Clash Verge Rev Troubleshooting: TUN, No Internet, IPC & 403

Independent community guide · Project facts checked against the upstream GitHub repository

Use this table for a 30-second diagnosis before changing advanced settings:

SymptomCheck firstFull guidance
TUN switch will not stay onService Mode or administrator privilegesTUN setup
Connected but no internetactive network mode, node, DNS, conflictsNo-internet checks
Subscription import failsfresh URL and Mihomo formatImport diagnosis
Remote profile returns 403token and provider restrictions403 diagnosis
IPC path not readycore process and Service ModeIPC diagnosis
White screen or startup crashWebView2/WebKitGTK, path, configStartup diagnosis

Why is Clash Verge TUN mode not working? #

TUN needs elevated privileges and a working core service.

  1. Install Service Mode in Settings, or launch Clash Verge Rev with administrator privileges.
  2. During diagnosis, turn off System Proxy and test TUN by itself.
  3. Keep the built-in DNS enabled; TUN depends on the core DNS path.
  4. Close other VPN or proxy applications that create a TUN adapter.
  5. If the switch waits about 30 seconds or reports an IPC/service error, reinstall Service Mode after ending leftover processes.

See the complete TUN mode, Service Mode and no-internet guide.

Clash Verge is connected but there is no internet. What should I check? #

Check in this order:

  1. Network mode: confirm System Proxy or TUN is actually enabled. A successful node latency test alone does not route traffic.
  2. Node: choose another node and run the test again.
  3. Conflict: while diagnosing, use either System Proxy or TUN, not both; close other VPN/TUN applications.
  4. DNS: enable the built-in DNS and start with the profile defaults or fake-ip mode.
  5. Rules: in Rule mode, confirm the target domain did not match a DIRECT rule unexpectedly.
  6. Stale system proxy: if everything stopped after a crash, disable the operating-system proxy and restart the application.

For a site-specific route, add a custom rule rather than switching all traffic to Global mode.

Why does Clash Verge say administrator privileges are required to modify the system proxy? #

  • Quit and reopen the application with Run as administrator, or install Service Mode from Settings.
  • Service Mode is the better long-term option because it avoids an elevation prompt on every launch.
  • If installation fails silently, check endpoint security or antivirus logs, then reinstall the service.
  • You normally do not need both Service Mode and an administrator launch.

How do I fix core communication error or IPC path not ready? #

IPC path not ready means the interface cannot communicate with the Mihomo core. Changing nodes does not repair a core that failed to start.

  1. Exit Clash Verge completely, including the tray icon.
  2. End leftover clash-verge, verge-mihomo and mihomo processes.
  3. Reopen the application with sufficient privileges.
  4. If Service Mode is abnormal, uninstall and reinstall it.
  5. Temporarily close other security, proxy or TUN software that may block the service.
  6. If the core still fails, back up subscription URLs before resetting the application configuration.

Why does Clash Verge subscription import fail? #

Common causes are:

  • Expired or revoked URL: copy a fresh subscription URL from the provider.
  • Truncated token or accidental spaces: paste the complete URL into a plain-text editor and check it.
  • Unreachable provider domain: try the provider’s current backup domain or network guidance.
  • Wrong format: request Mihomo or clash.meta output instead of a format intended for another client.
  • YAML parsing error: the converter may emit unsupported or malformed fields; contact the provider with the exact error.

Do not publish a private subscription URL when asking for help; it normally contains an account token.

Why does a remote profile return 403 Forbidden? #

A 403 response comes from the subscription server, not from YAML parsing.

  1. Copy a fresh URL from the provider dashboard.
  2. Remove spaces, line breaks or a truncated token.
  3. Test whether the same URL is rejected in a browser.
  4. Check whether the provider restricts IP addresses, user agents or expired accounts.
  5. Contact the provider if the server continues to reject the request.

Changing Clash Verge rules or DNS does not remove a server-side authorization restriction.

Why won’t Clash Verge open or why is the window white? #

  • Windows: install or repair the Microsoft WebView2 runtime.
  • Linux: install the WebKitGTK package required by your distribution.
  • Install path: use an ASCII-only path; avoid non-ASCII characters in legacy environments.
  • Leftover process: end all Clash Verge and Mihomo processes before relaunching.
  • Corrupted UI state: back up subscription URLs, then reset the user configuration if the other checks fail.
  • Lightweight mode: restore the window from the system tray before assuming the UI has disappeared.

Other common questions #

What protocols does Clash Verge Rev support? #

Protocol support follows the bundled Mihomo core and the current release. Common profile types include Shadowsocks, Trojan, VMess/VLESS, SOCKS, Hysteria2, TUIC and WireGuard. A provider still has to generate a valid configuration for the protocol.

Is there an official Android or iOS app? #

No. Clash Verge Rev publishes desktop builds for Windows, macOS and Linux. See the Android alternatives guide and avoid packages advertised as an official Clash Verge APK.

How do I add a rule without losing it after an update? #

Right-click the profile, open Edit Rule, and add the rule in prepend or append. See Add Custom Rules in Clash Verge Rev.

How do I update Clash Verge Rev? #

Verify the current version against the GitHub release source and choose the appropriate package from the installer page. Back up subscription URLs before a major migration or configuration reset.

Table of Contents