Confirm OS and architecture
For most people, stability matters more than the number of switches. Establish one working connection with the stable release and sensible defaults, then change one setting at a time and verify the result.

For most people, stability matters more than the number of switches. Establish one working connection with the stable release and sensible defaults, then change one setting at a time and verify the result.
TUN mode, system services and auto-start may need administrator privileges. Managed work or school devices can restrict these features. Prefer the system proxy when appropriate and consult the administrator before changing security rules.
Always keep a rollback path. Know how to disable the system proxy, stop TUN and restore the previous profile. When something fails, return to the smallest working setup instead of toggling several unrelated options.
Do not leave certificate verification disabled or import unknown scripts as a shortcut. If only one application fails, it may ignore the system proxy, use private DNS, or require TUN to capture its traffic.
System versions, client releases and networks differ. Treat this article as a durable workflow and use current project documentation when labels move. Finish by testing direct traffic, proxied traffic, DNS and behavior after a restart.
Import it into compatible clients such as Clash Verge Rev. Alipay, WeChat Pay and cryptocurrency are supported, with privacy-conscious signup.