Building a Reliable Remote-Work Setup
Remote work depends on more than simply having an internet connection. A Zoom meeting, a Slack workspace, a Google Meet call, and a company dashboard may all use different domains, protocols, and network paths. Sending every application through one distant proxy node can create unnecessary latency, while sending everything DIRECT may make some overseas collaboration services slow or unreachable. The practical solution is a carefully planned Clash configuration that separates traffic according to its purpose.
This guide is designed for experienced Clash users who already understand profiles, proxy groups, YAML rules, and the difference between DIRECT and PROXY. We will build a remote-work strategy around three principles: keep real-time media on the fastest suitable path, route collaboration platforms through a stable node when necessary, and preserve direct access to local websites and company resources. The same approach works with Clash Verge Rev, Mihomo-based clients, ClashX, and Clash for Android, although menu names may differ.
The Target
Stable calls, responsive Slack messages, predictable Google Meet sessions, and fast local services without forcing all household traffic through a remote node.
1Choose the Right Routing Strategy
Before writing rules, decide what each application actually needs. Video conferencing is highly sensitive to latency, jitter, packet loss, and UDP behavior. A node with excellent download speed may still be poor for meetings if it has unstable latency or overloaded upload capacity. Slack and Google Workspace, on the other hand, use a mixture of HTTPS requests, WebSockets, file storage domains, and authentication endpoints. They can benefit from a proxy when international routing is unreliable, but they also suffer when the node frequently changes or drops long-lived connections.
There is no universal rule that says Zoom must always be DIRECT or Slack must always use a proxy. Test both paths from your own network. If Zoom is already reachable locally, DIRECT will usually provide the lowest ping and the most consistent media path. If the service is restricted or the local route is unstable, use a nearby, low-load proxy with UDP support. For Slack and Google Meet, a dedicated work group is often more practical than a single fixed rule because you can quickly switch between a local route and a stable overseas node.
| Traffic type | Preferred path | What to measure | Typical fallback |
|---|---|---|---|
| Zoom audio and video | DIRECT or low-latency UDP node | Jitter, packet loss, round-trip latency | Nearby stable node |
| Slack messages and WebSockets | Stable work proxy group | Reconnect frequency and message delay | DIRECT |
| Google Meet media | DIRECT or regionally close node | Packet loss, upload stability, CPU load | Work proxy group |
| Company intranet and local services | DIRECT | Login availability and local response time | Private company route |
| Cloud file downloads | Work proxy group or DIRECT | Throughput and connection stability | Alternate work node |
Do Not Chase Speed-Test Numbers Alone
A node that reaches a high speed-test result may still produce robotic audio or frozen video. Real-time work requires consistent latency and low packet loss more than peak download speed.
Build Separate Policy Groups
Create at least two useful groups in your profile: a Work group for collaboration services and a general proxy group for ordinary overseas traffic. If your provider offers several regions, place nearby nodes with similar behavior in the Work group rather than mixing every available server together. A manual group is often preferable for meetings because automatic health checks can switch nodes during a call, causing a WebSocket or media session to reconnect.
The names in this example are placeholders. Replace them with the proxy names that exist in your subscription. Keep DIRECT available as a deliberate option, not as an accidental default. This makes troubleshooting easier because you can compare the proxied and direct paths without rewriting the profile.
2Configure Split Routing for Zoom, Slack, and Meet
Rules should be specific enough to cover the application while avoiding broad keywords that capture unrelated websites. Start with domain suffix rules, then add only the extra domains you observe in the client logs. Put work rules above general rules such as geolocation or the final MATCH rule. Clash evaluates rules from top to bottom, so a correct rule in the wrong position may never be used.
Zoom Rules
When Zoom works well through the local connection, send its main domains DIRECT. This minimizes the distance to the meeting service and avoids adding proxy overhead to UDP media. If your region requires a proxy for Zoom, change the target from DIRECT to Work and confirm that your core and client are configured to forward UDP.
Do not assume that every Zoom-related request uses the same hostname. During a meeting, inspect the connection log and identify domains associated with sign-in, meeting control, and media. Add a narrow rule only when testing proves it is needed. A broad keyword rule may unintentionally route unrelated sites containing the word “zoom” through the work node.
Slack Rules
Slack typically needs persistent connections for real-time updates. A stable proxy can help when the local route to Slack is slow, but frequent node changes can be worse than a slightly higher latency. Route the core Slack domains through the Work group and keep file or image delivery under observation. Some workspaces use external storage or security gateways, so the connection log is the most reliable way to discover additional endpoints.
If your company uses a custom Slack Enterprise Grid address, add its domain explicitly. When Slack shows a persistent “Connecting...” message, test the same workspace with DIRECT and with one fixed Work node. This comparison quickly reveals whether the problem is routing, DNS, the selected node, or the service itself.
Google Meet and Workspace Rules
Google Meet can use multiple Google-owned domains and may select a media route based on your location. Route only the collaboration traffic that requires it rather than sending every Google service through the proxy. Gmail, Drive, Calendar, and Meet may share authentication components, so excessively narrow rules can create a confusing half-working state. If login succeeds but a meeting cannot start, check the client log for blocked or differently routed Google endpoints.
For users whose local Google route is already fast, replace selected rules with DIRECT. The correct policy depends on your ISP, location, company account, and the region where the meeting is hosted. Avoid copying large rule lists from unrelated configurations without checking whether the domains and policy names match your own profile.
3Hands-On Setup and Verification
The following workflow helps you make changes safely. Use a duplicate profile or a local override whenever possible. That way, a subscription update will not erase your work rules, and you can return to the original configuration if a syntax error prevents the profile from loading.
- Back up the profile. Export the active YAML file or create a dedicated local override. Record the current proxy group names exactly, including capitalization and punctuation.
- Create the Work group. Add two or three nearby, reliable nodes and include
DIRECT. Do not begin with dozens of nodes, because a small test set makes results easier to compare. - Add application rules. Place Zoom, Slack, and Google Meet rules before general rules. Use
DIRECTfor services that already perform well locally andWorkfor services that require a stable overseas route. - Reload and inspect. Validate the YAML indentation, reload the profile, and open the connection log. Launch one application at a time so you can associate each request with the rule that matched it.
- Run a real test. Join a short Zoom or Meet call, send Slack messages, upload a small file, and open a company resource. Record the result before changing another variable.
DNS and TUN Considerations
DNS behavior can make a correct routing rule appear broken. If Clash resolves a domain locally while the connection itself uses a proxy, the returned address may point to an unsuitable region or an unreachable endpoint. Mihomo users can consider fake-ip mode and a controlled DNS configuration, but should first understand how their operating system, browser, and corporate security software interact with it.
For desktop clients, TUN mode can capture traffic from applications that do not respect the system proxy. This is useful for meeting clients, background updaters, and native Slack or Zoom applications. However, TUN mode also captures more traffic, so verify that local networks, printers, VPN software, and company intranet domains remain DIRECT or follow the required corporate route. On Windows, check that the client has the necessary administrator permissions. On macOS and Linux, review system extension or routing permissions if the tunnel starts but applications cannot connect.
Testing Tip
Change one item at a time: node, DNS mode, TUN state, or rule target. Testing several changes together makes it difficult to identify the actual cause of an improvement or failure.
4Troubleshoot Calls and Keep the Setup Stable
When a call has poor quality, first determine whether the issue affects audio, video, screen sharing, or every connection. Audio that becomes robotic usually points to packet loss or jitter. A frozen video stream may indicate insufficient upload capacity, while successful audio but failed screen sharing can result from a separate media endpoint or a blocked UDP path. Compare the same meeting over DIRECT and through the Work group, and test with the camera disabled to separate bandwidth from routing problems.
- Frequent Slack reconnects: select one stable node, check WebSocket-related domains in the log, and avoid automatic switching during active work sessions.
- Zoom cannot join a meeting: test the main Zoom domains, verify that the system clock is correct, and confirm whether UDP forwarding is available when using a proxy.
- Google Meet starts but media is unstable: compare a wired connection with Wi-Fi, disable unnecessary video effects, and try the nearest Work node rather than the fastest node by download speed.
- Company sites stop loading: add the company domain or private IP range to the required DIRECT or corporate policy, and check whether TUN mode is intercepting an internal DNS name.
- Local websites become slow: move local domain and geolocation rules above the final proxy rule, then verify that the selected policy is actually DIRECT.
- Messages arrive late: inspect both DNS resolution and the proxy node. A low ping to the node does not guarantee a good path to the service’s WebSocket endpoint.
For routine maintenance, keep a small record of which node works best for your normal working hours. Network congestion changes by time of day, and a node that is excellent in the morning may be overloaded later. Update subscriptions outside important meetings, because a provider may rename nodes or alter group membership. Review your rules after every major client or core update, especially when switching between Clash Verge, Clash Verge Rev, and Mihomo-based clients.
Finally, treat work traffic as a reliability problem rather than a race for maximum speed. A simple configuration with clear policy groups, predictable DNS behavior, and a tested fallback is easier to operate than a massive rule set copied from several sources. Once Zoom, Slack, and Google Meet each have a known route, you can spend less time toggling modes and more time collaborating.
Final Checklist
Use DIRECT where it is genuinely faster, use a stable Work group where overseas routing needs help, verify UDP and TUN behavior, and always test the actual applications instead of relying only on browser speed tests.