The Clash core builds on mihomo and is adapted to the constraints of Apple’s NetworkExtension framework. It processes traffic on your device, with performance tested on real hardware and the full source code open for review.
TUN-less transparent proxying: socket-layer flow capture that hands ordinary SOCKS5 to your existing proxy. No fake IP, no route hijack, no second TCP stack.