a non-Mainland ID). Just import your subscription and enable the VPN profile. See our mobile setup guide for more.

Why Choose Clash?

Unlike traditional tools that encrypt everything, Clash's rule engine gives you precise control over every request: no slowdowns for domestic sites, no barriers for global ones.

View All Features
Traditional Proxy / VPN
  • Full encryption, slows down domestic access
  • Usually only 1–2 protocols supported
  • Fixed rules, no custom routing
  • Closed source, privacy cannot be audited
  • Paid subscriptions, limited features
  • Single server, no auto-failover
VS
Clash Smart Routing Proxy
  • Direct for domestic, proxy for global
  • Full support for 12+ mainstream protocols
  • Flexible, fine-grained routing control
  • Fully open-source and auditable
  • Free forever, zero restrictions
  • Multi-node Fallback auto-failover

Rule Engine: The Heart of Smart Routing

Clash matches connections by priority to determine if traffic goes to proxy, direct, or reject, automating domestic and global routing.

1
Initiate Connection
Network requests from apps or system
2
Rule Engine Matching
Matches domain, IP, and process by priority
3
Proxy Group Decision
Select / URLTest / Fallback…
Output Result
DIRECT Direct
PROXY Proxy
REJECT Reject

Domain Rules: DOMAIN / DOMAIN-SUFFIX / DOMAIN-KEYWORD

The most common rule types.DOMAIN Matches a full domain exactly (e.g., google.com）；DOMAIN-SUFFIX matches a domain and all subdomains (e.g., .github.io covers all GitHub Pages);DOMAIN-KEYWORD fuzzy matches by keyword, ideal for ad-blocking. These rules work without DNS resolution for the lowest latency.

IP Rules: IP-CIDR / GEOIP

IP-CIDR Matches IPv4/IPv6 ranges exactly.GEOIP CN automatically identifies domestic IPs via the GeoIP database for zero-maintenance direct routing.

Process Rules: PROCESS-NAME

Matches by the process name initiating the connection. For example, you can force git、npm、curl and other terminal tools through a proxy while the browser follows independent domain rules.

Proxy Group Strategy: Select · URLTest · Fallback · LoadBalance

Select Manual selection of exit node;URLTest auto-switch to the lowest latency node;Fallback auto-switch to backup nodes if the primary is down;LoadBalance distributes connections across multiple nodes for higher throughput. Nested strategies are supported.

Rule Provider: Subscription Rule Sets

Subscribe to rule-providers Remote subscription to third-party rule lists (e.g., ad filters, streaming unlocks) with automatic updates to keep your config current without manual edits.

Fallback Rule: MATCH

The MATCH rule at the end of the config catches all unmatched traffic, ensuring every request has a defined path (Direct or Proxy).

View Full Rule Configuration Docs

Tutorials & Latest News

All Articles
For Beginners

The Ultimate Clash Beginner's Guide: From Download to Configuration

Get started in 5 minutes with detailed steps for Windows, macOS, and Android, plus subscription tips and troubleshooting.
Advanced Config 2026 · 05

Clash TUN Mode Deep Dive: Proxying Terminal CLI Tools

Use a virtual network interface to handle all system traffic, solving proxy issues for git, npm, pip, and curl.
Protocol Selection 2026 · 05

Hysteria 2 vs VLESS Reality: Which is Faster and More Stealthy?

An in-depth comparison of two high-performance protocols on speed, latency, stability, and anti-censorship to help you choose the best node.

Trusted by the Open Source Community

45K+
GitHub Stars
8M+
Global Downloads
100+
Code Contributors
Visit GitHub Repository