Clash Verge Rev
Use TUN for a defined problem
TUN can help with applications that do not follow system proxy settings by using a virtual network interface. It is not a promise that every connection uses one proxy node: routes, rules and application behavior still matter. Identify the exact application and failing request before changing interception modes. A browser that already works through the system proxy does not need extra modes simply for a lower latency number.
Preserve a working baseline
Record client and core versions and back up your profile. Confirm normal connectivity with TUN disabled. Note any corporate VPNs or other virtual networking tools, and only change settings you are authorized to manage. Do not delete unfamiliar network adapters or modify routes over your only remote management connection without a recovery plan.
Check permissions and service startup
The required service and privileges depend on the operating system and release. Use the client's supported service controls and trusted installer, not a random repair script. If the toggle immediately turns off or logs show a permission error, resolve that startup issue first. Repeatedly clicking the toggle will not repair an incomplete service installation.
Separate interception from connection failure
Enable TUN only after the profile loads successfully, then inspect startup logs. Test a domain, the target application and a trusted local resource separately. No corresponding connection record suggests an interception or routing question; a recorded request that fails needs investigation of its rule, node or DNS behavior. A successful latency check does not settle these questions.
Recover before making more changes
If only name-based access fails, inspect DNS errors; if all connectivity fails, investigate routes and interface conflicts. Change one documented option at a time and retain its old value. Disable TUN and restore the previous profile to establish a comparison. If networking remains broken, check for a leftover system proxy or another active VPN. Report redacted logs and the result of the disabled-TUN test.