Only Surge Mac supports this feature, from version 2.1.0
Some applications may not obey the system proxy settings. Using enhanced mode can make all applications handled by Surge.
Please read the instructions below before enabling
You must configure DNS override before enabling enhanced mode.
When enhanced mode is enabled, Surge may not be able to get system DNS settings correctly. 'dns-server' parameter is required.
Surge will setup a TUN interface and route 240.0.0.0/8 to it. DNS questions will get an answer with a fake IP in 240.0.0.0/8 block. (This block is reserved for future use by IANA.)
Since Surge TUN interface can only process TCP and UDP traffic. Only use this feature when necessary.（UDP traffic can't be proxied. It will passthrough like behind a NAT.）
If an application connects to an IP address without DNS lookup, Surge may not be able to handle the connection. You may solve this by adding routes manually.
Be careful, these destinations must be configurated to go through proxy. If it's matched with a DIRECT policy, those traffic will lost in a loop. Surge automatically breaks the loop and output a warning in log.
Or, you may set a DIRECT policy with a specified interface:
By default Surge will return fake IPs for all domains. It can be configured to specified domains only.
[General] enhanced-mode-by-rule = true [Rule] DOMAIN,example.com,DIRECT FINAL,Proxy,enhanced-mode