Surge
What Surge is
Surge is a network tool for iOS and macOS that captures traffic, resolves names, applies outbound policies, and lets users inspect or change HTTP traffic. It can capture through system proxy settings, local proxy ports, or a virtual interface handling raw TCP, UDP, and ICMP. Outbound options include HTTP(S), SOCKS5, Shadowsocks, Snell, VMess, Trojan, TUIC, Hysteria 2, AnyTLS, SSH, WireGuard, Tailscale, and other listed protocols. Policy groups can choose routes manually, by latency, fallback, load balancing, subnet, or automatic selection. DNS supports encrypted DoH, DoH3, DoQ, and DoT, plus local mapping and fake-IP handling. HTTP tools include HTTPS decryption with MITM, URL/header/body rewriting, and local responses. JavaScript hooks cover requests, responses, rules, DNS, events, and cron jobs. Mac adds gateway mode, DHCP, process rules, surge-cli, and Dashboard. iOS runs as a Network Extension VPN on Wi-Fi and cellular and includes a tvOS version. Surge is paid, has a 7-day trial, and no free plan.
Who it suits
Surge suits professional users who need detailed traffic routing, DNS controls, HTTP inspection, and scripting on Apple platforms. Mac and iOS buyers can choose device-specific licenses.
What it does well
- Captures raw TCP, UDP, and ICMP traffic
- Supports encrypted DNS and fake-IP handling
- Offers extensive outbound proxy protocols
- Includes JavaScript hooks and HTTP rewriting
- Mac and iOS apps available
What to know first
- No free plan
- Technical support is not included
- Mac updates are free for one year
- iOS Pro personal license limits sharing
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Surge Mac License — 1 Device | $49.99 · 1 Mac device · Lifetime use of unlocked versions · One year of free updates | $49.99, paid once |
| Surge iOS Pro Personal License | $49.99 · Up to 3 iOS devices · Additional 3 device slots free when bound to iCloud · Personal use | $49.99, paid once |
| Surge Mac License — 3 Devices | $69.99 · 3 Mac devices · Lifetime use of unlocked versions · One year of free updates | $69.99, paid once |
| Surge Mac License — 5 Devices | $99.99 · 5 Mac devices · Lifetime use of unlocked versions · One year of free updates | $99.99, paid once |
As nssurge.com lists them, read 9 Oct 2026. The maker's own page has the final word.
Verdict
Surge combines traffic capture, routing policies, DNS controls, HTTP tools, and scripting in Apple-platform apps. Its paid licenses and professional focus make the feature set most relevant to advanced network users.
Facts from Surge's own pages
- DNS
- DNS features include upstream and encrypted DNS using DoH, DoH3, DoQ, or DoT, plus local DNS mapping and fake-IP handling. · manual.nssurge.com, 9 Oct 2026
- Headquarters
- Newark, Delaware, United States · nssurge.com, 28 Sept 2026
- HTTP tools
- Surge supports HTTPS decryption with MITM, URL/header/body rewriting, and local response mapping. · manual.nssurge.com, 9 Oct 2026
- Integrations
- The Tailscale policy joins a tailnet and can route selected Surge traffic through it; it supports TCP and UDP relay. · manual.nssurge.com, 9 Oct 2026
- iOS platform
- Surge iOS runs as a Network Extension VPN and works on Wi-Fi and cellular networks; the iOS app also includes a tvOS version. · manual.nssurge.com, 9 Oct 2026
- License limits
- A Surge iOS Pro personal license covers up to three iOS devices simultaneously and cannot be shared with others. · kb.nssurge.com, 9 Oct 2026
- Mac tools
- Surge Mac includes gateway mode, a DHCP server, process-based rules, surge-cli, and the Surge Dashboard app. · manual.nssurge.com, 9 Oct 2026
- Privacy
- The privacy policy says the company may collect license and purchase information and device and activation information, including IP address and technical details needed to manage licenses and prevent abuse. · nssurge.com, 9 Oct 2026
- Product
- Surge is a network tool that captures traffic, resolves names, selects outbound policies, and can inspect or modify HTTP traffic. · manual.nssurge.com, 9 Oct 2026
- Proxy protocols
- Outbound policies include HTTP(S), SOCKS5, Shadowsocks, Snell, VMess, Trojan, TUIC, Hysteria 2, AnyTLS, SSH, WireGuard, and Tailscale. · manual.nssurge.com, 9 Oct 2026
- Rules and policy groups
- Policy groups can select policies manually, by latency test, fallback, load balancing, subnet, or automatically. · manual.nssurge.com, 9 Oct 2026
- Scripting
- JavaScript hooks are available for requests, responses, rules, DNS, events, and cron jobs. · manual.nssurge.com, 9 Oct 2026
- Security and compliance
- Surge Networks says it has begun aligning its internal processes with SOC 2 requirements. · nssurge.com, 9 Oct 2026
- Support
- The purchase page says the products are designed for professional users and do not include technical support; customer service handles billing issues. · nssurge.com, 9 Oct 2026
- Traffic capture
- Surge can capture traffic through system proxy settings, local proxy ports, or a virtual network interface that handles raw TCP, UDP, and ICMP traffic. · manual.nssurge.com, 9 Oct 2026
- Updates
- Mac purchases include one year of free updates, and unlocked versions remain usable for life after the update period ends. · nssurge.com, 9 Oct 2026
Where Surge stands on Freedom251
- Proxy Software#34 of 35