Don't panic — the answer is probably already here.

Clash is an open-source, rule-based proxy forwarding framework, and its core job is to decide, based on rules you configure, whether each network request goes direct, through the proxy, or gets rejected. It doesn't provide nodes itself — you need to bring your own. This is different from a traditional VPN, which routes your entire device's traffic through one tunnel, and it's a completely different thing from a dedicated "node reseller" service — Clash is simply the tool that schedules traffic according to rules.

Yes. clashoffice.com is the official release and documentation site for the Clash project. The installers, tutorials, and FAQ shown on this page are all maintained and published directly by us, without going through any third-party relay or proxy.

The Clash software itself is completely free and open source, released under the GPL-3.0 license, and neither the installer downloads nor the tutorial content on this site come with any charge. If you need proxy nodes, that service is usually provided and billed separately by a third-party provider — unrelated to the Clash software itself.

Official releases currently exist for four platforms: Windows, macOS, Linux, and Android. The iOS client is under App Store review, and we plan to distribute it via the App Store and TestFlight — progress will be updated on the download page.

Yes, Clash is released as open source under the GPL-3.0 license, and the code is public and auditable. GPL-3.0 lets you freely use, modify, and distribute it, but if you distribute a modified version, it must also be open-sourced under GPL-3.0, keeping the original author's copyright notice intact.

Go to thedownload page, and pick the installer for your operating system. This page is kept up to date as new versions are released.

This is a common false positive from Windows SmartScreen for smaller open-source software, and doesn't mean the file is actually a problem. Click "More info" → "Run anyway" in the prompt to continue installing. If your antivirus software quarantines the file directly, add it to your trusted list and reinstall.

This is the default restriction from macOS Gatekeeper for apps not signed and distributed through the App Store. Go to "System Settings → Privacy & Security," scroll down to find the notice about the blocked app, and click "Open Anyway."

The iOS client is currently under App Store review, with no confirmed release date yet. Because iOS restricts third-party apps from being distributed outside the App Store, please don't trust any site claiming to offer an "unlisted iOS installer" — such sites have nothing to do with clashoffice.com.

A subscription link is a URL provided by your node provider; your client visits it periodically to automatically pull the latest node list and base rules. clashoffice.com doesn't provide nodes or subscription services — you'll need to choose a compliant node provider yourself to get a subscription link.

For everyday use, Rule mode is recommended, routing automatically based on your config. Global mode is good for temporarily testing whether a node works, or checking if a rule missed some traffic. Direct mode is useful when troubleshooting to confirm whether an issue lies with the proxy itself. All three can be switched at any time without conflict.

This usually means a rule matched DIRECT. Check the policy for that domain or IP range in the rules field of your config file — if it really should be proxied, point that rule to a proxy group instead. You can also temporarily switch to Global mode to check whether it's a rules issue.

System proxy only takes over apps that read the system proxy settings (like browsers) — simple to set up, low overhead. TUN mode takes over all traffic at the network adapter layer, covering games, CLI tools, and other apps that don't read system proxy settings, but requires higher system permissions. For everyday web browsing, system proxy is enough.

Just edit the rules field in your config file. Each rule follows the format type,match content,target policy, for example DOMAIN-SUFFIX,example.com,DIRECT. Rules are matched top to bottom, stopping at the first hit, so earlier rules take priority — put your most common and most precise rules first. For the full field structure, see the config file explanation on the tutorial page.

No. This site only publishes the Clash software itself, installers, and documentation. Proxy services like nodes and subscription links need to be sourced from a compliant third-party provider of your own choosing — they have no affiliation with this site.

First run a latency test on the current node in the node list. If latency is consistently high or it disconnects frequently, it's usually an issue with the node itself or the selected proxy group — try switching to another node in the group, or report the connection quality to your node provider.

The update frequency of the subscription content (node list) is set by your node provider. Most clients support setting an auto-update interval — we recommend enabling it so you don't forget to refresh after nodes expire.

That depends on your node provider's specific terms (some providers limit the number of simultaneous connected devices or concurrent connections). The Clash client itself has no such restriction — check your subscription provider's terms for specifics.

The Clash core only processes and forwards traffic locally — it never uploads your browsing content to any official server. Connection logs visible in the dashboard are also stored locally only, for local debugging and troubleshooting, and are never sent anywhere.

Clash is a general-purpose network proxy tool, and the software itself is not illegal. Whether using a proxy service is compliant depends on the laws and regulations of your region — please understand and follow local rules, and never use it for anything unlawful.

No. The Clash core is open-source software with publicly auditable code, and there's no built-in logic to upload user data to any "official server." The only network access it makes is the subscription update you configured yourself, and the proxy nodes you chose.

In your config file, set the log level log-level to warning or error to reduce unnecessary logging. Also avoid frequent manual speed tests and prioritize low-latency, stable nodes — this noticeably reduces background resource usage, which especially helps mobile devices save battery.

First try re-downloading the installer, to rule out a corrupted file. Then check whether an old version left behind an incompatible config file format — you can back it up, clear the config directory, and re-import your subscription. If it's still not working, check the client's built-in log window for the specific error.

Most clients require you to click "Reload Config" or restart the core for changes to take effect — directly editing the file doesn't get picked up automatically. Also check that your YAML indentation is correct, since a formatting error will cause the config to fail loading and silently fall back to the old one.

First confirm the node actually works (you can test node latency in the dashboard). If the node is fine but you still can't get online, it's usually a conflict between the system proxy / TUN mode and another network tool (another VPN, firewall software, etc.) — try disabling other proxy-related tools and try again.

After removing the client itself through your system's usual uninstall process, you'll also need to manually delete the config directory (usually in a hidden folder under your user directory) to fully clear node info and local logs and avoid leaving sensitive config files behind.

Prioritize low-latency, stable nodes and avoid frequent auto-speed-testing; also lower the log level to warning or error to noticeably reduce background resource usage.

You can head to thetutorial pagefor a systematic look at Clash's core concepts and how it works, or check out theBlogfor more specific configuration articles — both are kept continuously up to date.