Skip to content

System Proxy and TUN ​

Choose traffic capture ​

↔ Swipe left or right to see all columns

SituationCheck first
Desktop browser or app following system settingsSystem Proxy
Apps ignoring system proxy, some games and UDPTUN
AndroidVPN permission and app access control
App with its own proxy settingsIts protocol, address and port

Capture comes before routing

Rule/Global/Direct modes act after capture; they do not replace the capture switch.

Desktop System Proxy ​

FlClash for oixCloud · Choose desktop traffic capture
English interface simulation · Fictional data · Click to enlarge

Start the client and enable System Proxy. Check that system HTTP/HTTPS settings use its local port. Other proxy software, a PAC script or organization policy may override them.

Apps with independent settings need separate configuration. If networking breaks after closing the client, check for a stale system proxy pointing to a stopped port.

TUN ​

Enable TUN and complete administrator authorization. A rejected permission request cannot be fixed by repeatedly toggling the switch.

After connection, check exclusions, routes, DNS and competing VPNs. Change MTU or stack only with a specific comparison in mind, and restart as required by the interface.

Android ​

Allow the system VPN request. If only some apps fail, inspect app access control, then check whether background battery restrictions interrupted the VPN.

Verify ​

Compare the same target's behavior with connection records. Windows/macOS users can run network checks for listeners, system proxy and TUN state.

Proxy conflicts and occupied ports ​

On Windows/macOS, startup may report a possible proxy conflict and list existing system proxies, a PAC script or another VPN/tunnel. Identify their purpose and open Network self-check from the message if needed. This is evidence to investigate, not proof of the failure's cause.

If the mixed port is occupied, the port dialog suggests an available port when it finds one. Review it, choose Save and retry, and update apps with manually configured proxy addresses. A successful port check does not reserve it against another process using it later.

Check each guide for feature and platform scope

Illustration

Scroll to inspect details · Pinch to zoom further