Misc Options

ipv6 = false
loglevel = notify

interface =
port = 6152
socks-interface =
socks-port = 6153
enhanced-mode-by-rule = true

skip-proxy =,,,,, localhost, *.local
bypass-system = true
bypass-tun =,,

Common Options

Enable full IPv6 support (Default: false)

ipv6 = false

loglevel (Default: notify)

loglevel = notify

One of verbose, info, notify or warning. It's not recommended to enable verbose in daily use because this will slow down the performance significantly.


skip-proxy =,,,,, localhost, *.local

In iOS version, this option forces connections to these domain/IP ranges to be handled by Surge TUN, instead of Surge proxy. In macOS version, these settings will be applied to system when "Set as System Proxy" is enabled. This option is used to fix compatibility problems with some apps.

  • To specify a single domain, enter the domain name - for example, apple.com.
  • To specify all websites on a domain, use an asterisk before the domain name - for example, *apple.com.
  • To specify a specific part of a domain, specify each part - for example, store.apple.com.
  • To specify hosts or networks by IP addresses, enter a specific IP address such as or an address range, such as 192.168.2.* or

Notice: If you enter an IP address or address range, you will only be able to bypass the proxy when you connect to that host using that address, not when you connect to the host by a domain name that resolves to that address.

Surge Mac Special Options

Server listen interface (Default:

interface =

HTTP server port (Default: 6152)

port = 6152

SOCKS5 server listen interface (Default:

socks-interface =

SOCKS5 server port (Default: 6153)

socks-port = 6153

Enhanced Mode by Rule (Default: false)

Enhanced Mode

enhanced-mode-by-rule = true

Surge iOS Special Options

bypass-system = true

This option will add some special rules. First, these rules below are added to allow domains to bypass Surge proxy server and use raw TCP:


Second, this rule is added with the highest priority:

IP-CIDR,, DIRECT, no-resolve

If you disable this option, it may lead to some system problems, such as delays in push notifications.

Notice: Entire address block is assigned to Apple.

Excluded Routes

tun-excluded-routes =,,

Surge TUN can only process TCP and UDP protocols. Use this option to bypass specific IP ranges to allow all traffic to pass through.

Notice: This option only works for Surge TUN. Requests handled by Surge Proxy Server will not be affected. Combine 'skip-proxy' and 'tun-excluded-routes' to make sure that certain HTTP traffic bypasses Surge.

This option might cause a system error ENOMEM (Cannot allocate memory). It seems a bug in iOS system. Please do noy use this option if possible.

Included Routes

tun-included-routes =

By default, Surge TUN interface will declare itself as the default route. But since the Wi-Fi interface has a smaller route. Some traffic may not go through Surge TUN interface. Use this option to add a smaller route.

results matching ""

    No results matching ""