📖 Read this in other languages:

• Русский

Update the package list to ensure you have the latest available versions.

opkg update

In most cases you do not need to install anything manually: when you install luci-app-ssclash from a configured OpenWrt feed, opkg will automatically pull in:

• coreutils-base64 – for scripts that use Base64;
• kmod-tun – for TUN mode;
• the appropriate transparent proxy module depending on your firewall stack:
  • kmod-nft-tproxy for firewall4 / nftables;
  • iptables-mod-tproxy for firewall3 / iptables.

Only if you are installing the .ipk offline or building a custom image and dependencies are missing, you can install the transparent proxy modules manually:

# For nftables (firewall4)
opkg install kmod-nft-tproxy

# For iptables (firewall3, OpenWrt < 22.03.x)
opkg install iptables-mod-tproxy

Download the SSClash package and install it.

curl -L https://github.com/zerolabnet/ssclash/releases/download/v3.7.0/luci-app-ssclash_3.7.0-r1_all.ipk -o /tmp/luci-app-ssclash_3.7.0-r1_all.ipk
opkg install /tmp/luci-app-ssclash_3.7.0-r1_all.ipk
rm /tmp/*.ipk

Go to Settings → Mihomo Kernel Management and click Download Latest Kernel. The system will:

• Automatically detect your router's architecture
• Download the latest compatible Mihomo kernel
• Install and configure it properly
• Show kernel status and version information

Important: Restart the Clash service after kernel installation.

If you prefer manual installation, navigate to the bin directory and download the Clash.Meta Kernel:

cd /opt/clash/bin

For amd64 architecture:

curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-amd64-compatible-v1.19.21.gz -o clash.gz

For arm64 architecture:

curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-arm64-v1.19.21.gz -o clash.gz

For mipsel_24kc architecture:

curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-mipsle-softfloat-v1.19.21.gz -o clash.gz

Need a different architecture? Visit the MetaCubeX Release Page and choose the one that matches your device.

Decompress and make executable:

gunzip clash.gz
chmod +x clash

SSClash offers two interface processing modes:

• Default mode that processes traffic from ALL interfaces except selected ones
• Automatically detects and excludes WAN interface
• Simple to configure - just select interfaces to bypass proxy
• Best for typical home router setups

• Processes traffic ONLY from selected interfaces
• More secure but requires manual configuration
• Automatically detects LAN bridge when enabled
• Ideal for complex network setups requiring precise control

• Block QUIC traffic: Blocks UDP port 443 to improve proxy effectiveness for services like YouTube

Edit your Clash configuration with the built-in editor featuring:

• Syntax highlighting for YAML files
• Live service control (Start/Stop/Restart)
• Service status indicator
• Save & Apply functionality with automatic service reload

Create and manage local rule files for use with rule-providers:

• Create custom rule lists with validation
• Edit existing rulesets with syntax highlighting
• Organized file management with collapsible sections
• Usage: Reference in config as type: file, format: text, path: ./lst/your_list.txt

Monitor Clash activity with the integrated log viewer:

• Real-time log streaming with automatic updates
• Filtered display showing only Clash-related entries
• Color-coded log levels and daemon identification
• Auto-scroll to latest entries

Access the Clash dashboard directly from the LuCI interface with automatic configuration detection.

To remove Clash completely:

opkg remove luci-app-ssclash
rm -rf /opt/clash