SSClash
Super Simple Clash: Centralized Block Bypass on OpenWrt using the Clash.Meta Kernel
Install / Use
/learn @zerolabnet/SSClashREADME
📖 Read this in other languages:
<p align="center"> <img src=".github/assets/images/logos/SSClash.png" width="200"> </p> <h3 align="center">Here's the step-by-step process for installing and configuring SSClash on your OpenWrt router</h3>Setup Guide
Step 1: Update Package List
Update the package list to ensure you have the latest available versions.
opkg update
Step 2: Install Required Packages
In most cases you do not need to install anything manually: when you install luci-app-ssclash from a configured OpenWrt feed, opkg will automatically pull in:
coreutils-base64– for scripts that use Base64;kmod-tun– for TUN mode;- the appropriate transparent proxy module depending on your firewall stack:
kmod-nft-tproxyfor firewall4 / nftables;iptables-mod-tproxyfor firewall3 / iptables.
Only if you are installing the .ipk offline or building a custom image and dependencies are missing, you can install the transparent proxy modules manually:
# For nftables (firewall4)
opkg install kmod-nft-tproxy
# For iptables (firewall3, OpenWrt < 22.03.x)
opkg install iptables-mod-tproxy
Step 3: Download and Install luci-app-ssclash Package
Download the SSClash package and install it.
curl -L https://github.com/zerolabnet/ssclash/releases/download/v3.8.0/luci-app-ssclash_3.8.0-r1_all.ipk -o /tmp/luci-app-ssclash_3.8.0-r1_all.ipk
opkg install /tmp/luci-app-ssclash_3.8.0-r1_all.ipk
rm /tmp/*.ipk
Step 4: Automatic Mihomo Kernel Management
Go to Settings → Mihomo Kernel Management and click Download Latest Kernel. The system will:
- Automatically detect your router's architecture
- Download the latest compatible Mihomo kernel
- Install and configure it properly
- Show kernel status and version information
Important: Restart the Clash service after kernel installation.
Manual Kernel Installation (Optional)
If you prefer manual installation, navigate to the bin directory and download the Clash.Meta Kernel:
cd /opt/clash/bin
For amd64 architecture:
curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-amd64-compatible-v1.19.21.gz -o clash.gz
For arm64 architecture:
curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-arm64-v1.19.21.gz -o clash.gz
For mipsel_24kc architecture:
curl -L https://github.com/MetaCubeX/mihomo/releases/download/v1.19.21/mihomo-linux-mipsle-softfloat-v1.19.21.gz -o clash.gz
Need a different architecture? Visit the MetaCubeX Release Page and choose the one that matches your device.
Decompress and make executable:
gunzip clash.gz
chmod +x clash
Step 5: Configure Interface Processing Mode
SSClash offers two interface processing modes:
Exclude Mode (Universal approach) - Recommended for most users
- Default mode that processes traffic from ALL interfaces except selected ones
- Automatically detects and excludes WAN interface
- Simple to configure - just select interfaces to bypass proxy
- Best for typical home router setups
Explicit Mode (Precise control) - For advanced users
- Processes traffic ONLY from selected interfaces
- More secure but requires manual configuration
- Automatically detects LAN bridge when enabled
- Ideal for complex network setups requiring precise control
Additional Settings:
- Block QUIC traffic: Blocks UDP port 443 to improve proxy effectiveness for services like YouTube
Step 6: Clash Configuration Management
Edit your Clash configuration with the built-in editor featuring:
- Syntax highlighting for YAML files
- Live service control (Start/Stop/Restart)
- Service status indicator
- Save & Apply functionality with automatic service reload
Step 7: Local Rulesets Management
Create and manage local rule files for use with rule-providers:
- Create custom rule lists with validation
- Edit existing rulesets with syntax highlighting
- Organized file management with collapsible sections
- Usage: Reference in config as
type: file, format: text, path: ./lst/your_list.txt
Step 8: Real-time Log Monitoring
Monitor Clash activity with the integrated log viewer:
- Real-time log streaming with automatic updates
- Filtered display showing only Clash-related entries
- Color-coded log levels and daemon identification
- Auto-scroll to latest entries
Step 9: Dashboard Access
Access the Clash dashboard directly from the LuCI interface with automatic configuration detection.
<p align="center"> <img src=".github/assets/images/screenshots/scr-05.png" width="100%"> </p>Remove Clash
To remove Clash completely:
opkg remove luci-app-ssclash
rm -rf /opt/clash
