This guide is for v2rayN users who have already imported a node but are unsure how “Set System Proxy” relates to Global, Bypass Mainland China, and Direct. First confirm that the application reaches a local proxy port, then check whether routing sends it to the proxy or direct outbound. By the end, you can troubleshoot pages that load while command-line requests fail, Global mode with no traffic, or games whose latency does not change.
System Proxy and Routing Modes Are Separate Layers
Start v2rayN, choose an available server, then open the tray menu and select “System Proxy” → “Auto Configure System Proxy.” This changes the current Windows user’s proxy settings. Browsers and desktop applications that honor system proxy settings send HTTP or HTTPS requests to v2rayN’s local listening port instead of connecting directly to the destination.
Next, choose a routing rule. Routing happens after traffic enters the Xray core. The core reads the destination domain, IP address, port, and network type, then matches rules from top to bottom to select an outbound tag. The result is usually the proxy outbound proxy, direct outbound direct, or block outbound block. When the system proxy is off, changing the routing mode does not automatically take over every application.
Use the port numbers shown under “Settings” → “Parameter Settings” → “Basic Settings.” Older configurations commonly use SOCKS port 10808 and HTTP port 10809, while some newer configurations use a single mixed listening port. Do not copy example ports blindly; the port entered in a local application must match v2rayN’s current listening port.
- Layer 1: Browsers read the system proxy, command-line tools use explicit proxy options, and other programs may connect directly.
- Layer 2: Connections reaching the local port are evaluated by core routing rules, then sent to the proxy, direct, or block outbound.
- How to read the result: If switching routes produces no new connections in the log, check the traffic entry point first. If a connection appears but uses the wrong outbound, inspect the rules.
How Global, Bypass Mainland China, and Direct Modes Route Traffic
Global mode is useful for isolating split-routing problems. Once selected, connections entering the core that are not overridden by higher-priority rules are sent to the proxy outbound. This removes variables from GeoIP, GeoSite, and custom rules, making it useful for checking whether the node itself works. Global mode is not a permanent default: local services, LAN devices, and mainland China download sites may also be sent through the remote node.
Bypass Mainland China uses rule-based split routing. A common setup sends LAN addresses, mainland China IPs, and mainland China domains direct, while other connections use the proxy. Domain rules depend on GeoSite categories, IP rules depend on GeoIP data, and DNS results and rule order can affect the final match. Presets with the same name may contain different entries across v2rayN versions, so use the expanded rules shown under “Routing Settings” as the source of truth.
Direct mode sends ordinary connections entering the core to the direct outbound. It is useful when pausing the proxy while keeping the local listener available, or when checking whether a site is reachable directly from the current network. If a destination requires the proxy, failure in Direct mode is expected. Before exiting v2rayN, also clear the system proxy; otherwise applications may continue requesting a local port that is no longer listening.
Global Mode
Ordinary connections entering the core are sent to the proxy outbound by default. Use it to narrow down a fault or briefly handle domains not recognized by the split-routing database.
Best for: node connectivity tests and temporarily ruling out routing issues
Bypass Mainland China
RecommendedLAN and mainland China destinations connect directly; everything else uses the proxy. For everyday browsing, this reduces unnecessary remote forwarding while preserving access to most local network resources.
Best for: everyday browser use and mixed access to mainland China and overseas sites
Direct Mode
Connections can still enter v2rayN, but the core sends ordinary requests directly through the local network. Use it to verify direct connectivity or temporarily disable the proxy outbound.
Best for: local network tests and proxy maintenance
Bottom line: If Global mode still fails, first check whether the log shows a request
If the log contains no destination domain or IP address, the problem lies between the application and the local port. If the request reaches proxy and then times out, continue by checking the node, protocol, transport, and remote service.
Choosing Settings for Browsers, Command-Line Tools, and Games
Browsers usually read the Windows system proxy. For everyday use, select Bypass Mainland China and enable “Auto Configure System Proxy.” Open one mainland China site and one overseas site, then watch the outbound tags in v2rayN’s live log: mainland China destinations should match direct, while other destinations should match proxy according to the rules. If every request uses proxy, check whether a custom rule appears before the mainland China categories.
Command-line programs cannot all be handled like browsers. Some read the system proxy, some read environment variables, and others require a proxy option. Do not judge the command-line path solely from a web page result. Send one explicit request through the HTTP or SOCKS port in the current configuration, then compare it with a request made without proxy options.
curl --proxy http://127.0.0.1:10809 https://example.com/
curl --proxy socks5h://127.0.0.1:10808 https://example.com/In the second command, socks5h means the domain is resolved by the SOCKS proxy, which can reduce mismatches between local DNS results and routing on the proxy side. If Parameter Settings shows a different port, replace the port in the command as well. After testing, check the destination address, inbound tag, and outbound tag in the log; do not rely only on the command’s elapsed time to determine whether it used the proxy.
Games and real-time communication apps often use UDP directly and may ignore the system HTTP proxy entirely. In that case, switching v2rayN to Global routing may not change latency because the traffic never entered the core. First check whether the game offers SOCKS settings; if not, evaluate v2rayN’s TUN feature. Before enabling TUN, save the current configuration and confirm administrator permissions, DNS settings, and LAN access rules.
| Use Case | Traffic Entry | Suggested Route | What to Check |
|---|---|---|---|
| Everyday browser access | Windows system proxy | Bypass Mainland China | Whether mainland China destinations match direct |
| Command-line downloads | HTTP/SOCKS options or environment variables | Test with Global first, then restore split routing | Whether the port matches the proxy type |
| LAN administration pages | Browser system proxy | Bypass Mainland China or add direct rules | Whether private address ranges are prioritized for direct access |
| Games and UDP applications | Application proxy settings or TUN | Split routing by destination address | Whether traffic actually enters the core |
Bottom line: Choose a setup based on how each app’s traffic enters
For browsers, start with the system proxy and Bypass Mainland China. For command-line tools, explicitly set 127.0.0.1 and the listening port. For games, confirm how UDP is captured before deciding between Global and split routing. A routing mode cannot replace entry-point configuration.
Run a Reproducible Switch Test Using the Logs
Fix the variables before testing. Use the same server, and do not update subscriptions, switch protocols, or change DNS while testing routing. Open the v2rayN log window and set the log level to info. Prepare at least three test targets: one LAN address, one mainland China domain, and one domain that requires the proxy. Change only one switch at a time and record the result.
- Record the ports: Go to “Settings” → “Parameter Settings” → “Basic Settings” and note the SOCKS, HTTP, or mixed listening port. Confirm that no other program is using the port.
- Confirm the node: Select the server and set it as the active server. Under Global routing, first send one explicit proxy request to confirm that the proxy outbound can establish a connection.
- Enable the system proxy: From the tray menu, select “System Proxy” → “Auto Configure System Proxy.” Reopen a browser page and check whether the corresponding domain appears in the log.
- Switch to Bypass Mainland China: Visit all three test targets and record whether they match direct or proxy. LAN addresses should use direct first and should not be sent to the remote node.
- Switch to Direct: Keep the system proxy enabled and visit the same targets. If the log shows direct, the entry point is working and the difference comes from outbound routing.
- Restore the everyday setup: Select Bypass Mainland China or your own routing configuration. If you no longer need the proxy, select “System Proxy” → “Clear System Proxy” before closing the client.
When reading the log, focus on the time, destination address, and outbound tag. A connection refused error usually points to a local port error or an inactive listener. A timeout after matching proxy requires further checks of server availability, transport settings, and the destination network. If direct resolves to an unexpected address, check DNS settings instead of repeatedly switching Global mode.
Common Reasons Routing Appears Not to Work
The most common case is a stale system proxy. v2rayN has exited, but Windows still points to an old port at 127.0.0.1, so the browser reports that every page is unreachable. Restart v2rayN and clear the system proxy, or confirm in Windows proxy settings that the manual proxy is disabled. Do not hide an inactive local port by repeatedly switching servers.
The second case is a mismatch between DNS and rule matching. A domain may first be resolved to an IP and then match only IP rules, or its outbound may be determined directly by domain classification. Check “Settings” → “DNS Settings” and domainStrategy in the current routing rules. After changing it, save the configuration and restart the core, then test with a new connection; existing long-lived connections will not be rebuilt automatically under the new rules.
The third case is outdated rule data. The GeoIP and GeoSite categories used by Bypass Mainland China must be compatible with the current core configuration. If a domain’s classification recently changed, some mainland China services may incorrectly use the proxy. Add an exact direct rule first to verify the behavior, then update the category data; do not begin with a broad rule covering every domain.
Why does the command line still connect directly after Global mode is enabled?
First, explicitly set http://127.0.0.1:10809 or the current SOCKS port in the command. If a command-line tool does not read the system proxy, its connection never enters v2rayN, so Global routing cannot handle it.
Why can’t I open a LAN device page after enabling the system proxy?
Check whether the routing configuration has direct rules for private ranges such as 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16, and place those rules before the fallback proxy rule.
Why does a mainland China website use the proxy in Bypass Mainland China mode?
Confirm the actual destination domain and resolved IP in the log, then check the GeoSite and GeoIP data and the rule order. You can temporarily add the complete domain to the direct outbound, save the configuration, and restart the core to verify it.
Why do all pages show connection failures after closing v2rayN?
Restart the client and select “System Proxy” → “Clear System Proxy” from the tray menu. Then confirm that Windows proxy settings no longer point to a 127.0.0.1 port whose listener has stopped.
Why doesn’t latency change when a game switches to Global mode?
First check the live log for the game’s destination and UDP connections. If there is no record, the game is not using the system proxy; check its in-game proxy option or TUN capture instead of continuing to change the routing name.
Use this consistent rule of thumb: choose Bypass Mainland China for everyday browsing, switch temporarily to Global when troubleshooting a node or split-routing rules, and use Direct to pause proxy outbound or verify the local network. Base every decision on the inbound and outbound entries in the log. The tray icon or a checked menu item alone cannot confirm the actual path of a specific connection.