Surge 5

Surge is an advanced network toolbox and proxy utility. It is designed for developers and therefore requires professional knowledge to use.

These four capabilities form the core workflow of Surge:

· Takeover: Take over the network connections sent by the device. Surge supports both proxy service and virtual NIC takeover, capturing HTTP, HTTPS, TCP, and UDP traffic from any app — even those ignoring proxy settings. All features work on the cellular network.
· Processing: Modify the requests and responses that have been taken over: URL rewrite, header and body rewrite, local file mapping, custom DNS answers, and JavaScript-based modification.
· Forwarding: Forward requests to proxy servers, either globally or driven by a flexible rule system. Policy groups select the best server automatically by latency, availability, or learned connection quality.
· Intercept: Record and inspect requests and responses, including headers and bodies, and decrypt HTTPS traffic with MITM.

Highlighted Features

· Proxy protocols: HTTP/HTTPS, SOCKS5, SOCKS5-TLS, HTTP2 CONNECT, TrustTunnel, Shadowsocks, Snell, Trojan, Hysteria 2, AnyTLS, and SSH, with UDP relay support.
· Used as a WireGuard or Tailscale client, converting the L3 VPN into a proxy policy.
· Rules based on domain match/suffix/keyword/wildcard, CIDR IP range, GeoIP, ASN, protocol, port, and logical combinations; reusable rule sets hosted locally or remotely.
· Policy groups: manual selection, automatic latency testing, fallback, load balancing, and the self-learning Smart group.
· Complete DNS suite: DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, DNS-over-TLS, and concurrent queries for the fastest answer.
· Local DNS mapping (equivalent to /etc/hosts) with wildcards, aliases, and per-domain DNS servers. Switch your app between production and development environments without changing any code.
· Decrypt HTTPS traffic with Man-in-the-Middle and a built-in CA certificate generator.
· Record and display HTTP requests and responses with JSON, text, image, and video viewers for the captured body; album mode for the request list; pre-filter for capturing.
· Raw L3 packet capture.
· Scripting: extend Surge with JavaScript — modify requests and responses, write custom rules, customize DNS answers, and run scheduled tasks.
· Block unwanted requests by rules with high-performance pre-matching.
· Measure traffic usage and network speed on Wi-Fi, cellular, and proxy connections.
· Remote Dashboard: observe and debug traffic in real time from a Mac via Wi-Fi or USB, including cellular traffic.
· Surge Ponte: access your home or office network remotely via your own devices, with no third-party service involved.
· HTTPS proxy protocol supports client-side TLS certificate validation.
· Safari extension to add rules; widgets and Information Panel for quick control.
· Sync profiles across devices with iCloud Drive or Dropbox.
· Full IPv6 support, TLS 1.3, HTTP/2, and QUIC.
· High performance and industrial-grade stabilit