Trust Tunnel Mac 6.4.4+

Trust Tunnel is a TLS-based proxy protocol developed and maintained by AdGuard. Surge currently supports the HTTP/2 (TCP) mode, which relays TCP connections as multiplexed streams over an HTTP/2 connection. UDP forwarding is not yet supported.

[Proxy]
Proxy-TrustTunnel = trust-tunnel, 192.168.20.62, 443, username=test, password=test

Parameters

username

Required. The username for authentication.

password

Required. The password for authentication.

headers Mac 6.6.0+

Optional. Add custom request headers to proxy handshake requests, with the same syntax and <random-string> placeholder support as for HTTP proxies. See HTTP proxy parameters for the full description.

Proxy = trust-tunnel, example.com, 443, username=test, password=test, headers=X-Padding:<random-string(16-32)>

max-streams Mac 6.6.0+

Optional. Default: 3. The maximum number of multiplexed sub-connections over the same TCP connection. See HTTP proxy parameters for details.

Notes

• Trust Tunnel always encrypts traffic with TLS; all shared TLS parameters apply.
• UDP relay is not supported. See UDP Relay for how Surge handles UDP requests matched to a policy without UDP support.

See Also

• Common Policy Parameters — shared parameters such as interface, tfo, test-url, and underlying-proxy.
• TLS Parameters — shared TLS parameters such as skip-cert-verify, sni, alpn, and certificate pinning.
• UDP Relay