Surge 5 vs Termpolis R

Surge is an advanced network toolbox and proxy utility. It is designed for developers and therefore requires professional knowledge to use. These four capabilities form the core workflow of Surge: · Takeover: Take over the network connections sent by the device. Surge supports both proxy service and virtual NIC takeover, capturing HTTP, HTTPS, TCP, and UDP traffic from any app — even those ignoring proxy settings. All features work on the cellular network. · Processing: Modify the requests and responses that have been taken over: URL rewrite, header and body rewrite, local file mapping, custom DNS answers, and JavaScript-based modification. · Forwarding: Forward requests to proxy servers, either globally or driven by a flexible rule system. Policy groups select the best server automatically by latency, availability, or learned connection quality. · Intercept: Record and inspect requests and responses, including headers and bodies, and decrypt HTTPS traffic with MITM. Highlighted Features · Proxy protocols: HTTP/HTTPS, SOCKS5, SOCKS5-TLS, HTTP2 CONNECT, TrustTunnel, Shadowsocks, Snell, Trojan, Hysteria 2, AnyTLS, and SSH, with UDP relay support. · Used as a WireGuard or Tailscale client, converting the L3 VPN into a proxy policy. · Rules based on domain match/suffix/keyword/wildcard, CIDR IP range, GeoIP, ASN, protocol, port, and logical combinations; reusable rule sets hosted locally or remotely. · Policy groups: manual selection, automatic latency testing, fallback, load balancing, and the self-learning Smart group. · Complete DNS suite: DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, DNS-over-TLS, and concurrent queries for the fastest answer. · Local DNS mapping (equivalent to /etc/hosts) with wildcards, aliases, and per-domain DNS servers. Switch your app between production and development environments without changing any code. · Decrypt HTTPS traffic with Man-in-the-Middle and a built-in CA certificate generator. · Record and display HTTP requests and responses with JSON, text, image, and video viewers for the captured body; album mode for the request list; pre-filter for capturing. · Raw L3 packet capture. · Scripting: extend Surge with JavaScript — modify requests and responses, write custom rules, customize DNS answers, and run scheduled tasks. · Block unwanted requests by rules with high-performance pre-matching. · Measure traffic usage and network speed on Wi-Fi, cellular, and proxy connections. · Remote Dashboard: observe and debug traffic in real time from a Mac via Wi-Fi or USB, including cellular traffic. · Surge Ponte: access your home or office network remotely via your own devices, with no third-party service involved. · HTTPS proxy protocol supports client-side TLS certificate validation. · Safari extension to add rules; widgets and Information Panel for quick control. · Sync profiles across devices with iCloud Drive or Dropbox. · Full IPv6 support, TLS 1.3, HTTP/2, and QUIC. · High performance and industrial-grade stability, suitable for intensive use. Surge does not provide any proxy or VPN service; you need to configure your own servers. You may read the online manual for more information: https://nssurge.com/support Terms and Conditions: https://nssurge.com/legal/terms Privacy Policy: https://nssurge.com/legal/privacy

Termpolis Remote is a companion for the Termpolis desktop app. It lets you check on the terminals already running on your computer, read what they have printed, and type into them, from your phone. It is a viewer and a keyboard. Nothing runs here. The work happens on your desktop, signed in the way it was already signed in, on the machine where your files, your repositories and your tools already are. Close this app and the work carries on without it. REQUIRES THE TERMPOLIS DESKTOP APP Termpolis Remote does nothing on its own. You need Termpolis running on a Mac, Windows or Linux computer, with Remote turned on in Settings. Termpolis is free and open source: github.com/codedev-david/termpolis RELAY ACCESS IS A SUBSCRIPTION The app is free to install. Your phone reaches your desktop through a relay we run and pay for, and that is what the subscription covers: Relay access -- $4.99 per month, auto-renewing. New subscribers get the first week free. The desktop app stays free and open source. There is no free tier here and nothing is held back from subscribers; the relay is the one thing this app does. Payment is charged to your Apple ID at confirmation of purchase. It renews automatically unless auto-renew is turned off at least 24 hours before the end of the current period, and your account is charged for renewal within 24 hours of that. Manage or cancel it in your Apple ID account settings after purchase. Any unused part of a free week is forfeited when you buy a subscription. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy policy: https://termpolis.com/privacy.html PAIRING TAKES ONE SCAN Your desktop shows a code. You scan it. Both screens then show the same eight words -- if they match, the two devices agreed on a key nothing in between can derive. If they do not match, something is in between, and the right move is to unpair. ONE PHONE, SEVERAL DESKTOPS Pair with up to 16 computers -- a work machine, a home one, a Linux box in the corner -- and switch between them from the terminal list. Each pairing has its own key and its own name, so each desktop grants what this phone may do on that desktop alone, and unpairing one leaves the others exactly as they were. END TO END, NOT JUST IN TRANSIT Every message between your phone and your desktop is sealed with a key the two of them derived together, using X25519 key agreement and ChaCha20-Poly1305. The relay that carries the traffic sees a room id, a size and a time. It cannot read a single byte of what passes through it, and it keeps nothing. YOUR DESKTOP DECIDES WHAT THIS PHONE CAN DO Reading output, starting terminals, typing, closing terminals -- each is granted on the desktop, in Settings, and each is checked again on the desktop for every request. This app can report what it has been allowed. It cannot grant itself anything. WHAT IT STORES One encryption key and one pairing record for each desktop you have paired with, in the iOS keychain, on this device only. No transcript, no scrollback, no cache of what your desktop said. Unpairing erases that desktop's key and record, and works whether or not the desktop is reachable. WHAT IT DOES NOT DO No account. No sign-in. No analytics, no crash reporting, no advertising identifier, no tracking of any kind. There is no server of ours that your terminal output ever reaches, because there is nowhere for it to go. CAMERA Used for one thing: reading the pairing code on your desktop screen. Frames are decoded on the phone and thrown away. If you would rather not, the pairing code can be typed in by hand. Termpolis is open source under the Apache 2.0 licence, and the wire format this app speaks is published in full.