Routing
Settings → Routing. Changes reach a running tunnel at once, without reconnecting.
Modes
| Mode | What happens |
|---|---|
| Global | All traffic goes through the server |
| Rules | Your rules decide; the rest goes through the server |
| Direct | Nothing goes through the server; the tunnel stays up |
Profiles
Above the mode sits the profile row. + New saves the current rules under a
name (“Home”, “Travel”); a tap on a profile switches the rules at once,
without reconnecting, and edits of the profile being left stay in it. A long
press renames, deletes or copies a link like commy://routing/…: whoever
opens it sees the rules and decides whether to switch. The app list never
goes into a link. Profiles are part of backups.
Rules
A rule is a condition and an action (Proxy, Direct, Block). Order is priority; drag to sort. The last rule, “Everything else”, cannot be removed: routing always needs a final outcome.
Conditions use sing-box syntax:
geosite:ru domains in the geosite "ru" set
geoip:private private addresses
domain:example.com exact name
domain_suffix:example.com
ip_cidr:10.0.0.0/8
Rule sets (geoip, geosite)
geosite: and geoip: rules need a compiled list on the device. Commy
downloads nothing on its own: the Rule sets screen shows the source
address up front, and downloads happen on a button. Auto refresh — daily,
weekly or monthly — is optional and only refreshes sets that are already
downloaded and in use.
Apps
Routing → Apps: everything through the tunnel, only the chosen apps, or everything except them (Android).
Ad blocking
Block ads applies geosite-category-ads-all: a DNS query for an ad name is
refused, and a connection to such an address is blocked. Until the list is
downloaded, the switch says it blocks nothing.
Local network
Local network outside the proxy keeps your router, printer and NAS reachable.
Kill switch
On Android the kill switch is the system’s: Settings → Connection → Kill switch opens “Always-on VPN” and “Block connections without VPN”. While the tunnel is down, Commy holds a blocking TUN so apps’ DNS queries do not leave in the clear.