Clash Verge TUN Mode Setup: Service Mode, Admin Mode & Troubleshooting
“How to set up TUN mode” is one of the most common Clash Verge questions. In one line: TUN mode routes your entire computer’s traffic through the proxy, including apps that ignore the system proxy. This guide covers the prerequisites and troubleshooting.
This follows Clash Verge Rev v2.x.
TUN mode vs system proxy: know the difference first #
| System Proxy | TUN mode | |
|---|---|---|
| How it works | Sets the OS HTTP/SOCKS proxy | Creates a virtual NIC, captures all traffic |
| Coverage | Only apps that honor proxy settings (browsers, etc.) | Almost everything, including games and CLI tools |
| Privileges | Normal | Administrator (Service Mode / admin mode) |
| Best for | Everyday browsing | Game acceleration, whole-device proxy, apps that ignore the system proxy |
Quick test: the browser proxies fine but some app/game refuses to go through the proxy → time for TUN.
Prerequisite: Service Mode / Admin mode #
TUN needs elevated privileges. Clash Verge Rev offers two ways (pick one):
- Service Mode (recommended): installs a background system service for the needed privileges — install once and TUN works on every normal launch.
- Administrator mode: run Clash Verge as administrator each time.
Enabling steps #
Windows #
- Settings → Service Mode → Install (confirm the UAC prompt); or right-click → run as administrator.
- Turn on Settings → TUN Mode.
- On Windows, TUN uses the Wintun driver — handled automatically, no manual driver install.
macOS #
- Settings → Service Mode / authorize the core: follow the prompt and enter your password to grant the core root privileges.
- Turn on the TUN Mode toggle.
Linux #
- Install the service or grant the core privileges (depends on distro — may need
setcapor installing the service). - Turn on the TUN Mode toggle.
Stack choice (gVisor / System / Mixed) #
The TUN network stack is selectable in settings:
| Stack | Notes |
|---|---|
| gVisor | Best compatibility, the default, stable across platforms |
| System | Uses the system stack, higher performance, but more environment-sensitive |
| Mixed | A combination of both |
When unsure, keep the default gVisor; try System only if you want maximum performance and hit no issues.
Common TUN problems #
| Symptom | Cause / fix |
|---|---|
| TUN on but no internet | Service Mode not installed / not running as admin; or DNS off → enable DNS (fake-ip recommended) |
| TUN toggle won’t stay on | Insufficient privileges → install Service Mode or run as admin |
| TUN on but still not proxying | Another VPN/proxy also runs TUN, adapter conflict → close the other TUN client |
| DNS leak | Enable the built-in DNS with fake-ip so system DNS isn’t bypassed |
| Game/app still direct | Make sure the app isn’t bound to a specific NIC; if needed, use a custom rule to force it through the proxy |
Related #
- Add custom rules (force an app/site through proxy or direct): How to add rules in Clash Verge
- Change DNS and other global keys: Clash Verge Global Extended Configuration
- More troubleshooting: Clash Verge FAQ
- Getting started: Clash Verge tutorial