Surge 5

Surge is an advanced network toolbox and proxy utility. It is designed for developers and therefore requires professional knowledge to use. These four capabilities form the core workflow of Surge: · Takeover: Take over the network connections sent by the device. Surge supports both proxy service and virtual NIC takeover, capturing HTTP, HTTPS, TCP, and UDP traffic from any app — even those ignoring proxy settings. All features work on the cellular network. · Processing: Modify the requests and responses that have been taken over: URL rewrite, header and body rewrite, local file mapping, custom DNS answers, and JavaScript-based modification. · Forwarding: Forward requests to proxy servers, either globally or driven by a flexible rule system. Policy groups select the best server automatically by latency, availability, or learned connection quality. · Intercept: Record and inspect requests and responses, including headers and bodies, and decrypt HTTPS traffic with MITM. Highlighted Features · Proxy protocols: HTTP/HTTPS, SOCKS5, SOCKS5-TLS, HTTP2 CONNECT, TrustTunnel, Shadowsocks, Snell, Trojan, Hysteria 2, AnyTLS, and SSH, with UDP relay support. · Used as a WireGuard or Tailscale client, converting the L3 VPN into a proxy policy. · Rules based on domain match/suffix/keyword/wildcard, CIDR IP range, GeoIP, ASN, protocol, port, and logical combinations; reusable rule sets hosted locally or remotely. · Policy groups: manual selection, automatic latency testing, fallback, load balancing, and the self-learning Smart group. · Complete DNS suite: DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, DNS-over-TLS, and concurrent queries for the fastest answer. · Local DNS mapping (equivalent to /etc/hosts) with wildcards, aliases, and per-domain DNS servers. Switch your app between production and development environments without changing any code. · Decrypt HTTPS traffic with Man-in-the-Middle and a built-in CA certificate generator. · Record and display HTTP requests and resp