Proxy address, port, username and password
Every working proxy is described by five basic fields: protocol, host address, port, login, and password.
Clash decides which traffic uses which proxy from a configuration file. This guide shows how to write a proxy with a username and password as a node, point chosen traffic at it with rules, and check the exit.
This guide means clients that use the Clash Meta (mihomo) core, such as Clash Verge Rev, whose documentation says it ships with the mihomo core. The fields follow the mihomo documentation, and everything below was checked against its pages on proxies, proxy groups and routing rules.
It covers network setup only: writing a proxy as a node and sending chosen traffic through it. A proxy changes only the network address a service sees. It does not change any service's terms and does not lift an account or service restriction. When connecting from mainland China, start with the helper tool guide.
The mihomo documentation says proxies is an array, and each node needs a unique name plus type, server and port. An HTTP node has type http and a SOCKS5 node has type socks5; both can carry username and password. The udp option says whether UDP may pass through the proxy, and it defaults to false.
Proxy302 HTTP is on port 2222 and SOCKS5 on port 3333 of proxy.proxy302.com; for a static IP use the address, port and protocol shown in My assets. Each IP carries one protocol, so type must match the port.
proxies:
- name: "proxy302-http"
type: http
server: proxy.proxy302.com
port: 2222
username: "USERNAME"
password: "PASSWORD"
- name: "proxy302-socks5"
type: socks5
server: proxy.proxy302.com
port: 3333
username: "USERNAME"
password: "PASSWORD"Replace USERNAME and PASSWORD with the values from My assets. Keep the value in quotes when the password contains characters such as # or a colon. Inside double quotes, write a backslash as \\ and a double quote as \".
A group in proxy-groups refers to outbound nodes through its proxies field, and rules then name the group; the select example in the mihomo documentation is written this way, and the group below holds the node and DIRECT. Rules are matched from top to bottom and the rules at the top have higher priority. MATCH matches all requests without conditions, so it goes last. DOMAIN-SUFFIX matches a domain suffix and PROCESS-NAME matches a process name.
proxy-groups:
- name: "PROXY302"
type: select
proxies:
- proxy302-http
- DIRECT
rules:
- DOMAIN-SUFFIX,ipinfo.io,PROXY302
- MATCH,DIRECTA minimal test profile: only ipinfo.io uses the proxy and everything else goes direct. After you confirm the exit, add the domains or processes you need above MATCH.
The mihomo documentation also says that rules on target IPs can trigger name resolution, and that adding no-resolve to a rule skips it.
The Clash Verge Rev documentation says a local profile is imported by creating a profile file or by dragging a profile file into the window. Save the YAML above as a .yaml file, import it and enable that profile. To add the node to a profile you already use, put the same proxies entry in that profile.
Ports, the running mode and similar fields are taken over by the app: the documented list includes mixed-port, socks-port, port, mode, allow-lan and log-level, and values written in the profile for these are replaced by the settings page. You do not need to write them; change them in settings.
With the profile enabled, switch on Clash Verge Rev's system proxy and open https://ipinfo.io/json in a browser. With the test rules above, ipinfo.io goes through the Proxy302 node, so ip and country should belong to the proxy, not to your own connection.
You can also test from the command line through Clash's local port; use the port shown in your settings.
curl -x http://127.0.0.1:7897 https://ipinfo.io/json7897 is the mixed-port in the example configuration of the Clash Verge Rev documentation; yours may differ.
The proxy location guide explains each field.
Authentication failed, or status 407: the proxy did not accept the username or password. Check username and password again and read the authentication guide.
Cannot connect, or timeout: type does not match the port. Use 2222 for HTTP and 3333 for SOCKS5, and check that server and port are not swapped.
The node does not appear, or the profile reports an error: usually a YAML indentation problem or a value with special characters that is not in quotes.
Traffic does not use the proxy: rules match from top to bottom and stop at the first match. Check that no earlier rule matches first and that MATCH is last.
IP rules cause lookups: a rule on a target IP may trigger name resolution; add no-resolve when you want to skip it.
Clash only needs the host, port, username and password of the proxy. Rotating residential traffic is billed per GB and the exit country is set when you generate the proxy; a static ISP IP stays fixed for the whole lease term and does not rotate. The table shows exits in 7 countries from our latest hourly check; the probe sends its request to ChatGPT, which is only an example target of a network check. A proxy does not change ChatGPT's terms, and OpenAI's list of supported countries still applies. Details are on the static ISP page and in the proxy address, port and login guide.
| Item | City | Network (ISP) | ASN |
|---|---|---|---|
| United States | Neenah, Wisconsin | Charter Communications Inc | AS10796 |
| United Kingdom | Cowplain, England | TalkTalk Communications Limited | AS13285 |
| Germany | Köln, North Rhine-Westphalia | NetCologne Gesellschaft fur Telekommunikation mbH | AS8422 |
| Japan | Tokyo, Tokyo | KDDI CORPORATION | AS2516 |
| Singapore | Singapore, Singapore | Singtel Fibre Broadband | AS9506 |
| Brazil | Mauá, São Paulo | TELEFÔNICA BRASIL S.A | AS27699 |
| Indonesia | Bogor, West Java | PT Mora Telematika Indonesia | AS131111 |
Hourly check of the Proxy302 probe, 25 October 2026, 08:29 UTC: one request to ChatGPT per country through a dynamic residential exit, using the public Proxy302 entry. Only the first three octets of an IP are public. One sample per country, not an average; later checks will differ.
Open the rotating residential page, choose the line, and keep Protocol on HTTP or choose SOCKS5, then click Review cost and generate.
Open My assets (the console page that holds everything you bought) and copy HOST, PORT, USERNAME and PASSWORD. The Connect page shows a ready example with your own endpoint.
Enter the details in the browser or tool you are setting up.
Confirm the exit with https://ipinfo.io/json through the proxy.
From mainland China, start the helper tool from the Connect page first and keep it open while you use the proxy.
The Budget line costs US$1.50 per GB, US$1.35 per GB in a 100 GB package and US$1.20 per GB at 300 GB. There is no free trial, and the smallest purchase is 1 GB. Which exit locations are available changes daily.
Match the protocol and port of your proxy. Proxy302 HTTP is on port 2222 and SOCKS5 on port 3333, and each static IP is issued with one protocol, so type must agree with it.
The Clash Verge Rev documentation says fields such as mixed-port, mode and allow-lan are taken over by the app, and the settings page overrides values written in the profile.
Yes. The mihomo documentation says rules are matched from top to bottom and the ones at the top have higher priority, and the Clash Verge Rev rules page says matching stops at the first rule that fits, so earlier rules win. Yes. The mihomo documentation says rules are matched from top to bottom and the ones at the top have higher priority, and the Clash Verge Rev rules page says matching stops at the first rule that fits, so earlier rules win. MATCH matches every request and belongs last.
Open https://ipinfo.io/json and compare the country and network name with your direct connection.
Official documentation · Confirmed on:
Read in full on 25 October 2026: the proxies array and the common fields name (required, unique), type, server, port and udp (default false).
Official documentation · Confirmed on:
Read on 25 October 2026: type http with server, port and optional username and password.
Official documentation · Confirmed on:
Read on 25 October 2026: type socks5 with server, port, optional username and password, and udp.
Official documentation · Confirmed on:
Read on 25 October 2026: the common proxy-group fields and a select group that refers to nodes in proxies.
Official documentation · Confirmed on:
Read in full on 25 October 2026: top-to-bottom matching with higher priority at the top, DOMAIN-SUFFIX, PROCESS-NAME, MATCH and no-resolve.
Official documentation · Confirmed on:
Read on 25 October 2026: Clash Verge Rev is a Tauri-based GUI for Mihomo with the Clash.Meta (mihomo) core built in.
Official documentation · Confirmed on:
Read on 25 October 2026: a local profile is imported by creating a profile file or by dragging one in.
Official documentation · Confirmed on:
Read in full on 25 October 2026: settings take priority over the subscription and extensions, and the list of fields taken over by the app (mixed-port, socks-port, port, mode, allow-lan, log-level and others).
Official documentation · Confirmed on:
Read on 25 October 2026: mixed-port is 7897 in the example configuration.
Official documentation · Confirmed on:
Read on 25 October 2026: rules match from top to bottom and stop at the first match, and the MATCH fallback must be last.
Product observation · Confirmed on:
Product facts file of the site (values checked against the console, the backend and the price table on 18-19 October 2026): products, prices in US$ (1 PTC = US$1), lease terms, protocols and ports, countries, quantity limits, no free trial.
Product observation · Confirmed on:
Public JSON of the probe at proxy302.com/live/connectivity/chatgpt.json, read 25 October 2026, 08:29 UTC: one request per exit country through a dynamic residential exit; exit city, ASN, network and response time.
Create an account, top up once, then pick rotating residential, static ISP or datacenter IPs and have one running in your browser within minutes.