Skip to content

Windows: TUN and system proxy

Windows

On Windows, the power button only starts the core. Whether traffic actually goes through MeowX depends on the takeover settings. There are two, and they can be on at the same time:

Takeover Captures Needs
System proxy Programs that follow Windows’ proxy setting: browsers and most desktop apps Nothing special
Virtual adapter (TUN) All traffic on the PC, including programs that ignore proxy settings (many games, command-line tools, some launchers) The MeowX service (administrator approval once)

With both off, only programs that you point at MeowX’s local proxy by hand go through it.

You can switch them in four places, which all control the same settings:

  • The Takeover card on Home.
  • The TUN and System proxy buttons at the bottom of the full sidebar.
  • Me › Takeover.
  • The tray menu (while connected), or a global hotkey.

When System proxy is on and MeowX is connected, MeowX sets Windows’ proxy to 127.0.0.1 and its local proxy port (7890 by default). When you disconnect or quit MeowX, the setting is cleared again.

Me › Takeover › System proxy exclusions lists addresses that bypass the system proxy, so programs connect to them directly without asking MeowX at all. The default list covers localhost, *.local and private network ranges (such as 10.* and 192.168.*), plus a few large Chinese sites.

  • Tap + to add an entry, for example localhost, *.example.com or 192.168.*. * is a wildcard.
  • Tap the reset button at the top to restore the default list.

These exclusions only affect the system proxy. To make MeowX itself send something direct, use the bypass list or custom rules.

TUN mode creates a virtual network adapter named MeowX and routes the PC’s traffic into it. To create the adapter, the core must run with system privileges, which MeowX does through the MeowX service, a small Windows service that starts the core on MeowX’s behalf.

The hint under the TUN switch tells you where things stand:

Hint Meaning
“Takes over traffic of all apps · service ready” The service is running. TUN can be turned on and off freely
“MeowX service not installed · will install when turned on” Turning TUN on will offer to install the service
“MeowX service not running · will repair when turned on” The service exists but is not working. Turning TUN on will reinstall it
“Installing MeowX service…” Waiting for you to approve the UAC prompt
“Not in effect: no administrator permission” (orange) TUN is on, but the running core was started without the service, so it cannot create the adapter. See Troubleshooting
  1. Turn on Virtual adapter (TUN).
  2. If the service is not ready, MeowX explains that TUN needs the MeowX service to run the core with system privileges, and that installing it needs administrator approval only once. Click Install and enable.
  3. Approve the Windows User Account Control prompt.
  4. MeowX installs the service and restarts the core through it. TUN is now active.

After that, turning TUN on and off does not ask again.

If you click Cancel, or decline the UAC prompt, a message says the service was not installed and TUN stays off.

When MeowX asks for administrator approval

Section titled “When MeowX asks for administrator approval”

Each time MeowX starts its core, it checks whether the MeowX service is installed and responding. If not, Windows shows a UAC prompt so that MeowX can (re)install it. This usually happens once, on the first start after installing.

If you decline, the core starts normally under your own account: system proxy mode works, but TUN cannot take effect until the service is installed.

You can leave both on. Proxy-aware programs then use the system proxy (shown with the HTTP inbound on the Activity tab) and everything else is captured by TUN (shown as TUN). The tray icon shows MeowX as active whenever it is connected and at least one of the two is on.

Programs that do not follow the system proxy can be pointed at MeowX’s local HTTP / SOCKS5 proxy, 127.0.0.1:7890 by default (see Local proxy to change the port or allow other devices).

For command-line tools, the tray menu’s Copy environment variables item copies the commands that set http_proxy, https_proxy and all_proxy for PowerShell, CMD, Bash or Fish. Paste them into your terminal before running the tool.