Clash Glossary

A single reference for the Clash terms beginners most often mix up: cores, clients, subscriptions, nodes, rules, DNS and TUN.

Beginner-friendly reference

Use this glossary when tutorials mention a term that is not a button in your current client.

Terms

TermMeaning
CoreThe program that performs proxy connections, rule matching, DNS and TUN behavior, such as Clash, Mihomo, sing-box or Xray-core.
ClientA GUI or app that manages subscriptions, switches, logs and settings, such as Clash Verge Rev, FlClash or Stash.
Subscription URLA remote profile URL provided by a service vendor. The client fetches nodes, groups and rules from it.
ProfileAn imported configuration containing sections such as proxies, proxy-groups, rules and dns.
Proxy / NodeA remote outbound entry such as SS, VMess, VLESS, Trojan or Hysteria2.
Proxy GroupA group that organizes nodes as select, url-test, fallback, load-balance and similar policies.
RuleA routing condition based on domain, IP, process, port, region or other matchers.
DIRECTDirect outbound without a remote proxy.
REJECTReject or block the matched request.
DNSThe resolver module that affects domain rules, Fake-IP and routing decisions.
Fake-IPA virtual IP assigned to domains so transparent proxy traffic can still be mapped back to domain rules.
TUNA virtual network interface mode that captures more app traffic and usually needs OS permissions.
Mixed PortA local port that accepts both HTTP and SOCKS proxy traffic.
External ControllerA RESTful API endpoint used by GUIs and dashboards to inspect and control runtime state.
ProviderA remote proxy list or rule list that can update independently.
GEOSITE / GEOIPDomain-set or IP-geo data used by routing rules.
SNIThe server name in TLS handshakes, important for TLS, Reality, Trojan and VLESS nodes.
ALPNTLS protocol negotiation such as h2 or http/1.1.
RealityA transport and disguise capability commonly used with Xray/VLESS; support depends on the core.
UDP / QUICRequired by Hysteria2, TUIC, some games and DNS scenarios.
Rule ModeRule-based routing, the recommended default for most users.
Global ModeRoutes everything through one proxy policy, useful for short tests.
Direct ModeRoutes everything directly, useful for isolating proxy-related support checks.
LogsThe key evidence for import status messages, DNS, certificate support checks, occupied ports and timeouts.

How to Use It

  • If a term names a protocol, check the protocol center.
  • If a term names a core or client, check the core center and client status page.
  • If a term names a YAML field, compare it with the configuration examples before editing.