Steps
- Start with Set system proxy. If browsers and your normal applications work, there is no reason to enable TUN immediately.
- Use PAC when applications support system proxy and you need simple domain-based direct/proxy decisions. Test both local and proxied destinations.
- Enable TUN only for games, store apps or software that ignores system proxy, and grant only the permissions the feature needs.
- After switching modes, test the browser, target app, DNS and LAN access. Change one variable at a time.
Why this matters
System proxy is easy to reverse. TUN is broader but introduces virtual-adapter, DNS and routing failure modes. Starting simple keeps troubleshooting clear.
How to verify
The target app works, local printers or routers remain reachable, and exiting v2rayN restores the expected system state.
Things to watch
TUN is not a speed boost and cannot fix a bad server profile. Corporate VPNs, virtual machines and security tools may conflict with virtual routes.