Updated July 2026 · 6 min read
Read the Connections panel
The Connections panel is not an expert-only log. It is the fastest way to answer "which rule did this domain actually hit?"
What each column means
Host is the destination domain or IP, Chains is the policy path the traffic took, Rule is the rule that matched, and the remaining columns show upload, download and how long the connection has been open.
Read Chains from right to left: the rightmost entry is the final exit node, and each step left is the group that owns it. One glance tells you which group picked up the request.
Use it to confirm a rule works
After editing a custom rule, open the target site, search that domain in Connections and check the Rule column. If it says MATCH or your catch-all rule, your rule never fired.
The usual cause is ordering: rules match top to bottom and stop at the first hit, so a specific domain rule has to sit above broad GEOSITE or GEOIP entries.
Old connections do not migrate when you change nodes. Close them in the Connections panel so the app reconnects through the new exit.
Find the app that leaks traffic
The process column shows which program opened the connection, which makes background updaters and telemetry easy to spot. When you find something that should not be proxied, add a process-name rule that sends it direct.
That column depends on the core being able to match processes, and on some platforms or modes it stays empty. Blank means "not matched", not "no process" — do not draw conclusions from it.
Two good reasons to close connections
First, to force apps to reconnect after a node change. Second, to clear the list before reproducing a problem, so everything left is relevant instead of buried in hundreds of rows.
Closing only kills established connections; it does not stop the app from opening a new one immediately. If a domain keeps coming back and should not be proxied, a rule beats clicking close repeatedly.
What is the project?
Clash Verge Rev is a Tauri-based GUI for Mihomo with profile management, system proxy, TUN mode, rule editing and WebDAV backups.