SukkaW/Surge
Surge
Surge is a network traffic routing and configuration system designed to categorize and steer network requests using curated rule sets, domain lists, and IP databases. It provides the data structures and filtering logic necessary to manage how application traffic is directed across proxies, direct connections, or regional gateways.
The project distinguishes itself through granular traffic identification and steering. It identifies network requests by matching them against system process names, user-agent strings, and geographic IP ranges to apply specific routing policies. This allows for the optimization of high-bandwidth assets via content delivery network routing and the separation of domestic and international traffic.
The system provides extensive security and access control capabilities, including the blocking of trackers, telemetry, malware, and phishing domains using regular expressions and domain-suffix matching. It further manages network integrity through DNS control to prevent fake IP assignments and handles local network traffic to ensure internal requests bypass external proxies.
The project is implemented in TypeScript.
Features
- Network Traffic Routing - Directs application data through custom network paths using proxies and direct connections.
- Traffic Routing - Bypasses proxy servers and connects directly to destinations using curated sets of domains, suffixes, and keywords.
- Tracking Prevention Lists - Prevents network requests to telemetry, analytics, and tracking endpoints by matching specific domains and suffixes.
- Domain and Keyword Routing - Determines the appropriate routing path by matching requests against domains, suffixes, and keywords.
- Proxy Rule Sets - Provides curated collections of traffic rules for routing network requests through proxies.
- Domain Traffic Filters - Intercepts and routes network requests based on domain suffixes and keyword matching.
- Geographic Traffic Routing - Directs network traffic based on the geographic origin or destination of the request.
- Local Network Traffic Forwarders - Ensures internal traffic bypasses proxies and uses local DNS resolution by listing local network domains and IP ranges.
- LAN Traffic Identification - Ensures internal network traffic bypasses proxy routing by matching LAN IP addresses and local suffixes.
- CIDR Block Filtering - Implements IP matching against CIDR blocks to determine regional membership and routing policies.
- Automated Traffic Routing - Automates network traffic steering to specific destinations using curated lists of domains and IP addresses.
- Domestic Traffic Classifiers - Identifies and distinguishes between domestic and international traffic using domain and IP lists.
- IP Range Routing - Matches network traffic against CIDR blocks and IP ranges to enforce specific routing policies.
- Hybrid Domain and IP Routing - Applies routing and filtering policies by matching traffic against both IP ranges and domain suffixes.
- Regional Routing Datasets - Uses curated lists of IP ranges and CIDR blocks to enforce geographic routing policies.
- Service-Specific Routing Rules - Implements rule-based categorization to route traffic for regional services through appropriate proxy nodes.
- Regional IP Identification - Determines if a network address originates from a specific region, such as Mainland China.
- Proxy Routing - Implements logic to route requests across proxy servers or directly to bypass network restrictions.
- Application Filters - Isolates network traffic based on the specific application process name producing the request.
- Client-Based Filters - Implements routing rules based on the originating application's process name and user-agent string.
- Traffic Routing Configurations - Manages internet traffic flow by directing requests through specific proxies, direct connections, or gateways.
- Process-Based Routing - Determines routing paths by matching network requests to specific local system process names.
- Traffic Rule Sets - Provides management of organized collections of routing rules to automate traffic steering.
- Application-Specific Routing - Provides granular routing controls that direct traffic from specific local applications based on process names.
- User Agent Routing - Applies targeted routing policies by identifying network requests via their user-agent strings.
- App-Based Traffic Control - Manages internet traffic on a per-application basis by identifying specific system process names.
- DNS Filtering - Intercepts and blocks network requests by mapping advertisement and tracker domains to null addresses.
- Domain Name Blocking - Rejects advertisements, analytics, and telemetry by maintaining curated lists of domains for network proxies to block.
- Process-Based Blocking - Prevents tracking or unwanted connections by defining a list of domains, keywords, and process names for rejection.
- Malicious IP Blocklists - Prevents connections to harmful hosts by identifying and blocking traffic to known malicious IP addresses and CIDR ranges.
- Malicious Domain Filtering - Prevents connections to harmful endpoints by filtering requests against curated lists of known malicious domains.
- Malicious Traffic Blocking - Secures network connections by blocking traffic to known malicious IP addresses and phishing domains.
- Privacy and Ad Blocking - Prevents tracking and blocks connections to advertisement, telemetry, and analytics servers.
- Telemetry Blocking - Prevents connections to telemetry, advertising, and tracking servers by matching requests against lists of forbidden domains.
- User-Agent Filters - Applies targeted routing and filtering based on the client user-agent strings.
- Traffic Filtering - Stops advertisements, telemetry, and malicious traffic by preventing network requests to specific domains, suffixes, and keywords.
- Private Relay Identification - Provides a curated list of iCloud Private Relay endpoints to facilitate intercepted routing.
- CDN Integrations - Routes network traffic through content delivery networks to improve download speeds and streaming stability.
- CDN Routing Gateways - Identifies Microsoft CDN domains to apply specific routing rules for updates and downloads.
- Object Storage Routing - Applies routing policies by identifying IP addresses and domains used for object storage and static assets.
- Apple CDN Routing - Optimizes download speeds by directing Apple CDN traffic through specific proxy or direct rules.
- Fake-IP Filters - Ensures domains are resolved via real DNS lookups by preventing them from being assigned fake IP addresses.
- Media Source Routing Rules - Provides routing rules to direct traffic from global media streaming services to specific network destinations.
- AI Platform Routing - Directs network traffic to specific proxies by identifying domains and keywords associated with AI platforms.
- Apple Intelligence Routing - Enables targeted routing and blocking behaviors for domains associated with Apple Intelligence services.
- Apple Service Routing - Applies specific routing or filtering rules by identifying domains and process names associated with Apple services.
- Regional Content Routing Policies - Applies regional routing policies for streaming services using domains, user agents, and process names.
- Private Relay Enablements - Identifies Private Relay domains to ensure encrypted DNS and traffic are routed correctly.
- Routing Optimization Utilities - Directs high-bandwidth traffic through optimal paths to enhance download performance.
- ASN-Based Routing - Applies specific routing rules to providers by identifying traffic based on Autonomous System Numbers.
- CDN Domain Routing - Categorizes network traffic based on curated CDN domain lists to apply specific routing rules.
- IPv6 Routing Rules - Applies network routing rules based on destination or origin IPv6 CIDR ranges.
- Software Update Routing - Directs traffic from software update servers to specific proxies to optimize download speeds.
- Static Asset Routing - Implements specific routing rules for CDNs by identifying object storage and static asset delivery domains.
- Update and Large File Routing - Optimizes routing by identifying domains and IPs used for software updates and large file hosting.
- Process Name Filters - Matches executable process names against predefined lists to identify and route traffic from specific applications.
- URL Regex Filters - Filters network requests by matching outgoing URLs against regular expression patterns to block specific content.
- URL-Specific Blockings - Prevents connections to unwanted or malicious web addresses by matching network requests against regular expressions.
- User-Agent and Domain Blocking - Prevents connectivity to designated services by filtering network requests based on hostnames, domain suffixes, or user agents.
- P2P Traffic Blocking - Prevents unwanted data usage or connection instability by rejecting peer-to-peer network traffic using domain and suffix lists.
- Regex Filters - Prevents access to specified malicious or unwanted URLs by filtering outgoing network requests using regular expression patterns.
- Application Network Isolation - Stops specific apps from transmitting sensitive data or keystrokes to remote servers through targeted network filtering.
