WireRules

Powerful deep packet inspection with an intuitive interface. See what's happening and take control.

Deep Packet Inspection
Inspect TLS, QUIC, HTTP, and DNS traffic in real-time. Extract hostnames from encrypted connections, including IETF QUIC and Google gQUIC.

Smart Blocking
Block domains, IPs, and ports with flexible rules. Wildcard patterns, CIDR ranges, and per-app filtering. Hot-reload rules without restarting.

Real-Time Monitoring
See every connection as it happens. Track bytes, packets, hostnames, and protocols with live flow events streamed to the UI.

TLS Fingerprinting
JA4 fingerprints identify client applications and detect anomalies. Know exactly what's connecting from your network.

IPv4 & IPv6
Full dual-stack support with IPv6 extension header traversal. Works on modern networks out of the box, no configuration needed.

WireRules uses Android's VpnService to build a local on-device firewall — the only way to filter network traffic without root access. No traffic is sent to any external VPN server. All inspection and filtering happens entirely on your device.