Policies

A policy tells Surge how to handle a request once a rule has matched it: connect directly, reject it, or forward it to a proxy server. Every rule ends with a policy name, and the FINAL rule picks the policy for all unmatched requests.

There are three kinds of policies:

• Built-in policies: predefined policies such as DIRECT and REJECT. See Built-in Policies and the REJECT family.
• Proxy policies: forward the request to a proxy server. Declared in the [Proxy] section.
• Policy groups: select one policy from a set of policies, manually or automatically. See Policy Groups.

The [Proxy] Section

Each line in the [Proxy] section declares one proxy policy:

Name = <type>, <arguments...>, key1=value1, key2=value2

For all server-based proxy types, the first two arguments are the server hostname and port. The remaining parameters are written as key=value pairs. Quote a value if it contains commas.

[Proxy]
ProxyHTTPS = https, 1.2.3.4, 443, username, password
ProxySS = ss, 1.2.3.4, 8388, encrypt-method=chacha20-ietf-poly1305, password=pwd
ProxySnell = snell, 1.2.3.4, 8000, psk=pwd, version=5

Referencing Policies

A policy name can be used anywhere a policy is accepted:

• As the target of a rule: DOMAIN-SUFFIX,example.com,ProxySS
• As a member of a policy group: Group = select, ProxySS, ProxySnell, DIRECT
• As the value of the underlying-proxy parameter to build a proxy chain.

Supported Proxy Protocols

The built-in type keywords direct, reject, reject-drop, reject-no-drop, and reject-tinygif may also appear in the [Proxy] section to define aliases of the built-in policies. See Built-in Policies.

Shared Parameters

Besides the protocol-specific parameters documented on each protocol page, several parameter groups are shared across policy types:

• Common Policy Parameters: egress control (interface, ip-version, tfo, ...), testing (test-url, ...), and proxy chaining (underlying-proxy).
• TLS Parameters: parameters shared by TLS- and QUIC-based protocols, plus Shadow TLS obfuscation.
• UDP Relay: UDP protocol support matrix and related parameters.