What is the difference between system proxy and TUN modes? How to choose
Each mode has trade-offs. When using XINOR on a computer, we recommend turning on TUN (virtual network adapter mode) by default: it does not depend on the system proxy setting and is the least likely to end up “connected but websites won’t load”.
Before you start
Operation steps
- 01
How system proxy works
The client modifies the HTTP/HTTPS proxy setting of the operating system. Applications such as browsers that follow the system proxy will use it. Some games and command line programs may ignore it.
- 02
How TUN works
The client creates a virtual network interface to take over IP traffic at a lower level, which has greater coverage and is more likely to conflict with VPN, virtual machines, filters, and corporate network policies.
- 03
Turn on TUN by default on computers
The system proxy is just a system setting. Browser extensions, security software and other accelerators can all change it while the client still shows it as on, and pages then time out. TUN does not depend on this setting; once the service is installed the first time, it is the most hassle-free option.
- 04
Use the system proxy only when TUN cannot be installed
If the service fails to install or your computer’s policy does not allow it, you can use the system proxy for now. In Clash Verge, turn on “System Proxy Guard” in the system proxy settings so the setting is restored automatically if it gets changed, and turn off proxy extensions in your browser.
- 05
Avoid repeated takeovers
Do not run multiple TUN/VPN tools at the same time; when switching modes, first close the old mode and confirm network recovery.
After completion, check like this
- Identify which applications require proxy
- Run only one primary network takeover tool
- proxy settings restored after exiting
- TUN driver or permissions are normal
FAQ
Will TUN make it faster?
uncertain. It mainly changes the traffic takeover range and does not directly guarantee the line speed.
Which one does the mobile version belong to?
Android and iOS usually use the system VPN interface, and the experience is closer to the global takeover of TUN.