V2RAY TROUBLE INDEX
V2Ray FAQ and Configuration Troubleshooting
Covers common subscription import, node timeout, system proxy, TUN, routing, and DNS issues, organized into fundamentals, setup, usage tips, and troubleshooting.
QUESTION CATEGORIES
Find by issue type
Choose the category closest to the current symptom. If you are unsure, start with troubleshooting and narrow the scope layer by layer using the logs and traffic path.
01 / BASICS
Fundamentals
First distinguish the client, core, and traffic-capture method so you do not keep changing settings at the wrong configuration layer.
Which should you choose: v2rayN, v2rayNG, or v2flyNG?
Use v2rayN first on Windows, macOS, and Linux desktops. On Android, v2rayNG with the Xray core is usually the better starting point; consider v2flyNG when you specifically need the v2fly core. Choose by operating system first, then verify the subscription provider’s required protocols, transport methods, and core compatibility. Do not judge compatibility by the client’s display name alone.
What is the difference between the V2Fly and Xray cores?
Both belong to the Project V ecosystem and share similar basic configuration concepts, but their protocol extensions, transport capabilities, configuration fields, and release schedules are not identical. v2rayNG typically uses the Xray core, while v2flyNG uses the v2fly core. Before importing a configuration, confirm that the client core recognizes its protocols and transport parameters. If a field is unsupported, do not delete it immediately; first check the requirements of the configuration source.
What are subscriptions, nodes, and configuration files?
A subscription is a URL used to retrieve and update node information in bulk. A node is a set of server, port, authentication, and transport parameters. A configuration file can contain inbound and outbound settings, DNS, and routing rules. Updating a subscription changes the node list in its group, but usually does not replace all local routing settings. Troubleshoot the subscription content and the client’s local settings separately.
What is the difference between a system proxy, global proxy, rule-based routing, and TUN mode?
A system proxy writes the proxy address to the operating system settings and mainly affects applications that honor them. A global proxy sends all matched traffic through the proxy outbound. Rule-based routing chooses direct connection, proxying, or blocking based on domains, IP addresses, or processes. TUN mode uses a virtual network interface to capture a broader range of traffic. Identify which layer is active before troubleshooting, or a routing problem can easily be mistaken for a node problem.
How should you choose between arm64 and universal packages?
Most recent mainstream Android devices use the arm64 architecture, so choosing an arm64 package avoids unnecessary architecture files. If you cannot confirm the device architecture, or the arm64 package reports an incompatibility, use the universal package instead. Universal packages support more architectures and are usually larger, but their client features are essentially the same as those in the corresponding arm64 release.
02 / SETUP
Setup
For import issues, check the link and response first. For proxy issues, check the local listener and operating system settings first.
How do you import a subscription link into v2rayNG?
Open v2rayNG’s subscription group settings, create a group, and paste the complete subscription URL. Save it, return to the main screen, and run Update subscriptions. When the update finishes, select a node from the relevant group and start the connection. If the list does not change, first confirm that you updated the newly created group. Then check for spaces around the URL, missing parts of the link, and network or parsing errors in the log.
What should you do if importing a pasted subscription link fails?
Remove spaces and line breaks from both ends of the link, and make sure you did not copy webpage instructions along with it. Test the URL in a browser to confirm that it returns content, then verify the device date, time, and time zone. If the URL is reachable but the client still fails, check the log to determine whether the problem is a certificate connection failure, an empty response, or an unrecognized content format. Then inspect the network, subscription status, or client version accordingly.
What should you do when a subscription update fails or keeps showing old nodes?
Confirm that you are updating the subscription group currently in use, not another group with the same name. Check whether the subscription URL has expired or lost parameters, and review the response status in the update log. If the server has updated but the local list still shows old content, back up any custom nodes you need, then delete and recreate the subscription group. Never clear the entire configuration without a backup.
Why can a single share link be imported when the subscription URL cannot?
Single share links and subscription URLs follow different processing paths. A share link parses one node directly; a subscription URL must first fetch remote content, identify its format, and write multiple nodes in bulk. A working single node only proves that its protocol parameters can be parsed—it does not prove that the subscription endpoint works. Check the subscription URL’s response, content format, access permissions, and subscription parsing errors in the client log.
v2rayN is running, but the system proxy is not working. What should you do?
First confirm in v2rayN that system proxy mode is not disabled. Then open the operating system’s proxy settings and verify that the address points to the local machine and that the port matches the client’s local listening port. If the setting keeps reverting, check whether another proxy tool or management policy is rewriting it. After making changes, reopen the browser and test again, while using the client log to confirm that requests reach the local inbound.
03 / USAGE
Usage tips
Use speed tests for filtering and logs for confirmation. Routing modes and traffic-capture methods must be configured together.
When testing nodes, should you look at ping, real connection latency, or download speed?
Ping mainly measures ICMP round-trip time and may not perform a complete proxy handshake. Real connection latency establishes an actual proxy connection, so it is more useful for determining whether a node works. Download tests are also affected by egress bandwidth, the test server, and concurrency settings. Start by using real connection latency to remove unusable nodes, then observe stability with actual webpages or downloads. Do not rank nodes by a single ping result.
How do you set up a V2Ray global proxy?
Choose a node that connects successfully, then switch the client’s routing mode to Global or set the default outbound to the proxy. Next, enable the system proxy or TUN mode according to the application type. Global mode sends more traffic through the proxy. When troubleshooting is complete and you want rule-based routing again, switch back to rule mode and confirm that the rule set has loaded. Changing the routing mode alone without enabling traffic capture may still leave applications connecting directly.
What should you do if TUN mode reports insufficient permissions or cannot create an interface?
On desktop, exit the client first, then start it using an account or method with the required permissions. Confirm that the system is not blocking virtual network interfaces or related services. On Android, allow the client to create a VPN connection; normally, only one such connection can capture traffic at a time. If the interface stops immediately after creation, check the log for driver, routing-table, or port-conflict information, temporarily disable other traffic-capture tools, and try again.
Why are routing rules not using direct or proxied connections as expected?
Routing usually evaluates rules in order, and the first match determines the outbound. Check which rule actually matches the destination domain or IP address, then verify that the outbound tag referenced by that rule exists. Domain rules can also be affected by resolution results and sniffing settings. After changing rules, reload the configuration and use the log to confirm the matched rule and final outbound instead of checking only whether a webpage opens.
How should you check DNS after enabling the proxy?
First determine whether the problem is domain resolution or the proxy connection. If a known IP address works but its domain does not, check DNS first. Verify the client’s DNS servers, query strategy, domain rules, and outbound tags, making sure resolution requests are not sent to a nonexistent outbound. If the system has cached an old result, clear the system DNS cache after changing the configuration, restart the client, and confirm in the log that the query returned successfully.
04 / DIAGNOSE
Troubleshooting
Start by checking whether there are any logs, then work through the local inbound, routing, DNS, node handshake, and remote outbound layer by layer.
Where should you start when every node shows a timeout?
First confirm that the device can access the network and retrieve the subscription. Then check the system time, whether the client core has started, and whether the local port is occupied. Choose any node and inspect its full log to distinguish DNS resolution failures, TCP connection timeouts, TLS handshake failures, and authentication failures. If every node fails at the same stage, investigate the local network, DNS, or client settings before changing nodes one by one.
The client says it is connected, but the browser cannot access the internet. What should you do?
A connected status only means that the client process or virtual interface is running; it does not prove that the node handshake and traffic forwarding succeeded. Confirm that a specific node is selected, then check whether the system proxy or TUN mode is actually capturing browser traffic. Open a webpage while watching the access log: no new entry means the traffic never reached the client; an entry followed by an outbound failure means you should continue checking the node, routing, and DNS.
Why can the browser connect while other applications bypass the proxy?
The browser may use the system proxy or its own proxy settings, while the target application may ignore the system proxy, use only UDP, or have separate network settings. Check whether the application supports manually entering an HTTP or SOCKS proxy. If more applications need to be captured, consider TUN mode. If there are still no traffic entries after enabling it, check process-based routing rules, virtual-interface routes, and whether the application bypasses the local network stack.
How do you troubleshoot a slow or inconsistent V2Ray connection?
Start by using real connection latency to rule out nodes with unstable handshakes. Then compare several nodes at the same time against the same destination, so fluctuations on the destination site are not mistaken for proxy problems. Check for unnecessary global proxying, overly complex rules, or repeated DNS queries, and watch the log for frequent reconnects. If small files are fine but large files are slow, also consider egress bandwidth, transport parameters, and packet loss on the local network.
What should you do if the client crashes or the core repeatedly exits after importing a configuration?
Record the first configuration error in the log instead of focusing only on the final exit message. Common causes include an unsupported field for the current core, a port conflict, a routing rule that references a nonexistent tag, or configuration content truncated during copying. Temporarily switch to a known-good basic configuration to verify the client itself, then restore DNS, routing, and advanced transport settings section by section to locate the problematic block.
DEEP TROUBLESHOOTING
Continue troubleshooting by symptom
For the complete workflow, the troubleshooting page covers no internet access, node timeouts, subscription failures, slow speeds, DNS, system proxy issues, client exits, and mobile-device issues in separate sections.