Stash - Rule Based Proxy

Stash is a rule-based proxy client. It routes each connection by domain, IP address, geographic location, or the app that opened it, and sends it to the endpoint you choose.

NETWORKING

- Handles TCP and UDP traffic and forwards it to any supported proxy server
- Rule-based routing on domain, IP-CIDR, GEOIP, GEOSITE and process name
- Per-app routing: pick exactly which apps go through the tunnel and which bypass it
- Protocol support including Shadowsocks, ShadowsocksR, Shadowsocks 2022, VMess, VLESS, Trojan, Snell, Hysteria, Hysteria 2, TUIC, AnyTLS, SOCKS5, HTTP and WireGuard
- Built-in DNS server with DNS over HTTPS, DNS over QUIC, fake-IP and hostname mapping
- Full IPv6 support

DIAGNOSTICS

- Live connection list with per-connection detail and the ability to close a session
- HTTP request inspection
- DNS cache and query inspection
- Kernel route table viewer for IPv4 and IPv6
- Speed test and network quality measurement
- Streaming media availability checks
- Runtime logs and system information
- Remote controller for another Stash or Clash instance on your network

CONFIGURATION

- Import a configuration from a URL or a local file
- Refresh subscriptions, with traffic usage and expiry shown
- Visual editor for proxies, proxy groups and rules
- Override modules that patch the active configuration without editing the original
- GeoSite browser and downloadable icon sets

Stash reads Clash-compatible configuration files.