Beta Updates
- Tailscale can now establish peer-relay paths through eligible tailnet devices when a direct connection is unavailable, with Direct > Peer Relay > DERP path priority. Runtime details identify Peer Relay connections and display their latency.
- Local-file and inline rulesets can now be edited graphically on macOS and iOS. Add or modify standard rules, logical rules, nested rulesets, and comments, then reorder or remove entries as needed. Create new inline rulesets directly from the rule editor and store them as named [Ruleset ...] sections in the profile.
- The previously added mixed use of #include will no longer affect UI write-back for the corresponding sections. Surge will automatically select the write-back target as accurately as possible based on the changes.
537
0
0
SURGE PRO NEWS
2026年9月4日 08:11
#iOS #TestFlight
Surge 5 5.102.0 (3823) is ready to test on iOS.
What to Test
- Tailscale can now establish peer-relay paths through eligible tailnet devices when a direct connection is unavailable, with Direct > Peer Relay > DERP path priority. Runtime details identify Peer Relay connections and display their latency.
- Local-file and inline rulesets can now be edited graphically on macOS and iOS. Add or modify standard rules, logical rules, nested rulesets, and comments, then reorder or remove entries as needed. Create new inline rulesets directly from the rule editor and store them as named `[Ruleset ...]` sections in the profile.
- The previously added mixed use of `#include` will no longer affect UI write-back for the corresponding sections. Surge will automatically select the write-back target as accurately as possible based on the changes.
Official Channel: https://t.me/SurgeTestFlightFeed
1,020
6
SURGE PRO NEWS
2026年9月4日 08:11
#iOS #TestFlight
Surge 5 5.102.0 (3821) is ready to test on iOS.
What to Test
### Profile System Updates
The #include directive can now be freely combined with other content within a section. The following usage patterns are supported:
1. Dedicated Include
[Proxy]
#include proxy.dconf
When a section consists of a single #include directive, it remains fully editable in the UI. Any changes made through the UI will be correctly written back to proxy.dconf.
2. Multiple Includes
[Proxy]
#include a.dconf, b.dconf
This combines content from multiple files into a single section. Since the UI cannot determine how changes should be written back to the individual files, the section becomes read-only and cannot be modified through the UI.
3. Mixed Content and Includes (New)
[Rule]
#include common-rule-a.dconf
DEST-PORT,123,DIRECT
#include common-rule-b.dconf
#include directives can now be freely mixed with regular content within the same section. As with multiple includes, the UI cannot determine the appropriate write-back behavior, so the section will be read-only.
Note: When using this feature in the [Rule] section, keep in mind that a FINAL rule immediately terminates rule matching. Any rules included or defined after it will therefore never be evaluated.### Tailscale
- Improved compatibility with the Tailscale administration console. Surge devices are no longer incorrectly reported as using an outdated client, enabling version-gated operations such as editing the device IP address.
### iOS
- Fixed managed-profile `icon-url` icons being hidden by automatically generated placeholder icons.
- Custom policy-group icons now behave consistently across Lucid and Gradient themes, with a **Default** option available in both.
- Module download, parsing, file-writing, and installation-information failures are now reported instead of failing silently.
- Refined the Script Editor toolbar and file-selection layout on iOS 26.
- Improved context-menu previews on iOS 26 by following the system’s native corner styling.
Official Channel: https://t.me/SurgeTestFlightFeed
SURGE PRO NEWS
2026年9月4日 08:11
#iOS #TestFlight
Surge 5 5.102.0 (3822) is ready to test on iOS.
What to Test
### Profile Diagnostics
- WireGuard and Tailscale policies now produce a clear warning when their referenced configuration section is missing.
- The warning also explains that a named `#!include` loads only the identically named section from the included file.
### Modules and Cloud Sync
- Module installation information is no longer governed by iCloud data, in order to avoid various issues caused by iCloud. iCloud is only used to synchronize installation information across devices.
- Cloud synchronization now excludes `.git` and `node_modules` directories and no longer interprets their absence in the cloud as a request to delete local content.
### iOS
- Fixed policy-group icon changes sometimes being lost after the profile reloaded.
- Refined module menus on iOS 26 to avoid overlapping context-menu animations and improve Liquid Glass presentation.
Official Channel: https://t.me/SurgeTestFlightFeed
872
2
SURGE PRO NEWS
2026年9月4日 08:11
Beta Updates
macOS Interface
- Reworked the proxy editor, policy-group editors, parameter dialogs, and the General, Interface, DNS, Profile, and License pages using a new System Settings-style card interface.
Surge CLI & Remote Control
- Added restart-engine, which completely restarts the engine, closes active connections, and clears caches and temporary rules.
- reload continues to apply only changed profile sections whenever possible, preserving unaffected runtime state.
- Restart Engine is also available from Surge Dashboard and the iOS Remote Controller maintenance menu.
Tailscale
- Improved compatibility with the Tailscale administration console. Surge devices are no longer incorrectly reported as using an outdated client, enabling version-gated operations such as editing the device IP address.
iOS
- Fixed managed-profile icon-url icons being hidden by automatically generated placeholder icons.
- Custom policy-group icons now behave consistently across Lucid and Gradient themes, with a Default option available in both.
- Module download, parsing, file-writing, and installation-information failures are now reported instead of failing silently.
- Refined the Script Editor toolbar and file-selection layout on iOS 26.
- Improved context-menu previews on iOS 26 by following the system’s native corner styling.
372
SURGE PRO NEWS
2026年9月4日 08:11
#iOS #TestFlight
Surge 5 5.102.0 (3820) is ready to test on iOS.
What to Test
### Smart Group
- Added a graphical Policy Priority editor for Smart Groups on.
### Tailscale
- Interactive sign-in now supports tailnets that require administrator device approval. Surge clearly indicates when sign-in has completed but the device is still awaiting approval.
- Fixed Tailscale traffic becoming unavailable when the control server assigned the device a new tailnet address.
- Improved recovery after network changes by retrying temporarily failed UDP bindings and refreshing direct-connect endpoints.
- Improved WireGuard and Tailscale handling of multiple peers and expired connections.
### Profile and Automation
- On iOS, profile changes made on disk or received through iCloud now reload automatically. If the updated profile is invalid, Surge keeps the working configuration active and reports the error.
- Event scripts can now respond to `engine-started` and `profile-reloaded`, in addition to `network-changed`.
### Notifications
- Added notification controls for new proxy clients, script notifications, and rule-matched notifications.
- Local and remote notification category settings now correctly apply to dynamically generated alerts.
- Disabling policy-group change notifications now also suppresses temporary group-override alerts.
### Fixed
- Improved MITM certificate generation by using separate keys for generated leaf certificates and correcting the transmitted certificate chain.
- Fixed QUIC connections potentially stalling after receive-side backpressure.
- Fixed rare deadlocks involving cron-script shutdown and Vector UDP connections, including Ponte traffic.
- Improved stability under heavy connection churn and local-port exhaustion.
- Other small UI issues.
Official Channel: https://t.me/SurgeTestFlightFeed
SURGE PRO NEWS
2026年9月4日 08:11
Profile System Updates
The #include directive can now be freely combined with other content within a section. The following usage patterns are supported:
1. Dedicated Include
[Proxy]
#include proxy.dconf
When a section consists of a single #include directive, it remains fully editable in the UI. Any changes made through the UI will be correctly written back to proxy.dconf.
2. Multiple Includes
[Proxy]
#include a.dconf, b.dconf
This combines content from multiple files into a single section. Since the UI cannot determine how changes should be written back to the individual files, the section becomes read-only and cannot be modified through the UI.
3. Mixed Content and Includes (New)
[Rule]
#include common-rule-a.dconf
DEST-PORT,123,DIRECT
#include common-rule-b.dconf
#include directives can now be freely mixed with regular content within the same section. As with multiple includes, the UI cannot determine the appropriate write-back behavior, so the section will be read-only.
Note: When using this feature in the [Rule] section, keep in mind that a FINAL rule immediately terminates rule matching. Any rules included or defined after it will therefore never be evaluated.
404
2
SURGE PRO NEWS
2026年9月4日 08:11
Beta Updates
Smart Group
- Added a graphical Policy Priority editor for Smart Groups on macOS and iOS.
Tailscale
- Interactive sign-in now supports tailnets that require administrator device approval. Surge clearly indicates when sign-in has completed but the device is still awaiting approval.
- Fixed Tailscale traffic becoming unavailable when the control server assigned the device a new tailnet address.
- Improved recovery after network changes by retrying temporarily failed UDP bindings and refreshing direct-connect endpoints.
- Improved WireGuard and Tailscale handling of multiple peers and expired connections.
Profile and Automation
- On iOS, profile changes made on disk or received through iCloud now reload automatically. If the updated profile is invalid, Surge keeps the working configuration active and reports the error.
- Event scripts can now respond to engine-started and profile-reloaded, in addition to network-changed.
Notifications
- Added notification controls for new proxy clients, script notifications, and rule-matched notifications.
- Local and remote notification category settings now correctly apply to dynamically generated alerts.
- Disabling policy-group change notifications now also suppresses temporary group-override alerts.
Fixed
- Improved MITM certificate generation by using separate keys for generated leaf certificates and correcting the transmitted certificate chain.
- Fixed QUIC connections potentially stalling after receive-side backpressure.
- Fixed rare deadlocks involving cron-script shutdown and Vector UDP connections, including Ponte traffic.
- Improved stability under heavy connection churn and local-port exhaustion.
- Other small UI issues.
401
SURGE PRO NEWS
2026年9月4日 08:11
Profile System Updates
- Added wildcard detached-section includes for [Ruleset *], [WireGuard *], and [Tailscale *]. A single #!include can now load all matching named sections from another local or remote profile file.
- Added DEVICE_NAME to the profile environment, enabling device-specific conditions in #! REQUIREMENT.
- [Mac] The current Reload Profile option will compare the differences between the old and new profiles and apply only the changes. It will not terminate existing active connections unless necessary. (Same behavior as editing through the UI previously.)
- [Mac] Added a Restart Engine option, which behaves like Reload Profile in the previous version and completely restarts the core once.
556
3
SURGE PRO NEWS
2026年9月4日 08:11
UniFi Controller Integration (Beta)
When Surge is operating in DHCP mode, Dashboard device management can integrate with the UniFi Controller. You can directly view the corresponding device’s SSID, AP, Wi-Fi version, and other information in Surge’s Dashboard. You can also force a specific device to reconnect.
Meanwhile, this feature is provided entirely by a new, extensible plugin mechanism, allowing plugins to be written to support any AP Controller or router.
This feature is currently in beta, so no UI configuration interface is provided yet. It can only be configured through surge-cli or the AI Skill. After installing the Surge AI Skill, simply ask the AI to help integrate your UniFi AP Controller. Alternatively, ask the AI to write a new plugin based on your router.
Plugin System (Beta)
- Added the Surge Plugin System on macOS. Plugins run as isolated JavaScript extensions independent of the active profile.
- The first supported plugin type is ap-controller, which can supply Wi-Fi information for the device panel and reconnect wireless clients. The existing UniFi Controller integration is now provided as a built-in plugin.
As it is still in the beta phase, the mechanism for installing plugins remotely via plugin install has not yet been enabled. Currently, only loading and running local content via plugin load is supported.
使用提示
Surge Mac 6.5.0 新增了对 `compatibility-mode = 5`，非 default 路由的工作方式的支持。用于解决特定的兼容性问题（如 HomeKit Camera）。
该模式下由于 Surge VPN Interface 并非首选 Interface，因此不会修改系统的默认 DNS，但是会通过 Split DNS 机制进行 DNS 劫持。不过该机制仅对 GUI 程序有效，对 CLI 和部分 GUI 程序无效。
如果希望在该模式下依然完整劫持 DNS，请先将首选的 Interface（如 WiFi）的 DNS 修改为任意公网地址（不可使用 LAN 地址），同时再配置 hijack-dns 参数进行劫持即可。
191
0
0
SURGE PRO NEWS
2026年4月25日 08:00
已完成订阅展期
199
0
0
SURGE PRO NEWS
2026年4月25日 08:00
#iOS #TestFlight #订阅功能
Surge 5 5.101.0 (3664) is ready to test on iOS.
What to Test
（由于自上次订阅功能更新时间过长，现已将功能订阅到期日在 2025 年 12 月 11 日以后的所有用户，免费展期 3 个月，详见： https://community.nssurge.com/d/4142-surge-ios ）
新的订阅功能：Logbook 日志本
用于持久化记录发生的各种事件，目前包含：引擎启动和停止、网络切换、脚本启动和停止、脚本超时等，后续将加入更多事件类型。
同时，脚本可以使用 $surge.logbook("content") 主动写入内容到日志本。
Official Channel: https://t.me/SurgeTestFlightFeed
797
19
0
SURGE PRO NEWS
2026年4月25日 08:00
#Mac #Release
https://dl.nssurge.com/mac/v6/Surge-6.5.0-10960-4b553c3553fbbe2a57301cdff9ffcf8e.zip
### Agent Skill
- Surge now fully supports AI agent skill operations. We have built in instructions on how to use surge-cli to operate Surge, and have fully exposed all capabilities of surge-cli. Tell the following to your agent that supports skills to use it:
Install the skill from the /Applications/Surge.app/Contents/Resources/Skills/ directory using a symbolic link to ensure the skill can be updated along with the application bundle.
### Policy Group Icon
- It is now supported, as in the iOS version, to configure an icon for a policy group for display. You need to configure the icon-url field. There is currently no UI setting; you need to modify the configuration manually.
### DHCP Section
Added support for a new DHCP configuration section to customize DHCP settings. You can now control max-lease-time, default-lease-time, min-lease-time, one-lease-per-client, and ping-check directly from profile parameters.
[DHCP]
max-lease-time = 86400
default-lease-time = 43200
min-lease-time = 600
one-lease-per-client = true
ping-check = true
This feature is only provided for users with special needs; generally, the default settings are sufficient and no configuration is required.
### Other Improvements
- Added support for the X25519MLKEM768 post-quantum hybrid key exchange group for all TLS-related features (such as proxy clients and MITM), combining X25519 with ML-KEM-768 for quantum-resistant key exchange.
- Experimental support for compatibility-mode = 5
Official Channel: https://t.me/SurgeTestFlightFeed
#Mac #Beta
https://dl.nssurge.com/mac/v6/Surge-6.5.0-10960-4b553c3553fbbe2a57301cdff9ffcf8e.zip
### Agent Skill
- Surge now fully supports AI agent skill operations. We have built in instructions on how to use surge-cli to operate Surge, and have fully exposed all capabilities of surge-cli. Tell the following to your agent that supports skills to use it:
Install the skill from the /Applications/Surge.app/Contents/Resources/Skills/ directory using a symbolic link to ensure the skill can be updated along with the application bundle.
### Policy Group Icon
- It is now supported, as in the iOS version, to configure an icon for a policy group for display. You need to configure the icon-url field. There is currently no UI setting; you need to modify the configuration manually.
### DHCP Section
Added support for a new DHCP configuration section to customize DHCP settings. You can now control max-lease-time, default-lease-time, min-lease-time, one-lease-per-client, and ping-check directly from profile parameters.
[DHCP]
max-lease-time = 86400
default-lease-time = 43200
min-lease-time = 600
one-lease-per-client = true
ping-check = true
This feature is only provided for users with special needs; generally, the default settings are sufficient and no configuration is required.
### Other Improvements
- Added support for the X25519MLKEM768 post-quantum hybrid key exchange group for all TLS-related features (such as proxy clients and MITM), combining X25519 with ML-KEM-768 for quantum-resistant key exchange.
- Experimental support for compatibility-mode = 5
Official Channel: https://t.me/SurgeTestFlightFeed
SURGE PRO NEWS
2026年4月25日 08:00
#Mac #Beta
https://dl.nssurge.com/mac/v6/Surge-6.5.0-10940-9676360eec5dcef73a9dc167b974a1b6.zip
### Agent Skill
- Surge now fully supports AI agent skill operations. We have built in instructions on how to use surge-cli to operate Surge, and have fully exposed all capabilities of surge-cli. Tell the following to your agent that supports skills to use it:
Install the skill from the /Applications/Surge.app/Contents/Resources/Skills/ directory using a symbolic link to ensure the skill can be updated along with the application bundle.
### Policy Group Icon
- It is now supported, as in the iOS version, to configure an icon for a policy group for display. You need to configure the icon-url field. There is currently no UI setting; you need to modify the configuration manually.
### DHCP Section
Added support for a new DHCP configuration section to customize DHCP settings. You can now control max-lease-time, default-lease-time, min-lease-time, one-lease-per-client, and ping-check directly from profile parameters.
[DHCP]
max-lease-time = 86400
default-lease-time = 43200
min-lease-time = 600
one-lease-per-client = true
ping-check = true
This feature is only provided for users with special needs; generally, the default settings are sufficient and no configuration is required.
### Other Improvements
- Added support for the X25519MLKEM768 post-quantum hybrid key exchange group for all TLS-related features (such as proxy clients and MITM), combining X25519 with ML-KEM-768 for quantum-resistant key exchange.
- Experimental support for compatibility-mode = 5
Official Channel: https://t.me/SurgeTestFlightFeed
#Mac #Beta
https://dl.nssurge.com/mac/v6/Surge-6.5.0-10930-45f078f470688e7c5f39783529bf732b.zip
### Agent Skill
- Surge now fully supports AI agent skill operations. We have built in instructions on how to use surge-cli to operate Surge, and have fully exposed all capabilities of surge-cli. Tell the following to your agent that supports skills to use it:
Install the skill from the /Applications/Surge.app/Contents/Resources/Skills/ directory using a symbolic link to ensure the skill can be updated along with the application bundle.
### Policy Group Icon
- It is now supported, as in the iOS version, to configure an icon for a policy group for display. You need to configure the icon-url field. There is currently no UI setting; you need to modify the configuration manually.
### DHCP Section
Added support for a new DHCP configuration section to customize DHCP settings. You can now control max-lease-time, default-lease-time, min-lease-time, one-lease-per-client, and ping-check directly from profile parameters.
[DHCP]
max-lease-time = 86400
default-lease-time = 43200
min-lease-time = 600
one-lease-per-client = true
ping-check = true
This feature is only provided for users with special needs; generally, the default settings are sufficient and no configuration is required.
### Other Improvements
- Added support for the X25519MLKEM768 post-quantum hybrid key exchange group for all TLS-related features (such as proxy clients and MITM), combining X25519 with ML-KEM-768 for quantum-resistant key exchange.
- Experimental support for compatibility-mode = 5
Official Channel: https://t.me/SurgeTestFlightFeed
