# Chute - Proxy Network Toolbox — System-wide proxy & debugger > iOS network toolbox with advanced proxy server and traffic management. (iPhone/iPad app by S. Smart Rabbit LLC.) - Source: https://appshunter.io/ios/app/chute-proxy-network-toolbox/id1515248945 (this page in markdown: same URL + `.md`) - Developer: [S. Smart Rabbit LLC](https://appshunter.io/developer/1515248944) - Category: Utilities, Productivity - Price: Free with in-app purchases - Age rating: 4+ - Requires: iOS 12.0 · 57 MB - Languages: American English - Released: 2020-11-10 - Data updated: 2026-09-02 - Monetization: free with in-app purchases - User reviews in markdown: https://appshunter.io/ios/app/chute-proxy-network-toolbox/id1515248945/reviews.md ## What is Chute? Chute turns your iPhone and iPad into a complete network workstation: a rule-based proxy client, an HTTPS debugging proxy, and a full DNS stack — all running on a network engine written from scratch for Apple platforms. Switch it on once and the whole device is behind the proxy. Every connection your apps make can be inspected, routed, rewritten, or blocked by rules you wrote. SYSTEM-WIDE PROXY • Chute VIF — a transparent virtual interface on a custom TCP/IP stack, no per-app setup • Local HTTP and SOCKS5 servers for the other devices on your network • Hot reload — edit rules, DNS, and scripts without dropping a single connection • On-demand activation, per-Wi-Fi behavior, and persistence across reboots 17 PROXY PROTOCOLS HTTP, HTTPS, SOCKS5, SOCKS5 over TLS, Shadowsocks (AEAD, AEGIS, and 2022), ShadowsocksR, VMess, VLESS, Trojan, TUIC v5, Hysteria2, WireGuard, AmneziaWG, AnyTLS, ShadowTLS, MASQUE, and SSH tunneling — plus a built-in Tailscale client. Transport and TLS: XTLS Vision, REALITY, XHTTP, uTLS fingerprinting, ECH, and X25519MLKEM768 post-quantum key exchange. 30 RULE TYPES • DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD, DOMAIN-WILDCARD, DOMAIN-REGEX • IP-CIDR, IP-CIDR6, GEOIP, IP-ASN, SUBNET — match on Wi-Fi SSID, BSSID, or router • SRC-IP, SRC-PORT, DEST-PORT, IN-PORT, IN-TYPE, IN-USER, IN-NAME • PROCESS-NAME, PROCESS-PATH, PROCESS-NAME-REGEX, USER-AGENT, URL-REGEX • PROTOCOL, HOSTNAME-TYPE, and AND / OR / NOT for composite conditions • RULE-SET and DOMAIN-SET with remote subscriptions and auto-update • SCRIPT for the cases a rule alone cannot express POLICY GROUPS • URL-Test — always ride the lowest-latency node • Fallback — automatic failover the moment a node degrades • Load Balance — round-robin, consistent hash, or sticky sessions • SSID — switch policy automatically by Wi-Fi network • Select — take the wheel manually whenever you want it MODERN DNS • DoH, DoH3, DoQ, DoT, and plain DNS — a different resolver per domain if you want • FakeDNS for fast, leak-free routing decisions • EDNS Client Subnet, negative caching, custom hosts, and full query logs TRAFFIC INSPECTION • Capture HTTP, HTTPS, and DNS live, with full headers and bodies • HTTPS decryption scoped to exactly the hosts and paths you choose • URL rewrite, header rewrite, and JSONPath body rewrite • Local mock responses for offline work and edge-case testing • Real-time throughput charts, per-connection detail, and traffic accounting SCRIPTING AND MODULES • A JavaScript engine for requests, responses, DNS resolution, and scheduled tasks • A persistent store, an HTTP client, and notification APIs available to your scripts • Modules package rules, rewrites, and scripts into one installable file BRING YOUR EXISTING SETUP • Import Clash and sing-box profiles from a subscription URL, a file, or over Wi-Fi • Remote subscriptions with automatic update • Pair with Chute Dashboard, a free Mac app, to inspect iPhone traffic over Wi-Fi or USB BUILT FOR DAILY USE • Home Screen widget, Control Center control, and a Notification Center toggle • Face ID / Touch ID lock • Picture in Picture traffic monitor FREE AND PAID The proxy engine, the rule engine, the DNS stack, and the live dashboard are free to use with one configuration. A single one-time purchase — no subscription — adds multiple switchable configurations, iCloud sync, HTTPS decryption, traffic recording for Chute Dashboard, local server control, the Picture in Picture monitor, and Always On. One purchase covers up to 3 iPhone or iPad devices and 3 Apple TV devices. Chute does not operate proxy servers and does not provide network access on its own — you bring your own server or a service you already use. Traffic and logs stay on your device. Chute collects no browsing data and sells nothing to anyone. ## Key features - Advanced proxy experience on iOS - Full DNS and proxy server support - Network traffic interception and logging - Flexible rule system for traffic routing - Supports multiple proxy protocols (HTTP, SOCKS5, Shadowsocks, etc.) ## Pricing and in-app purchases Base price: Free. **One-time purchases** | Purchase | Price | Type | | --- | --- | --- | | Chute iOS Full Feature | $3.99 | one-time | ## Recent user reviews (5 of 5) All indexed reviews: https://appshunter.io/ios/app/chute-proxy-network-toolbox/id1515248945/reviews.md ### 2/5 — No Back Button! *2025-09-21* The app doesn’t let you go back in certain cases on iPhone 14. Must kill the app to navigate at times. ### 1/5 — Una basura de aplicación. *2024-01-12* No la descarguen pierden su tiempo. ### 1/5 — It's So Bad. Can't use in current version *2022-10-26* Can't use in latest version to proxy! ### 5/5 — Vmess with web socket failed after upgrade *2022-09-25* This app helped me a lot. But after an upgrade, the VMESS with web socket can not connect anymore. My second phone is still using the older version, it still works. ### 1/5 — need 3.99$ *2021-07-18* .......... ## Frequently asked questions about Chute ### What is Chute? Chute is a network toolbox designed for power users on iOS devices. It provides advanced proxy capabilities, allowing you to intercept, log, and route network traffic through various proxy servers. ### What proxy protocols does Chute support? Chute supports a wide array of proxy protocols including HTTP, HTTPS, SOCKS5, SOCKS5 over TLS, Shadowsocks, ShadowsocksR, Trojan, VMess, SSH, and AnyTLS. ### Is Chute available on Android? Based on the provided information, Chute is currently an iOS application. It is designed to bring the best proxy experience to iOS devices like the iPhone and iPad. ### How often is Chute updated? The latest version of Chute is 1.1.2, and it was last updated on September 30, 2025. This indicates a relatively recent update, suggesting ongoing development and support. ### What is the age rating for Chute? Chute has an age rating of 4+, making it suitable for a wide range of users. This rating suggests that the content within the app is generally appropriate for younger audiences. ### What is the user rating for Chute? Chute has a user rating of 3.1 stars based on 14 ratings. This indicates a mixed reception from users, with some finding value in its advanced features. ### Does Chute have ads? No, Chute does not contain advertisements. The application is free to download and use, with potential for in-app purchases. ### What devices are supported by Chute? Chute is supported on iPhone, iPad, and iPod devices. This broad compatibility ensures that most iOS users can utilize its network toolbox features. ## Version history (last 5 releases) ### 1.2.0 — 2026-09-02 Chute 1.2.0 is about seeing what the engine is doing — and getting that to someone who can help. DIAGNOSTICS • Web console: the Control Panel now shows its address and signs you in with one tap — with Current and History connection views, a Rules page that shows which rewrites actually fired, and a Diagnostics page with live probes • Runtime Diagnostic Bundle in the Control Panel, and an Offline Diagnostic Bundle in Settings that works even when the tunnel won't start — both redacted, ready for the share sheet • Share the full session log; logs now rotate in 8 MB shards so long sessions stay retrievable • HAR export is generated by the engine, with real status codes and timings plus the policy and rule behind every request • Session detail names the rewrite or mock rule that changed a request • The engine records whether the previous run ended cleanly or was killed ENGINE • Rule matching on large RULE-SET / DOMAIN-SET lists is far faster (a 50k-line list drops from about 94 ms to under 2 ms per lookup) and uses less memory; UDP flows are matched once • Smarter recovery after a network change: dead tunnels are closed instead of hanging apps, and black-holed paths are reported • The HTTP API now generates an access token when the configuration sets none, instead of serving open • New API endpoints for rule dry-runs, live log-level changes, and configuration validation APP • French is now a built-in language • The "Network Address Changed" notification shows your device's IPv4 and IPv6 and flags NAT • Redesigned Wi-Fi upload page • HTTP API, Web UI, Protocol Sniffing, Optimus DNS, External Access, and Purge DNS Cache no longer need the paid unlock — only Advanced Server Control, HTTPS decryption, and Traffic Recorder do FIXES • HTTPS decryption, rewrites, and mock responses now work for app traffic in Chute VIF mode — previously they only worked through the local HTTP/SOCKS5 proxy • allow-wifi-access now actually exposes the local proxy to your Wi-Fi • no-resolve IP rules, RULE-SET lines with trailing options, and HOSTNAME-TYPE now match as documented • Starting the tunnel no longer posts a false "policy group switched" notification • Fixed the Control Panel freezing at 100% CPU, an occasional XHTTP crash, and the HAR export's wrong status codes and 1970 timestamps • Fixed HTTPS response header rewrites being recorded but never delivered • Corrected the license screen and the App Store link on the About page ### 1.1.9 — 2026-08-15 New Features: Added XHTTP transport to the policy editor — enable toggle, mode (auto, packet-up, stream-up, stream-one), path, and host — for Trojan, VMess, and VLESS Added AEGIS-128L and AEGIS-256 Shadowsocks encryption methods Added ECH (Encrypted Client Hello) settings for TLS policies — enable toggle, pinned ECH config (ech-config), and cover-name override (ech-public-name) Added client fingerprint (uTLS) per policy, plus a profile-wide default Added AmneziaWG protocol support, including a parameter editor for this WireGuard variant with traffic obfuscation Added Clash and sing-box profile import from subscription URLs, files, and Wi-Fi uploads Added a configuration error report page with copyable contents to replace alerts that block interaction Added X25519MLKEM768 post-quantum hybrid key exchange for TLS 1.3 Improves: When saving, the policy editor now preserves existing options that are not available for editing (ECH, ALPN, certificate pinning, test-url, underlying-proxy, udp-relay) Bug Fixes: Fixed a tunnel crash caused by malformed IP-CIDR rules Fixed the SSH idle-timeout setting being written under the wrong key and discarded on save Fixed onboarding rules placing the policy name after no-resolve, which could break IP-based rules Various stability and performance improvements ### 1.1.8 — 2026-07-27 New Features: - Added Tailscale as a built-in proxy type: configure a Tailscale account directly in Chute, join a tailnet, and route traffic thro ugh Tailscale nodes — no separate client required - Added Tailscale section editor: enter the auth key securely, verify the connection, list tailnet nodes, and switch exit nodes fro m within the app - Added a Tailscale control panel that shows real-time node status (online/offline, IP, last seen) and lets you switch exit nodes o n the fly - Added system notifications for proxy diagnostics, including egress-IP changes and Tailscale connection events, with per-type togg les in settings - Added the MASQUE proxy type to the policy editor Improves: - Improved TUN throughput on iOS - Improved Tailscale and WireGuard connection stability and throughput - Improved UDP tunnel stability and the accuracy of traffic statistics - Improved stability when stopping the VPN, reducing cases where the system terminates the connection abnormally - Improved language switching reliability - Sanitized configuration file names to prevent invalid path characters from causing load failures Bug Fixes: - Fixed an issue where on-demand rules could become inconsistent between VPN start and stop - Fixed a rare crash caused by concurrent language switching - Fixed network-change handling to avoid unnecessary VPN reconnections - Various stability and performance improvements ### 1.1.7 — 2026-06-27 New Features: - Added JavaScript Scripting system: run custom scripts for request/response modification, DNS resolution, custom rule matching, and scheduled tasks - Added Body Rewrite: search and replace HTTP request/response body content using regex (with capture group support) or JSONPath expressions - Added ShadowTLS protocol support - Added gRPC transport for VMess and VLESS protocols - Added DNS-over-QUIC (DoQ) and DNS-over-HTTP/3 (DoH3) support - Added DNS-over-TLS (DoT) support - Added HTTP Control API and Web UI for monitoring and controlling the proxy runtime - Added Module system (.sgmodule) for modular configuration management - Added Proxy Provider for dynamic proxy list updates - Added Notification Reporting: detects connection failures, proxy unavailability, traffic surges, config update failures, and policy group switches; dispatches events for system notifications - Added Mock Response: return mock data to matched requests without reaching the real server - Added LoadBalance policy group with round-robin, consistent-hashing, and sticky-sessions strategies - Added URL Rewrite new modes: reject-200, reject-img, reject-dict - Added Header Rewrite response direction support - Added PROTOCOL rule type with 10 protocol type values - Added SCRIPT rule type for JavaScript-based custom matching - Added extended-matching and requires-resolve options for rules - Added AnyTLS multi-layer padding scheme - Added SS2022 encryption methods (2022-blake3-aes-128/256-gcm, chacha20-poly1305) - Added Managed Configuration support - Added Replica support for configuration replication - Added WireGuard configuration UI - Added interrupt-exist-connections global option Improves: - Policy groups now support expected-status, hidden, idle-timeout, and lazy options - Enhanced URL Rewrite with template variable support in Map Local format - Improved DNS server with DoQ, DoH3, and DoT protocol support - Expanded rule system from 6 to 30+ rule types with full coverage Bug Fixes: - Fixed IPv6 default value (false → true) - Fixed log level default value (notify → warning), added none and fatal levels - Fixed Shadowsocks/ShadowsocksR naming consistency throughout documentation - Various stability and performance improvements ### 1.1.6 — 2026-05-21 New Features: - Added Hysteria2 protocol support - Added WireGuard protocol support - Added VLEXX REALITY protocol support - Added protocol sniffer for TUN traffic - Added IP-ASN rule support - Added AND/OR/NOT logical rule support Bug Fixes: - Fixed UDP adapter memory issues - Optimized performance for Rule-Set and Domain-Set matching - Resolved other minor bugs and stability issues - Fix license view crash ## Apps similar to Chute | App | Rating | Price | Category | | --- | --- | --- | --- | | [OutLink - Proxy & Virtual LAN](https://appshunter.io/ios/app/outlink-proxy-and-virtual-lan/id1576641852) | 4.5 (24) | Free | Utilities | | [91VPN](https://appshunter.io/ios/app/91vpn/id1483753706) | 4.2 (214) | Free | Utilities | | [Shiliew](https://appshunter.io/ios/app/shiliew/id1217072703) | 4.1 (26) | Free | Utilities | | [V2rayU](https://appshunter.io/ios/app/v2rayu/id1569046443) | 4.4 (28) | Free | Utilities | | [ABAN VPN](https://appshunter.io/ios/app/aban-vpn/id1660467884) | 4.1 (123) | Free | Utilities | | [BigBearVPN](https://appshunter.io/ios/app/bigbearvpn/id1594060308) | 2.9 (304) | Free | Utilities | ## Related topics [chute](https://appshunter.io/ios/topics/chute) · [lancex](https://appshunter.io/ios/topics/lancex) · [chutex](https://appshunter.io/ios/topics/chutex) --- *Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-09-02.*