Clash Field
Default
proxies
Proxy node, with content as an array. Obtained from configuration file.
proxy-groups
Composed of multiple proxy nodes. Obtained from configuration file.
proxy-providers
Proxy providers, capable of merging multiple configuration files.
rules
Proxy rules, where rules are matched in the order from top to bottom, with rules at the top of the list having higher priority than those below them.
rule-providers
Proxy rule providers, capable of managing rules and updating them individually.
Handle
mode
Operation Mode.
rule
Rule-based matchingglobal
Global proxy (requires selecting proxy/strategy in GLOBAL proxy group)direct
Global direct connection
port
HTTP(S) proxy port.
socks-port
SOCKS4/4a/5 proxy port.
mixed-port
Mixed port is a special port that supports both HTTP(S) and SOCKS5 protocols simultaneously. You can use any program that supports HTTP or SOCKS proxies to connect to this port.
allow-lan
Allows other devices to access the internet through Clash proxy port.
log-level
Controls the logging level of Clash core, only output to console and control page.
silent
Silent, no output.error
Outputs logs of errors and unusable logs.warning
Outputs logs of errors that do not affect operations, and logs of error level.info
Outputs general operational logs, as well as logs of error and warning levels.debug
Outputs as much information as possible during runtime.
ipv6
Whether to allow the kernel to accept IPv6 traffic.
secret
Access key for the External Control API.
external-controller
External controller, allows controlling your Clash kernel using RESTful API.
API listening address, you can change 127.0.0.1 to 0.0.0.0 to listen on all IPs.
Other
dns
Enable DNS configuration field.
tun
Enable TUN configuration field.
ebpf
eBPF redirection to TUN is a feature that intercepts all network traffic on a specific network interface and redirects it to the TUN interface. This feature requires kernel support.
Supported kernel: Mihomo
Clash Premium
hosts
Enable hosts configuration field.
script
WARNING
ONLY SUPPORT Premiun kernel.
You should prioritize using the Nyanpasu script feature.
Clash Premium has implemented a script feature based on Python3, allowing users to dynamically and flexibly select policies for data packets.
profile
In the official Clash documentation, 'profile' should serve as an extended configuration, but in Clash.meta, it's only used as a cache item.
payload
Payload serves as the content for rule-providers.
tunnels
Flow forwarding tunnel, capable of forwarding TCP/UDP traffic, and can also be forwarded through a proxy.
auto-redir
experimental
Experimental configuration
interface-name
Specify the outbound interface for the proxy-groups.
routing-mark
Attach a routing markwhen the proxy-groups goes outbound.
redir-port
The redirect port is only applicable to Linux (Android) and macOS. Can only proxy TCP traffic.
tproxy-port
The tproxy port is only applicable to Linux (Android). Capable of proxying both TCP and UDP traffic.
iptables
external-ui
INFO
Recommend using the built-in Web UI management feature of Nyanpasu.
Allows running static webpage resources (such as Clash-dashboard) on Clash API, path is API address/ui.
bind-address
Binding address, only allows other devices to access through this address.
authentication
User authentication for http(s), socks, and mixed proxies.
Meta
tls
Proxie field.
sniffer
Clash uses a Mapping mechanism to address the issue of being unable to pass domain names through the Redir port in transparent proxy scenarios. However, this mechanism can lead to inaccuracies in domain name restoration and domain-based routing if Clash's built-in DNS resolution service is not used.
Meta incorporates a Sniffer domain name sniffer, which reads the domain name field in handshake packets to restore IPs to domain names, effectively addressing the shortcomings of the Mapping mechanism.
geox-url
Custom GEO Download Address
listeners
sub-rules
geodata-mode
Change the geoip usage file, mmdb or dat,true is dat, with a default value of false.
unified-delay
Change delay calculation method, remove additional delays such as handshakes.
tcp-concurrent
enable-process
Meta rename find-process-mode.
find-process-mode
Controls whether Clash matches processes.
always
Enables, forces matching of all processes.strict
Default, Clash determines whether to enable.off
Does not match processes, recommended for use on routers.
skip-auth-prefixes
Set the IP ranges allowed to skip authentication.
external-controller-tls
HTTPS-API listening address, requires configuring the tls section for certificate and private key configuration, external-controller must also be filled in.
global-client-fingerprint
Global TLS fingerprint, lower priority than client-fingerprint inside proxy.
Currently supports TCP/grpc/WS/HTTP transport with TLS, supported protocols are VLESS, Vmess, and trojan.