If Shadowrocket is the go-to for iOS, Clash is the workhorse for Android / Windows / Mac. It’s YAML-based with powerful rule support. This guide covers importing your subscription, smart routing and ad-blocking, step by step.
1. Pick the right client
The Clash ecosystem now centers on the Clash Meta (mihomo) core (the original Clash Premium is archived):
- Windows / Mac: Clash Verge Rev (friendly UI, good for beginners).
- Android: Clash Meta for Android.
- iOS: Stash / Shadowrocket (Clash-core wrappers on iOS).
2. Import your subscription (the crucial first step)
Clash pulls its nodes and config from a subscription link — that’s the prerequisite for everything:
- Open the client → “Profiles” → “New / Import”.
- Paste your subscription link (URL) → download.
- Select and enable that profile.
Most clients also support a one-tap import deep link (tap the link to import directly), easier than pasting.
3. Smart routing (rules)
Routing goes under rules: in the config, matched top-down, first hit wins. The core is just two rules:
rules:
- GEOIP,CN,DIRECT # domestic IPs connect directly
- MATCH,PROXY # everything else via proxy (Clash's fallback is MATCH, not FINAL)Add as needed:
- DOMAIN-SUFFIX,netflix.com,PROXY # streaming via proxy
- IP-CIDR,192.168.0.0/16,DIRECT # LAN direct4. Ad-blocking (rule-providers)
Clash blocks ads in bulk via rule-providers (remote rule sets); 神机 and 墨鱼 both have Clash ad-blocking sets. Reference a set in the config and REJECT on hit:
rule-providers:
ads:
type: http
behavior: domain
url: "ad-blocking rule set URL"
path: ./ruleset/ads.yaml
interval: 86400
rules:
- RULE-SET,ads,REJECT # block ad rule set first, at the top5. Settings that trip people up
- Mode must be “Rule” — “Global” sends everything through the proxy, “Direct” nothing; either way your routing rules stop working (same idea as Shadowrocket’s “Config” routing).
- Enable TUN mode so all app traffic (not just the browser) follows the rules — especially needed on PC.
- Enable DNS protection to avoid DNS pollution breaking the domestic/overseas split.
6. Your rules still need a working subscription
Clash is just a client — it decides “how to route”, but what gets you online is the subscription (nodes). An unstable subscription means even great rules run on nothing.
If you don’t have a stable subscription yet, SSRocket provides a mainland-reachable subscription link + one-tap import: after payment your config is emailed automatically — one tap imports it into Clash, and with the rules above you’re good to go.
FAQ
- Imported the subscription but no traffic? Check the mode is “Rule” and, on PC, that TUN / system proxy is on.
- Domestic sites slow / routed through the proxy? Make sure
GEOIP,CN,DIRECTis active — domestic traffic is fastest going direct. - Ad-blocking incomplete? Add an ad-blocking rule set (rule-providers) at the top of your rules.