Surge 5
iOS Universel / developpeurs
Surge is a web development and proxy utility. It is designed for developers and therefore requires professional knowledge to use.
These four capabilities form the core workflow of Surge:
· Takeover: You can take over the network connection sent by the device. Surge supports both proxy service and virtual NIC takeover.
· Processing: You can modify the network requests and responses that have been taken over. This includes URL redirection, local file mapping, custom modification using JavaScript, and many other methods.
· Forwarding: You can forward the taken over network requests to other proxy servers. This can be global forwarding or with a flexible rule system to determine an outbound policy.
· Intercept: You can intercept and save specific data of network requests and responses, and you can also decrypt HTTPS traffic with MITM.
Highlighted Features
· Takeover all HTTP/HTTPS/TCP traffic from any applications on your device, and redirect to an HTTP/HTTPS/SOCKS5/SOCKS5-TLS/SSH proxy server following highly configurable rules.
· Used as a WireGuard Client to convert the L3 VPN as a proxy.
· Record and display HTTP requests and responses sent from your iOS devices, including body and header.
· Configure rules using domain match, domain suffix, domain keyword, CIDR IP range, and GeoIP lookup.
· Measure traffic usage and network speed on WiFi, cellular, and proxy connections.
· High performance and suitable for intensive use.
· Block ads by domain rules.
· Local DNS Map (equivalent to /etc/hosts). You can use this function to switch the production/development environment for your app without changing any code.
· All features work on the cellular network.
· Decrypt HTTPS traffic with Man-in-the-Middle.
· Perform URL rewrite.
· Fully IPv6 supports.
· Header rewrite.
· Raw L3 packets capture.
· Safari extension to add rules.
· JSON, text, image and video viewer for the captured body.
· Album mode for the request list.
· Pre-filter for capturing.
· HTTPS proxy protocol supports client-side SSL/TLS certificate validation.
· Scripting: Use JavaScript to extend the ability of Surge as your wish.
· Sync profiles cross devices with iCloud Drive or Dropbox.
· DNS-over-HTTPS, DNS-over-HTTP3, DNS-over-QUIC, TLS 1.3 and more advanced features.
You may read the online manual for more information: http://manual.nssurge.com/
Terms and Conditions: https://nssurge.com/legal/terms
Privacy Policy: https://nssurge.com/legal/privacy
Quoi de neuf dans la dernière version ?
### Tailscale Support
Surge now supports Tailscale as a policy.
With this feature, Surge can join your Tailscale tailnet directly and route selected traffic through Tailscale peers using the existing Surge rule system. You can use Tailscale IPs, and tailnet-only services together with Surge policies, policy groups, DNS handling, traffic logging, and rule-based routing.
Please check the manual for more information: https://manual.nssurge.com/policy/tailscale.html
### Snell v6
Introduced Snell v6, featuring PSK-derived deployment-level protocol diversity that generates unique traffic characteristics for each deployment, reducing reliance on a single protocol fingerprint while preserving Snell’s core goals of performance, deployment simplicity, accurate error reporting, and full TCP semantics. Snell v6 also adds new IPv4/IPv6 network stack controls including dns-ip-preference and multi-address listen support, and is currently available for beta testing.
Please check our blog for more information: https://nssurge.com/blog/snell-v6/
### Codebase Refactoring
We have completed a comprehensive review of Surge’s core functionality and resolved numerous implementation issues, edge cases, and long-standing inconsistencies.
This ongoing refactoring effort improves maintainability and helps provide a more robust foundation for future development.
### WireGuard
WireGuard policies now use a dedicated native RTT test when no DNS server is configured, making them suitable for peer-to-peer access without requiring a reachable test URL. When a DNS server is configured, the policy is treated as a standard outbound proxy and continues to use the regular URL test process. WireGuard runtime information and diagnostics have also been updated to reflect the applicable testing mode.
### Minor Improvements
- The Smart Group algorithm has been reviewed and upgraded, fixing several potential issues.
- The `header` parameter for the HTTP proxy type can now override original fields, including Host field.
- Added Gecko obfuscation support for Hysteria2, configured using the `gecko-password` parameter.
- All TLS proxy protocols now support customizing ALPN using the `alpn` field.
- When local DNS mapping is specified using server, multiple DNS servers can now be configured.
- URL scheme actions are now supported in Surge Mac. Check manual for more information.
- Enable the keep-alive mechanism for all QUIC-based protocols
### Other
- Optimize the performance of Surge Ponte.
- The UI configuration interface has been completed for the recently added proxy protocol parameters, including Tailscale.
- Fixed an issue where the `header` parameter did not take effect in HTTP/1.1 CONNECT mode.
- Fix some issues when using SF Symbols for policy group icons.
- Fixed compatibility issues between DoH3 and some servers.
