Server Management
Importing Subscription URLs and Managing Groups
Subscription imports provide a convenient way to receive a set of server configurations. On desktop, open “Subscription Groups” to create an entry, enter the complete URL, and run an update; on Android, add it through subscription settings. The client parses the response into a server list, but the subscription URL alone does not establish a connection.
After importing, check that selectable configurations appear in the list, then choose one as the current server. For multiple sources, create separate groups to keep updates from getting mixed together. If the update finishes with an empty list, first check that the URL is complete, the group is enabled, and the logs contain no parsing errors.
Routine Maintenance
Manual and Automatic Update Boundaries
A subscription update retrieves server configurations again; it does not update the client application. After the first import, run one manual update to confirm immediately that the URL and network are working. Automatic updates are better for stable configurations and can run on a schedule to avoid relying on outdated entries.
When an update fails, do not keep clicking repeatedly. Check the client logs first and distinguish among failed network requests, unparseable responses, and expired subscription information. If the old configuration still works, keep its group and create a test group; organize the list after the new content is confirmed.
Traffic Interception
System Proxy Works Well for Browsers and Standard Desktop Apps
When the system proxy is enabled, programs that follow the operating system proxy settings send network requests to the port monitored by the client. Browsers and most graphical applications usually work immediately, making this the best desktop mode to try first. Restore the system proxy settings before closing the client so the system does not retain a dead local port.
Some terminal programs, standalone network components, and apps that manage their own connections do not read system settings. In that case, check whether the app has its own proxy options before considering environment variables or TUN mode. Do not judge the entire proxy state from the behavior of a single program.
Extended Interception
TUN Mode Covers Traffic That Ignores the System Proxy
TUN mode uses a virtual network interface to handle a broader range of traffic, making it useful for programs outside system proxy coverage. Enabling it may require network or administrative permissions, and conflicts can arise with other virtual network tools, enterprise security policies, and existing routes.
Start with the simplest mode when troubleshooting: confirm that the same server connects through the system proxy, then enable TUN. If the network goes down, check whether the virtual interface was created, whether DNS settings were intercepted, and whether routing rules sent essential traffic to the wrong exit.
Rule Control
Choose a Traffic Exit by Domain, IP, and Rule Set
Split routing is not a server filter; it matches rules against each connection. Common exits include proxy, direct, and block. Rules are usually processed in order, so a broad rule placed too early can override a later, more specific rule. Save the configuration and reload the core after making changes.
For everyday use, start with the client’s basic rules and gradually add only the domains or address ranges you actually need. When a site behaves unexpectedly, check the logs to see which rule matched instead of changing subscriptions, DNS, ports, and servers at once. Isolating one variable at a time makes stable conclusions easier.
Ecosystem Components
A Clear Division Between the Client Interface and Proxy Core
v2rayN, v2rayNG, and v2flyNG handle configuration management, server lists, and system integration; the corresponding core actually parses protocols and establishes connections. Depending on the platform, clients may use components from the Xray or V2Fly ecosystem and may allow switching between supported cores in settings.
Choose a core based on the protocols and transport parameters in the subscription configuration. For unrecognized fields, first confirm that the client and core support the configuration, then check the startup logs. Replacing only the interface application without understanding a core error usually will not resolve an incompatible configuration structure.
Troubleshooting
Logs Are the First Place to Look for Startup and Connection Failures
Client logs typically record configuration generation, core startup, port listening, and connection handling. If a double-clicked launch does not reach a working state, first locate both the client and core logs, then look for clear messages about port conflicts, field parsing failures, insufficient permissions, or unusual file paths.
Keep the context before and after an error instead of capturing only the last line. Address the earliest key error first, restart, and then review the subsequent messages. Repeated errors are often cascading effects of one root cause; correcting issues step by step is more controlled than resetting every configuration.
Device Collaboration
LAN Sharing Requires a Clear Listen Address and Access Scope
LAN sharing lets other devices on the same network connect to the proxy port provided by the current client. After enabling it, the connecting device must use the LAN address of the device running the client and the corresponding port. The host firewall, router isolation settings, and network type can all affect access.
This feature is suited to temporary debugging or device collaboration within a defined scope. Record the open port and current network environment, and disable sharing when leaving the network. If the connection fails, check in order whether both devices are on the same subnet, whether the listen address permits external access, and whether firewall rules allow it.