Surge Overview

Surge is a web development and proxy utility. It is designed for developers and therefore requires professional knowledge to use.

These four capabilities form the core workflow of Surge:

Takeover: You can take over the network connection sent by the device. Surge supports both proxy service and virtual NIC takeover.
Processing: You can modify the network requests and responses that have been taken over. This includes URL redirection, local file mapping, custom modification using JavaScript, and many other methods.
Forwarding: You can forward the taken-over network requests to other proxy servers. This can be global forwarding or using a flexible rule system to determine an outbound policy.
Intercept: You can intercept and save specific data of network requests and responses, and you can also decrypt HTTPS traffic with MITM.

Features

High Performance, Stability, and Efficiency: Surge can smoothly handle all network traffic with industrial-grade stability using minimum system resources.
Flexible Rule System: You can write forwarding rules based on a domain name, IP CIDR, GeoIP, etc. Surge can automatically proxy requests to other servers using HTTP/HTTPS/SOCKS5/SOCKS5-TLS/Shadowosocks protocols.
HTTPS Decryption: Decrypt HTTPS traffic by a man-in-the-middle attack. The certificate generator will help you generate a CA certificate trusted by your operating system for debugging purposes.
Local DNS Mapping: Surge supports local-customized DNS mapping. Its multiple functional modules, including wildcard, alias, and custom DNS server, will be able to satisfy various needs.
Proxy Group: You may categorize several proxies as a group, and a policy will be employed in accordance with the grouping. Proxy group can be configured as Auto Speed Test (select policy based on benchmarking URL access speed), SSID (select policy based on Wi-Fi SSID), and manual-select.
HTTP Rewrite: You can rewrite HTTP/HTTPS requests to another URL using customized rules or block the requests;
Remote Dashboard: Surge Dashboard may connect to remote Surge iOS or Surge Mac instances via USB or network.
Full IPv6 Support: All functions work in the IPv6 environment.

Enhanced Mode: Surge can set up a virtual network interface to handle all network traffic for applications that do not explicitly support web proxy.
Metered Network Mode: You can control which applications/processes are allowed to access the Internet, which is useful when on metered connections (e.g., cellular networks).
Gateway Mode: Surge Mac can be configured as a layer three gateway to handle network traffic for other devices in the same network.

All functions work on cellular networks.
Capture all HTTP/HTTPS/TCP traffic from any apps on your device, and redirect to HTTP/HTTPS/SOCKS5/Shadowosocks proxy servers following highly configurable rules, even if the app does not follow system proxy settings.
Override system DNS settings even on a cellular network and boost performance by querying all DNS servers simultaneously.
Monitor and analyze network requests on iOS devices by connecting Surge Dashboard to Surge iOS via Wi-Fi or USB cables. You can even examine cellular network requests when connecting via USB cables.

We have published an official guidebook to help you understand Surge.