Check your subscription format
godusevpn is designed primarily for m-ui subscriptions in sing-box JSON format. It takes node outbounds from the subscription and builds its own DNS, TUN and routing configuration. Copy the appropriate subscription URL from your provider. A normal web page, Clash YAML file or arbitrary node-sharing link should not be assumed compatible.
The client does not provide its own servers. Traffic allowances, expiry and renewal terms belong to your subscription service. Treat the subscription URL as a credential and keep it out of public comments and screenshots.
Choose your platform and architecture
Windows requires Windows 10 1809 or later; choose x64 or ARM64. The offline package includes WebView2 for environments that need it. macOS requires version 13 or later, with separate Apple Silicon and Intel packages and installation instructions inside.
Choose Linux packages by CPU architecture; its browser panel requires a password. Android 8 and later has a beta: select the correct ABI or universal package and grant the system VPN permission. TV validation is ongoing. Router gateway setups have additional requirements, so begin with one device before expanding coverage.
Import and check the result
Paste your subscription URL into the welcome screen and optionally give it a name. A provider’s one-click import can also pass it to the client. When nodes appear, select Auto or an available node and connect.
Check the connection state, latency and exit information on the home screen. A node’s name may differ from its actual exit location. If an exit lookup fails, use the connection status and logs for context. The interactive demo is useful for learning the interface, but uses sample data and establishes no real proxy connection.
Understand modes and saved settings
Rule mode applies your rule groups and default policy; the default sends mainland China services directly and other traffic through a proxy. Global mode sends normal application traffic through the proxy. Direct mode uses no proxy node. Necessary exceptions still exist for node connections and permitted local traffic.
Defaults include TUN, DoH, fake-ip and IPv6 disabled. Supported desktop platforms can also disable IPv6 on physical adapters. Global direct-connection blocking requires its switch, Global mode and an active intent to stay connected. Save changes, then check the home screen for active or degraded protection. Some changes rebuild the connection, especially when crossing the strict Global protection boundary.
Recover according to the status
Check that the service runs, the subscription is valid and the node responds. Read warnings and logs before changing unrelated options. Subscription fallback affects only that request, not every app’s route.
Disconnecting removes the relevant protection and attempts to restore the previous network settings. If the service cannot start and leftover protection blocks access, Windows users can choose Restore network from the tray or Start → godusevpn → Restore network. On macOS or Linux, run sudo godusevpn guard clear. See the installation documentation for the Windows command-line entry.
Restore network deliberately releases protection; it is different from Repair service. When the guard is active, it first tries to turn off the Global-mode direct-traffic guard and adapter IPv6 disabling, then disconnects, removes the guard and restores adapters, system DNS and routes. If the guard was not active, those two preferences stay unchanged. Review and re-enable protection in Privacy settings before using it again. Inspect diagnostic bundles before sharing them.