VS Code Extension (Mac)
Added support for the Surge Language Support extension for VS Code, providing syntax highlighting and real-time diagnostics for profiles, modules, and rule sets. Includes automatic file detection and validation of policy references in detached configurations when the main profile is open.
This extension relies on the Surge application package and requires Surge Mac 6.10.0 or later. Its profile parsing capabilities are automatically updated when Surge is upgraded.
https://marketplace.visualstudio.com/items?itemName=SurgeNetworks.surge-language-support
IP Rewrite
Added the
[IP Rewrite] section, which handles packets entering Surge VIF at the IP layer based on their destination address, before they reach any rule or policy. This can provide on-device loopback functionality for certain iOS developer toolchains. Available actions:-
reflect: Swaps the source and destination addresses and sends the packet back to its sender.-
reject: Responds with a TCP RST to connection attempts and with an ICMP administratively prohibited message to other packets, so the sender fails immediately.-
drop: Silently discards the packet.Other New Features
- Added a
category parameter to policy groups for grouped display, useful when there are many policy groups.- All
test-url parameters now support HTTPS URLs. The result still measures the latency of a single HTTP round trip, but TLS handshakes may significantly increase the overall test duration when there are many policies.- Added an option to proactively update the configuration of a linked profile. URL-based linked profiles can now be updated manually.
- Added external resource management and other helper endpoints to the HTTP API.
- Added a device communication takeover option for Include All mode. (iOS)
UI and Rules
- Updated UI layouts and details for iPhone Duo support. (iOS)
- Improved the Add Rule page: domain rules can now be created from SNI-sniffed requests, and rule-specific options can be selected directly.
- Inline rule sets with the same name now merge across the main profile and modules instead of replacing one another, preserving the rules contributed by each source.
- Fixed logical rules incorrectly parsing policy names containing parentheses.
Networking and Reliability
- Improved Tailscale and WireGuard behavior when switching networks.
- Improved UDP test diagnostics for peer-to-peer Tailscale and WireGuard policies without Internet egress, reporting unsupported tests instead of waiting for a timeout.
- The previous version strengthened MITM security by generating a separate key pair for each distinct domain, which caused noticeable delays when intercepting many different domains concurrently. After evaluation, this change has been reverted.
- Removed an erroneous Ponte notification when using a Ponte policy in a policy group.
- Fixed a scripting-engine compatibility issue.
- Added a workaround for a system bug in macOS 27.2 beta to prevent Dashboard from crashing. (Mac)
- Improved performance and memory usage, fixed rare crashes, and resolved other minor issues.