About Surge 5
Surge is a web development and proxy utility. It is designed for developers and therefore requires professional knowledge to use. These four capabilities form the core workflow of Surge: · Takeover: You can take over the...
Surge is a web development and proxy utility. It is designed for developers and therefore requires professional knowledge to use.
These four capabilities form the core workflow of Surge:
· Takeover: You can take over the network connection sent by the device. Surge supports both proxy service and virtual NIC takeover.
· Processing: You can modify the network requests and responses that have been taken over. This includes URL redirection, local file mapping, custom modification using JavaScript, and many other methods.
· Forwarding: You can forward the taken over network requests to other proxy servers. This can be global forwarding or with a flexible rule system to determine an outbound policy.
· Intercept: You can intercept and save specific data of network requests and responses, and you can also decrypt HTTPS traffic with MITM.
Highlighted Features
· Takeover all HTTP/HTTPS/TCP traffic from any applications on your device, and redirect to an HTTP/HTTPS/SOCKS5/SOCKS5-TLS/SSH proxy server following highly configurable rules.
· Used as a WireGuard Client to convert the L3 VPN as a proxy.
· Record and display HTTP requests and responses sent from your iOS devices, including body and header.
· Configure rules using domain match, domain suffix, domain keyword, CIDR IP range, and GeoIP lookup.
· Measure traffic usage and network speed on WiFi, cellular, and proxy connections.
· High performance and suitable for intensive use.
· Block ads by domain rules.
· Local DNS Map (equivalent to /etc/hosts). You can use this function to switch the production/development environment for your app without changing any code.
· All features work on the cellular network.
· Decrypt HTTPS traffic with Man-in-the-Middle.
· Perform URL rewrite.
· Fully IPv6 supports.
· Header rewrite.
· Raw L3 packets capture.
· Safari extension to add rules.
· JSON, text, image and video viewer for the captured body.
· Album mode for the request list.
· Pre-filter for capturing.
· HTTPS proxy protocol supports client-side SSL/TLS certificate validation.
· Scripting: Use JavaScript to extend the ability of Surge as your wish.
· Sync profiles cross devices with iCloud Drive or Dropbox.
· DNS-over-HTTPS, DNS-over-HTTP3, DNS-over-QUIC, TLS 1.3 and more advanced features.
You may read the online manual for more information: http://manual.nssurge.com/
Terms and Conditions: https://nssurge.com/legal/terms
Privacy Policy: https://nssurge.com/legal/privacy
Mar 28, 2024
Version 5.10.0
New Features
- New subscription feature: Body Rewrite. Surge now can rewrite the body of HTTP request or response, replacing the original content with regular expressions. If you need to make more flexible modifications, try scripting.
Improvements
- Comprehensive enhancement of the Mock (Map Local) function, adding data types such as text, tiny-gif, base64 to facilitate inline data return. Also added the ability to customize status codes.
- Optimized the request list filter, now displaying the filter at the top and allowing quick toggling of filter activation. Long-pressing a filter item displays a menu for deletion or reversing the item to a negative filter.
- Added recognition for STUN packets, which can be matched with PROTOCOL,STUN.
- Optimized the external resource management page.
- Optimized the script editor page.
- Optimized the module management page.
- Added a long-press shortcut menu to the Utilities tab.
- Added a new URL scheme for the iOS version: surge:///install-module?url=…
Optimizations
- When configuring Shortcuts to execute Surge scripts, the script list of the current configuration can now be directly accessed.
- Enhanced compatibility when decompressing HTTP Body.
- Optimized the script engine, limiting the number of concurrent JSC engine processes to 2 to avoid memory issues.
- The GeoIP database can now be updated by the main application without needing a restart to take effect.
- Optimized the request log, now displaying the specific rules matched for URL Rewrite and Header Rewrite.
- Adjusted the logic of the DNS engine handling empty results, now not waiting for all servers to respond with empty results when multiple DNS servers are configured, to avoid additional waiting when AAAA records do not exist..
- The module page allows undoing modifications to avoid misoperations that change the order of effectiveness.
Fixes
- Fixed the issue where warnings generated by module configurations were not displayed.
- Fixed a crash in Surge caused by passing some incorrect types of parameters in scripts.
- Fixed compatibility issues with non-https WebSockets in proxy mode with the new version of Safari.
- Fixed the issue where deleting an entry in the rule search page would delete all duplicate entries.
- Fixed some missing highlights in the editor.
- Other bug fixes.
Previous Versions
Here you can find the changelog of Surge 5 since it was posted on our website on 2020-04-04 01:53:33.
The latest version is 5.10.0 and it was updated on 2024-04-03 13:05:16. See below the changes in each version.
Surge 5 version 5.10.0
Updated At: 2024-03-28
Changes: Mar 28, 2024
Version 5.10.0
New Features
- New subscription feature: Body Rewrite. Surge now can rewrite the body of HTTP request or response, replacing the original content with regular expressions. If you need to make more flexible modifications, try scripting.
Improvements
- Comprehensive enhancement of the Mock (Map Local) function, adding data types such as text, tiny-gif, base64 to facilitate inline data return. Also added the ability to customize status codes.
- Optimized the request list filter, now displaying the filter at the top and allowing quick toggling of filter activation. Long-pressing a filter item displays a menu for deletion or reversing the item to a negative filter.
- Added recognition for STUN packets, which can be matched with PROTOCOL,STUN.
- Optimized the external resource management page.
- Optimized the script editor page.
- Optimized the module management page.
- Added a long-press shortcut menu to the Utilities tab.
- Added a new URL scheme for the iOS version: surge:///install-module?url=…
Optimizations
- When configuring Shortcuts to execute Surge scripts, the script list of the current configuration can now be directly accessed.
- Enhanced compatibility when decompressing HTTP Body.
- Optimized the script engine, limiting the number of concurrent JSC engine processes to 2 to avoid memory issues.
- The GeoIP database can now be updated by the main application without needing a restart to take effect.
- Optimized the request log, now displaying the specific rules matched for URL Rewrite and Header Rewrite.
- Adjusted the logic of the DNS engine handling empty results, now not waiting for all servers to respond with empty results when multiple DNS servers are configured, to avoid additional waiting when AAAA records do not exist..
- The module page allows undoing modifications to avoid misoperations that change the order of effectiveness.
Fixes
- Fixed the issue where warnings generated by module configurations were not displayed.
- Fixed a crash in Surge caused by passing some incorrect types of parameters in scripts.
- Fixed compatibility issues with non-https WebSockets in proxy mode with the new version of Safari.
- Fixed the issue where deleting an entry in the rule search page would delete all duplicate entries.
- Fixed some missing highlights in the editor.
- Other bug fixes.
Surge 5 version 5.9.0
Updated At: 2024-03-01
Changes: Mar 1, 2024
Version 5.9.0
Module
- Added several new official modules; official modules can now be dynamically updated.
- Modules have a new classification field for convenient access and categorization in the UI.
- Modules now accept parameter tables, supporting multiple parameters. Parameters will be used to modify module content through text replacement.
Script
- New script execution engine. Optimized execution performance and memory usage.
- $httpClient has added several practical parameters.
For more details on the updates above, see the documentation.
Enhancements
- Added desktop shortcut jumps for remote controllers; see the configuration guide at the bottom of the device page for details.
- New parameter: always-raw-tcp-keywords. For usage, refer to documentation.
- Added SRC-PORT rule to match client port numbers.
- IN-PORT/SRC-PORT/DEST-POT three rules are categorized as port number rule class, supporting more usages.
- The UI can now maintain pure empty lines from original configurations after editing.
Fixes
- Corrected a detail issue with QUIC flow control and optimized latency performance for Ponte/TUIC/Hysteria2 protocols.
- After editing a single rule, the notification-related parameters will be retained..
- Corrected an issue where switching outbound modes via widget was not possible in newer iOS versions.
- Fixed potential sudden memory overruns that could occur when when processing huge external resources leading to stops.
Surge 5 version 5.8.3
Updated At: 2023-12-08
Changes: Dec 8, 2023
Version 5.8.3
- Rewrote the virtual IP database, now the database can automatically clean up data based on last use time.
- Added viewing of the virtual IP table. (at the top right corner of the DNS result page)
- For DNS requests with illegal domain names, an empty result response will be generated instead of being ignored directly.
- Surge Ponte connections no longer validate peer addresses to ensure normal operation in certain special scenarios.
- Removed include-all-network option from UI to avoid misuse.
- Support configuring no-resolve for built-in rule sets/Inline rule sets.
- Other improvements and bug fixes.
Surge 5 version 5.7.0
Updated At: 2023-09-14
Changes: Sep 14, 2023
Version 5.7.0
New Features
· Surge tvOS is now available. All users who have purchased Surge iOS can use it directly without any additional purchase.
· Supports interactive widgets for the latest system.
· Added full-text search support for HTTP request's header and body.
· Web Dashboard updated to version 2.0.
· Inline Ruleset, allowing the Ruleset to be written directly in the main profile.
Minor Improvements
· Optimized the script logging system, ensuring that script logs in request logs do not display content from other sessions during concurrent execution.
· Removed the Wi-Fi Assist notification.
· When using UI to edit policy groups, you can now select Ponte devices.
· When creating temporary rules for remote devices, Ponte devices can be selected.
· Remote controllers support viewing and updating external resources of remote devices, compatible with Surge Mac and Surge tvOS.
· Icons for Ponte devices now display the device type.
· Improved details related to accessibility.
· Improved some UI details.
Bug Fixes
· Fixed some potential issues when editing the MITM Hostname list.
· Fixed an issue where, when creating rules for remote devices, the policy options might be local policies instead of remote policies.
· Fixed an issue where, when using iCloud sync, the local module selection might be deselected if the cache was cleared.
· Fixed an issue where switching to Dropbox sync was not possible.
· Fixed a problem where some card backgrounds were incomplete when expanded.
· Fixed an issue where modules added via Basic Auth URL could not auto-update.
· Fixed a problem in quick switch mode where, after switching from an IPv6 network to a non-IPv6 network, the v6-vif didn't correctly auto-turn off when set to auto.
Surge 5 version 5.6.0
Updated At: 2023-07-25
Changes: Jul 25, 2023
Version 5.6.0
Enhancements
· Comprehensive optimization of the request list page
· Ponte device sharing can now be initiated and managed directly on iOS
· The name of the source device will be displayed when viewing external requests
· Profile list added Create Linked Profile option for quick creation of detached profile
· Changed the logic of accessing the data protection area, now Surge can be properly activated in the locked screen state. (Except after rebooting)
· Will prompt when a CA certificate expiration is detected
· Single request exported .zip files support import back into Surge iOS, and will be displayed in the favorite requests
· Performance optimization
Problem Fixes
· Fixed the issue that in the same round of policy testing, if different test URLs are mixed, the HTTP Header constructed in the secondary test may be incorrect, leading to abnormal test results
· Fixed the issue that the Panel refresh may not be executed correctly after the main program is opened from the background
· Fixed the issue that the policy group title options under the list policy group view may not update in time
· Fixed the issue that using the DIRECT strategy as underlying proxy might cause UDP failure
· Fixed the issue that when using the SSH protocol, if the server side is configured with a banner, it cannot handshake properly
· Fixed some issues that may occur under the Lucid theme on iPad
· Fixed the issue that SSID related functions may not work correctly in some cases
· Fixed some problems that may occur when using TUIC v5 as underlying-proxy
· Fixed the issue that when directly using IPv6 address as vmess hostname, if WebSocket is enabled, the WebSocket request cannot be correctly constructed
· Fixed the issue that the use of certain invalid data in the DOMAIN-SET rule may cause a crash
· Fixed the crash that may be caused by profile errors
· Fixed the issue that the returned data of the replayed request cannot be viewed if there is compression
· Fixed the issue that the device list cannot be loaded when there is only a shared Ponte device
· Fixed some crashes that may occur with DNS over HTTP3
· Fixed the issue that when Surge Ponte is in a subnet CIDR not a multiple of 8, it will judge incorrectly leading to non-use of LAN direct connection
· Fixed some problems that may occur when using Surge Ponte
· Optimized the logic of re-establishing the main connection after network switching in TUIC/Ponte
Surge 5 version 5.5.3
Updated At: 2023-06-23
Changes: Jun 23, 2023
Version 5.5.3
Bug fixes
Surge 5 version 5.5.1
Updated At: 2023-06-07
Changes: Jun 7, 2023
Version 5.5.1
Remote Controller
* Supports adding and modifying temporary rules remotely.
* The device management now groups devices by active and non-active devices. (whether there is a request)
* Supports directly adding temporary or permanent rules for devices.
* Other detail optimizations.
Others
* Added support for TUIC v5 protocol.
* The policy group menu adds the option to display hidden groups.
* In traffic statistics, the subdomains of apple.com will be processed separately, facilitating the observation of the traffic consumption of system services.
* After external resources are updated, now only the update of the policy group will cause the group page to reload, other types will no longer cause the group page to reload.
* Optimized the performance of Surge Ponte/TUIC.
* Optimized the request Note recording when the strategy group is abnormal.
* Fixed the problem that connection reuse was not done correctly under MITM H2 mode.
* Fixed the problem that the request of $httpClient/DoH may sometimes be accidentally cancelled.
* Other bug fixes.
Surge 5 version 5.4.0
Updated At: 2023-04-06
Changes: Apr 6, 2023
Version 5.4.0
Surge Ponte
Surge Ponte is a private mesh network between your devices running Surge Mac & iOS.
· Zero configuration required
· Surge automatically chooses the most appropriate channel to establish connections.
· Always end-to-end encryption.
· The device information and encryption keys are synchronized via your iCloud, and none of your data passes through third-party servers, except the proxy server if you choose.
Surge Ponte needs to be used with Surge Mac 5.
WireGuard-related optimizations
· Significantly optimized handshake-related logic.
· WireGuard's Client ID supports UI configuration and adds support for 0xabcdef and 6-character base64 formats.
Other updates
· Redesigned the network diagnostics page and optimized the information display.
· Optimized peak bandwidth performance and CPU usage for QUIC.
· Requests matched by the REJECT rule will be marked as Rejected and distinguished by gray, no longer classified as Failed.
· Optimized the switch control logic for various functions to avoid accidentally turning off/on a function in some cases.
· When using MITM, prioritize using the client-reported SNI to generate certificates and use the accessed domain name when SNI is not reported.
· Increased the wake-up speed of executing Surge scripts via shortcuts when Surge is not enabled.
· Changed the display of SOCKS5 proxy request type to TCP. You may confirm in Notes that it was taken over by SOCKS5 proxy.
· Support for configuring DNS over QUIC/H3 for specific domain names in [Host].
· Introduced the FAILED built-in policy for marking request failures in special cases (e.g., policy group cannot be loaded) instead of using REJECT.
· Fixed an issue where rules would not match if the client accidentally sent a domain name with uppercase letters during rule matching.
· Fixed a problem where policy group decisions would fail if multiple external policy groups used the same name for policies with different actual content.
· DNS Local Mapping allows configuring multiple IPs for a domain name to be used concurrently.
· Other issues fixed.
Please note that starting with iOS 16.4, the system no longer allows reading the MCC/MNC of cellular networks. Related functions may become invalid.
Surge 5 version 5.0.2
Updated At: 2022-08-19
Changes: Aug 19, 2022 Version 5.0.2
- Fixed a bug that the text editor may be unable to save content.
Surge 5 version 4.15.0
Updated At: 2022-06-30
Changes: Jun 30, 2022 Version 4.15.0
MITM over HTTP/2
- Surge now supports performing MITM with HTTP/2 protocol to improve concurrent performance.
- Surge now supports performing MITM on WebSocket connections.
Others
- You may use `doh-skip-cert-verification=true` to disable server certificate verification for DNS-over-HTTPS.
- Bug fixes.
