General configuration
General fields control core runtime behavior. mode: rule is the practical daily default; global and direct are useful for temporary diagnosis. IPv6, logging, delay measurement, TCP concurrency, keep-alive, and hosts are handled by the shared Hako core on all three platforms.
Apple-platform notes
find-process-modedepends on process metadata supplied by the system. macOS Packet Tunnel supports process name, path, and UID; use domain, IP, port, and network-type rules on iOS and tvOS.- Geodata works through Hako-managed resources. iOS and tvOS prioritize memory use, and tvOS caches must be treated as rebuildable.
- Upstream removed
global-client-fingerprint; use per-outboundclient-fingerprintwhere the protocol supports it.
36 fields shown
| Field | Type | iOS | macOS | tvOS | Platform notes |
|---|---|---|---|---|---|
clash-for-android.append-system-dns | bool | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
clash-for-android.ui-subtitle-pattern | string | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
disable-keep-alive | bool | Supported | Supported | Supported | Consumed by the Hako core. |
etag-support | bool | Supported | Supported | Supported | Consumed by the Hako core. |
external-controller | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-controller-cors.allow-origins | []string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-controller-cors.allow-private-network | bool | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-controller-pipe | string | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
external-controller-routing-mark | int | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
external-controller-tls | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-controller-unix | string | Advanced | Advanced | Unsupported | Can expose a listener or control surface. Use only with explicit access control and strong credentials. Unix-domain controller sockets are unavailable on tvOS. |
external-doh-server | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-ui | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-ui-name | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
external-ui-url | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
find-process-mode | process.FindProcessMode | Unsupported | Supported | Unsupported | Removed or not consumed in the Apple Packet Tunnel runtime. Consumed by the Hako core. |
geo-auto-update | bool | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geo-update-interval | int | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
geodata-loader | string | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geodata-mode | bool | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geosite-matcher | string | Supported | Supported | Supported | Consumed by the Hako core. |
geox-url.asn | string | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geox-url.geoip | string | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geox-url.geosite | string | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
geox-url.mmdb | string | Managed / limited | Managed / limited | Managed / limited | Available through Hako-managed resources; manual paths and update behavior are platform-dependent. Uses Hako-managed, memory-conscious resources; tvOS caches may be cleared. |
global-client-fingerprint | string | Not applicable | Not applicable | Not applicable | Belongs to Android, Linux, or another non-Apple environment. |
global-ua | string | Supported | Supported | Supported | Consumed by the Hako core. |
hosts | map[string]any | Supported | Supported | Supported | Consumed by the Hako core. |
ipv6 | bool | Supported | Supported | Supported | Consumed by the Hako core. |
keep-alive-idle | int | Supported | Supported | Supported | Consumed by the Hako core. |
keep-alive-interval | int | Supported | Supported | Supported | Consumed by the Hako core. |
log-level | log.LogLevel | Supported | Supported | Supported | Consumed by the Hako core. |
mode | T.TunnelMode | Supported | Supported | Supported | Consumed by the Hako core. |
secret | string | Advanced | Advanced | Advanced | Can expose a listener or control surface. Use only with explicit access control and strong credentials. |
tcp-concurrent | bool | Supported | Supported | Supported | Consumed by the Hako core. |
unified-delay | bool | Supported | Supported | Supported | Consumed by the Hako core. |