github.com/inazumav/sing-box@v0.0.0-20230926072359-ab51429a14f1/docs/faq/index.md (about)

     1  # Frequently Asked Questions (FAQ)
     2  
     3  ## Design
     4  
     5  #### Why does sing-box not have feature X?
     6  
     7  Every program contains novel features and omits someone's favorite feature. sing-box is designed with an eye to the
     8  needs of performance, lightweight, usability, modularity, and code quality. Your favorite feature may be missing because
     9  it doesn't fit, because it compromises performance or design clarity, or because it's a bad idea.
    10  
    11  If it bothers you that sing-box is missing feature X, please forgive us and investigate the features that sing-box does
    12  have. You might find that they compensate in interesting ways for the lack of X.
    13  
    14  #### Naive outbound
    15  
    16  NaïveProxy's main function is chromium's network stack, and it makes no sense to implement only its transport protocol.
    17  
    18  #### Protocol combinations
    19  
    20  The "underlying transport" in v2ray-core is actually a combination of a number of proprietary protocols and uses the
    21  names of their upstream protocols, resulting in a great deal of Linguistic corruption.
    22  
    23  For example, Trojan with v2ray's proprietary gRPC protocol, called Trojan gRPC by the v2ray community, is not actually a
    24  protocol and has no role outside of abusing CDNs.
    25  
    26  ## Tun
    27  
    28  #### What is tun?
    29  
    30  tun is a virtual network device in unix systems, and in windows there is wintun developed by WireGuard as an
    31  alternative. The tun module of sing-box includes traffic processing, automatic routing, and network device listening,
    32  and is mainly used as a transparent proxy.
    33  
    34  #### How is it different from system proxy?
    35  
    36  System proxy usually only supports TCP and is not accepted by all applications, but tun can handle all traffic.
    37  
    38  #### How is it different from traditional transparent proxy?
    39  
    40  They are usually only supported under Linux and require manipulation of firewalls like iptables, while tun only modifies
    41  the routing table.
    42  
    43  The tproxy UDP is considered to have poor performance due to the need to create a new connection every write back in
    44  v2ray and clash, but it is optimized in sing-box so you can still use it if needed.
    45  
    46  #### How does it handle DNS?
    47  
    48  In traditional transparent proxies, it is usually necessary to manually hijack port 53 to the DNS proxy server, while
    49  tun is more flexible.
    50  
    51  sing-box's `auto_route` will hijack all DNS requests except on [macOS and Android](./known-issues#dns).
    52  
    53  You need to manually configure how to handle tun hijacked DNS traffic, see [Hijack DNS](/examples/dns-hijack).
    54  
    55  #### Why I can't use it with other local proxies (e.g. via socks)?
    56  
    57  Tun will hijack all traffic, including other proxy applications. In order to make tun work with other applications, you
    58  need to create an inbound to proxy traffic from other applications or make them bypass the route.