Core concepts
Client, core, and protocol relationships
Clarify each component's role first, then determine whether the issue lies in interface management, core operation, or server parameters.
What are V2Ray, the Xray core, and graphical clients?
V2Ray generally refers to the protocol and tooling ecosystem formed by Project V. V2Fly and Xray are two commonly used core families in that ecosystem. The core handles protocol connections, routing, and traffic forwarding, while graphical clients such as v2rayN, v2rayNG, and v2flyNG manage subscriptions, configuration fields, and system proxy switching. When troubleshooting, separate interface behavior from core operation: an abnormal server list usually points to the client, while failed connections require checking core logs and node parameters.
How should you choose between v2rayN, v2rayNG, and v2flyNG?
For Windows, macOS, and Linux desktops, v2rayN is usually the first choice, offering subscription groups, system proxy settings, routing rules, and multiple core options. Android devices can use v2rayNG; when the V2Fly core family is required, v2flyNG is an alternative. Choose a client by confirming the operating system first, then check whether the protocols in the subscription are supported by the selected core. Do not judge compatibility by the interface name alone.
How are subscriptions, nodes, and configuration files related?
A subscription URL is an entry point to a configuration set maintained by the service provider. After updating a subscription, the client writes its server configurations to a designated group; each selectable server configuration is commonly called a node. A configuration file is the complete set of parameters readable by the client or core. Besides server details, it may include routing, DNS, and local inbound settings. Deleting a subscription group may also remove its nodes, so confirm the group scope first.
How should you choose between VMess, VLESS, Trojan, and REALITY?
Choose a protocol based on the parameters provided by the server, the selected client core's support, and the completeness of the configuration. VMess is an earlier Project V protocol; VLESS separates authentication from transport settings; Trojan uses a different connection and authentication structure; and REALITY is commonly used as a security layer alongside configurations such as VLESS. The client protocol must match the server, and the address, port, user ID, transport, and security options must correspond field by field.
Installation and setup
Packages, subscriptions, and initial setup
During installation, focus on system architecture, client version, subscription URL integrity, and the network path used for updates.
Which v2rayN version should you choose on Windows: Desktop or classic WPF?
The Desktop edition uses a newer cross-platform interface and suits users who prefer a consistent desktop workflow. The classic WPF edition retains the traditional Windows interface and familiar navigation. For a first installation, try Desktop; choose classic WPF if you already rely on its workflow or need the legacy interface. Export important settings before switching, and avoid letting both versions control the system proxy or use the same local listening port.
Which Android package should you choose: arm64 or universal?
Most mainstream Android phones released after 2015 use 64-bit ARM processors, so the arm64 package is usually the best choice and is typically more focused on the target architecture. Choose universal if you cannot confirm the processor architecture, the device is older, or the arm64 package reports incompatibility. The universal package supports more architectures but does not change client features, subscription formats, or protocol capabilities. Compatibility ultimately depends on the device system and package requirements.
What should you do if a copied subscription URL cannot be imported?
First confirm that you copied the complete subscription URL—not a webpage URL, a single-node description, or text containing extra spaces. In the client, create a subscription group, enter the URL, save it, and update the subscription. If the client reports a format error, open the URL in a browser to check whether the provider still responds normally, and verify whether login or URL regeneration is required. Do not manually alter its capitalization, path, or query parameters.
How do you fix a failed subscription update or repeated timeout?
First check whether the device's current network can reach the subscription service, then confirm that the URL has not expired, been truncated, or been escaped twice. When updating in v2rayN, try both updating through the proxy and updating without it; use the former only when the existing proxy connection works. If updates fail across multiple networks, contact the subscription provider about service status. Also verify the system clock and make sure the local firewall is not blocking the client's network access.
Usage tips
Proxy capture, TUN, and routing modes
Nodes establish connections, system proxy or TUN captures traffic, and routing rules determine the exit used by each request.
What does the system proxy do in v2rayN?
The system proxy writes a proxy address to the operating system's network settings, allowing browsers and desktop apps that honor system proxy settings to send requests to v2rayN's local listening port. This does not mean every program's traffic is captured; some apps ignore the system proxy or use an independent network stack. Select a working node and start the core before enabling it. Restore the system proxy before closing the client so the system does not retain an address for a stopped listener.
Why does TUN mode require additional permissions?
TUN mode creates a virtual network interface and changes system routes, so it typically requires administrator privileges, VPN authorization, or permission for a system network extension. If permission is denied, the client may show the node as selected while the virtual interface fails to come up. Close other network tools using a similar interface, grant the requested permission, and confirm that the firewall allows core traffic. On desktop systems, also check that the virtual interface driver or network extension has loaded correctly.
What is the difference between bypass-mainland-China, blacklist, and whitelist routing modes?
Bypass-mainland-China mode generally uses predefined domain and IP rules to connect directly to commonly used resources in mainland China, while other matching traffic uses the proxy exit. A blacklist approach defaults to direct connections and proxies only rule-matched destinations; a whitelist approach defaults to proxying and connects directly only to explicitly listed destinations. Mode names do not replace the actual rules. After choosing one, check rule order, the default exit, and DNS settings, then verify split routing with several known destinations.
How can you confirm that the current connection is working as expected?
First check the client's status bar to confirm that the core has started, then open the logs and make sure connection refusals, authentication failures, or DNS errors are not recurring. Visit both destinations intended for direct access and destinations intended for proxy access, and verify that both request types complete. With a system proxy, confirm that the operating system's proxy address matches the client's local port; with TUN, check that the virtual interface exists. Test the apps you actually use, not just one browser page.
Troubleshooting
Timeouts, inaccessible sites, and core exits
Start with the first explicit error in the logs, then rule out node parameters, local ports, proxy capture, and the network environment step by step.
What is the recommended order for troubleshooting node connection timeouts?
Switch to other nodes in the same subscription group first to determine whether the issue affects one node or the entire network environment. If every node times out, check the local network, system clock, firewall, and core startup status. If only one node times out, recheck its address, port, protocol, transport, and security parameters. You can also compare Wi-Fi with mobile data. In logs, timeout usually means the connection did not complete within the allowed time; use surrounding entries to identify DNS, transport-layer, or server-response issues.
What should you do when the client says it is connected but webpages will not open?
A connected status only means the client is running; it does not mean every request has been forwarded successfully. Check the logs for DNS resolution failures, missing routing exits, or remote handshake errors, then confirm that the intended node is the active configuration. With a system proxy, verify the proxy switch and local listening port; with TUN, verify permissions and the default route. If only some websites fail, focus on routing rules, DNS split routing, and domain matching order instead of repeatedly reinstalling the client.
What should you do if apps still connect directly after enabling the system proxy?
First confirm in the operating system's network settings that the proxy address was written and matches v2rayN's current local listening address and port. Some apps read proxy settings only at startup, so fully quit and reopen them after switching. Others have their own proxy options and must be configured separately. To capture programs that do not read system proxy settings, consider TUN mode, but address permissions, route conflicts, and DNS settings before enabling it.
What should you do if the core will not start or exits immediately?
Open the client log first and find the first explicit error rather than focusing on the final exit message. Common causes include a local port already in use, configuration fields unsupported by the selected core, an unexecutable core file, insufficient directory permissions, or security software blocking startup. Try an unused local port, then test with a basic configuration generated by the client. If you have switched between Xray and V2Fly cores, confirm that the selected protocol and configuration fields are supported by that core.