TUN mode creates a virtual NIC to intercept all app traffic at the system level, solving the problem of games, command-line tools, and other apps that don't use the system proxy. Enabling it requires admin rights (Windows UAC / macOS password / Linux root). Key point: TUN takes over everything, but you need routing rules to avoid sending all traffic through the proxy.
What Is TUN Mode?
TUN mode is a way for V2Ray to take over traffic. It creates a virtual NIC to intercept all network traffic at the system level and hands it to the V2Ray core. Unlike traditional system proxy mode, TUN mode doesn't require apps to support proxies, so it can take over traffic from all apps.
An Analogy
System proxy mode is like setting up a checkpoint at the door—only apps that choose to go through it get checked. TUN mode is like laying a net across the entire road—all traffic passing through gets intercepted. So TUN mode is more thorough, but also heavier, requiring more privileges and resources.
TUN Mode
RecommendedVirtual NIC takes over all traffic; games, command-line tools, and UWP apps can all use the proxy without app support.
System Proxy Mode
Uses system proxy settings to take over only apps that support proxies (like browsers). Simple to configure and highly compatible.
Difference from System Proxy Mode
System proxy mode sets a system proxy server so that apps that support proxies (like browsers) go through the proxy. But some apps (like games and command-line tools) may not support the system proxy, so their traffic goes direct. TUN mode solves this by using a virtual NIC to take over all traffic.
In Practice
If you only use a browser to access the internet, system proxy mode is enough. If you use Telegram, Steam, command-line tools, or other apps that don't respect the system proxy, TUN mode is almost the only option. That's why many users eventually switch to TUN mode.
How to Enable TUN Mode in v2rayN
Open TUN Settings
Open v2rayN and go to Settings → TUN Mode.
Check to Enable
Check 'Enable TUN Mode'.
Grant Admin Rights
A UAC prompt appears; click Yes.
Wait for Traffic to Be Taken Over
Wait for the core to create the virtual NIC and take over traffic. A new virtual NIC will appear in the system.
What Happens After Enabling
After enabling, a virtual NIC appears and all network traffic goes through it. To disable TUN mode, click the 'Enable TUN Mode' option again or restart the client.
How to Enable TUN Mode in v2rayNG
In v2rayNG, TUN mode is usually enabled by default. Go to Settings → TUN Mode to check or adjust it. v2rayNG's TUN mode requires VpnService authorization; once authorized, it can take over traffic.
First-Time Enable: Authorize VPN
When you first enable TUN mode in v2rayNG, a VPN authorization request appears; click OK. If you previously denied authorization, go to System Settings → Apps → v2rayNG → Permissions and grant VPN permission again. After authorization, a VPN icon appears in the status bar, indicating TUN mode is active.
Admin Rights Requirements
Windows
Enabling TUN mode requires admin rights. v2rayN will show a UAC prompt; click Yes. If you're using the portable version, make sure to run v2rayN as administrator.
macOS
Enabling TUN mode requires admin password authorization.
Linux
The core must be run with root privileges.
Clicking Does Nothing? Probably Missing Permissions
If clicking 'Enable TUN Mode' does nothing, it's likely a permissions issue. On Windows, right-click the v2rayN icon and select 'Run as administrator'. On macOS, make sure you entered the admin password in the system prompt. On Linux, make sure the core is started as root. Without sufficient permissions, the virtual NIC can't be created, so TUN mode won't work.
After TUN mode takes over all traffic, routing rules still apply. It's recommended to configure sensible routing rules to avoid sending all traffic through the proxy, which can slow things down.
Choosing Between TUN Mode and System Proxy
Choose System Proxy
Everyday BrowsingIf you just browse the web and watch videos, system proxy mode is more than enough. It's simple to configure and highly compatible.
Choose TUN Mode
If you often use games, command-line tools, or UWP apps, or want to 'enable once and take over everything', TUN mode is more convenient.
Can Both Be Used Together?
They can also be used together: first enable system proxy so browsers go through the proxy, then enable TUN mode to take over the remaining traffic. But note that enabling both at the same time may cause traffic to be intercepted twice, leading to slower speeds or connection issues. It's best to choose one based on your needs rather than enabling both.
FAQ
No Internet After Enabling TUN Mode
Check that your routing rules are configured correctly. If all traffic is being dropped, you won't be able to access the internet. Try switching routing rules or disabling TUN mode.
TUN Mode Conflicts with Games
Some games may have poor compatibility with virtual NICs. If a game can't connect, try disabling TUN mode or using per-app proxy features.
Mainland China Sites Also Slow Down
Default routing rules bypass traffic to mainland China. If mainland China sites are slow, check whether the routing rules have been modified or whether DNS is configured correctly.
When to Use TUN Mode
If you often use games, command-line tools, or UWP apps that don't go through the system proxy, TUN mode is the most convenient option. But remember, once TUN takes over all traffic, you must use sensible routing rules, or you'll waste proxy traffic.
Can TUN Mode and System Proxy Be Enabled at the Same Time?
Yes, but watch out for configuration conflicts. It's generally recommended to enable only TUN mode or only system proxy to avoid traffic being intercepted twice.
Does the Virtual NIC Remain After Disabling TUN Mode?
The virtual NIC is removed after disabling. If it remains, restart the client or manually delete the corresponding virtual NIC.