Chute - Proxy Network Toolbox 1.2.2 - App Store

---

About Chute - Proxy Network Toolbox

Chute turns your iPhone and iPad into a complete network workstation: a rule-based proxy client, an HTTPS debugging proxy, and a full DNS stack - all running on a network engine written from scratch for Apple platforms....

Chute turns your iPhone and iPad into a complete network workstation: a rule-based proxy client, an HTTPS debugging proxy, and a full DNS stack - all running on a network engine written from scratch for Apple platforms. Switch it on and the whole device is behind the proxy. Every connection your apps make can be inspected, routed, rewritten, or blocked by your rules. SYSTEM-WIDE PROXY . Chute VIF - a transparent virtual interface on a custom TCP/IP stack, no per-app setup . Local HTTP and SOCKS5 servers for other devices on your network . Proxy chaining - reach a node through another node, send a group through one upstream, or set a Front Proxy for every node . Hot reload - edit rules, DNS, and scripts without dropping a connection; on-demand activation and persistence across reboots 17 PROXY PROTOCOLS HTTP, HTTPS, SOCKS5, SOCKS5 over TLS, Shadowsocks (AEAD, AEGIS, and 2022), ShadowsocksR, VMess, VLESS, Trojan, TUIC v5, Hysteria2, WireGuard, AmneziaWG, AnyTLS, ShadowTLS, MASQUE, and SSH tunneling - plus a built-in Tailscale client. Transport and TLS: XTLS Vision, REALITY, XHTTP, uTLS fingerprints, ECH, X25519MLKEM768 post-quantum exchange, UDP for VMess, VLESS, and Shadowsocks. 27 RULE TYPES . DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD, DOMAIN-WILDCARD, DOMAIN-REGEX . IP-CIDR / IP-CIDR6, GEOIP, IP-ASN, SUBNET - by Wi-Fi SSID, BSSID, or router . SRC-IP, SRC-PORT, DEST-PORT, IN-PORT, IN-TYPE, IN-USER, IN-NAME, with port ranges . USER-AGENT, URL-REGEX, PROTOCOL, HOSTNAME-TYPE, AND / OR / NOT . RULE-SET, DOMAIN-SET, and inline rule sets, with remote subscriptions . SCRIPT, and FINAL as the catch-all POLICY GROUPS . URL-Test - always ride the lowest-latency node . Fallback - automatic failover when a node degrades . Load Balance - round-robin, consistent hash, or sticky sessions . Relay - chain the members in order, traffic leaving from the last one . Random - a different member per connection . SSID - switch policy automatically per Wi-Fi network . Select - take the wheel whenever you want it MODERN DNS . DoH, DoH3, DoQ, DoT, and plain DNS - a different resolver per domain if you want . Dedicated pools: one for DIRECT traffic, one for your servers' names, one as fallback . Fake IP, EDNS Client Subnet, negative caching, custom hosts, and query logs TRAFFIC INSPECTION . Capture HTTP, HTTPS, and DNS live, headers and bodies included . HTTPS decryption scoped to the hosts and paths you choose, with HTTP/2 and QUIC blocking . URL rewrite, header rewrite, and JSONPath or jq body rewrite . Local mock responses for offline work and edge cases . Real-time throughput charts, per-connection detail, and accounting SCRIPTING . A JavaScript engine for requests, responses, DNS resolution, and scheduled tasks . A persistent store, an HTTP client, and notification APIs; Modules package rules, rewrites, and scripts into one file BRING YOUR EXISTING SETUP . Import Clash and sing-box profiles from a subscription URL, a file, or Wi-Fi . mihomo GEOSITE and GEOIP rules, SUB-RULE, and detour / dialer-proxy import as working rules and chains . Pair with Chute Dashboard, a free Mac app, to inspect iPhone traffic over Wi-Fi or USB BUILT FOR DAILY USE . Home Screen widget, Control Center control, and a Notification Center toggle . Face ID / Touch ID lock . Picture in Picture traffic monitor FREE AND PAID The proxy engine, the rule engine, the DNS stack, the web console, the HTTP API, and the dashboard are free with one configuration. A one-time purchase - no subscription - adds multiple switchable configurations, iCloud sync, HTTPS decryption, traffic recording for Chute Dashboard, local server control, Picture in Picture, and Always On. One purchase covers up to 3 iPhone or iPad devices and 3 Apple TV devices. Chute does not operate proxy servers and provides no network access on its own - bring your own server or a service you already use. Traffic and logs stay on your device. Chute collects no browsing data and sells nothing to anyone.

Version History NEW • Proxy chaining: any policy except Tailscale can dial through another — set an upstream per policy, one for a whole group, or a Front Proxy in Advanced covering every node that has no upstream of its own; the connection detail names every hop • New Relay and Random group types • VMess and VLESS carry UDP; Shadowsocks gains UDP over TCP (UoT), so it keeps working through an upstream without UDP • The editor gained rows for dedicated DNS pools, tun-included-routes, MitM HTTP/2 and QUIC blocking, the REJECT policies, inline rule sets and rule notifications — and no longer drops or rewrites what it cannot display • QUIC can be routed by domain, so DOMAIN rules cover HTTP/3 connections made to a bare address; icmp-auto-reply answers pings inside the tunnel • mihomo GEOSITE and category GEOIP rules, SUB-RULE, and sing-box detour / mihomo dialer-proxy import as working rules and chains • Rule sets use far less memory: providers download one after another instead of failing after the 35th FIXES • Fixed Hysteria2 dropping datagrams too large for one QUIC frame (which broke HTTP/3), a restarted tunnel reusing its previous port and TCP sequence numbers (which WireGuard peers answered with resets), and XHTTP stalling after the app's first write • Fixed PROTOCOL rules not matching, RULE-SET / DOMAIN-SET inside AND / OR / NOT always evaluating false, and PROCESS-NAME rules matching browser traffic on iOS — they work only on macOS • Fixed the subscription auto-refresh blocking the main thread for 30 seconds and getting the app killed by the watchdog, and a chute:// link doing nothing when Chute was not already running 1.2.2 3d ago Chute 1.2.0 is about seeing what the engine is doing — and getting that to someone who can help. DIAGNOSTICS • Web console: the Control Panel now shows its address and signs you in with one tap — with Current and History connection views, a Rules page that shows which rewrites actually fired, and a Diagnostics page with live probes • Runtime Diagnostic Bundle in the Control Panel, and an Offline Diagnostic Bundle in Settings that works even when the tunnel won't start — both redacted, ready for the share sheet • Share the full session log; logs now rotate in 8 MB shards so long sessions stay retrievable • HAR export is generated by the engine, with real status codes and timings plus the policy and rule behind every request • Session detail names the rewrite or mock rule that changed a request • The engine records whether the previous run ended cleanly or was killed ENGINE • Rule matching on large RULE-SET / DOMAIN-SET lists is far faster (a 50k-line list drops from about 94 ms to under 2 ms per lookup) and uses less memory; UDP flows are matched once • Smarter recovery after a network change: dead tunnels are closed instead of hanging apps, and black-holed paths are reported • The HTTP API now generates an access token when the configuration sets none, instead of serving open • New API endpoints for rule dry-runs, live log-level changes, and configuration validation APP • French is now a built-in language • The "Network Address Changed" notification shows your device's IPv4 and IPv6 and flags NAT • Redesigned Wi-Fi upload page • HTTP API, Web UI, Protocol Sniffing, Optimus DNS, External Access, and Purge DNS Cache no longer need the paid unlock — only Advanced Server Control, HTTPS decryption, and Traffic Recorder do FIXES • HTTPS decryption, rewrites, and mock responses now work for app traffic in Chute VIF mode — previously they only worked through the local HTTP/SOCKS5 proxy • allow-wifi-access now actually exposes the local proxy to your Wi-Fi • no-resolve IP rules, RULE-SET lines with trailing options, and HOSTNAME-TYPE now match as documented • Starting the tunnel no longer posts a false "policy group switched" notification • Fixed the Control Panel freezing at 100% CPU, an occasional XHTTP crash, and the HAR export's wrong status codes and 1970 timestamps • Fixed HTTPS response header rewrites being recorded but never delivered • Corrected the license screen and the App Store link on the About page 1.2.0 Sep 2 New Features: Added XHTTP transport to the policy editor — enable toggle, mode (auto, packet-up, stream-up, stream-one), path, and host — for Trojan, VMess, and VLESS Added AEGIS-128L and AEGIS-256 Shadowsocks encryption methods Added ECH (Encrypted Client Hello) settings for TLS policies — enable toggle, pinned ECH config (ech-config), and cover-name override (ech-public-name) Added client fingerprint (uTLS) per policy, plus a profile-wide default Added AmneziaWG protocol support, including a parameter editor for this WireGuard variant with traffic obfuscation Added Clash and sing-box profile import from subscription URLs, files, and Wi-Fi uploads Added a configuration error report page with copyable contents to replace alerts that block interaction Added X25519MLKEM768 post-quantum hybrid key exchange for TLS 1.3 Improves: When saving, the policy editor now preserves existing options that are not available for editing (ECH, ALPN, certificate pinning, test-url, underlying-proxy, udp-relay) Bug Fixes: Fixed a tunnel crash caused by malformed IP-CIDR rules Fixed the SSH idle-timeout setting being written under the wrong key and discarded on save Fixed onboarding rules placing the policy name after no-resolve, which could break IP-based rules Various stability and performance improvements 1.1.9 Aug 15 New Features: - Added Tailscale as a built-in proxy type: configure a Tailscale account directly in Chute, join a tailnet, and route traffic thro ugh Tailscale nodes — no separate client required - Added Tailscale section editor: enter the auth key securely, verify the connection, list tailnet nodes, and switch exit nodes fro m within the app - Added a Tailscale control panel that shows real-time node status (online/offline, IP, last seen) and lets you switch exit nodes o n the fly - Added system notifications for proxy diagnostics, including egress-IP changes and Tailscale connection events, with per-type togg les in settings - Added the MASQUE proxy type to the policy editor Improves: - Improved TUN throughput on iOS - Improved Tailscale and WireGuard connection stability and throughput - Improved UDP tunnel stability and the accuracy of traffic statistics - Improved stability when stopping the VPN, reducing cases where the system terminates the connection abnormally - Improved language switching reliability - Sanitized configuration file names to prevent invalid path characters from causing load failures Bug Fixes: - Fixed an issue where on-demand rules could become inconsistent between VPN start and stop - Fixed a rare crash caused by concurrent language switching - Fixed network-change handling to avoid unnecessary VPN reconnections - Various stability and performance improvements 1.1.8 Jul 27 New Features: - Added JavaScript Scripting system: run custom scripts for request/response modification, DNS resolution, custom rule matching, and scheduled tasks - Added Body Rewrite: search and replace HTTP request/response body content using regex (with capture group support) or JSONPath expressions - Added ShadowTLS protocol support - Added gRPC transport for VMess and VLESS protocols - Added DNS-over-QUIC (DoQ) and DNS-over-HTTP/3 (DoH3) support - Added DNS-over-TLS (DoT) support - Added HTTP Control API and Web UI for monitoring and controlling the proxy runtime - Added Module system (.sgmodule) for modular configuration management - Added Proxy Provider for dynamic proxy list updates - Added Notification Reporting: detects connection failures, proxy unavailability, traffic surges, config update failures, and policy group switches; dispatches events for system notifications - Added Mock Response: return mock data to matched requests without reaching the real server - Added LoadBalance policy group with round-robin, consistent-hashing, and sticky-sessions strategies - Added URL Rewrite new modes: reject-200, reject-img, reject-dict - Added Header Rewrite response direction support - Added PROTOCOL rule type with 10 protocol type values - Added SCRIPT rule type for JavaScript-based custom matching - Added extended-matching and requires-resolve options for rules - Added AnyTLS multi-layer padding scheme - Added SS2022 encryption methods (2022-blake3-aes-128/256-gcm, chacha20-poly1305) - Added Managed Configuration support - Added Replica support for configuration replication - Added WireGuard configuration UI - Added interrupt-exist-connections global option Improves: - Policy groups now support expected-status, hidden, idle-timeout, and lazy options - Enhanced URL Rewrite with template variable support in Map Local format - Improved DNS server with DoQ, DoH3, and DoT protocol support - Expanded rule system from 6 to 30+ rule types with full coverage Bug Fixes: - Fixed IPv6 default value (false → true) - Fixed log level default value (notify → warning), added none and fatal levels - Fixed Shadowsocks/ShadowsocksR naming consistency throughout documentation - Various stability and performance improvements 1.1.7 Jun 27 New Features: - Added Hysteria2 protocol support - Added WireGuard protocol support - Added VLEXX REALITY protocol support - Added protocol sniffer for TUN traffic - Added IP-ASN rule support - Added AND/OR/NOT logical rule support Bug Fixes: - Fixed UDP adapter memory issues - Optimized performance for Rule-Set and Domain-Set matching - Resolved other minor bugs and stability issues - Fix license view crash 1.1.6 May 21 New Features: - Added TUIC protocol support - Added Shadowsocks 2022 (SS2022) support - Introduced tunnel configuration - Improved log display in session Bug Fixes: - Fixed UDP adapter issue - Optimized performance for Rule-Set and Domain-Set matching - Resolved other minor bugs and stability issues 1.1.5 May 8 New Features: iOS 26 UI Bug Fixes: Fix DNS IPv6 response for Gemini App RULE-SET with comment content support Widget center switch button status fix iOS 26 quick action support 1.1.2 09/30/2025 New Features: AnyTLS Policy support Domain-Set support Remote Rule-set support Improves: Tunnel rebuild for better performance Full-tested UDP tunnel Bug Fixes: Fix memory leaks 1.1.1 08/05/2025 Fix some bug 1.1.0 05/23/2025 New Features: iOS 18 control center switch button Bug Fixes: TUN with IPv6 now redirect to IPv6 tunnel, to fix some service issues 1.0.9 10/07/2024 New Features: SSH Policy support Add remote dashboard connect Improves: Change TUN network to 198.18.0.0/15 to avoid IPv4 internal address issue Text updates Bug Fixes: Fix DNS issues 1.0.8 12/19/2023 New Features PIP mode iCloud sync for configuration files Add remote configuration manager tvOS Bug Fixes Fix Vmess with Websocket 1.0.7 09/13/2023 New Features - New UI - Add upload configuration via Wi-Fi - Add Network Diagnosis & Proxy Diagnosis - Add reset VPN configuration function - Add ICMP(Ping) packet support - Add VPN status check Improves: - Improve configuration edit UI/UX - Update MTU to 4000 Bug Fixes - Bug fix - Fix IPv6 TUN setting 1.0.6 10/22/2022 New Features - Add VLESS protocol support - Add XTLS support with VLESS - Add Session Viewer to review proxy sessions and logs - You can review your UDP connection with Chute Dashboard macOS application Improves: - Improve configuration edit - Improve local DNS server to avoid DNS pollution - Improve UDP relay Bug Fixes - Fix IPv6 display - Fix DNS server 1.0.5 06/14/2022 New Features - Support local HTTP/Socks5 proxy server - Full IPv6 support - Add `syslib` support for DNS server Improves: - Improve configuration edit - Add Optimus DNS switch - Improve local DNS server Bug Fixes - Fix iOS local proxy server address could stop application to access the network - Fix DNS server 1.0.4 05/30/2022 New Features - Fake IP to avoid DNS cache poisoning - Download configuration file from internet or QR code Bug Fixes - Fix FINAL rule edit issue 1.0.3 07/07/2021 New Features - iPad support - Support for chute:// scheme & x-callback-url - Dashboard action - iPhone 12 support - Rebuild DNS server for better performance & stability Bug Fixes - Improve TCP stability - Rebuild TCP lock to improve performance - Improve UDP stability - Configuration crash fix 1.0.2 03/13/2021 Fix WeChat Share Extension failure Fix IPv6 Support Update HTTP complete check 1.0.1 11/24/2020 1.0.0 11/11/2020

---

Previous Versions

Here you can find the changelog of Chute - Proxy Network Toolbox since it was posted on our website on 2023-03-05 10:12:54. The latest version is 1.2.2 and it was updated on 2026-10-12 20:20:10. See below the changes in each version.

---

Related Apps

Here you can find apps that are similar with Chute - Proxy Network Toolbox.

---

Disclaimer