# Egern

> Network traffic proxy, intercept, and modification tool with advanced features. (iPhone/iPad app by Byte Crossing.)

- Source: https://appshunter.io/ios/app/egern/id1616105820 (this page in markdown: same URL + `.md`)
- Developer: [Byte Crossing](https://appshunter.io/developer/1562957268)
- Category: Utilities, Developer Tools
- Price: Free with in-app purchases (on sale, was $5.99)
- Rating: 4.20/5 from 79 App Store ratings · 41 written reviews indexed
- Age rating: 4+
- Requires: iOS 16 · 49 MB
- Languages: American English, French (France), German (Germany), Japanese, Brazilian Portuguese, Russian, Chinese (Simplified, China), Chinese (Traditional, Taiwan), Vietnamese
- Released: 2022-07-11
- Data updated: 2026-08-09
- Monetization: free with in-app purchases
- User reviews in markdown: https://appshunter.io/ios/app/egern/id1616105820/reviews.md

## What is Egern?

Egern is a feature-rich and powerful networking tool, specifically designed for proxying, intercepting, and modifying network traffic.

Key features include:
· Comprehensive recording of TCP, UDP, DNS, and HTTP network traffic.
· Support for a wide range of rule types: domain, domain keywords, domain suffix, domain regular expressions, domain wildcard, geo-location, IPv4/IPv6 CIDR, URL regular expressions, logical, protocol, user-agent, rule sets, and default rules.
· Flexible policy group options: selection, automatic testing, fallback, load balancing, and external policies.
· Support for multiple proxy protocols: HTTP, SOCKS5, Shadowsocks, Trojan, Hysteria2, TUIC, Vless, and Vmess.
· Effortlessly decrypt HTTPS traffic using Man-in-the-Middle attack techniques.
· URL rewriting capabilities, allowing you to freely customize network requests.
· Highly customizable request and response header rewriting functionality.
· Versatile request and response content rewriting abilities.
· Utilize JavaScript to provide customized operations on request and response data.
· Support for local HTTP proxy server and local SOCKS5 proxy server to meet various networking needs.
· DNS forwarding rules can proxy traffic to servers that support DoH, DoT, and DoQ protocols.
· Sync configuration information across devices with iCloud, ensuring consistent network settings anywhere, anytime.

As your ultimate network management tool, Egern helps you easily navigate various network environments and achieve efficient network control and debugging. Whether you're a network security expert, developer, or simply interested in network management, Egern will become an indispensable tool. Experience the powerful features of Egern and create your own exclusive networking environment today!

Twitter: https://twitter.com/byteallen

## Key features

- Network traffic recording (TCP, UDP, DNS, HTTP)
- Extensive rule types for traffic control
- Multiple proxy protocol support
- HTTPS traffic decryption
- URL and header rewriting
- JavaScript for custom operations
- iCloud configuration sync

## Pricing and in-app purchases

Base price: Free.

**One-time purchases**

| Purchase | Price | Type |
| --- | --- | --- |
| Unlock Pro | $5.99 | one-time |


## Recent user reviews (10 of 41)

All indexed reviews: https://appshunter.io/ios/app/egern/id1616105820/reviews.md

### 5/5 — tailnet

*2026-07-24, version 2.20.0*

Hello, developer. When can the tailnet LAN connection function be added?

### 5/5 — 很好

*2026-07-15*

终于找到合意的工具了！界面美观，视觉体验很棒。对比其他同类客户端，支持协议覆盖面更广，功能完善。整体逻辑顺手，实用性拉满，长期使用下来很满意。

### 5/5 — Отличный клиент

*2026-06-19*

Клиент замечательный, статистика просто шикарно. Есть очень над чем поработать, сделать добавление прокси из буфера обмена по сформированной ссылке, исправить добавление прокси из QR кода

### 2/5 — Hy2协议

*2026-06-11, version 2.19.0*

Hy2协议完全不连通，根本没法用，原来以为各种强兼loon和surge，结果连个hy2协议都没法用，好几个机场都没办法连通，希望开发者好好修修吧

### 1/5 — Zoned-Out Dev Living in His Own World, Ignores All Feedback

*2026-06-02, version 2.19.0*

This guy’s completely zoned out in his own world building stuff and doesn’t even look at feedback when problems pop up

### 5/5 — Add AmneziaWG support

*2026-03-12*

Great app, but please add support for AmneziaWG(1,5) - it's a modified WireGuard that helps bypass DPI blocks (Russia, China, etc.). 

It uses the same keys as WireGuard but adds extra parameters like:

-jc, jmin, jmax (junk packets)
-s1-s4, h1-h4

Without it, regular WireGuard is getting blocked in many countries. This would make Egern perfect for users who need both speed and anti-censorship

Thanks! Hope to see this in future updates🙏

### 1/5 — 2.15.0，增加对AnyTLS，VLESS支持

*2026-02-21, version 2.15.0*

增加对AnyTLS，VLESS支持
多增加些协议支持吧，买了三家机场，支持的节点才10个不到。
hy2混淆的也没法用全超时。

### 1/5 — 2.15.0，增加最对AnyTLS，VLESS支持

*2026-02-19*

结点死了不会自己切换，即使把超时改成2或者1也不行。
而且设置的自动测速也不会执行。

### 1/5 — 2.15.0，经常卡死。

*2026-02-11*

结点死了不会自己切换，即使把超时改成2或者1也不行。
而且设置的自动测速也不会执行。

### 1/5 — 2.15.0

*2026-02-03*

结点死了不会自己切换，即使把超时改成2或者1也不行。
而且设置的自动测速也不会执行。

## Frequently asked questions about Egern

### What does Egern do?

Egern is a comprehensive networking tool designed for proxying, intercepting, and modifying network traffic. It allows users to record various network protocols, apply flexible rules, and customize network requests and responses.

### What are the key features of Egern?

Key features include recording TCP, UDP, DNS, and HTTP traffic, support for a wide range of rule types, multiple proxy protocols, HTTPS decryption, URL and header rewriting, JavaScript customization, and iCloud configuration syncing.

### Is Egern free to use?

The application is free to download and use, but it offers in-app purchases. This suggests that while core functionality may be available for free, certain advanced features or enhancements might require a purchase.

### What kind of network traffic can Egern intercept and modify?

Egern can intercept and modify TCP, UDP, DNS, and HTTP network traffic. It supports a vast array of rule types, including domain-based, geo-location, IP CIDR, URL regular expressions, and protocol-specific rules, allowing for granular control.

### How does Egern help with network debugging?

Egern assists in network debugging by providing detailed traffic recording and analysis capabilities. Users can intercept and inspect network requests and responses, rewrite them, and even use JavaScript for custom operations, offering deep insights into network behavior.

## Version history (last 5 releases)

### 2.20.0 — 2026-07-23

New Features

· Added Snell proxy protocol (v1–v5) with connection reuse pooling, obfs, and ShadowTLS; parses Clash (`type: snell`) and Surge configs
· Added SSH outbound proxy with password / private key authentication and host key verification
· Added SOCKS5 over TLS protocol
· Added gRPC (Gun) transport for VMess / VLESS, with faster downloads on high-latency links
· Added REALITY to Trojan, AnyTLS, and HTTPS with X25519MLKEM768 post-quantum key exchange; importable from share links and Clash subscriptions
· Added server certificate SHA-256 fingerprint pinning for Trojan, AnyTLS, HTTPS, Hysteria2, TUIC, and VMess (HTTP/2, TLS, WSS)
· All policy group types can now attach subscription URLs directly, mixing static and subscription proxies — no separate external group needed
· Added round-robin algorithm to load balance groups
· Added per-proxy IP version strategy (`ip_version`) for domain servers: dual stack, IPv4/IPv6 only, or IPv4/IPv6 preferred
· Added "Close Connections on Policy Change" option to close connections still on the old proxy when a group's selection changes
· Added listen-port rule for routing by local HTTP/SOCKS proxy port
· Added DNS over TCP upstreams via `tcp://`
· Added profile history: automatic snapshots before every edit, update, or overwrite, with preview and one-tap restore
· All-new Storage page with a full usage breakdown of caches, logs, traffic records, GeoIP databases, script data, and more
· Added notification history: every notification is recorded (even suppressed or auto-dismissed ones), viewable in Settings → Notifications
· Added connection deep links with live-refreshing detail
· Connection detail now shows IP info and the matched MITM rule and module
· Widgets can now render SVG vector graphics
· MITM CA certificates can now be installed on other devices

Improvements

· Smart groups now remember real-connection failures: proxies that test fine but don't work are deprioritized, and latency is re-tested right after failover
· Hysteria2 supports TCP Fast Open; AnyTLS can skip TLS certificate verification
· Requests now fail fast when there's no network (e.g. airplane mode) instead of retrying and draining the battery
· Scripts can make far more concurrent HTTP requests, lifting WebView's ~6-per-host connection limit
· Profile errors now point to the exact field and reason instead of an inaccurate line number
· Logs are searchable; DNS forwarding rule sets can be previewed as YAML/text; module icons can be customized via long-press
· Reused HTTP connections show policy, rule, and IP info; traffic now uses binary units (KiB/MiB)

Bug Fixes

· Fixed large uploads stalling on some proxy protocols, and connections not falling back to a working IP when a domain resolves to multiple IPs
· Fixed profile changes and manually updated resources not taking effect immediately
· Fixed DNS hijacking mistakenly capturing non-DNS UDP traffic (e.g. SNTP)
· Fixed logical rules (AND/OR/NOT) with unsupported sub-rules matching all traffic; they are now ignored entirely
· Fixed Hysteria2 skip-cert-verify not applying, occasional false failures in Hysteria2 / TUIC latency tests, and inflated HTTP proxy latency results
· Fixed VLESS `encryption: none` being dropped from Clash subscriptions, and VLESS / VMess links being misidentified
· Fixed bare keys dropped from INI `#!arguments`, and YAML module argument placeholders in numeric fields
· Fixed IPv6 availability not updating after switching networks
· Fixed inaccurate protocol, policy, and failed filters on the Connections page
· Fixed very large values (e.g. `999999999999999` for "never update") in interval/timeout fields being silently ignored or breaking YAML profile parsing
· Fixed Show IP Info bypassing proxy DNS for domain proxies, truncated latency labels, and blank space in the editor after backgrounding with the keyboard up

### 2.19.0 — 2026-05-21

New Features

- Smart policy group: scores nodes by latency, jitter, and stability with continuous learning; per-sub-policy weight coefficients let you
bias selection
- Clash / mihomo subscription format
- IPv6 Fake IP (requires IPv6 enabled)
- Per-widget size selection in the gallery (Small / Medium / Large; iPad also Extra Large)
- Module list icons with on/off toggle; letter avatar fallback for icon-less modules
- Per-policy-group latency_test_url for custom latency / health-check URLs
- Import / export in the KeyValue editor
- Local port shown in connection details
- Cancellable resource downloads: leaving the page or re-triggering aborts the previous task
- Network-change notifications now show the cellular radio type (LTE / NR / WCDMA, etc.)
- SOCKS5 UDP relay traffic counted in speed and per-connection stats

Improvements

- Rewrote the domain rule matcher: ~10× exact, ~5× suffix, ~20× keyword
- Higher HTTP/2 throughput for large downloads on high-latency links
- Faster matching for rule sets with many IP CIDR entries
- Faster KV read/write in the script engine
- Lower kernel memory use
- More timely iCloud sync; optimized QUIC reject path
- ETag conditional fetch skips download/reload when unchanged
- Pause resource refresh while asleep; resume lazily after wake to save battery
- WebView memory released promptly after script execution, reducing NE kills
- Resources page no longer stalls on open (YAML parsed off-main)
- Policy page no longer freezes with many nested groups
- Background latency tests skip policy groups unreachable by real traffic
- Larger tap area for the policy-group latency button
- Proxy DNS now shares forward rules, hosts, ECS, and block_ips with the default resolver; proxy_nameservers is the fallback only
- Switching outbound mode and back to Global no longer clears the chosen global policy
- Updating a module also refreshes its referenced sub-resources
- Widget reordering moved to a dedicated page
- Better wording for policy-switch notifications
- Compatibility with anytls servers that don't support multiplexing

Fixes

- Cross-talk between multiple coexisting WireGuard tunnels
- VLESS XTLS Vision couldn't connect to server-first protocols (SSH, databases) in tcp-in-tun mode
- iOS system probe domains (e.g. *.invalid) terminating the HTTP proxy tunnel
- MITM cert generation failure for very long hostnames
- CPU spin after an HTTP body error
- Overlapping execution of high-frequency cron scripts
- One traffic-sniffing and one TLS-sniffing error
- Crash on duplicate entries in the connection-detail IP list
- Resource fetch failure when the URL contained a port
- zstd HTTP responses not decompressed in the script / MitM pipeline
- NE crash when a script notification contained NUL characters
- Scripts not using the specified policy with $httpClient, affecting modules like BiliBili Global
- ({response:{...}}) return in HTTP-response scripts not unwrapped, rewrites silently failing
- Content-Type not auto-filled from the body when scripts omit it (e.g. BiliBiliDailyBonus)
- Nested policy groups waiting for the interval before failover; inner failures now bubble up immediately
- Selected nodes in the policy UI reset after switching configurations
- Same-named icon sets with different URLs being deduplicated
- Real IPv6 addresses mis-matched to Fake IP cached domains due to offset overflow
- DNS resolution blocked while fetching the public IP
- IPv6 default route not split like IPv4 when compat-route is enabled
- USER-AGENT-only Surge rule sets (e.g. YouTube Music.list) being dropped
- Show IP Info occasionally returning an IP other than the proxy's current one
- Nested rule sets inside AND / OR / NOT rules not appearing in "Update Resources"
- Hotspot-client connections rejected during cellular uplink with Personal Hotspot
- DNS legend text not vertically centered
- Module compat arguments not persisted when set to the default
- Launch hang from iCloud container resolution

### 2.18.0 — 2026-04-12

New Features

· Quick action buttons on the home screen for adding subscriptions, scanning proxies, importing configs, and more
· Dedicated proxy DNS resolver with support for encrypted DNS (DoH/DoT/DoQ/H3), replacing plaintext UDP DNS for proxy connections
· URL rewrite reject types now return HTTP responses directly without extra redirects
· Import full Surge configuration files and Loon configs & plugins
· Import SOCKS5, HTTP, and HTTPS proxy nodes via URL
· VLESS/VMess now supports custom strings as user IDs
· SSH support in the scripting engine
· HTTP request scripts can now dynamically switch proxy policies
· New option to skip TLS verification for DNS, enabling self-signed certificate DNS servers
· "Show Hidden" toggle on the policy group page
· Multiplexing support for multiple streams over a single AnyTLS session

Improvements

· Surge module parser rewritten — 3x faster, malformed lines are silently skipped instead of breaking the entire file
· More specific error messages on connection failures
· Success/failure feedback after remote resource updates
· Minimum intervals enforced for policy group speed tests (60s) and resource updates (10min) to prevent excessive requests
· Improved QUIC connection interception

Bug Fixes

· Fixed AnyTLS memory leak and UDP forwarding only succeeding on the first attempt
· Fixed REJECT-DROP policy potentially preventing the app from launching
· Fixed deleted nodes still referenced in conditional policy groups
· Fixed stale DNS connections lingering after network changes
· Fixed potential crash when node list changes after a resource update
· Fixed policy group latency tests not reflecting the actual routing path
· Fixed module environment variables not being passed to scripts correctly
· Fixed IPv6 address parsing failure due to missing brackets
· Fixed TCP Fast Open settings being ignored when importing VMess/VLESS via subscriptions
· Various UI interaction and widget layout fixes

### 2.17.0 — 2026-03-16

New Features

· Introduced a brand-new Script API for more powerful automation and extensibility
· Added support for custom widgets. Create Home Screen and Lock Screen widgets using scripts + Widget DSL
· Widget DSL preview is now available in the script editor
· Added DNS rule pre-matching
· Added new REJECT-NO-DROP policy
· DNS queries hitting the REJECT policy can now return an empty response to block domain resolution
· Added support for URL Rewrite Header mode
· Modules can now declare environment variable types and options, and the editor will automatically generate the corresponding UI controls
· Running scripts directly from the script list now passes script environment variables

Improvements

· Reduced log levels for some events to prevent excessive log file growth

Bug Fixes

· Fixed an issue where non-Pro users could get stuck when opening the Appearance settings page
· Fixed an issue where a proxy chain could fail if a hop was resolved as DIRECT
· Fixed an issue where timeout / TCP connection failures did not immediately trigger failover
· Fixed delayed script execution caused by system throttling of JS timers
· Fixed a crash caused by out-of-bounds access in domain rule set matching under certain conditions
· Fixed an issue where icon grids on the icon set page were not displayed as squares
· Fixed an issue where rule cache was not cleared after network changes, causing SSID rules to match the previous network
· Fixed an issue where child rules in an OR rule group could be incorrectly skipped
· Fixed an issue when editing incorrect entries during search
· Fixed occasional crashes when editing forms

### 2.16.0 — 2026-03-02

New Features

· Added support for the anytls protocol
· Surge proxy configuration parser now supports HTTPS, TUIC, and anytls protocols
· VLESS Vision now supports XUDP UDP relay based on MUX
· Added DoH3 (DNS over HTTP/3) support for DNS
· Hy2 now supports the Brutal congestion control algorithm
· JS scripting enhancements: support specifying named policies via the policy parameter, support inline proxy descriptors via policy-descriptor, and added an insecure parameter to skip TLS verification
· Support batch closing policy connections on the Policy Group management page
· Support closing specific connections from the connection list
· Added new DNS forwarding rule match types: Domain, Domain Keyword, Domain Suffix, SSID, BSSID, Cellular
· Added a risk confirmation prompt when enabling Exclude Route 0.0.0.0/31

Improvements

· Refactored the JS engine runtime to improve overall stability and performance
· Optimized domain resolution performance
· Improved proxy UDP throughput
· Optimized proxy protocol encryption stack performance
· Significantly improved WireGuard upload and download speeds
· Optimized policy group failover logic, fixed overly aggressive switching, and added policy change notifications
· Split DNS upstream logic: system now represents the DNS servers configured by the current system or network interface, and bootstrap represents bootstrap resolvers. They are no longer aliases and are handled independently
· Renamed DNS fields: wildcard to domain_wildcard, regex to domain_regex

Bug Fixes

· Fixed abnormal behavior in SOCKS5 UDP relay
· Fixed excessive WireGuard timer error log output
· Fixed connection domain filtering match failures
· Fixed occasional disappearance of list separators in the UI
· Fixed extremely slow upload and download speeds in Hy2 and TUIC

## Apps similar to Egern

| App | Rating | Price | Category |
| --- | --- | --- | --- |
| [FlowDown - Open & Fast AI](https://appshunter.io/ios/app/flowdown-open-and-fast-ai/id6740553198) | 4.4 (27) | Free | Utilities |
| [App Privacy Insights](https://appshunter.io/ios/app/app-privacy-insights/id1575583991) | 4.6 (93) | Free | Utilities |
| [NeuVPN Private Internet Access](https://appshunter.io/ios/app/neuvpn-private-internet-access/id1663816906) | 4.4 (470) | Free | Utilities |
| [ServerBox](https://appshunter.io/ios/app/serverbox/id1586449703) | 4.9 (88) | Free | Utilities |
| [Anywhere Proxy](https://appshunter.io/ios/app/anywhere-proxy/id6758235178) | 4.9 (46) | Free | Utilities |
| [Stash - Rule Based Proxy](https://appshunter.io/ios/app/stash-rule-based-proxy/id1596063349) | 4.4 (1,201) | $5.99 | Utilities |

## More apps by Byte Crossing

- [Proxycat](https://appshunter.io/ios/app/proxycat/id1562957266)

All apps by Byte Crossing: https://appshunter.io/developer/1562957268

## Related topics

[netradyne](https://appshunter.io/ios/topics/netradyne)

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-08-09.*