WireGuard is a VPN-style tunnel that can be used as an outbound node in Clash/Mihomo, with fields closer to tunnel configuration. In real use, trust the provider subscription first and then verify whether the selected client core supports this exact type.
What It Means
In Clash/Mihomo configuration, wireguard identifies the outbound type used by the node, policy or group. The same display name in a GUI can hide different transport fields, so the YAML or subscription output is more reliable than the node nickname.
Common Fields
type: wireguardprivate-keyserver / portip / ipv6public-keyallowed-ipsreserved
When to Use It
- The provider supplies WireGuard nodes.
- Specific traffic needs to go through a VPN-style tunnel.
- The profile includes peer keys, addresses and allowed IP ranges.
Support Checks Checks
- private-key, public-key and reserved values are sensitive.
- Rules decide which traffic enters WireGuard; it does not automatically take over everything.
- Platform permissions, TUN and firewalls affect behavior.
Minimal Shape
proxies:
- name: "wg-node"
type: wireguard
server: server.example.com
port: 51820
private-key: BASE64_PRIVATE_KEY
ip: 172.16.0.2/32
public-key: BASE64_PUBLIC_KEY
Compatibility Notes
Client support changes with the bundled core. A maintained Mihomo-based client usually supports more modern node types than historical Clash clients, but mobile clients and iOS alternatives still vary by app and release.
If a subscription contains this type but the client filters it out, switch to a compatible client, ask the provider for a compatible subscription format, or use a converter only when you understand what fields are being changed.