Complete Guide to TUN Mode & Fake-IP Optimization across Platforms

Understand Layer-3 OS network capture and learn how to configure TUN virtual NIC mode and Fake-IP in Clash Verge Rev, v2rayN, and Shadowrocket.

Reading time: 1 min

Traditional system proxy settings only intercept traffic from applications that voluntarily read system HTTP/HTTPS proxies (such as web browsers). To capture traffic from developer command-line tools, games, and background services, configuring a Layer-3 TUN virtual network adapter is essential.

System Proxy vs. TUN Mode

  1. System Proxy: Operates at the application layer. Lightweight but ignores terminal commands and game packets.
  2. TUN Mode: Operates at the network layer (IP layer). Captures all TCP/UDP packets system-wide.

Fake-IP Resolution Advantages

Fake-IP returns a reserved internal IP immediately when an application requests a domain, eliminating local DNS resolution latency and completely preventing DNS poisoning from local ISPs.

For client setup tutorials, visit our Clients Guide.

Last modified: