FAQ ยท CONFIGURATION & DIAGNOSIS

Common V2Ray questions and a troubleshooting sequence

First identify whether the problem is with installation, the subscription, a node, or traffic capture, then change the corresponding setting. These common issues are organized around the actual workflow so you do not have to reinstall the client or repeatedly replace configurations as a first step.

04 Categories
16 Questions & Answers
4 STEP Recommended Troubleshooting Sequence

01 / BASICS

Basics

Start by separating the client, core, subscription, and node. Similar names do not mean identical functions, and troubleshooting becomes harder when these stages are treated as one.

What are V2Ray, the core, and graphical clients?

V2Ray generally refers to the proxy technologies and configuration ecosystem associated with Project V, not to a single graphical client. In practice, clients such as v2rayN and v2rayNG handle the interface, subscriptions, and system proxy, while the V2Fly or Xray core parses configuration and processes traffic. When troubleshooting, first determine whether the problem lies in client settings, core configuration, or the node service to narrow it down faster.

What is the difference between V2Fly and Xray?

V2Fly and Xray are two independently maintained core families in the Project V ecosystem. Both can handle common inbound, outbound, routing, and DNS configurations, but their supported details and configuration capabilities are not identical. v2rayNG is typically paired with the Xray core, while v2flyNG uses the V2Fly core. Choose a client based on the platform and features first rather than judging connection quality by the core name alone.

How should I choose between v2rayN, v2rayNG, and v2flyNG?

For Windows, macOS, and Linux desktops, start with v2rayN, which provides common interfaces for subscription management, system proxy, routing, and TUN. On Android, v2rayNG is the usual choice; if an existing configuration specifically depends on the V2Fly core, v2flyNG is an alternative. These are not simple substitutes on the same platform: filter by operating system first, then check the subscription protocol and required features.

How are subscription links, nodes, and configuration files related?

A subscription link is an address that lets a client retrieve a set of node configurations; a node is the connection information for one specific server. After updating a subscription, the client parses the response into selectable nodes. A standalone JSON configuration file often also includes inbound ports, DNS, routing, and outbound rules. The subscription address itself does not guarantee that nodes will always work, and a successful update does not mean every node can connect.

02 / INSTALL

Installation & Configuration

Choose an installer based first on the operating system and processor architecture. Selecting the wrong build most commonly leads to installation failures, startup failures, or improperly configured system permissions.

Should I choose the v2rayN desktop edition or the classic WPF edition on Windows?

For a new installation, the desktop edition is usually the better starting point. It uses a newer cross-platform interface and suits users who want a consistent desktop experience. The classic WPF edition is Windows-only, with menus and workflows closer to older releases, making it a fit for users familiar with the legacy interface or maintaining an established routine. Do not run both at the same time, or their local listening ports and system proxy settings may overwrite one another.

How do I tell Apple Silicon from Intel when downloading for macOS?

Open About This Mac and check the Chip or Processor field. If it shows an Apple M-series chip, choose the Apple Silicon arm64 installer; if it shows an Intel processor, choose the x64 installer. The wrong architecture can cause startup failures, incompatibility warnings, or a need for additional translation. Download the version that matches the chip.

How do I choose between the arm64 and universal Android installers?

Most mainstream Android phones released after 2015 can use arm64, which is a smaller download and matches common 64-bit processors. Choose universal instead if the device architecture is unknown, arm64 reports an incompatibility, or the installer must be shared across devices with different architectures. The main difference is the processor architecture included, not the feature set.

Why does the operating system request permissions when I first launch the client?

System proxy, VPN services, and TUN all change network settings, so the operating system may ask you to approve network access, background activity, a VPN connection, or administrator privileges. Grant permission only when enabling the relevant feature, and make sure the prompt comes from the installed client. If permission was previously denied, re-enable it under the system's network, VPN, privacy, or app-permission settings, then fully quit and relaunch the client.

03 / OPERATION

Usage Tips

The subscription provides configuration, the node establishes the connection, and the system proxy or TUN captures application traffic. Access works as expected only after all three steps are complete.

How should I import a V2Ray subscription link correctly?

Copy the complete subscription URL first. In the client's subscription group or subscription settings, add the URL, save it, and then update the subscription. Do not import a subscription URL as if it were a single node link, and do not omit parameters at the end of the URL. After the update, confirm that nodes appear in the group, select one as the active server, and only then enable the system proxy or TUN. Saving a subscription alone does not automatically route traffic.

Why doesn't the browser work even though the system proxy is enabled?

First confirm that the client is running and that a working node is selected, then verify that system proxy mode is actually enabled. Some browsers, download tools, and office applications use their own proxy settings and may ignore the system proxy. Set them to follow the system proxy or manually enter the local HTTP and SOCKS ports shown by the client. If the change still has no effect, close and reopen the affected application.

Why does TUN mode require administrator or VPN permission?

TUN uses a virtual network interface to capture more application traffic than a system proxy. It must create a network device, modify routes, or start the system VPN service, so it requires greater privileges. Approve the request when prompted the first time. If the switch immediately turns itself off, check whether permission was denied, another VPN is using the interface, or security software is blocking the network device. On desktop systems, try restarting the client as an administrator.

How should I choose between global, rule, and direct modes?

For everyday use, choose rule mode so the client can decide between proxying and direct connections based on domains, IP addresses, and predefined rules. Global mode sends more traffic through the current node and is useful for quickly testing whether routing rules are causing an access problem. Direct mode pauses proxy handling or helps verify the local network. You can switch modes briefly while troubleshooting, but return to the rule setup that matches your needs.

04 / DIAGNOSIS

Troubleshooting

Change one variable at a time. Switch nodes first, then check traffic capture, and finally inspect DNS, routing rules, and local ports. This makes it clear which step restored the connection.

What should I do if a subscription update fails or no nodes appear after import?

Check that the subscription URL is complete, especially that it contains no spaces, line breaks, or extra punctuation introduced while copying. Then confirm that the local network can reach the subscription service and that the client has the correct subscription group enabled. A format error may mean the service returned a web notice, login page, or format the client does not recognize. Check the URL status with the subscription provider, then remove the old entry and add it again.

What should I check first when a node test times out?

Switch to other nodes in the same subscription first to determine whether one node is failing or all nodes are timing out. If every node times out, check the local network, system time, subscription expiry, and whether security software is restricting the client. If only one node times out, replacing the node and waiting for the server to recover is usually appropriate. Latency tests may use a different connection method from real traffic, so confirm the result by opening an actual webpage.

What should I do if the client says it is connected but I still cannot access the internet?

A connected status only indicates that the core or local proxy has started; it does not guarantee that traffic is reaching a working node. Make sure an active node is actually selected, switch to another known-good node, and check that the system proxy or TUN is enabled. Then quit other proxies, VPNs, and network-acceleration tools to prevent route conflicts. If direct connections fail too, fix the local network first instead of continuing to change the V2Ray configuration.

How can I tell whether access problems on only some websites are caused by DNS or routing rules?

Temporarily switch the client to global mode and test. If global mode works but rule mode fails, check the domain rules, rule order, and match results. If both modes fail, inspect DNS resolution and node status. You can try enabling the client's built-in DNS, changing the query strategy, and clearing the system DNS cache. If the logs show that a local port is already in use, close duplicate client instances or change the conflicting port.

NEXT STEP

Recheck the configuration from start to finish

If the problem involves multiple stages, follow the Getting Started guide to repeat subscription import, node selection, and connection verification. When you need to check permissions, system proxy, or TUN settings by platform, consult the full documentation.