Tutorial 2026-05-11 · ~16 min read

How to Switch Rule and Global Modes in Mihomo Party: Step-by-Step

If you finished the Mihomo Party Windows 10 install walkthrough, the next bottleneck is rarely “YAML syntax” anymore—it becomes tactical routing hygiene. This companion tutorial explains how Mihomo Party surfaces controls for Rule mode, Global mode, and Direct routing atop the embedded Mihomo (Meta‑class Clash kernel), how nested policy groups let you manually pick nodes, and repeatable ways to prove a website traverses proxy chains instead of wishful-thinking browser caches—all without duplicating screenshots that spoil every nightly build.

Mental model: Party edits, Mihomo enforces modes

Mihomo Party sits closer to cockpit glass than fuselage plating. Tray icons, Fluent-like tables, Profiles panes, and subscription dialogs orchestrate binaries and controller ports, yet semantics for Rule versus Global versus Direct remain kernel contracts shared with sibling GUIs spanning Clash folklore. Operators learning Mihomo Party after Clash-era clients should consciously map words to controller verbs: activating RULE honours YAML matchers cascading into policy groups such as selectors, relays, fallback stacks, whereas GLOBAL collapses nuanced lists into brute outbound selection, useful only when diagnosing stubborn destinations or comparing latency across datacentres without repeatedly editing remote rule providers mid-flight.

DIRECT is deliberately blunt: Mihomo peels away SOCKS and HTTP relays so flows follow ordinary routing surfaces your operating system exposes. Operators frequently abuse Direct as “off,” yet Direct differs from quitting Party entirely because Mihomo remains attached to watchers, sniffers optional in advanced Profiles, listeners that still accept captive portal probes, instrumentation channels future automation scripts anticipate. Respect that distinction whenever university labs document procedures—students mistakenly toggling modes while contradictory VPN helpers rewrite DNS elsewhere produce tickets blaming “broken Global” when overlays—not Policy groups—skew results.

If you cross‑shop clients, juxtapose workflows with our Clash Verge Rev Profiles and modes playbook, which targets the same Mihomo nucleus through a different ergonomic shell yet preserves identical metaphors underneath. Pairing readings clarifies transferable skills without pretending button labels freeze forever across releases.

Rule mode versus Global versus Direct—in plain troubleshooting language

Rule mode should anchor everyday browsing wherever subscription authors partitioned domestic CDNs thoughtfully. Traffic lands on GEOIP matchers, domain keyword lists, process-specific overrides, scripted logical operators, culminating in selectors referencing remote nodes labelled with human-readable aliases. Complexity rewards maintainers tailoring classroom labs: streaming exercises might exempt campus SSO domains while granting overseas creative suites consistent latency through manually pinned Singapore relays without forcing every HTTP connection through identical uplinks—a flexibility Global willingly sacrifices.

Global mode, conversely, is the cynical hammer insisting every adaptable socket inherits whichever outbound currently binds to the GLOBAL policy chain unless upstream YAML authors carved narrow exceptions—which many aggressive templates avoid. Operators reach Global when diagnosing whether relays authenticate at all, isolating flaky DNS artefacts from mis-specified GEOIP misses, benchmarking throughput without mentally diffing gigantic rule spreadsheets. Staying welded to Global corrodes nuanced domestic routing architectures, spikes battery consumption hopping continents for localized weather widgets, camouflages regressions lurking inside nuanced rule merges—treat immersion as staged triage bounded by timestamps and annotated screenshots instead of indefinite lifestyle defaults.

Direct mode suits bypass experiments: tethering hotspots behind carrier-grade NAT verifying whether outages stem from relays versus upstream censorship, benchmarking raw ISP jitter before accusing remote providers, cooperating with corp VPNs insisting split tunnels remain pristine. Operators sometimes forget Direct bypasses relays yet retains Mihomo scaffolding; browser extensions injecting independent proxies remain hazards. Document verbally that Direct complements—not replaces—explicitly quitting system proxy overlays when Windows Settings still point at phantom loopback listeners after crashes reminiscent of orphaned PAC scripts.

Operational cadence worth rehearsing

Cycle Rule → symptom reproduction → constrained Global sanity probe → revert Rule once logs explain behaviour. Folding Direct midway supplies contrast baselines illustrating whether relays ever mattered for reproduction at all.

Where Mihomo Party usually exposes routing mode toggles

Because Party evolves faster than changelog screenshots stay honest, phrase guidance behaviourally rather than pinning pixel-perfect coordinates. Typically the shell mirrors Clash ergonomics with a conspicuous mode strip—icons or segmented controls cycling RULE/GLOBAL/DIRECT—paired with ancillary switches for system proxies, eventual TUN capture, scripted service helpers. Hover tooltips referencing “Mode” deserve primacy whenever search traffic seeks Mihomo Party Rule mode tutorial keywords; mistranslations occasionally label equivalents “Traffic mode” yet still drive identical controller PATCH semantics.

Complement superficial toggles with the underlying API reality: Mihomo listens on localhost controller ports enumerated within Party settings. Power users aligning automation scripts corroborate UI states through REST payloads so operators cannot fool themselves flipping modes while systemd rescues stale systemd units relaunching older cores unintentionally tethered—rare classroom lab scenario yet memorable once encountered during hackathon VLAN migrations.

If Party surfaces multiple Profiles simultaneously visible, reaffirm whichever row shines as Active before interpreting mode behaviour. Passive YAML lurking in sidebar lists ghosts previous experiments whose selectors polluted expectations because residual references still haunt browser DNS caches—even when inactive Profiles theoretically remain dormant—and nothing torpedoes onboarding faster than diagnosing Global misbehaviour atop an inactive preset whose outbound names collided cosmically yet never loaded.

Policy groups, selectors, and manual node switches

Imported subscriptions compile into hierarchies surfaced under Proxies—or equivalent nomenclature—showing layered policy groups. Selectors advertise radio-style choices among nodes, relays bundle chained strategies, fallback groups cascade through URL-test probes with tolerances scripted by maintainers lazy enough to outsource measurement cadence wisely. Selecting a relay manually persists until refresh intervals fetch new manifests or authors rename tags provoking silent resets—document timestamped swaps when auditors demand traceability illustrating who pinned Moscow exit nodes temporarily for journalism workshops.

Some templates expose ambiguous names like PROXY mimicking GLOBAL semantics—read YAML introspectively whenever behaviour diverges from intuition rather than chanting misconfigured vendor slurs prematurely. Conversely, speciality groups referencing AI APIs, conferencing suites, academia licensing portals often appear because maintainers earmarked brittle destinations for dedicated relays less prone to ICMP shaping. Manual switching inside those narrower selectors keeps Rule fidelity intact whilst granting operators humane agency without escalating to Global brute force.

  1. Open Proxies pane after confirming Profiles synchronised cleanly without schema validation rejects logged seconds earlier.
  2. Identify the selector governing the stalled destination—traffic logs annotate policy hits once verbosity tuned responsibly.
  3. Click alternative nodes sequentially, respecting cooldown intervals so hysteresis-laden dashboards update fairly.
  4. Corroborate each attempt with traceroute-esque latency probes Party embeds beside node rows when providers expose such metrics ethically.
  5. Record chosen paths inside runbooks—not sticky notes—to prevent tomorrow-you from mystified discrepancies alleging ghost MITM interception.

Overwritten YAML versus GUI memory

Some automation pipelines rewrite Profiles during midnight merges, wiping manual selectors unexpectedly. Tie operational policies to versioning or postpone remote refresh until synchronous change windows conclude.

Handshake traffic routing before blaming modes

Operators toggle Mihomo Party modes obsessively yet ignore foundational plumbing: browsers must funnel through Mihomo listeners—typically loopback adapters advertising mixed HTTP ports plus SOCKS tiers—or TUN overlays capturing stubborn binaries ignoring OS proxies entirely. Chromium derivatives honour enterprise policies disabling inheritance; Firefox forks maintain curated network stacks oblivious unless toggled deliberately; ephemeral devcontainers sometimes embed bespoke environment variables overshadowing Tray indicators blissfully signalling “Protected.”

Reconcile Party’s enumerated listener addresses with whichever operating system dialogs apply (Windows 10 immutable proxy pages survive longer than insiders expect macOS Ventura panels). Divergence between Tray claims—“System proxy engaged”—and blank OS canvases hints at overlays rewriting manifests between refresh cadences deserving investigation before escalating provider tickets blaming exotic Rule semantics. Lightweight contrast tests juxtaposing Curl invocations routed through exported environment variables isolate classes of breakage faster than reloading massive streaming dashboards reliant on QUIC edge cases resisting trivial reproduction.

Operators graduating beyond HTTP ought to scrutinise UDP pathways before alleging Global remedies voice chat glitches exclusively through TCP-minded reasoning. Profiles enabling optional sniffers reorder TLS SNI revelations impacting policy matching—modes remain orthogonal yet intertwined enough that journaling toggles systematically prevents regressions falsely attributed superficially to Global misunderstandings tangled intimately with multiplex transports.

Measured verification: proving sites traverse your proxy chain

Subjective anecdotes— “YouTube visually loads overseas”— crumble under auditors and classroom moderators insisting reproducible artefacts. Compose layered checks combining Mihomo-native connection logs illustrating matched rules, authoritative IP reflection endpoints trusted institutionally plus secondary correlates reinforcing narrative confidence without leaking sensitive tokens into third-party dashboards carelessly scraped by marketing pixels.

While resting in Rule, load a domestically optimised portal expected to short-circuit through DIRECT semantics if YAML authors scripted compassionate exemptions. Immediately afterwards request an offshore CDN asset whose GEOIP classifications historically demanded relay selectors. Annotate Mihomo logs capturing policy chain resolution per domain, juxtaposing timestamps aligning with subjective browser sensations. Suspicious mismatches motivate deeper dives inspecting DOH overlays, QUIC pitfalls, hardened corporate roots intercepting split flows masquerading as proxy failures falsely.

Switch temporarily into Global, reload identical endpoints, quantify whether latency deltas align with brute routing expectations. Afterwards revert diligently—Global amnesia afflicts hurried operators leaving labs permanently hammering domestic banking portals through Icelandic relays inflaming fraud heuristics overnight. Compose Direct contrasts verifying baseline ISP vantage before vilifying relays whose crime merely exposed upstream packet loss overshadowed previously by coincidental buffering.

Check What “good enough” demonstrates Why Global/Direct contrasts matter
Mihomo live connections The domain lists the outbound you consciously selected—not cached stale guesses. Global should align every observed flow with GLOBAL chain members unless narrow YAML overrides appear.
IP reflection website Public IP aligns with expectation for active selector geography. Direct should snap back to ISP-registered ranges instantly if bypass succeeded.
Traceroute-ish latency probes Chosen node pings stay within SLA tolerances for interactive workloads. Manual selector hops inside policy groups localize improvements without escalating to Global brute force prematurely.

Three-step contrast recipe

  1. Capture Rule-oriented logs referencing specific domains failing user stories.
  2. Promote temporarily to Global verifying whether identical flows succeed brute-forced—evidence distinguishes relay auth bugs from GEOIP omission.
  3. Drop to Direct ensuring ISP paths behave; failures there redirect blame toward captive portals unrelated to Mihomo selectors.

Pitfalls that masquerade as “modes broken” across layered stacks

Conflicting overlays—campus mandated VPNs insisting full tunnels, virtualization suites bridging subnets peculiarly, anti-cheat overlays rewriting adapters—simulate symptoms indistinguishable from botched Mihomo selectors until operators sequentially disable suspects methodically journaling order effects. Chromium extension marketplaces hawk “accelerators” reintroducing SOCKS chaos precisely when novices congratulate themselves mastering Global toggles conscientiously—a cautionary subplot classroom instructors should articulate verbally before blaming upstream subscription maintainers ethically trying their best juggling censored egress landscapes.

DNS deserves explicit scepticism whenever fake-ip interplay or DOH divergence surfaces: Rule matching may hinge on sniffed domains while naive IP checks mislead juniors expecting literal resolver parity. Operators cross-training from legacy Clash forks should revisit provider documentation illuminating Mihomo behavioural deltas without dismissive eye-rolls—education demands referencing canonical explainers politely even when impatient operators crave instant gratification TikTok summaries cannot responsibly deliver.

Security-minded readers must remember transparent proxies inspecting TLS through institutional roots degrade trust assertions independent of Mihomo ingenuity; bridging corporate compliance expectations politely requires articulating architectural limits without promising magical Global panaceas rewriting certificate policies illegally. Pair these conversations with wholesome references bridging advanced DNS triage pathways once fundamentals stabilize—guides like the fake-ip playbook remain invaluable after baseline modes behave predictably daily.

FAQ — Mihomo Party modes & policy groups

Does Rule/Global apply to TUN adapters and system proxy simultaneously?

Modes classify how Mihomo resolves outbound chains once packets reach the daemon; transport plumbing—system proxy dialogs versus injected TUN drivers—defines who feeds those packets initially. Mishandling layering spawns folklore about “modes not sticking” whenever half the stack references outdated listener ports enumerated before reboots rewrote them silently.

Selectors vanished after upgrading Party—panic?

Often Profiles failed refresh mid-upgrade leaving partial caches, antivirus quarantined provider downloads, or token rotation invalidated remote lists. Inspect logs calmly, rerun subscription updates politely throttled, escalate to providers only after confirming outbound HTTP probes succeed outside Mihomo narrowing culprits surgically rather than blaming Party aesthetics emotionally.

Should I spam Global whenever manual selectors disappoint?

Prefer targeted selector experimentation plus provider feedback—Global conceals GEOIP authoring mistakes delaying sustainable fixes classmates deserve. Reserve Global narrowly for SLA-breaking incidents documented transparently lest technical debt metastasizes across semesters.

How does this relate historically to Clash Premium semantics?

Marketing labels shifted across ecosystems yet controller verbs rhyme: Rule/Global/Direct remain conceptual anchors bridging Clash nomenclature, Mihomo internals, scholarly blog posts insisting accurate taxonomy for reproducible academia—honouring lineage helps novices migrating without discarding trustworthy muscle memory nurtured responsibly.

Checklist — sustainable Mihomo Party mode discipline

  • Anchor workloads in Rule mode unless triage artefacts prove otherwise—with classroom-friendly documentation teammates inherit.
  • Visit Global mode briefly to isolate egress auth or DNS puzzles, snapping back afterwards with timestamped narratives.
  • Invoke Direct deliberately for ISP baseline contrasts rather than improvised panic toggles scribbled beside coffee rings.
  • Manipulate nested policy groups manually before escalating drama; annotate node selections conscientiously respecting provider etiquette.
  • Verify behaviour through layered logs plus trusted IP corroborations instead of folklore—future auditors thank you politely.

Fragmented “Meta GUI” forks scattered across unnamed mirrors routinely blur whether Rule mode truly engages before operators gamble on TUN, bury manual policy group ergonomics inside nested tabs, ship staggered updater channels that silently desynchronise Profiles from kernels, or bury documentation proving which controller verbs map to reassuring tray colours—pain that scales whenever classrooms inherit laptops preloaded mysteriously overnight.

Clash keeps the narrative coherent: artefacts you can cite, Profiles workflows aligning with verifier-first habits, parity across Windows generations so hopping between GUIs—including Party-style shells and Verge-era layouts—means porting disciplined YAML—not reverse-engineering superstitions each semester anew.

If you want installs and refreshes tethered to the same sober guidance instead of gamble-search hops, glance at our Clash download hub after locking in the mode playbook above—provenance and clarity outperform chasing opaque mirrors when exams approach faster than changelog RSS feeds refresh.

Keep routing modes explainable across teams

Thin documentation around Meta-class GUIs often leaves operators guessing whether Rule semantics actually armed—precisely the ambiguity this guide removes for Mihomo Party classrooms.

Download Clash