If one-click VPN apps like Happ no longer cut it and you want full control over which traffic goes through the VPN and which runs directly, Clash Verge is the tool — specifically its active, modern fork, Clash Verge Rev. This guide covers downloading the client safely on Windows and macOS, importing your subscription profile, understanding the two-level routing model (System Proxy vs TUN, then Rule vs Global vs Direct), and fixing the failures everyone hits.
github.com/clash-verge-rev/clash-verge-rev — the developers publish nowhere else.Clash Verge Rev isn't a VPN service — it's a graphical dashboard for the Mihomo routing core, which does the real work: routing traffic, managing DNS queries, and executing rule sets.
The original Clash Verge (the zzzgydi/clash-verge repository) shipped its last update in October 2023. There is no reason to install it today: it lacks modern protocol support and receives no security fixes. Clash Verge Rev is the active continuation, run by a new team with regular releases. Outdated guides still point at the old project — check the repository name before downloading.
Mihomo handles the technical work — traffic routing, DNS, rule execution. Clash Verge Rev gives it a friendly dashboard: profile cards, a proxies panel with latency checks, and one-click toggles for System Proxy and TUN. It's built to parse advanced Clash/Mihomo YAML configs, merge multiple subscription profiles, and enforce custom routing rules.
On the GitHub Releases page, most PCs need the standard x64 installer (ARM devices take the arm64 build). On Windows 11 you can skip the browser entirely: winget install ClashVergeRev.ClashVergeRev in a terminal. If the app opens as a blank white window, your system is missing the WebView2 runtime — download the build with fix_webview2 in the filename.
macOS 12 or newer. Apple Silicon (M1/M2/M3) takes the installer with aarch64 in the name; Intel Macs take x64. macOS 11 and older aren't officially supported — you'd need to upgrade the OS or run the routing core manually via CLI. Enabling System Proxy on macOS asks for administrator authentication; if you cancel that prompt, the proxy settings silently don't apply.
The same steps work for any provider that issues Clash-compatible subscription links.
Go to the Releases page at github.com/clash-verge-rev/clash-verge-rev, take the latest stable version, and download the installer for your OS — x64 for most Windows PCs, aarch64 for Apple Silicon Macs. Third-party download portals offer unofficial builds that may bundle malware or ads; the developers publish only on GitHub.
Copy the subscription URL from your IT CRP dashboard. In Clash Verge Rev, open the Profiles tab in the sidebar, paste the link into the input field at the top, and click Import. When the profile card appears, click it once to activate it. IT CRP supports subscription metadata, so the card shows your plan details, remaining traffic, and expiration date.
Go to the Proxies tab, select the Rule routing mode, and choose a server location. Click the latency check icon (the lightning bolt / radar symbol) — a ping value like 75 ms means the server is online; timeout means it's currently unreachable, so pick another.
At the bottom of the window, switch on System Proxy — or TUN Mode if you need gaming, calls, or CLI tools covered. The toggle turns green. Open an IP-check site like ipinfo.io or 2ip.io: if your location shows the VPN server's, you're connected.
The configuration operates on two independent levels: ingress — how traffic from your computer enters the client — and egress — where the client routes it next. Pick one from each level.
The client registers itself as the system-wide proxy in Windows/macOS settings. Browsers and most desktop apps route their HTTP/HTTPS traffic through it automatically. Limitations: some applications bypass system proxy settings entirely, and system proxies don't handle UDP — which online gaming, torrents, and VoIP calls (Discord, Telegram calls) require.
The client creates a virtual network interface and forces all inbound and outbound traffic through it — including games, CLI tools, and proxy-ignoring apps — with full UDP support. On Windows, enable Service Mode in the settings for a stable setup: it installs a background service so TUN activates without running the app as administrator every time.
The recommended mode for daily use — split tunneling. The client decides per connection whether to go direct or through the VPN based on rule sets bundled with your subscription profile: local and regional sites stay on your direct connection (faster, no location flags), blocked sites go through the tunnel.
Forces all traffic through the selected VPN server, bypassing the rule list. Use it to test a specific server location, or as a quick workaround when the rules fail to route a particular site properly.
Bypasses the VPN entirely and routes everything over your regular connection. Useful for troubleshooting: if a site fails in Direct mode too, the problem is your ISP connection, not the VPN.
client error (Connect) or UnknownIssuer. Right-click the profile card (or click its gear icon), enable the Allow invalid certificates toggle, and update the profile again.7897 is occupied by another program (change it in settings), or a third-party utility (game boosters are notorious) has edited your local hosts file, which Mihomo queries by default — disable use-system-hosts in the profile's advanced configuration if that's the cause.All three accept IT CRP subscription URLs. The right one depends on how much control you want.
Built to parse advanced Clash/Mihomo YAML configurations, merge multiple subscription profiles, manage DNS resolution, handle UDP tunneling, and enforce custom routing rules. Choose it if you need real split tunneling and per-rule routing — this page's subject.
Fully optimized for VLESS/VMess, imports keys instantly, and hides the networking details entirely. The best choice for regular users who just want the VPN to work — and our default recommendation on phones. See the Happ setup guide.
Every modern protocol, on-the-fly core switching between Xray and sing-box, works perfectly with standard subscription links. Simpler than Clash Verge Rev, more hands-on than Happ. See the v2rayN setup guide.
80 ms rather than timeout when you run the latency check? 3) Is either the System Proxy or TUN toggle enabled (green) at the bottom of the window? Most connectivity issues are resolved by completing one of these three steps.fix_webview2 in the filename — it bundles the runtime and resolves the blank window.