TUN Mode: Intercepting All System Traffic
Standard system proxies only work for browsers and some apps. CLI tools (Git, npm), games, and messaging apps often bypass them.
TUN mode creates a virtual network interface to intercept all TCP and UDP traffic at the driver level. Every request is captured and routed by the Clash engine, regardless of the app's internal settings.