8月18日的Surge 5应用程序分析

Surge is an advanced network toolbox and proxy utility. It is designed for developers and therefore requires professional knowledge to use. These four capabilities form the core workflow of Surge: · Takeover: Take over the network connections sent by the device. Surge supports both proxy service and virtual NIC takeover, capturing HTTP, HTTPS, TCP, and UDP traffic from any app — even those ignoring proxy settings. All features work on the cellular network. · Processing: Modify the requests and responses that have been taken over: URL rewrite, header and body rewrite, local file mapping, custom DNS answers, and JavaScript-based modification. · Forwarding: Forward requests to proxy servers, either globally or driven by a flexible rule system. Policy groups select the best server automatically by latency, availability, or learned connection quality. · Intercept: Record and inspect requests and responses, including headers and bodies, and decrypt HTTPS traffic with MITM. Highlighted Features · Proxy protocols: HTTP/HTTPS, SOCKS5, SOCKS5-TLS, HTTP2 CONNECT, TrustTunnel, Shadowsocks, Snell, Trojan, Hysteria 2, AnyTLS, and SSH, with UDP relay support. · Used as a WireGuard or Tailscale client, converting the L3 VPN into a proxy policy. · Rules based on domain match/suffix/keyword/wildcard, CIDR IP range, GeoIP, ASN, protocol, port, and logical combinations; reusable rule sets hosted locally or remotely. · Policy groups: manual selection, automatic latency testing, fallback, load balancing, and the self-learning Smart group. · Complete DNS suite: DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, DNS-over-TLS, and concurrent queries for the fastest answer. · Local DNS mapping (equivalent to /etc/hosts) with wildcards, aliases, and per-domain DNS servers. Switch your app between production and development environments without changing any code. · Decrypt HTTPS traffic with Man-in-the-Middle and a built-in CA certificate generator. · Record and display HTTP requests and responses with JSON, text, image, and video viewers for the captured body; album mode for the request list; pre-filter for capturing. · Raw L3 packet capture. · Scripting: extend Surge with JavaScript — modify requests and responses, write custom rules, customize DNS answers, and run scheduled tasks. · Block unwanted requests by rules with high-performance pre-matching. · Measure traffic usage and network speed on Wi-Fi, cellular, and proxy connections. · Remote Dashboard: observe and debug traffic in real time from a Mac via Wi-Fi or USB, including cellular traffic. · Surge Ponte: access your home or office network remotely via your own devices, with no third-party service involved. · HTTPS proxy protocol supports client-side TLS certificate validation. · Safari extension to add rules; widgets and Information Panel for quick control. · Sync profiles across devices with iCloud Drive or Dropbox. · Full IPv6 support, TLS 1.3, HTTP/2, and QUIC. · High performance and industrial-grade stability, suitable for intensive use. Surge does not provide any proxy or VPN service; you need to configure your own servers. You may read the online manual for more information: https://nssurge.com/support Terms and Conditions: https://nssurge.com/legal/terms Privacy Policy: https://nssurge.com/legal/privacy