Conceal Clash Meta For Android

Conceal CMFA is a root-first, silent transparent proxy fork of Clash Meta for Android. It keeps the upstream Android UI and mihomo/Clash.Meta core, then adds a RootProxyService and a SukiSU Ultra/Magisk companion module so the app can be started without Android VpnService consent dialogs.

Root Transparent Proxy The companion module starts the app's RootProxyService, writes the root-mode marker in the app data directory, then applies owner-safe transparent proxy rules.

Runtime behavior:

Injects redir-port: 7892, tproxy-port: 7893, and dns.listen: [::]:1053 when root mode is enabled. Uses TPROXY automatically when the app opens the TPROXY listener. Falls back to REDIR TCP plus DNS transparent proxy when only redir-port is available. Skips the Conceal CMFA app UID to avoid proxy loops. Tested on Xiaomi 17 Pro with SukiSU Ultra. On that device the app exposed 7892 and 1053, while 7893 did not listen, so the module used REDIR TCP/DNS fallback successfully.

Install Install the matching Conceal CMFA APK. Open the app once, import/select a working profile, and let it finish profile initialization. Install conceal-cmfa-root-proxy.zip in SukiSU Ultra. Reboot, or use the SukiSU module action button to toggle the proxy rules.