Surge 5 4+

Advanced Network Toolbox

Surge Networks Inc.

Designed for iPad

    • Free
    • Offers In-App Purchases

Description

Surge is a web development and proxy utility. It is designed for developers and therefore requires professional knowledge to use.

These four capabilities form the core workflow of Surge:
· Takeover: You can take over the network connection sent by the device. Surge supports both proxy service and virtual NIC takeover.
· Processing: You can modify the network requests and responses that have been taken over. This includes URL redirection, local file mapping, custom modification using JavaScript, and many other methods.
· Forwarding: You can forward the taken over network requests to other proxy servers. This can be global forwarding or with a flexible rule system to determine an outbound policy.
· Intercept: You can intercept and save specific data of network requests and responses, and you can also decrypt HTTPS traffic with MITM.

Highlighted Features
· Takeover all HTTP/HTTPS/TCP traffic from any applications on your device, and redirect to an HTTP/HTTPS/SOCKS5/SOCKS5-TLS/SSH proxy server following highly configurable rules.
· Used as a WireGuard Client to convert the L3 VPN as a proxy.
· Record and display HTTP requests and responses sent from your iOS devices, including body and header.
· Configure rules using domain match, domain suffix, domain keyword, CIDR IP range, and GeoIP lookup.
· Measure traffic usage and network speed on WiFi, cellular, and proxy connections.
· High performance and suitable for intensive use.
· Block ads by domain rules.
· Local DNS Map (equivalent to /etc/hosts). You can use this function to switch the production/development environment for your app without changing any code.
· All features work on the cellular network.
· Decrypt HTTPS traffic with Man-in-the-Middle.
· Perform URL rewrite.
· Fully IPv6 supports.
· Header rewrite.
· Raw L3 packets capture.
· Safari extension to add rules.
· JSON, text, image and video viewer for the captured body.
· Album mode for the request list.
· Pre-filter for capturing.
· HTTPS proxy protocol supports client-side SSL/TLS certificate validation.
· Scripting: Use JavaScript to extend the ability of Surge as your wish.
· Sync profiles cross devices with iCloud Drive or Dropbox.
· DNS-over-HTTPS, DNS-over-HTTP3, DNS-over-QUIC, TLS 1.3 and more advanced features.

You may read the online manual for more information: http://manual.nssurge.com/

Terms and Conditions: https://nssurge.com/legal/terms
Privacy Policy: https://nssurge.com/legal/privacy

What’s New

Version 5.11.0

Smart Group

This is a new type of policy group, driven by our carefully designed algorithm engine, which can automatically select the appropriate policy from the sub-policies of this policy group. The goal of the Smart policy group is to replace the original automatic testing groups (url/load-balance/fallback), greatly optimizing the experience while minimizing the need for manual intervention in policy groups. Users only need to put the available policies into this group.

For details, see: https://kb.nssurge.com/surge-knowledge-base/guidelines/smart-group

Rule System
- Overall performance optimization of the rule system.
- Significant optimization of the indexing algorithm in large domain rule sets, improving the search efficiency by more than ten times for rule sets with more than 100,000 rules.
- Corrected the issue where sub-rules of logical rules within a rule set could not be covered by the `no-resolve` and `extended-matching` parameters of the rule set.
- Added a new rule type `DOMAIN-WILDCARD`, supporting `?` and `*` domain name matching.
- `DOMAIN-SET` and `RULE-SET` are changed to strict validation. If there are invalid lines in the file, the entire rule set will be invalidated to avoid problems caused by misuse.

IPv6
- The behavior of the `ipv6-vif` parameter has been modified. When set to always, IPv6 functionality will be enabled even if `ipv6=true` is not set.
- Added a warning for the `ipv6-vif=always` parameter.
- Adjusted the automatic retry mechanism. Accessing IPv6 addresses in a non-IPv6 network will no longer enter the retry process, and the request will fail immediately (solving the problem of some applications stalling when IPv6 VIF is enabled in a non-IPv6 environment, but the application will still continue to send IPv6 requests).

Other Optimizations
- Enhanced `$notification.post`, adding support for media resources, sound hints, and automatic dismissal.
- Optimized WireGuard failure handling.
- Reduced the power consumption of the TUIC protocol during sleep.
- Improved the precision of time statistics in the request log system, now accurate to µs level.
- Optimized various abnormal retry mechanisms, avoiding high resource usage caused by continuous retry in the face of some specific problems. For operations that need to be retried continuously (such as WireGuard reconnection, Ponte server reporting to iCloud), Surge will now retry after 0.1s, 0.5s, 1s, 5s, 10s, 30s after an error.
- Optimized the caching system for external resources.
- Added the profile line modifier `#!REQUIREMENT`.
- When the current network is found to be managed by Surge Mac Gateway, Surge iOS will now automatically pause. (This can be adjusted via the auto-suspend option, enabled by default.)
- Optimized TUN takeover and specific app performance compatibility issues.
- Optimized memory usage, infrequently used and large scripts will not be cached in memory anymore.
- The network diagnostics page adds SSID/BSSID with copy functionality.
- Now, when uploading logs in the log interface, the engine currently running will automatically generate the most recent verbose logs (the new version has cached 256KB of logs in memory), so when reporting problems, you can upload directly without needing to reproduce in verbose mode.
- For external resources related to policy groups and script types, the maximum size is now limited to 2MB, to avoid memory overflow in case of configuration errors.

Check the knowledge base for complete release note.

Ratings and Reviews

5.0 out of 5
1 Rating

1 Rating

Nowaychan33 ,

Juicy App

Good to have it to make my day!

App Privacy

The developer, Surge Networks Inc., indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy.

Data Linked to You

The following data may be collected and linked to your identity:

  • Contact Info

Data Not Linked to You

The following data may be collected but it is not linked to your identity:

  • Usage Data
  • Diagnostics

Privacy practices may vary based on, for example, the features you use or your age. Learn More

More By This Developer

You Might Also Like

Spectre VPN
Developer Tools
ServerCat - SSH Terminal
Developer Tools
ShadowSSH - Simple&Easy Client
Developer Tools
Brook.app
Developer Tools
HTTP Catcher
Developer Tools
Kodex
Developer Tools