Premium · Clash documentation

Feature: Userspace WireGuard

When configuring a Clash Premium userspace WireGuard node, verify private-key, public-key, preshared-key, and the addresses, then set remote DNS, MTU, and UDP.

  • WireGuard
  • private-key
  • public-key
  • remote-dns-resolve
  • MTU
Premium

Scope of this historical document

This document preserves historical instructions for original Clash / Clash Premium to help interpret older configurations. References to “Premium only”, unsupported features, or platform limits do not describe current Mihomo capabilities. Do not use them to overwrite your current client configuration or run permission-related commands.

For Mihomo, consult current Mihomo configuration documentation. For the graphical interface, installation, and permissions, follow the documentation for your specific client.

Because it depends on the gvisor TCP/IP stack, userspace Wireguard is currently available only in the Premium core.

yaml
proxies:
  - name: "wg"
    type: wireguard
    server: 127.0.0.1
    port: 443
    ip: 172.16.0.2
    # ipv6: your_ipv6
    private-key: eCtXsJZ27+4PbhDkHnB923tkUn2Gj59wZw5wFA75MnU=
    public-key: Cr8hWlKvtDt7nrvf+f0brNQQzabAqrjfBvas9pmowjo=
    # preshared-key: base64
    # remote-dns-resolve: true # 远程解析 DNS, 使用 `dns` 字段, 默认为 true
    # dns: [1.1.1.1, 8.8.8.8]
    # mtu: 1420
    udp: true