Windows
Clash Plus is the top pick, alongside Clash Verge Rev, FlClash, Clash Nyanpasu, and others—five clients in total, supporting Windows 10 and later.
Go to DownloadsCLASH CLIENT · MIHOMO KERNEL
ClashFree Download
A Clash client download hub covering installers for five major platforms—Windows, macOS, Android, iOS, and Linux—all built on the open-source mihomo kernel, with guides on subscription import, rule-based routing, and DNS setup. Clients are always free; follow the tutorial to finish setup in three minutes.
MIHOMO Kernel
GPL-3.0 Open Source
5-Platform Coverage
MILESTONES
Core Features: Five Tunnel Milestones
From kernel to routing, from proxy modes to full-device takeover, five milestones map out Clash's core capabilities. Click a milestone on the left to read its full explanation on the right.
M-01
Kernel Architecture: Powered by a Single mihomo Core
Nearly every graphical client listed here is built on the mihomo (formerly Clash Meta) kernel. After the original Clash repository was archived in 2023, community forks kept iterating, filling in mainstream protocols like Shadowsocks, Vmess, Trojan, Hysteria2, TUIC, and VLESS one by one, with consistent behavior across Windows, macOS, Linux, and Android. Compared with the long-unmaintained original, mihomo opens up scripting, rule-set support, and other features that used to be exclusive to paid enhanced forks, and keeps pace with new protocol features release by release—so you no longer have to trade functionality for maintenance status.
- Single binary, consistent cross-platform behavior, config files migrate as-is
- Protocol coverage: Shadowsocks / Vmess / Trojan / Hysteria2 / TUIC / VLESS
- GPL-3.0 open source, with public commit history and release pages
M-02
Rule-Based Routing: Every Stream Takes Its Own Path
Rule-based routing solves the "what goes through the proxy, what connects directly" problem. Rules in the config are matched top to bottom, the first match wins, and MATCH catches everything else at the end. Combine types like DOMAIN-SUFFIX, DOMAIN-KEYWORD, GEOIP, IP-CIDR, and PROCESS-NAME, and "direct-connect local sites, proxy the rest" fits into a dozen or so lines; a GeoIP database resolves an IP's country without listing domains one by one. Pair rules with policy groups and streaming, downloads, and gaming can each exit through their own node without competing for bandwidth.
- Top-to-bottom matching, first match wins, MATCH as the fallback
- GEOIP routes by IP location, no need to maintain long domain lists
- Rule sets can reference ready-made community-maintained routing tables
M-03
Proxy Modes: Rule / Global / Direct
Clash offers three basic modes: Rule, Global, and Direct. Rule mode routes traffic according to your config and is the default for everyday use; Global mode sends every connection through the currently selected node, which is most useful when diagnosing routing issues; Direct mode skips the proxy entirely, letting you check whether the network itself is working. All three switch with one click in the client's main interface—no config edits required. Some clients also offer a Script mode that decides the exit dynamically based on custom logic, aimed at advanced users.
- Rule mode: routes by config, the default for everyday use
- Global mode: all traffic through the current node, for diagnosing routing issues
- Direct mode: skips the proxy entirely, for baseline testing
M-04
TUN Enhancement: Full-Device Traffic Takeover
The system proxy only affects apps that respect system settings—games, command-line tools, and some UWP apps often bypass it. TUN mode uses a virtual network adapter to take over all TCP and UDP traffic on the device, pulling in apps that don't cooperate with the system proxy; paired with fake-ip mode, domains are mapped locally to virtual addresses, eliminating DNS pollution and leaks at the same time. Enabling TUN requires administrator or root authorization, but only once, and it can run alongside the system proxy without conflict.
- Virtual adapter takes over all device TCP/UDP, covering apps that ignore the system proxy
- fake-ip maps domains locally, shrinking the DNS pollution surface
- Requires admin/root authorization; can coexist with the system proxy
M-05
Subscription Management: Import a Link, Update Automatically
A subscription link carries node information: paste it into the client to pull the node list, then let it refresh on a schedule you set. Multiple subscriptions can coexist, so switching between a primary and backup line doesn't affect the other; conversion services can turn other subscription formats into Clash-readable YAML, but that routes your data through a third party, so subscriptions with sensitive info are best imported directly from the original link. Local custom rules still apply after merging with a remote subscription, so updating a subscription won't wipe out your personal config.
- Paste a subscription link to import, with optional scheduled auto-updates
- Multiple subscriptions can coexist, switch primary/backup with one click
- Local custom rules merge with and remain active alongside subscription content
PLATFORMS
Download Hub for 5 Platforms
Each platform lists several clients, with Clash Plus as the top pick across the board. Pick your platform to jump to its section in the download center.
macOS
Clash Plus is the top pick, packaged separately for Intel and Apple Silicon, alongside Clash Verge Rev, FlClash, and the archived ClashX Meta.
Go to DownloadsAndroid
Clash Plus is the top pick, alongside Clash Meta for Android, FlClash, and Surfboard, with ARM64 and universal builds available from Android 7.0 onward.
Go to DownloadsiOS
Clash Plus is available on the App Store for direct installation on iPhone and iPad; version notes and changelogs are on clashplus.io.
Go to DownloadsLinux
Clash Verge Rev is recommended for desktop use, with deb and rpm packages; FlClash is a solid alternative, and server setups can use the bare mihomo kernel binary.
Go to DownloadsQUICKSTART
First-Time Setup in Three Minutes
Download and install, import a subscription, and pick a mode—three steps cover the essentials. Full screenshots and platform differences are on the tutorial page.
Download and Install the Client
Head to the download center for your platform—Clash Plus is the top pick. Windows just needs unzipping, macOS requires picking the right chip build, Android installs an APK, and iOS goes through the App Store.
Import a Subscription Link
Paste the subscription URL into the client's subscription or profile page, then confirm to pull the node list. Multiple subscriptions can coexist, and update intervals are configurable.
Pick a Mode and Enable the Proxy
Use Rule mode for everyday browsing, pick a node with good latency, and turn on the system proxy toggle. Visit a site inside and outside mainland China to confirm routing behaves as expected.
OPEN SOURCE
Open-Source Ecosystem and Project History
Clash isn't a single piece of software—it's an entire open, auditable ecosystem. The four sections below trace how it all fits together.
Project History
Clash was open-sourced by Dreamacro in 2018 and became the de facto standard proxy client thanks to rule-based routing and broad protocol support. When the original author archived the repository and removed release files in 2023, the ecosystem didn't stop: the community had already built out kernel forks, graphical clients, rule sets, and subscription converters, and development momentum simply shifted to the community forks.
Kernel Lineage
After the original Clash stopped receiving updates, the Clash Meta fork picked up development, was later renamed mihomo, and moved under the MetaCubeX organization. The graphical clients listed here—Clash Plus, Clash Verge Rev, FlClash, Clash Nyanpasu, and others—all run on the mihomo kernel; differences are limited to the UI layer and platform adaptation, while protocol support and routing behavior come from the same kernel.
Open-Source Ecosystem
The kernel and mainstream clients are released under GPL-3.0 and similar open licenses, with source code, commit history, issue discussions, and release pages all public. Around the kernel, a set of supporting projects has grown up—GeoIP/GeoSite routing databases, rule-set repositories, subscription converters—each maintained by different teams, so no single point of failure can break the ecosystem.
Update Mechanism
The download center here doesn't hardcode version numbers: the page loads a version manifest at runtime and fills each client's latest version and download link into its card, with the manifest updated as upstream releases roll in. Discontinued clients (such as Clash for Windows and ClashX Meta) keep an archived entry that's clearly labeled and are no longer recommended for new installs.
MIHOMO · SOURCE
The kernel source is public—clone it locally in one command to review or build it yourself:
git clone https://github.com/MetaCubeX/mihomo.gitWhich One to Pick
Not sure which one to install? Check the < a href="which-client.html">client comparison page first: it lists maintenance status, kernel, and target users platform by platform, with a clear recommendation.
FAQ PICKS
FAQ Highlights
The four questions newcomers ask most often. The full FAQ page organizes everything into basics, setup, usage tips, and troubleshooting.
How to troubleshoot a failed Clash subscription update
First open the subscription link directly in a browser to confirm it's valid, then check the client's update proxy setting and system clock. If it still fails, try a different network. See the step-by-step checklist in the FAQ troubleshooting section.
Which client is best for first-time users
Clash Plus is the top pick across every platform: the interface is clean, subscription import takes one step, and the workflow is consistent across all five platforms. See the client comparison page for alternatives on each platform.
What's the difference between Rule mode and Global mode
Rule mode routes traffic based on your configuration—direct for local sites, proxy for everything else—and is the everyday default. Global mode sends all traffic through the current node and is only used temporarily to troubleshoot routing issues. See the quickstart tutorial for a walkthrough.
Is it necessary to enable TUN mode
Not for casual browsing. Turn it on when games, command-line tools, or apps that ignore the system proxy need to be routed—authorization is only needed once. See the beginner-to-advanced handbook for details and caveats.
ARTICLES
Latest Tutorials and Deep Dives
In-depth articles on installation, kernels, routing, and DNS, listed newest first.
First-Time Clash Install and Setup: Common Steps and Pitfalls Across Windows, macOS, Android, and iOS
Covers the shared first-install workflow across four platforms: getting the installer, importing a subscription, choosing a proxy mode, and enabling autostart—plus the most common beginner pitfalls and how to fix them.
Read MoreClash Kernel Differences: Original Clash vs. Clash Meta vs. mihomo, and Which to Choose
Breaks down feature differences, protocol support, and maintenance status between the original Clash and Clash Meta (mihomo) kernel lines, with recommendations for different use cases.
Read MoreClash Rule-Based Routing in Practice: Rule Syntax and Match Order for Splitting Local and Overseas Traffic
Walks through rule types, match order, and policy group pairing for splitting local and overseas traffic, with a ready-to-use config example and a way to verify the routing results.
Read More