A mainland site still loads slowly or fails after the rule
Check Does the page load other domains, such as a content network, that are not in your list?
Fix Add those domains to the direct list. In Clash, remember that the first matching rule wins.
Overseas IP Can't Open Chinese Websites: Split the Traffic
An overseas proxy is for overseas sites. Send mainland sites direct with an exception list, a PAC file or routing rules.
Three reasons a mainland site misbehaves through an overseas proxy
1. The exit is overseas. That is what the proxy is for, but a site that treats visitors differently by region will see an overseas visitor. Some sites limit or refuse overseas visitors; that is the site's own rule, and no proxy setting changes it.
2. The name is looked up by the proxy. With an HTTP proxy the browser asks for CONNECT host:port, so the proxy gets the host name; with socks5h the proxy resolves it, while plain socks5 resolves it on your computer. A name looked up from abroad can give an answer chosen for the overseas location.
3. The route is long. Your request goes to the proxy exit abroad and back before it reaches a site that may be right next to you, so it can be slower than going direct.
What should go through the proxy
| Item | Route | Why |
|---|---|---|
| Mainland sites and apps (for example Baidu) | Direct | Faster, and the site sees your own location |
| Overseas sites that must see the proxy's country | Through the proxy | This is what you bought the IP for |
| Your local network (router, NAS, intranet) | Direct | A proxy abroad cannot reach your local addresses |
Editorial advice based on how proxies work; it is not a promise about any site. Windows also offers a checkbox for local (intranet) addresses.
Three ways to send mainland sites direct
| Item | Where you set it | What you write |
|---|---|---|
| Windows exception list | Settings, Network & internet, Proxy, Manual proxy setup | The ending of the address, separated by semicolons, for example *.baidu.com;*.qq.com |
| PAC file | A script the browser or system loads | FindProxyForURL returns DIRECT for the sites to skip the proxy |
| Clash (mihomo) rules | The rules list of the profile | GEOSITE and GEOIP rules to DIRECT, then MATCH to the proxy group |
Read on 11 November 2026 from the Microsoft Support page, the MDN PAC page and the mihomo rules page. Menu names in your Windows language may differ.
PAC file: mainland domains go direct
var direct = ["baidu.com", "qq.com", "cn"];
function FindProxyForURL(url, host) {
for (var i = 0; i < direct.length; i++) {
if (host === direct[i] || dnsDomainIs(host, "." + direct[i])) {
return "DIRECT";
}
}
return "PROXY HOST:PORT";
}Example only: edit the list of domains and replace HOST:PORT with your HTTP proxy. dnsDomainIs(host, ".baidu.com") does not match the bare name baidu.com, so the script tests it separately. A PAC file holds only the address, not the login.
Clash: mainland sites go direct
rules:
- GEOSITE,cn,DIRECT
- GEOIP,CN,DIRECT,no-resolve
- MATCH,PROXY302Example only. PROXY302 is the proxy group from the Clash setup guide. Rules are checked from top to bottom and MATCH goes last. The mihomo page does not list the geosite name cn, so check that it exists in your data; no-resolve skips the name lookup that an IP rule may trigger.
Set it up in 4 steps
Step 1: List what must go direct
Write down the mainland sites and apps you use. Start from domain endings such as baidu.com and qq.com, then add more as you notice them.
Step 2: Pick one method
Windows exception list for one computer, a PAC file for browsers, or rules if you already run Clash. Use only one, so the rules do not fight each other.
Step 3: Enter the proxy from My assets
Copy HOST, PORT, USERNAME and PASSWORD from My assets. If you connect to the proxy from mainland China, open Proxy302 Fast Connect and keep it open.
Step 4: Check both sides
Open https://ipinfo.io/json: it should show the proxy's IP. Then open a mainland site: it should load at the speed of your normal connection.
Expected result Overseas sites show the proxy's IP; mainland sites load direct.
If it still does not work
The site opens direct but asks you to do something odd, or refuses the visit
Check Did the page load with the proxy off?
Fix Then the rule is the site's own. Use the site direct, as in the plan above, instead of through the overseas proxy.
Clash says the geosite cn is missing
Check Does your geosite data contain that name?
Fix Update the data, or list the domains with DOMAIN-SUFFIX rules.
FAQ
Why can't I open Chinese websites with an overseas proxy?
The exit is overseas, so the site sees an overseas visitor; the proxy also resolves names from its own location, and the route is long. Send mainland sites direct.
Can a setting make an overseas IP look like a mainland visitor?
No. A proxy shows the location of its exit. If you need a mainland location, check the country list on the product page before you buy and ask Support if unsure.
Do I need Fast Connect to use the proxy in mainland China?
Fast Connect is for reaching the proxy from mainland China; it is free and runs on Windows and Mac. It is not a replacement for direct rules.
Which protocol should I use for a browser?
HTTP. Chrome cannot log in to a SOCKS5 proxy with a password.
Prices and limits
A static ISP IP costs US$0.50 for 1 day and US$7.99 for 30 days, the same price in every country. There is no free trial; the smallest purchase is one IP for one day. This guide covers direct and proxy routing only; it does not promise that any site will accept an overseas IP.
Read next
Clash proxy setup
How to add an HTTP or SOCKS5 proxy in Clash Verge and other mihomo-based clients, and check the exit.
Proxy302 Fast Connect 2.3 setup
Use Proxy302 from mainland China: download the free Fast Connect 2.3, click 「一键加速」 (One-click boost), and fill in your proxy details exactly as given.
Shadowrocket on iPhone
Add a Proxy302 HTTP or SOCKS5 proxy to Shadowrocket on iPhone: which boxes to fill, how to switch it on, how to check your exit IP and what to do in mainland China.
Chrome proxy setup
Set a proxy in Google Chrome: system settings, the --proxy-server flag, why SOCKS5 with a login does not work, extensions and a check.
ISP proxies (static residential)
Fixed static ISP proxies: a residential-grade IP that stays the same for the whole term. For social accounts, stores and AI tools. HTTP and SOCKS5.
View options and pricingReference links
7
- MDN: HTTP CONNECT method
Official documentation · Confirmed on:
Read on 11 November 2026: CONNECT asks a proxy to open a tunnel to a destination; the request target is the destination host and port (CONNECT host:port).
- Everything curl: SOCKS proxies
Official documentation · Confirmed on:
Read on 11 November 2026: with socks5 curl resolves the host name locally; with socks5h it sends the name to the proxy, which resolves it.
- Requests docs: Advanced usage
Official documentation · Confirmed on:
Read on 11 November 2026: a Session reuses the underlying TCP connection to the same host (keep-alive is automatic inside a session); a proxy URL can carry user:password; SOCKS needs pip install "requests[socks]", and socks5 resolves names on the client while socks5h resolves them on the proxy.
- Microsoft Support: Use a proxy server in Windows
Official documentation · Confirmed on:
Read on 11 November 2026: under Manual proxy setup you enter the proxy address and port; an exception list takes the ending of a website address, entries are separated by semicolons and * matches any address ending with the text; sites in the list skip the proxy.
- MDN: Proxy Auto-Configuration (PAC) file
Official documentation · Confirmed on:
Read on 11 November 2026: FindProxyForURL(url, host) returns DIRECT, PROXY host:port or SOCKS host:port; dnsDomainIs(host, ".mozilla.org") is true for hosts that end in that domain and false for a bare name such as "www".
- mihomo docs: routing rules
Official documentation · Confirmed on:
Read on 11 November 2026: rules are checked from top to bottom and higher rules win; GEOSITE matches a named domain category, GEOIP matches the country code of an IP (GEOIP,CN is China), no-resolve skips the name lookup that an IP rule may trigger, and MATCH catches everything and goes last. The page does not list the geosite name cn, so check it exists in your data.
- Proxy302 product facts and price list
Product observation · Confirmed on:
Product facts file of the site (values checked against the console, the backend and the price table on 18-19 October 2026, protocol tests of 4 November 2026 and the rotating datacenter line on 10 November 2026): products, prices in US$ (1 PTC = US$1), lease terms, protocols and ports, countries, no free trial.
Ready to try it?
Create an account, top up once, then pick rotating residential, static ISP or datacenter IPs and have one running in your browser within minutes.