Clash

Appearance

Rules and traffic sniffing ​

Domain, IP, port, network, logical, provider, sub-rule, and final MATCH rules are processed by the shared Hako core. Sniffing can recover a domain name; process name, path, and UID are available for rule matching only on macOS.

Identity rules by platform ​

Rule metadataiOS / iPadOSmacOStvOS
Process name and pathDoes not matchSupportedDoes not match
UIDUnsupportedSupportedUnsupported
App signing or team IDUnsupportedUnsupportedUnsupported
Per-App VPN / MDMNot configured by YAMLNot configured by YAMLNot configured by YAML

iOS and tvOS can parse PROCESS-* rules, but lack the system metadata required to match them, so these rules do not match there. Use domain, IP, port, or network-type rules instead.

2 fields shown

FieldTypeiOSmacOStvOSPlatform notes
rules[]stringSupportedSupportedSupportedConsumed by the Hako core.
sub-rulesmap[string][]stringSupportedSupportedSupportedConsumed by the Hako core.

11 fields shown

FieldTypeiOSmacOStvOSPlatform notes
sniffer.enableboolSupportedSupportedSupportedConsumed by the Hako core.
sniffer.force-dns-mappingboolSupportedSupportedSupportedConsumed by the Hako core.
sniffer.force-domain[]stringSupportedSupportedSupportedConsumed by the Hako core.
sniffer.override-destinationboolSupportedSupportedSupportedConsumed by the Hako core.
sniffer.parse-pure-ipboolSupportedSupportedSupportedConsumed by the Hako core.
sniffer.port-whitelist[]stringSupportedSupportedSupportedConsumed by the Hako core.
sniffer.skip-domain[]stringSupportedSupportedSupportedConsumed by the Hako core.
sniffer.skip-dst-address[]stringSupportedSupportedSupportedConsumed by the Hako core.
sniffer.skip-src-address[]stringSupportedSupportedSupportedConsumed by the Hako core.
sniffer.sniffmap[string]RawSniffingConfigSupportedSupportedSupportedConsumed by the Hako core.
sniffer.sniffing[]stringSupportedSupportedSupportedConsumed by the Hako core.

Copyright © 2026 The Clash & Hako Team