1. Add a server
On the Proxies tab, tap + and paste a share link (ss://, vmess://, vless://, trojan://, hysteria2://, tuic://…), a subscription URL or a WireGuard .conf file, or scan a QR code. Profiles can also be imported from Clash / Stash YAML.
2. Choose a routing mode
Smart applies your rules. Global sends everything through the selected server. Direct bypasses all servers.
3. Write rules
Rules are evaluated top to bottom; the first match wins. Examples:
DOMAIN-SUFFIX,example.com,PROXY IP-CIDR,10.0.0.0/8,DIRECT GEOIP,US,DIRECT RULE-SET,https://example.com/ads.list,REJECT FINAL,PROXY
4. Start routing
On the Overview tab, tap Start routing and approve the VPN configuration prompt the first time. The request log shows which rule matched each connection.
5. DNS & filtering
In Settings → DNS, pick an encrypted resolver (DNS-over-HTTPS or DNS-over-TLS). On the Filters tab, enable blocklists to drop unwanted domains at the resolver.
6. Set up Apple TV
On Apple TV, open Receive from iPhone or Mac on the Overview (or Settings → Receive Setup). On your iPhone, iPad or Mac, go to Settings → Send to Apple TV, choose the TV and enter the PIN it shows. Proxies, configurations and subscriptions transfer over your local network.
7. HTTPS inspection (optional)
Off by default. To debug your own traffic, generate a certificate in Settings, install it, and enable full trust in iOS Settings → General → About → Certificate Trust Settings. Remove it when you are done.