TUN Mode and Permissions FAQ
Learn when Clash TUN is needed and fix permission, driver, VPN, DNS, route, and network-tool conflicts; compare system proxy and TUN before choosing.
First confirm that you actually need TUN
Only move on to permissions, routing, and DNS when the system proxy cannot cover the target traffic.
When Should I Enable TUN Mode?TUN is useful when an app ignores the system proxy, UDP traffic must be captured, or more system traffic needs rule-based handling. Browsers and other apps that already honor the system proxy usually do not need it.What If TUN Requires Administrator, VPN, or Driver Permission?TUN creates a virtual network interface and changes routes, so desktop systems may require administrator privileges and mobile devices usually require VPN authorization.How Do I Troubleshoot DNS or Routing Problems After Enabling TUN?Common TUN issues include DNS traffic not reaching Clash, bypassed or looping routes, LAN addresses being captured incorrectly, and inconsistent IPv6 handling.