Network Guide Tags: Clash Netflix region unlock split routing

Netflix Library Missing Shows?Clash Rules for Domains and Region Nodes

Ever logged into Netflix expecting the latest local hits, only to find nothing but "Netflix Originals"? Or worse, the dreaded "Proxy Detected" error? Netflix uses your exit IP to determine which library you see. If your Clash configuration isn't correctly splitting traffic between netflix.com and its massive CDN (nflxvideo.net), or if you're using a node recognized as a data center, your streaming experience will be limited. This guide explains how to map Netflix's domain patterns, choose the right region nodes (Residential vs. DC), and order your rules to ensure a full library unlock. This is a targeted look at streaming exits, distinct from our YouTube-focused buffering guide.

Approx. 20 min read
Clash Editorial
Table of Contents

1. Why Your Netflix Library Shrinks

Netflix categorizes content into two tiers: Global Originals (e.g., Stranger Things) and Regional Licensed Content (non-Netflix shows like Breaking Bad or local anime). When you log in, Netflix checks your IP's physical location:

  • Full Unlock: Your IP is recognized as a residential user in the target region (e.g., US, Japan, Singapore). You see everything.
  • Originals Only (Shadow-ban): Your IP is recognized as a proxy, data center, or a flagged provider. Netflix lets you in but hides all licensed content, showing only their own productions.
  • Blocked: Your IP is on a hard blacklist. Playback fails immediately with a proxy error.

In Clash, the goal is twofold: ensure the rules capture all Netflix-related traffic (so it doesn't leak to DIRECT) and choose a node that Netflix trusts. For basic setup, check our configuration guide.

2. Netflix Domain Map: Web & CDN

Similar to YouTube, Netflix splits its site (browsing, login) from its heavy lifting (video segments). If you only proxy netflix.com, your library might load, but the video could stall or trigger errors as the CDN requests ride your local network.

  • Main Site & API: netflix.com, netflix.net. These handle the UI, search, and user auth.
  • Content Delivery (CDN): nflxext.com, nflximg.com, nflxvideo.net. These deliver the actual video chunks and thumbnails.
  • Telemetry: nflxso.net, nflxkanji.net. Used for logging and quality metrics.
Tip: Always use DOMAIN-SUFFIX in Clash to cover all subdomains (e.g., *.nflxvideo.net) with a single rule.

3. Clash Rules: Locking Netflix to Policy

Create a dedicated proxy-group for Netflix. This allows you to quickly switch between regions (e.g., Japan for anime, US for sitcoms) without affecting your general browsing speed.

# Example YAML logic
proxy-groups:
  - name: NETFLIX-REGION
    type: select
    proxies:
      - node-us-residential
      - node-japan-premium
      - node-singapore-auto
      - DIRECT

rules:
  - DOMAIN-SUFFIX,netflix.com,NETFLIX-REGION
  - DOMAIN-SUFFIX,netflix.net,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflxext.com,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflximg.com,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflximg.net,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflxvideo.net,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflxso.net,NETFLIX-REGION
  - DOMAIN-SUFFIX,nflxkanji.net,NETFLIX-REGION
  - GEOIP,CN,DIRECT
  - MATCH,FINAL

Ensure these rules are placed above generic GEOIP or FINAL rules so they aren't intercepted by a "Foreign" or "Direct" catch-all prematurely.

4. Region Nodes: Residential vs Data Center

Not all nodes are equal when it comes to Netflix. Library availability depends on the IP type of your exit node:

  • Residential IP: IPs assigned by ISPs to home broadband users. This is the "gold standard" for Netflix. These are rarely flagged as proxies.
  • Data Center (DC) IP: IPs from hosting providers (AWS, Google Cloud, DigitalOcean). Netflix aggressively flags these. If you see only Originals, you're likely on a DC IP.
  • ISP Consistency: If your node is in Hong Kong but your DNS resolves to a US CDN, Netflix might get confused and block playback. Enable sniffing in Clash to help align the routing.

Some premium providers label nodes as "NF" or "Netflix" to indicate they have verified residential status or a high-quality rotation that stays ahead of Netflix's bans.

5. Fixing the "Proxy Detected" Error

If you get the M7111-5059 error (or similar), it means Netflix knows you're using a proxy. Steps to fix it in Clash:

  1. Check for IPv6 Leaks: If your ISP provides IPv6, and Clash isn't intercepting it, Netflix will see your real location. Disable IPv6 in your system settings or set ipv6: false in your Clash config.
  2. Flush Browser Cache/App Data: Netflix caches your region. If you switched from a blocked node to a working one, you might still see errors until you clear the session.
  3. DNS Alignment: Ensure your DNS isn't leaking your real location. Refer to our DNS troubleshooting guide for aligning fake-ip with your tunnel.

6. How this Differs from YouTube Routing

While both are video platforms, Netflix and YouTube (discussed in our YouTube guide) have different priorities:

Feature YouTube Netflix
Content Logic Global pool, location affects ads/recommendations Hard Borders. Licensed content varies by region
IP Enforcement Moderate. DC IPs are usually fine Strict. DC IPs often restricted to "Originals Only"
Failure Mode Buffering, lower resolution Missing shows, "Proxy Detected" errors
CDN Focus High throughput (googlevideo) IP verification + Multiple domain chains

7. Netflix Streaming Checklist

Symptom Primary Check
Can't find a show (e.g. The Office) Switch to a Residential IP node; check if you are restricted to Originals
"Proxy Detected" error Check for IPv6 leaks; rotate nodes; clear browser cache
UI loads, but thumbnails are broken Verify nflximg.com is in your Netflix rule group
Subtitles missing/wrong language Some shows only have specific subs in specific regions (e.g. HK/SG for Chinese)

8. Summary

To keep your Netflix library complete on Clash, you must capture the full domain chain (from the main site to the CDN) and use Residential IP nodes whenever possible. Precise split routing ensures your streaming doesn't interfere with other tasks, while fixing IPv6 leaks and DNS drift removes the "Proxy Detected" hurdles. If you are balancing multiple streaming services or AI tools, align your Netflix rules with our guides for ChatGPT or Gemini to maintain a stable, high-performance profile.

Always source your Clash builds from the official site to ensure your core supports the latest sniffing and protocol features required for modern streaming bypass.

→ Download Clash and unlock the full Netflix experience