Surge

About

Surge is a network toolbox for power users that takes over traffic on your Mac and iPhone. It routes each request according to rules you write, matching by domain, IP range, GeoIP, ASN, process, protocol, or port. Supported protocols include HTTP/2 CONNECT, MASQUE, Shadowsocks, Trojan, Snell, Hysteria 2, and WireGuard, with Tailscale also available. Smart Group scores policies by real connection quality and switches between them automatically.

Surge also works as a toolkit for your whole network. Enhanced Mode captures traffic from every app, including apps that ignore proxy settings, and Gateway Mode serves other devices on your LAN with built-in DHCP and device management. Encrypted DNS and Surge Ponte are included, and Surge Ponte lets you reach your home or office network from anywhere with end-to-end encryption between your own devices.

For debugging, Dashboard lists every connection with the app that made it, the rule it matched, and the policy that carried it. You can inspect headers, bodies, and timing, decrypt HTTPS, rewrite requests and responses, map them to local files, and script the rest in JavaScript. Dashboard can also connect to Surge iOS over Wi-Fi or USB to inspect an iPhone's requests, cellular included. Surge offers a free 7-day trial with every feature unlocked, and licenses are per device and include a year of updates.