Chute - Network Toolbox

One switch and the whole device runs behind rules you wrote: 37 rule types, 15 protocols, MITM capture, DoH3/DoQ DNS, a JavaScript engine. Hot reload, nothing reconnects.

Chute turns your iPhone and iPad into a complete network workstation: a rule-based proxy client, an HTTPS debugging proxy, and a full DNS stack — all running on a network engine written from scratch for Apple platforms.

Switch it on once and the entire device works behind the proxy. Every connection your apps make can be inspected, routed, rewritten, or blocked by rules you wrote.

SYSTEM-WIDE PROXY • Transparent proxy on a custom TCP/IP stack — no per-app setup • Local HTTP and SOCKS5 servers for other devices on your network • Hot configuration reload — edit rules without dropping a single connection • On-demand activation and per-Wi-Fi behavior

37 RULE TYPES • DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD, DOMAIN-WILDCARD, DOMAIN-REGEX • IP-CIDR, IP-CIDR6, GEOIP, IP-ASN, SUBNET, SRC-IP, DEST-PORT, SRC-PORT • PROCESS-NAME, PROCESS-PATH, USER-AGENT, URL-REGEX, PROTOCOL, SSID, BSSID • AND / OR / NOT logical operators for composite conditions • RULE-SET and DOMAIN-SET with remote subscriptions and auto-update • SCRIPT rules for the cases a rule alone cannot express

TRAFFIC INSPECTION • Capture HTTP, HTTPS, and DNS requests live, with full headers and bodies • MITM decryption scoped to exactly the hosts and paths you choose • URL rewrite, header rewrite, and JSONPath body rewrite • Local mock responses for offline work and edge-case testing • Real-time throughput charts, per-connection detail, and traffic accounting

MODERN DNS • DoH, DoH3, DoQ, DoT, and plain DNS — a different resolver per domain if you want • FakeDNS for fast, leak-free routing decisions • EDNS Client Subnet, negative caching, custom hosts, and full query logs

15 PROXY PROTOCOLS HTTP, HTTPS, SOCKS5, SOCKS5 over TLS, Shadowsocks, ShadowsocksR, Shadowsocks 2022, Trojan, VMess, VLESS with XTLS Vision and REALITY, TUIC, Hysteria2, AnyTLS, WireGuard, and SSH tunneling.

POLICY GROUPS • URL-Test — always ride the lowest-latency node • Fallback — automatic failover the moment a node degrades • Load Balance — round-robin, consistent hash, or sticky sessions • SSID — switch policy automatically by Wi-Fi network • Select — take the wheel manually whenever you want it

SCRIPTING AND MODULES • JavaScript engine for rewriting requests, responses, and scheduled tasks • A persistent store, HTTP client, and notification API ava • Module system that packages rules, rewrites, and scripts into one installable file

BUILT FOR DAILY USE • Home Screen widgets and a Notification Center toggle • Face ID / Touch ID lock • Picture in Picture traffic monitor • Import your existing configurations and subscriptions

Chute does not operate proxy servers and does not provide network access on its own — you bring your own server or a service you already use. Traffic and logs stay on your device. Chute collects no browsing data and sells nothing to anyone.