SETUP GUIDE

Clash setup for all platforms

Install a client for your system, import your private VTbox subscription and test your routing and connection.

Find a setup solution

01

Download and install a client

Choose an installer that matches your OS version and processor architecture. You can also download it from the official release page.

iOS · Shadowrocket

Get Shadowrocket from the App Store. Price and availability depend on your storefront. Copy the Universal Base64 / Shadowrocket link from the VTbox dashboard and paste it into a new subscription in the app. Update the subscription, select the VTbox node and allow the VPN connection when prompted.

View Shadowrocket on the App Store

Linux · Clash Verge Rev / Mihomo

Use Clash Verge Rev for a graphical interface. Choose DEB for Debian or Ubuntu, RPM for Fedora or openSUSE, and check the processor architecture.

Download Mihomo for your system architecture. Open the Clash / Mihomo / Stash URL from your dashboard and save the profile as config.yaml with read access for your user only. Use mihomo -t -f config.yaml to check the file, then run mihomo -f config.yaml to start the client.

Official Clash Verge Rev releases

Official Mihomo releases

02

Get and import your subscription

  1. Sign in to the VTbox dashboard and copy the active link for your client. Use Clash / Mihomo / Stash (YAML) for Clash Verge Rev, Clash Meta for Android and Mihomo. Use Universal Base64 / Shadowrocket for Shadowrocket.
  2. In the client’s Profiles or Subscriptions view, choose Import from URL and paste the link. You can name the profile VTbox.
  3. Save and select the profile. If the client has an update button, use it to verify that the profile can refresh.

Your subscription URL contains credentials. Hide the entire URL before sharing a screenshot or an error report.

03

Choose a proxy mode and routing rules

  • Rule mode uses the profile’s rules to select proxy or direct connections. The default VTbox profile routes matching traffic to the VTbox node. Add direct rules in your client as needed.
  • Global mode sends intercepted traffic through the global policy. Check which node is selected when troubleshooting.
  • Direct mode connects intercepted traffic directly so you can compare connectivity with proxy mode.
04

Enable the proxy and verify connectivity

  1. On Windows or macOS, start with System Proxy. On Android and iOS, start VPN inside the app and approve the prompt. On Linux, set the desktop proxy or specify a local proxy for the app you’re testing.
  2. In Proxies or Nodes, select a node and run a latency test. Then open your target site to confirm it loads.
  3. To route more apps through the proxy, see the TUN instructions below and check client and system support.

TROUBLESHOOTING

Troubleshooting

What if importing returns a network error, 403 or a parse error?

Copy the full URL again and check the subscription and balance in your dashboard. Temporarily turn off other proxies to verify the device can reach VTbox. If parsing still fails, update the client or check whether its engine supports the node protocol.

Why is WeChat slow or a local site unreachable through the proxy?

Temporarily switch to Direct to see if the proxy is involved. If your client supports custom rules, add a direct rule and check the connection log to verify it matched.

How do I enable TUN mode?

On desktop, enable TUN or the virtual adapter in client settings and follow the prompts to grant access or install the system service. Stop other VPNs or virtual adapters before testing if they conflict with routing.

How can I share the proxy on my LAN?

Enable Allow LAN only on trusted networks. On another device on the same Wi-Fi, enter the proxy host’s LAN IP and the port shown in the client. Turn off sharing when finished.

Can the wrong system time break TLS?

Enable automatic date, time and time zone on your device. After it synchronizes, refresh the subscription and test again.