Is Surge 5 not working / having issues for you?

Version 5.19.0 08 June 2026

Adjustments to the Feature Update Subscription for Surge iOS
Since the introduction of the feature update subscription mechanism for Surge iOS, we have aimed to maintain a reasonable balance between continuously evolving the product’s capabilities and ensuring a reliable long-term user experience. After evaluation, we have decided to make the following adjustments:
1. All newly added proxy protocol compatibility support in the future will no longer be included within the scope of the feature update subscription, and will be available directly to all users.
2. TrustTunnel, which is currently supported on an experimental basis, will also not be subject to subscription restrictions and can be used directly.
We believe that protocol compatibility should be a fundamental capability provided in a stable, long-term manner, rather than a phased incremental feature. This means that, in the future, users will not need to worry about the availability of basic protocol support due to their subscription status; new protocol compatibility capabilities will also be made available to all users more directly and continuously.
After this adjustment, subscription updates will focus more on new advanced features, while protocol compatibility itself will be maintained as a long-term foundational capability of the product.
At the same time, the proxy protocol ecosystem itself is also constantly changing. Some protocols continue to evolve, while others gradually fall out of mainstream use cases. To ensure the long-term maintainability of Surge’s codebase and the overall quality of the product, we will also take actual usage into account when placing certain legacy protocols into maintenance freeze, or gradually ending support for them in the future.
We will handle related adjustments as cautiously as possible and provide explanations in advance, in order to minimize the impact on existing user profiles and user experience.
Thank you all for your continued support and feedback.
---------------------
* Added HTTP/2 CONNECT proxy support. You can configure HTTP/2-based CONNECT proxy connections via the h2-connect type.
* HTTP, HTTPS, HTTP/2 CONNECT, and TrustTunnel proxies now support custom request headers.
* HTTP/2 CONNECT and the TrustTunnel proxy now support multiplexing. Because too many sub-connections multiplexed over the same TCP connection may cause performance issues, by default up to 3 sub-connections are allowed. This can be adjusted via the policy parameter `max-streams`.
* The storage logic for icon configuration in the iOS version has been adjusted. Now, when the profile is editable, it will preferentially be written into the profile to ensure interoperability with the Mac version. Only when the profile is read-only will a separate UI profile be used for storage.
* Fixed an issue where sending SNI did not strictly comply with RFC6066. Now, when an IP address is used as the hostname, the IP address will not be sent as SNI.
* Fixed an issue where crashes could occur when using ShadowTLS with certain servers.
* Fixed an issue where, when the Logbook contained a very large amount of data, it could not be viewed remotely via the Dashboard.
* Other performance optimization and minor enhancements..

Version 5.17.1 14 March 2026

Added
- Experimental support for the Trust Tunnel protocol
- Added an Intent for profile switching; you can now switch the current Surge profile directly in Shortcuts
- Added a Debug message toggle on the Ponte page; when enabled, detailed connection status messages will be shown during the Ponte connection process
- Support for directly referencing hosted profiles without first adding the hosted profile as a local profile (i.e., the Linked Profile feature on macOS)
- Enterprise/Team license can now be used on the tvOS version
Improved
- All parameters for the throughput test are now customizable
- Added a workaround to address an issue on newer iOS versions where, after long scripts run for a while, setTimeout is throttled by the system’s resource saving and can fire at most once every 2 seconds
- Policy groups no longer validate the validity of sub-policy names. If a referenced sub-policy does not exist, the non-existent options will be automatically hidden at runtime. The include-other-group parameter has been adjusted similarly. Note: using a non-existent policy in [Rule] will still trigger a hard profile error prompt.
Fixed
- Fixed a compatibility issue between AnyTLS and some servers (when reuse is enabled, if a previous request fails, subsequent requests could hang)
- Fixed a rare crash when using QUIC-type protocols or h3 DNS
- Fixed an issue where only the small card view could display the “Update External Resources” menu item.

Version 5.17.0 14 January 2026

- Optimize various UI details and presentation on iOS 26.
- New subscription feature: compatible with the AnyTLS (v2) proxy protocol.
- Supports Hysteria 2 Salamander obfuscation mode.
- Optimize QUIC SNI extraction to support extracting SNI from incomplete initial packets
- On the policy group page, long-press a policy group with a profile that has a policy-path to update the policy group directly.
- The QUIC block behavior for all proxy protocols has now been adjusted to be blocked by default..

Version 5.16.2 24 October 2025

Bug fixes.

Version 5.15.2 13 August 2025

Bug fixes and minor enhancements.

Version 5.14.6 11 May 2025

- Added [General] parameter `block-quic`, which is used to globally override the behavior of blocking QUIC traffic.
- Optimized the text and JSON viewer in the request inspector, now supporting large files and code highlighting.
- Rewrote HTTP script-related implementation; it now performs better and uses less memory when handling large bodies.
- Supports SNI extraction for gQUIC.
- Refactored traffic statistics functionality; now, even if you haven't entered the main program for a long time, you won't have to wait a long time when accessing the traffic statistics page.
- Added export feature to traffic statistics.
- Other detail optimizations and bug fixes..

Version 5.14.5 26 March 2025

- Support DNS over TLS.
- Bug fixes and performance improvements..

Version 5.14.3 20 January 2025

New Feature: Port Forwarding
- This feature is commonly used in development and debugging scenarios such as connecting to servers like MariaDB using SSH.
#!REQUIREMENT upgrade
- Now provides three simple notations: #!IOS-ONLY, #!MACOS-ONLY, and #!TVOS-ONLY.
- Content disabled by this end-of-line comment can now be displayed and edited in the UI. It will appear as disabled when conditions are not met, and if enabled, restrictions will be automatically removed.
[Host] Optimization
- [Host] section supports configuration using DOMAIN-SET and RULE-SET to improve matching efficiency. Use case:
Other Improvements
- Added option icmp-forwarding, enabled by default.
- Optimize using Smart policy groups as the underlying proxy. Now, in this usage scenario, the characteristics of Smart policy groups can be fully utilized.
- Bug fixes and other improvements..

Version 5.14.1 07 November 2024

Bug fixes.

Version 5.12.0 07 August 2024

- New subscription feature: Custom policy group icons.
- Refactor the Surge tvOS profile deployment process using CloudKit, significantly improving stability. Please note that both Surge iOS and tvOS need to be upgraded to the latest version before you can use the profile deployment feature, and the tvOS version needs to be launched once for registration.
- When using the add rule function in the request list, you can choose to add it to an existing rule set. (Supports local rule files and inline rule sets).
- Optimized behavior when enabling IPv6 VIF under No Default Route mode.
- Other optimizations and bug fixes..

Version 5.11.3 14 June 2024

- Support turning off Surge via widgets/Shortcuts when the always-on switch is turned on.
- Support turning on Surge via widgets/Shortcuts when the Surge VPN Profile is not selected (or when other VPNs are running).
- Fix an issue where DOMAIN-SUFFIX rules may become invalid if duplicate DOMAIN and DOMAIN-SUFFIX rules are included in the rule set.
- Optimizations related to No Default Route mode, significantly improving usability.
- Other bug fixes..

Version 5.10.0 28 March 2024

New Features
- New subscription feature: Body Rewrite. Surge now can rewrite the body of HTTP request or response, replacing the original content with regular expressions. If you need to make more flexible modifications, try scripting.
Improvements
- Comprehensive enhancement of the Mock (Map Local) function, adding data types such as text, tiny-gif, base64 to facilitate inline data return. Also added the ability to customize status codes.
- Optimized the request list filter, now displaying the filter at the top and allowing quick toggling of filter activation. Long-pressing a filter item displays a menu for deletion or reversing the item to a negative filter.
- Added recognition for STUN packets, which can be matched with PROTOCOL,STUN.
- Optimized the external resource management page.
- Optimized the script editor page.
- Optimized the module management page.
- Added a long-press shortcut menu to the Utilities tab.
- Added a new URL scheme for the iOS version: surge:///install-module?url=…
Optimizations
- When configuring Shortcuts to execute Surge scripts, the script list of the current configuration can now be directly accessed.
- Enhanced compatibility when decompressing HTTP Body.
- Optimized the script engine, limiting the number of concurrent JSC engine processes to 2 to avoid memory issues.
- The GeoIP database can now be updated by the main application without needing a restart to take effect.
- Optimized the request log, now displaying the specific rules matched for URL Rewrite and Header Rewrite.
- Adjusted the logic of the DNS engine handling empty results, now not waiting for all servers to respond with empty results when multiple DNS servers are configured, to avoid additional waiting when AAAA records do not exist..
- The module page allows undoing modifications to avoid misoperations that change the order of effectiveness.
Fixes
- Fixed the issue where warnings generated by module configurations were not displayed.
- Fixed a crash in Surge caused by passing some incorrect types of parameters in scripts.
- Fixed compatibility issues with non-https WebSockets in proxy mode with the new version of Safari.
- Fixed the issue where deleting an entry in the rule search page would delete all duplicate entries.
- Fixed some missing highlights in the editor.
- Other bug fixes..

Version 5.8.3 08 December 2023

- Rewrote the virtual IP database, now the database can automatically clean up data based on last use time.
- Added viewing of the virtual IP table. (at the top right corner of the DNS result page)
- For DNS requests with illegal domain names, an empty result response will be generated instead of being ignored directly.
- Surge Ponte connections no longer validate peer addresses to ensure normal operation in certain special scenarios.
- Removed include-all-network option from UI to avoid misuse.
- Support configuring no-resolve for built-in rule sets/Inline rule sets.
- Other improvements and bug fixes..

Version 5.8.2 23 November 2023

Bug fixes.

Version 5.7.0 14 September 2023

New Features
· Surge tvOS is now available. All users who have purchased Surge iOS can use it directly without any additional purchase.
· Supports interactive widgets for the latest system.
· Added full-text search support for HTTP request's header and body.
· Web Dashboard updated to version 2.0.
· Inline Ruleset, allowing the Ruleset to be written directly in the main profile.
Minor Improvements
· Optimized the script logging system, ensuring that script logs in request logs do not display content from other sessions during concurrent execution.
· Removed the Wi-Fi Assist notification.
· When using UI to edit policy groups, you can now select Ponte devices.
· When creating temporary rules for remote devices, Ponte devices can be selected.
· Remote controllers support viewing and updating external resources of remote devices, compatible with Surge Mac and Surge tvOS.
· Icons for Ponte devices now display the device type.
· Improved details related to accessibility.
· Improved some UI details.
Bug Fixes
· Fixed some potential issues when editing the MITM Hostname list.
· Fixed an issue where, when creating rules for remote devices, the policy options might be local policies instead of remote policies.
· Fixed an issue where, when using iCloud sync, the local module selection might be deselected if the cache was cleared.
· Fixed an issue where switching to Dropbox sync was not possible.
· Fixed a problem where some card backgrounds were incomplete when expanded.
· Fixed an issue where modules added via Basic Auth URL could not auto-update.
· Fixed a problem in quick switch mode where, after switching from an IPv6 network to a non-IPv6 network, the v6-vif didn't correctly auto-turn off when set to auto..

Version 5.6.0 25 July 2023

Enhancements
· Comprehensive optimization of the request list page
· Ponte device sharing can now be initiated and managed directly on iOS
· The name of the source device will be displayed when viewing external requests
· Profile list added Create Linked Profile option for quick creation of detached profile
· Changed the logic of accessing the data protection area, now Surge can be properly activated in the locked screen state. (Except after rebooting)
· Will prompt when a CA certificate expiration is detected
· Single request exported .zip files support import back into Surge iOS, and will be displayed in the favorite requests
· Performance optimization
Problem Fixes
· Fixed the issue that in the same round of policy testing, if different test URLs are mixed, the HTTP Header constructed in the secondary test may be incorrect, leading to abnormal test results
· Fixed the issue that the Panel refresh may not be executed correctly after the main program is opened from the background
· Fixed the issue that the policy group title options under the list policy group view may not update in time
· Fixed the issue that using the DIRECT strategy as underlying proxy might cause UDP failure
· Fixed the issue that when using the SSH protocol, if the server side is configured with a banner, it cannot handshake properly
· Fixed some issues that may occur under the Lucid theme on iPad
· Fixed the issue that SSID related functions may not work correctly in some cases
· Fixed some problems that may occur when using TUIC v5 as underlying-proxy
· Fixed the issue that when directly using IPv6 address as vmess hostname, if WebSocket is enabled, the WebSocket request cannot be correctly constructed
· Fixed the issue that the use of certain invalid data in the DOMAIN-SET rule may cause a crash
· Fixed the crash that may be caused by profile errors
· Fixed the issue that the returned data of the replayed request cannot be viewed if there is compression
· Fixed the issue that the device list cannot be loaded when there is only a shared Ponte device
· Fixed some crashes that may occur with DNS over HTTP3
· Fixed the issue that when Surge Ponte is in a subnet CIDR not a multiple of 8, it will judge incorrectly leading to non-use of LAN direct connection
· Fixed some problems that may occur when using Surge Ponte
· Optimized the logic of re-establishing the main connection after network switching in TUIC/Ponte.

Version 5.5.0 25 May 2023

Interface
· New UI theme Lucid, derived from the design language of Surge Mac 5. (Feature Subscription required)
· Remote control device management supports remote modification of device icons. (Surge Mac needs to be updated to version 5.1.0)
Surge Ponte
· Surge Ponte supports cross-iCloud account sharing. (Surge Mac needs to be updated to version 5.1.0)
· Fixed issues that might occur when accessing HTTP/1.0 servers via Surge Ponte or TUIC protocol. (e.g. ASUS router management page)
Proxy Protocol Related
· Supports ShadowTLS v3. (Feature Subscription required)
· New feature: Adaptive TLS Fingerprint, see the manual for details.
· Fixed an issue where the reuse feature could not work properly under Snell V4.
· SSH protocol adds server public key fingerprint designation, see the manual for usage.
· Added UDP forwarding support for VMess protocol.
Scripts
· Scripts' $httpClient supports binary mode. · The body of the request supports TypedArray. · Passing in binary-mode: true in the request parameters allows the return result to be returned as TypedArray.
· Fixed the problem that `http-request` type scripts could not use binary data directly as response.
Others
· Policy group adds parameter `external-policy-modifier`, which can be used to adjust external policies.
· Optimized the request log system · Added category marks to the logs. · Rule system adds more output for DNS and rulesets.
· Swipe right on temporary rules to write the rules into permanent rules.
· Other bug fixes and optimizations..

Version 5.3.1 16 February 2023

- Support for customizing the reserved bits of WireGuard, also known as the client ID or routing ID.
- Improved WireGuard handshake logic.
- Fixed some UDP forwarding problems.
- Fixed some text editor issues..

Version 5.2.3 03 December 2022

New Feature
- Gaming Optimization. Enabling it will prioritize UDP packets when the system load is very high, and packet processing is delayed.
- SOCKS5 proxy now supports UDP forwarding, as the server side does not consistently support UDP forwarding, the parameter udp-relay=true needs to be explicitly configured.
Minor Improvements
- URL regular expressions for Script, Rewrite, Mock, etc. will try to match URLs constructed in many different ways (e.g. Host field in Header) to solve the problem that some apps use custom DNS logic to request directly to IP addresses.
- Removed the silencing mechanism after UDP forwarding errors to avoid extra waiting time after switching networks.
- Added a workaround for suspend and subnet settings that may occur when the SSID is temporarily not available under iOS 16.
- The log view supports freezing now.
- The IPv6 switch no longer prevents direct access to IPv6 addresses when turned off. The switch is now limited to controlling whether the DNS Client requests AAAA records.
- Automatic disabling of AAAA queries due to DNS issues will be prompted in the Event Center instead of just in the logs.
- Fixed handling issue of generating IPv6 fragmentation when forwarding IPv6 UDP packets via WireGuard.
- The external policy group will skip the line and continue processing when it encounters invalid content instead of returning an error directly.
- Adjusted the buffering mechanism of raw TCP forwarding to avoid conflicts with some apps.
- Fixed REJECT requests not being marked as failed under MITM H2.
- Adjusted the output text under diagnostics.
- Other bug fixes..

Version 5.2.0 10 November 2022

Support New Proxy Protocol
- Snell V4.
- TUIC
- Shadow TLS
See the online manual for more information.
Other Improvements
- A new expanded card style for the Policy Group view.
- Refined the Route Table view.
- shadowsocks now supports the none cipher.
- Modified the handshake packet construction logic when forwarding HTTPS requests to proxies, which can slightly optimize latency.
- Surge HTTP requests for proxy testing no longer contain a User-Agent header.
Bug fixes
- Fixed an issue that when using Subnet Suspend, the switch in the interface did not display the status correctly.
- Fixed an issue that the module could not configure the MITM h2 parameter.
- Fixed some keyboard-related layout problems.
- Fixed an issue that may not work properly when nesting proxy chains with a specific protocol combination.
- Fixed an issue where UI jumping may occur when starting Surge if iCloud Drive is used.
- Fixed a memory leak that could occur when HTTP capturing is enabled..