New Features · Added Snell proxy protocol (v1–v5) with connection reuse pooling, obfs, and ShadowTLS; parses Clash (`type: snell`) and Surge configs · Added SSH outbound proxy with password / private key authentication and host key verification · Added SOCKS5 over TLS protocol · Added gRPC (Gun) transport for VMess / VLESS, with faster downloads on high-latency links · Added REALITY to Trojan, AnyTLS, and HTTPS with X25519MLKEM768 post-quantum key exchange; importable from share links and Clash subscriptions · Added server certificate SHA-256 fingerprint pinning for Trojan, AnyTLS, HTTPS, Hysteria2, TUIC, and VMess (HTTP/2, TLS, WSS) · All policy group types can now attach subscription URLs directly, mixing static and subscription proxies — no separate external group needed · Added round-robin algorithm to load balance groups · Added per-proxy IP version strategy (`ip_version`) for domain servers: dual stack, IPv4/IPv6 only, or IPv4/IPv6 preferred · Added "Close Connections on Policy Change" option to close connections still on the old proxy when a group's selection changes · Added listen-port rule for routing by local HTTP/SOCKS proxy port · Added DNS over TCP upstreams via `tcp://` · Added profile history: automatic snapshots before every edit, update, or overwrite, with preview and one-tap restore · All-new Storage page with a full usage breakdown of caches, logs, traffic records, GeoIP databases, script data, and more · Added notification history: every notification is recorded (even suppressed or auto-dismissed ones), viewable in Settings → Notifications · Added connection deep links with live-refreshing detail · Connection detail now shows IP info and the matched MITM rule and module · Widgets can now render SVG vector graphics · MITM CA certificates can now be installed on other devices Improvements · Smart groups now remember real-connection failures: proxies that test fine but don't work are deprioritized, and latency is re-tested right after failover · Hysteria2 supports TCP Fast Open; AnyTLS can skip TLS certificate verification · Requests now fail fast when there's no network (e.g. airplane mode) instead of retrying and draining the battery · Scripts can make far more concurrent HTTP requests, lifting WebView's ~6-per-host connection limit · Profile errors now point to the exact field and reason instead of an inaccurate line number · Logs are searchable; DNS forwarding rule sets can be previewed as YAML/text; module icons can be customized via long-press · Reused HTTP connections show policy, rule, and IP info; traffic now uses binary units (KiB/MiB) Bug Fixes · Fixed large uploads stalling on some proxy protocols, and connections not falling back to a working IP when a domain resolves to multiple IPs · Fixed profile changes and manually updated resources not taking effect immediately · Fixed DNS hijacking mistakenly capturing non-DNS UDP traffic (e.g. SNTP) · Fixed logical rules (AND/OR/NOT) with unsupported sub-rules matching all traffic; they are now ignored entirely · Fixed Hysteria2 skip-cert-verify not applying, occasional false failures in Hysteria2 / TUIC latency tests, and inflated HTTP proxy latency results · Fixed VLESS `encryption: none` being dropped from Clash subscriptions, and VLESS / VMess links being misidentified · Fixed bare keys dropped from INI `#!arguments`, and YAML module argument placeholders in numeric fields · Fixed IPv6 availability not updating after switching networks · Fixed inaccurate protocol, policy, and failed filters on the Connections page · Fixed very large values (e.g. `999999999999999` for "never update") in interval/timeout fields being silently ignored or breaking YAML profile parsing · Fixed Show IP Info bypassing proxy DNS for domain proxies, truncated latency labels, and blank space in the editor after backgrounding with the keyboard up

New Features - Smart policy group: scores nodes by latency, jitter, and stability with continuous learning; per-sub-policy weight coefficients let you bias selection - Clash / mihomo subscription format - IPv6 Fake IP (requires IPv6 enabled) - Per-widget size selection in the gallery (Small / Medium / Large; iPad also Extra Large) - Module list icons with on/off toggle; letter avatar fallback for icon-less modules - Per-policy-group latency_test_url for custom latency / health-check URLs - Import / export in the KeyValue editor - Local port shown in connection details - Cancellable resource downloads: leaving the page or re-triggering aborts the previous task - Network-change notifications now show the cellular radio type (LTE / NR / WCDMA, etc.) - SOCKS5 UDP relay traffic counted in speed and per-connection stats Improvements - Rewrote the domain rule matcher: ~10× exact, ~5× suffix, ~20× keyword - Higher HTTP/2 throughput for large downloads on high-latency links - Faster matching for rule sets with many IP CIDR entries - Faster KV read/write in the script engine - Lower kernel memory use - More timely iCloud sync; optimized QUIC reject path - ETag conditional fetch skips download/reload when unchanged - Pause resource refresh while asleep; resume lazily after wake to save battery - WebView memory released promptly after script execution, reducing NE kills - Resources page no longer stalls on open (YAML parsed off-main) - Policy page no longer freezes with many nested groups - Background latency tests skip policy groups unreachable by real traffic - Larger tap area for the policy-group latency button - Proxy DNS now shares forward rules, hosts, ECS, and block_ips with the default resolver; proxy_nameservers is the fallback only - Switching outbound mode and back to Global no longer clears the chosen global policy - Updating a module also refreshes its referenced sub-resources - Widget reordering moved to a dedicated page - Better wording for policy-switch notifications - Compatibility with anytls servers that don't support multiplexing Fixes - Cross-talk between multiple coexisting WireGuard tunnels - VLESS XTLS Vision couldn't connect to server-first protocols (SSH, databases) in tcp-in-tun mode - iOS system probe domains (e.g. *.invalid) terminating the HTTP proxy tunnel - MITM cert generation failure for very long hostnames - CPU spin after an HTTP body error - Overlapping execution of high-frequency cron scripts - One traffic-sniffing and one TLS-sniffing error - Crash on duplicate entries in the connection-detail IP list - Resource fetch failure when the URL contained a port - zstd HTTP responses not decompressed in the script / MitM pipeline - NE crash when a script notification contained NUL characters - Scripts not using the specified policy with $httpClient, affecting modules like BiliBili Global - ({response:{...}}) return in HTTP-response scripts not unwrapped, rewrites silently failing - Content-Type not auto-filled from the body when scripts omit it (e.g. BiliBiliDailyBonus) - Nested policy groups waiting for the interval before failover; inner failures now bubble up immediately - Selected nodes in the policy UI reset after switching configurations - Same-named icon sets with different URLs being deduplicated - Real IPv6 addresses mis-matched to Fake IP cached domains due to offset overflow - DNS resolution blocked while fetching the public IP - IPv6 default route not split like IPv4 when compat-route is enabled - USER-AGENT-only Surge rule sets (e.g. YouTube Music.list) being dropped - Show IP Info occasionally returning an IP other than the proxy's current one - Nested rule sets inside AND / OR / NOT rules not appearing in "Update Resources" - Hotspot-client connections rejected during cellular uplink with Personal Hotspot - DNS legend text not vertically centered - Module compat arguments not persisted when set to the default - Launch hang from iCloud container resolution

New Features · Quick action buttons on the home screen for adding subscriptions, scanning proxies, importing configs, and more · Dedicated proxy DNS resolver with support for encrypted DNS (DoH/DoT/DoQ/H3), replacing plaintext UDP DNS for proxy connections · URL rewrite reject types now return HTTP responses directly without extra redirects · Import full Surge configuration files and Loon configs & plugins · Import SOCKS5, HTTP, and HTTPS proxy nodes via URL · VLESS/VMess now supports custom strings as user IDs · SSH support in the scripting engine · HTTP request scripts can now dynamically switch proxy policies · New option to skip TLS verification for DNS, enabling self-signed certificate DNS servers · "Show Hidden" toggle on the policy group page · Multiplexing support for multiple streams over a single AnyTLS session Improvements · Surge module parser rewritten — 3x faster, malformed lines are silently skipped instead of breaking the entire file · More specific error messages on connection failures · Success/failure feedback after remote resource updates · Minimum intervals enforced for policy group speed tests (60s) and resource updates (10min) to prevent excessive requests · Improved QUIC connection interception Bug Fixes · Fixed AnyTLS memory leak and UDP forwarding only succeeding on the first attempt · Fixed REJECT-DROP policy potentially preventing the app from launching · Fixed deleted nodes still referenced in conditional policy groups · Fixed stale DNS connections lingering after network changes · Fixed potential crash when node list changes after a resource update · Fixed policy group latency tests not reflecting the actual routing path · Fixed module environment variables not being passed to scripts correctly · Fixed IPv6 address parsing failure due to missing brackets · Fixed TCP Fast Open settings being ignored when importing VMess/VLESS via subscriptions · Various UI interaction and widget layout fixes

New Features · Introduced a brand-new Script API for more powerful automation and extensibility · Added support for custom widgets. Create Home Screen and Lock Screen widgets using scripts + Widget DSL · Widget DSL preview is now available in the script editor · Added DNS rule pre-matching · Added new REJECT-NO-DROP policy · DNS queries hitting the REJECT policy can now return an empty response to block domain resolution · Added support for URL Rewrite Header mode · Modules can now declare environment variable types and options, and the editor will automatically generate the corresponding UI controls · Running scripts directly from the script list now passes script environment variables Improvements · Reduced log levels for some events to prevent excessive log file growth Bug Fixes · Fixed an issue where non-Pro users could get stuck when opening the Appearance settings page · Fixed an issue where a proxy chain could fail if a hop was resolved as DIRECT · Fixed an issue where timeout / TCP connection failures did not immediately trigger failover · Fixed delayed script execution caused by system throttling of JS timers · Fixed a crash caused by out-of-bounds access in domain rule set matching under certain conditions · Fixed an issue where icon grids on the icon set page were not displayed as squares · Fixed an issue where rule cache was not cleared after network changes, causing SSID rules to match the previous network · Fixed an issue where child rules in an OR rule group could be incorrectly skipped · Fixed an issue when editing incorrect entries during search · Fixed occasional crashes when editing forms

New Features · Added support for the anytls protocol · Surge proxy configuration parser now supports HTTPS, TUIC, and anytls protocols · VLESS Vision now supports XUDP UDP relay based on MUX · Added DoH3 (DNS over HTTP/3) support for DNS · Hy2 now supports the Brutal congestion control algorithm · JS scripting enhancements: support specifying named policies via the policy parameter, support inline proxy descriptors via policy-descriptor, and added an insecure parameter to skip TLS verification · Support batch closing policy connections on the Policy Group management page · Support closing specific connections from the connection list · Added new DNS forwarding rule match types: Domain, Domain Keyword, Domain Suffix, SSID, BSSID, Cellular · Added a risk confirmation prompt when enabling Exclude Route 0.0.0.0/31 Improvements · Refactored the JS engine runtime to improve overall stability and performance · Optimized domain resolution performance · Improved proxy UDP throughput · Optimized proxy protocol encryption stack performance · Significantly improved WireGuard upload and download speeds · Optimized policy group failover logic, fixed overly aggressive switching, and added policy change notifications · Split DNS upstream logic: system now represents the DNS servers configured by the current system or network interface, and bootstrap represents bootstrap resolvers. They are no longer aliases and are handled independently · Renamed DNS fields: wildcard to domain_wildcard, regex to domain_regex Bug Fixes · Fixed abnormal behavior in SOCKS5 UDP relay · Fixed excessive WireGuard timer error log output · Fixed connection domain filtering match failures · Fixed occasional disappearance of list separators in the UI · Fixed extremely slow upload and download speeds in Hy2 and TUIC

New Features · Added support for the WireGuard protocol · Introduced Conditional Policy Groups, allowing automatic selection of sub-policies based on network conditions · The selected state of policy groups can now be saved with the configuration, preventing loss when switching configurations · Policy groups now support show/hide hints · In the policy page, long-press editing is supported when a sub-policy of a policy group is itself a policy group · The connection list now supports displaying the proxy chain · The IP list in connection details is now displayed as a half-screen popup · The DNS cache list now shows the Upstream source, expands the search scope, and displays TTL on the details page · Resource updates now support direct access to resources that previously failed to update · Added an independent script log · Added support for custom themes Improvements · Optimized kernel memory usage · Optimized download speed and memory usage for QUIC proxy protocols (Hysteria2, TUIC) · Improved connection performance for QUIC proxy protocols · Introduced a brand-new user-space network stack (about 30% faster than the optimized lwIP in download scenarios, and about 95% faster · than before optimization) · Improved form animation effects · Optional form fields are now consistently displayed as “Field Name (Optional)” · TCP connections now disconnect only after both directions are closed, instead of disconnecting on one-way closure · Updated the User-Agent format of Egern · Wildcard matching is now case-insensitive Bug Fixes · Fixed a potential crash when scrolling the title menu on the Resources page · Fixed an issue where configuration state was not initialized immediately when opening the Settings page · Fixed missing blockQuic fields in TUIC and Hysteria2 protocols · Fixed an issue where IP addresses were not displayed in connection details when connections were established via a proxy · Fixed incorrect ICMP Ping error responses · Fixed an issue where IPv6 proxy servers could not be used when IPv6 was disabled · Fixed matching logic issues when URL rules did not match the IP address of the connection

New Features · Added support for the HTTPS proxy protocol · Added block_quic parameter support for proxies and policy groups · Added support for importing proxy servers from photos Improvements · Changed latency testing for policy groups to recursive latency testing · Improved the rule preview UI on the Analysis page · Changed the DNS display on the Analysis page from SYSTEM to Bootstrap · DNS resolution now records the fastest IP from TCP concurrent connections and prioritizes it in subsequent requests · Filtered out proxy chains that may form loops · Added compatibility with older SSL handshake methods on the server side Bug Fixes · Fixed an issue where certificates were re-encoded on every save even when unchanged · Fixed an issue where updated resources did not take effect immediately · Fixed an issue causing incorrect parsing of IPv6 nodes · Fixed an issue where DIRECT could not perform latency testing in nested policy groups

New Features · Added support for scanning QR codes to add proxies via long-pressing the app icon · Added option to start the Egern engine by long-pressing the app icon · Added support for mapping domain names to specific IP addresses · Manual update for remote configurations is now supported · Added URL Scheme to add subscriptions directly to a policy group: `egern:/subscriptions/new?url=${url}` Improvements · Improved search performance in the connection list · Added support for `skip-proxy` and `always-real-ip` rules in Surge modules Bug Fixes · Fixed an issue where quoted content in module rules was not properly escaped · Fixed a crash caused by Zone ID in IPv6 addresses when parsing DNS servers · Fixed an issue where all connections were terminated if concurrent connections to the same domain failed · Fixed potential slow upload speeds when using virtual interfaces · Fixed a parsing issue with certain Surge modules · Resolved a compatibility issue with the panel interface

New Features · Added support for creating proxy servers in the Policy Management page · Module list now supports previewing detailed module information · Added support for disabling DNS rules · Icon set URLs can now be saved to a local file; when iCloud is enabled, the URL will be preserved even if Egern is uninstalled Improvements · Policy Management page now displays the resolved IP address when a proxy server is defined using a domain name · Added the ability to edit and share proxy servers from the Policy Management page · When running scripts or performing a latency test without an active VPN, a prompt will ask whether to start the VPN Bug Fixes · Fixed an issue where the default configuration did not take effect on first launch

New Features · Added support for cellular network policies and rules. · Added Universal Link support. now you can replace URL Scheme links directly: egern:/modules/new?name=name&url=url → https://egernapp.com/modules/new?name=name&url=url. · Proxy servers can now generate and share links. · Policy groups, rules, scripts, modules, and DNS rules can all be updated directly from the list view. · Local proxy now supports Personal Hotspot sharing. · egern:/profiles/new now supports an optional name parameter. · The TUIC proxy protocol now automatically closes idle connections to save resources. · Connection details page now supports long-press to copy text. Improvements · Connection search is now case-insensitive. · Performance optimizations across multiple proxy protocols. · Improved compatibility in proxy server address resolution. · Enhanced QUIC proxy behavior — concurrent connections to the same server will now merge into a single connection if the initial connection isn’t established yet, reducing resource usage. Bug Fixes · Fixed icon set UI display issues. · Fixed a crash on app launch. · Fixed an issue where modifying the local HTTP proxy port while VPN was active could cause the VPN to disconnect. · Fixed policy group selection state occasionally being lost. · Fixed display issues in the logical rules interface. · Fixed TLS compatibility issues when using proxies. · Fixed abnormal memory usage in the QUIC proxy protocol.

New Features · Added support for the STUN protocol in proxy rules Improvements · Optimized in-app text descriptions · Adjusted and refined certain UI elements

New Features · Added support for Traditional Chinese, Portuguese, Japanese, and Russian interface languages · Policy group icons can now be selected from iCloud local files · DNS now supports local rule sets · Hosts mapping supports UDP proxy requests · When multiple addresses are defined in Hosts mapping, proxy requests can be initiated concurrently, selecting the fastest response Improvements · Removed the “swipe to the end to delete” operation for list items · Optimized performance when updating subscriptions in policy groups · When downloading configurations, the filename in Content-Disposition is now prioritized · Resource updates now support remote Body content for Map Local · Module resources can now be reused to avoid repeated downloads and updates Bug Fixes · Fixed an issue where UDP connection rules failed to correctly match QUIC SNI · Fixed a problem where proxy connection timeouts did not trigger failover · Fixed an occasional issue where TCP connections did not display DNS timeout errors · Fixed a QUIC protocol sniffing failure issue · Fixed an issue where the Hosts mapping feature did not work on the first configuration load · Script execution will now terminate immediately when an exception occurs, instead of waiting for a timeout

New Features · The Hosts feature now supports using IP addresses as keys. · All request URLs are now processed through the Hosts feature. Improvements · VPN proxy subscription updates will now automatically validate content integrity. Bug Fixes · Fixed a potential issue in the VLESS Vision protocol. · Fixed occasional connection failures in the Hy2 protocol.

New Features · Supports automatic upgrade of REJECT requests to REJECT-DROP when encountering duplicate requests. · Added caching functionality for remote Map Local message bodies. · VLESS protocol now supports XTLS-RPRX-VISION REALITY. · Configuration now supports automatic update functionality. Improvements · Optimized DNS Over TLS connection reuse to improve connection efficiency. Bug Fixes · Fixed memory leak issue with DNS Over QUIC. · Fixed crash issue caused by an excessively large number of delay test results.

New Features · The app is now free to download! Unlock all Pro features with a one-time purchase. Bug Fixes · Fixed an issue where the SNI field was missing when editing VMess protocol with HTTP/2 transport. · Fixed missing ASN and region information on the UDP connection details page. · Resolved connection failures caused by Hy2 server MTU being set too low. · Fixed incorrect network interface detection in certain scenarios that prevented connectivity. · Fixed connection issues when using Shadowsocks 2022 with the simple-obfs plugin. · Resolved connection failures when using Hy2 protocol with obfs enabled.

New Features · Added support for filtering failed connections. · Detailed error messages are now displayed when a connection fails. · A new script key-value editor has been added to the settings page. · When adding rule sets, policy group subscriptions, or modules, if YAML parsing fails, the specific error line and column will be indicated. · When ShadowTLS is enabled for Shadowsocks, UDP port configuration is now supported. · The Hy2 protocol will now automatically reconnect on connection failure. · The current outbound mode is now displayed at the top of the Analytics page (only shown when the mode is not "Rule"). Improvements · HTTP connections will now display request and response headers even if HTTP packet capture is not enabled. · Improved connection parsing performance. · Lists in tool subpages now automatically refresh after configuration changes. · Deleting a policy will now also remove any dependent items. · Further optimized the upload performance of the Egern virtual interface — upload speed has improved by approximately 60% compared to version 2.3.0. Bug Fixes · Fixed an issue where the MaxMind database could not update automatically. · Fixed behavior errors caused by rule matching anomalies. · Fixed a UI update issue when toggling global packet capture and MITM states in the connection log. · Fixed inaccurate traffic statistics for policies. · Fixed UI display issues on the connection filtering page. · Fixed a crash issue that could cause the application to unexpectedly exit.

Improvements · Optimized virtual network interface performance: download speed increased by approximately 50%, upload speed by about 28% · Improved loading speed of the analytics page · Initial adaptation for iPad layout Bug Fixes · Fixed an issue where the bottom tab bar displayed incorrectly · Fixed a bug that could cause script execution to fail · Fixed occasional data display errors on the analytics page · Fixed app stuttering when processing large amounts of data on the analytics page · Fixed an issue where `REJECT-DROP` rules in policy groups were not effective · Fixed a parsing failure issue for certain Shadowsocks URIs

New Features · Support for directly adding rules on the connection page. · The connection details page now displays the modules used by each rule. · Added support for the REJECT-DROP policy. Improvements · Enhanced failover capabilities for policy groups, improving overall stability. · Load balancing functionality now automatically detects the availability of proxy nodes. · Improved UI performance and image loading speed on the policy management page, including automatic image caching. · Optimized log display for manual script executions. · Policies not included in any rules will no longer automatically perform latency tests, avoiding unnecessary operations. · Proxy node address resolution now adheres to hosts configurations. · Duplicate names for policy groups, proxy servers, scripts, and module URLs are now disallowed to prevent configuration conflicts. Bug Fixes · Fixed startup failure issues on iOS 26. · Corrected display errors for policy group selection paths under specific conditions. · Resolved inaccuracies in latency test results. · Addressed MITM failures under lower TLS versions. · Fixed SNI parsing failures with certain QUIC versions. · Resolved compilation failures due to excessively long filenames when compiling rulesets. · Fixed the issue where error messages were not properly displayed when configuration writes failed.

New Features · Support enabling Global Sniffing and Global MITM directly from the connection list · Policy management now supports both list and grid views · Long press on scripts to run or edit directly · Support adjusting the size of policy icons · Added confirmation prompt before deleting configurations Improvements · Automatically download and validate URL format when saving policy groups, modules, scripts, and rule sets · Optimized the way default proxy and subscription configurations are added · Improved sensitivity of the slider in the network speed UI · Script notifications now have sound enabled by default Bug Fixes · Fixed an issue where scripts could fail to execute

New Features · Improved notification API for script functionality · IP information is now displayed even for untested policies · YAML content can now be viewed directly in the module list · Added a visual editor for module parameters Improvements · Automatically adds .yaml suffix when renaming files in configuration management to prevent format errors Bug Fixes · Fixed an issue with template parameter parsing · Fixed a crash that could occur when running scripts

New Features · Completely redesigned UI using UIKit, replacing the previous SwiftUI-based implementation · Added support for displaying sub-policies in Policy Management · Subscription settings for policy groups now support disabling individual items, including URLs, Rewrite, Script, MITM hosts, and HTTP Sniffing hosts · Unlimited rule set size is now supported for more complex configurations · Policy Management supports expanding and collapsing all sub-policies with one click · The expanded/collapsed state in Policy Management is now preserved · Added search functionality to tool subpages and analysis subpages · Support for managing multiple configuration files Improvements · Significant performance enhancements and memory usage optimization · Domain queries now support returning real IP addresses · Setting the update interval to -1 will now disable resource auto-updates Bug Fixes · Fixed occasional failures in script execution · Fixed an issue where the network could become unavailable after switching connections · Fixed an issue where scheduled scripts would run multiple times · Fixed occasional incorrect responses from DNS over TLS · Fixed an issue where using `*` with hijacked DNS servers could block normal UDP traffic · Fixed abnormal network behavior when not using the "VIF only" mode · Fixed domain name resolution issues after MITM processing · Fixed rule parsing errors for domains containing hyphens (`-`)

New Features · HTTP proxy now supports custom headers · Added support for Shadow TLS protocol Improvements · Enhanced compatibility and optimized transmission performance for Vmess protocol · Improved script execution efficiency · Optimized user interface in some areas Bug Fixes · Fixed issue where hosts domain mapping didn’t take effect for certain domains · Fixed URI parsing error in Trojan protocol · Resolved connection failure issue with TUIC protocol on certain servers · Fixed issue where rule sets failed to resolve domain names in specific scenarios · Fixed occasional connection sniffing failures in VIF mode

New Features: · Support for proxy rules based on HTTP User Agent headers. · Support for parsing Surge logic rules. Improvements: · Error lines and columns are now highlighted when editing configurations. · Improved regex matching performance for policy group filters. · Updated configuration parameters for proxies. Bug Fixes: · Fixed the issue of panel scripts and network event scripts not updating automatically.

New Features · Supports logic rules, port rules, and network protocol rules. · Supports TUIC protocol · Supports panel functionality · Supports Shadowsocks 2022 protocol

Bug Fixes