This advanced network utility allows developers to intercept, process, and forward network traffic. It offers deep control over connections, including URL redirection, local file mapping, and HTTPS decryption. Ideal for debugging and network analysis.
5.20.0
July 20, 2026
### Tailscale Support Surge now supports Tailscale as a policy. With this feature, Surge can join your Tailscale tailnet directly and route selected traffic through Tailscale peers using the existing Surge rule system. You can use Tailscale IPs, and tailnet-only services together with Surge policies, policy groups, DNS handling, traffic logging, and rule-based routing. Please check the manual for more information: https://manual.nssurge.com/policy/tailscale.html ### Snell v6 Introduced Snell v6, featuring PSK-derived deployment-level protocol diversity that generates unique traffic characteristics for each deployment, reducing reliance on a single protocol fingerprint while preserving Snell’s core goals of performance, deployment simplicity, accurate error reporting, and full TCP semantics. Snell v6 also adds new IPv4/IPv6 network stack controls including dns-ip-preference and multi-address listen support, and is currently available for beta testing. Please check our blog for more information: https://nssurge.com/blog/snell-v6/ ### Codebase Refactoring We have completed a comprehensive review of Surge’s core functionality and resolved numerous implementation issues, edge cases, and long-standing inconsistencies. This ongoing refactoring effort improves maintainability and helps provide a more robust foundation for future development. ### WireGuard WireGuard policies now use a dedicated native RTT test when no DNS server is configured, making them suitable for peer-to-peer access without requiring a reachable test URL. When a DNS server is configured, the policy is treated as a standard outbound proxy and continues to use the regular URL test process. WireGuard runtime information and diagnostics have also been updated to reflect the applicable testing mode. ### Minor Improvements - The Smart Group algorithm has been reviewed and upgraded, fixing several potential issues. - The `header` parameter for the HTTP proxy type can now override original fields, including Host field. - Added Gecko obfuscation support for Hysteria2, configured using the `gecko-password` parameter. - All TLS proxy protocols now support customizing ALPN using the `alpn` field. - When local DNS mapping is specified using server, multiple DNS servers can now be configured. - URL scheme actions are now supported in Surge Mac. Check manual for more information. - Enable the keep-alive mechanism for all QUIC-based protocols ### Other - Optimize the performance of Surge Ponte. - The UI configuration interface has been completed for the recently added proxy protocol parameters, including Tailscale. - Fixed an issue where the `header` parameter did not take effect in HTTP/1.1 CONNECT mode. - Fix some issues when using SF Symbols for policy group icons. - Fixed compatibility issues between DoH3 and some servers.
MoreUnlock all new features
$49.99
Surge Pro
Surge Pro features
Surge 5 is an advanced network utility designed for developers. It allows you to take over device network connections, process and modify network requests and responses, forward traffic to other proxy servers, and intercept specific data. It's a powerful tool for network analysis and debugging.
Key features include taking over HTTP/HTTPS/TCP traffic, modifying requests/responses with JavaScript, forwarding traffic with flexible rules, intercepting and decrypting HTTPS traffic, ad blocking, local DNS mapping, and detailed traffic measurement. It also supports various proxy protocols and advanced DNS features.
The application is available for free with in-app purchases. While the core functionality is accessible, certain advanced features or expanded capabilities may require purchasing through in-app transactions.
Surge 5 is specifically designed for developers and individuals with professional knowledge of networking and web development. Its advanced features require a technical understanding to utilize effectively for tasks like debugging and network analysis.
Common use cases include debugging network issues in applications, analyzing API requests and responses, testing network configurations, blocking ads on a device level, and switching between development and production environments without code changes using local DNS mapping.
