New Features

· Quick action buttons on the home screen for adding subscriptions, scanning proxies, importing configs, and more
· Dedicated proxy DNS resolver with support for encrypted DNS (DoH/DoT/DoQ/H3), replacing plaintext UDP DNS for proxy connections
· URL rewrite reject types now return HTTP responses directly without extra redirects
· Import full Surge configuration files and Loon configs & plugins
· Import SOCKS5, HTTP, and HTTPS proxy nodes via URL
· VLESS/VMess now supports custom strings as user IDs
· SSH support in the scripting engine
· HTTP request scripts can now dynamically switch proxy policies
· New option to skip TLS verification for DNS, enabling self-signed certificate DNS servers
· "Show Hidden" toggle on the policy group page
· Multiplexing support for multiple streams over a single AnyTLS session

Improvements

· Surge module parser rewritten — 3x faster, malformed lines are silently skipped instead of breaking the entire file
· More specific error messages on connection failures
· Success/failure feedback after remote resource updates
· Minimum intervals enforced for policy group speed tests (60s) and resource updates (10min) to prevent excessive requests
· Improved QUIC connection interception

Bug Fixes

· Fixed AnyTLS memory leak and UDP forwarding only succeeding on the first attempt
· Fixed REJECT-DROP policy potentially preventing the app from launching
· Fixed deleted nodes still referenced in conditional policy groups
· Fixed stale DNS connections lingering after network changes
· Fixed potential crash when node list changes after a resource update
· Fixed policy group latency tests not reflecting the actual routing path
· Fixed module environment variables not being passed to scripts correctly
· Fixed IPv6 address parsing failure due to missing brackets
· Fixed TCP Fast Open settings being ignored when importing VMess/VLESS via subscriptions
· Various UI interaction and widget layout fixes

New Features

· Introduced a brand-new Script API for more powerful automation and extensibility
· Added support for custom widgets. Create Home Screen and Lock Screen widgets using scripts + Widget DSL
· Widget DSL preview is now available in the script editor
· Added DNS rule pre-matching
· Added new REJECT-NO-DROP policy
· DNS queries hitting the REJECT policy can now return an empty response to block domain resolution
· Added support for URL Rewrite Header mode
· Modules can now declare environment variable types and options, and the editor will automatically generate the corresponding UI controls
· Running scripts directly from the script list now passes script environment variables

Improvements

· Reduced log levels for some events to prevent excessive log file growth

Bug Fixes

· Fixed an issue where non-Pro users could get stuck when opening the Appearance settings page
· Fixed an issue where a proxy chain could fail if a hop was resolved as DIRECT
· Fixed an issue where timeout / TCP connection failures did not immediately trigger failover
· Fixed delayed script execution caused by system throttling of JS timers
· Fixed a crash caused by out-of-bounds access in domain rule set matching under certain conditions
· Fixed an issue where icon grids on the icon set page were not displayed as squares
· Fixed an issue where rule cache was not cleared after network changes, causing SSID rules to match the previous network
· Fixed an issue where child rules in an OR rule group could be incorrectly skipped
· Fixed an issue when editing incorrect entries during search
· Fixed occasional crashes when editing forms

New Features

· Added support for the anytls protocol
· Surge proxy configuration parser now supports HTTPS, TUIC, and anytls protocols
· VLESS Vision now supports XUDP UDP relay based on MUX
· Added DoH3 (DNS over HTTP/3) support for DNS
· Hy2 now supports the Brutal congestion control algorithm
· JS scripting enhancements: support specifying named policies via the policy parameter, support inline proxy descriptors via policy-descriptor, and added an insecure parameter to skip TLS verification
· Support batch closing policy connections on the Policy Group management page
· Support closing specific connections from the connection list
· Added new DNS forwarding rule match types: Domain, Domain Keyword, Domain Suffix, SSID, BSSID, Cellular
· Added a risk confirmation prompt when enabling Exclude Route 0.0.0.0/31

Improvements

· Refactored the JS engine runtime to improve overall stability and performance
· Optimized domain resolution performance
· Improved proxy UDP throughput
· Optimized proxy protocol encryption stack performance
· Significantly improved WireGuard upload and download speeds
· Optimized policy group failover logic, fixed overly aggressive switching, and added policy change notifications
· Split DNS upstream logic: system now represents the DNS servers configured by the current system or network interface, and bootstrap represents bootstrap resolvers. They are no longer aliases and are handled independently
· Renamed DNS fields: wildcard to domain_wildcard, regex to domain_regex

Bug Fixes

· Fixed abnormal behavior in SOCKS5 UDP relay
· Fixed excessive WireGuard timer error log output
· Fixed connection domain filtering match failures
· Fixed occasional disappearance of list separators in the UI
· Fixed extremely slow upload and download speeds in Hy2 and TUIC

New Features

· Added support for the WireGuard protocol
· Introduced Conditional Policy Groups, allowing automatic selection of sub-policies based on network conditions
· The selected state of policy groups can now be saved with the configuration, preventing loss when switching configurations
· Policy groups now support show/hide hints
· In the policy page, long-press editing is supported when a sub-policy of a policy group is itself a policy group
· The connection list now supports displaying the proxy chain
· The IP list in connection details is now displayed as a half-screen popup
· The DNS cache list now shows the Upstream source, expands the search scope, and displays TTL on the details page
· Resource updates now support direct access to resources that previously failed to update
· Added an independent script log
· Added support for custom themes

Improvements

· Optimized kernel memory usage
· Optimized download speed and memory usage for QUIC proxy protocols (Hysteria2, TUIC)
· Improved connection performance for QUIC proxy protocols
· Introduced a brand-new user-space network stack (about 30% faster than the optimized lwIP in download scenarios, and about 95% faster · than before optimization)
· Improved form animation effects
· Optional form fields are now consistently displayed as “Field Name (Optional)”
· TCP connections now disconnect only after both directions are closed, instead of disconnecting on one-way closure
· Updated the User-Agent format of Egern
· Wildcard matching is now case-insensitive

Bug Fixes

· Fixed a potential crash when scrolling the title menu on the Resources page
· Fixed an issue where configuration state was not initialized immediately when opening the Settings page
· Fixed missing blockQuic fields in TUIC and Hysteria2 protocols
· Fixed an issue where IP addresses were not displayed in connection details when connections were established via a proxy
· Fixed incorrect ICMP Ping error responses
· Fixed an issue where IPv6 proxy servers could not be used when IPv6 was disabled
· Fixed matching logic issues when URL rules did not match the IP address of the connection

New Features

· Added support for the HTTPS proxy protocol
· Added block_quic parameter support for proxies and policy groups
· Added support for importing proxy servers from photos

Improvements

· Changed latency testing for policy groups to recursive latency testing
· Improved the rule preview UI on the Analysis page
· Changed the DNS display on the Analysis page from SYSTEM to Bootstrap
· DNS resolution now records the fastest IP from TCP concurrent connections and prioritizes it in subsequent requests
· Filtered out proxy chains that may form loops
· Added compatibility with older SSL handshake methods on the server side

Bug Fixes

· Fixed an issue where certificates were re-encoded on every save even when unchanged
· Fixed an issue where updated resources did not take effect immediately
· Fixed an issue causing incorrect parsing of IPv6 nodes
· Fixed an issue where DIRECT could not perform latency testing in nested policy groups

New Features

· Added support for scanning QR codes to add proxies via long-pressing the app icon
· Added option to start the Egern engine by long-pressing the app icon
· Added support for mapping domain names to specific IP addresses
· Manual update for remote configurations is now supported
· Added URL Scheme to add subscriptions directly to a policy group: `egern:/subscriptions/new?url=${url}`

Improvements

· Improved search performance in the connection list
· Added support for `skip-proxy` and `always-real-ip` rules in Surge modules

Bug Fixes

· Fixed an issue where quoted content in module rules was not properly escaped
· Fixed a crash caused by Zone ID in IPv6 addresses when parsing DNS servers
· Fixed an issue where all connections were terminated if concurrent connections to the same domain failed
· Fixed potential slow upload speeds when using virtual interfaces
· Fixed a parsing issue with certain Surge modules
· Resolved a compatibility issue with the panel interface

New Features

· Added support for creating proxy servers in the Policy Management page
· Module list now supports previewing detailed module information
· Added support for disabling DNS rules
· Icon set URLs can now be saved to a local file; when iCloud is enabled, the URL will be preserved even if Egern is uninstalled

Improvements

· Policy Management page now displays the resolved IP address when a proxy server is defined using a domain name
· Added the ability to edit and share proxy servers from the Policy Management page
· When running scripts or performing a latency test without an active VPN, a prompt will ask whether to start the VPN

Bug Fixes

· Fixed an issue where the default configuration did not take effect on first launch

New Features

· Added support for cellular network policies and rules.
· Added Universal Link support. now you can replace URL Scheme links directly: egern:/modules/new?name=name&url=url → https://egernapp.com/modules/new?name=name&url=url.
· Proxy servers can now generate and share links.
· Policy groups, rules, scripts, modules, and DNS rules can all be updated directly from the list view.
· Local proxy now supports Personal Hotspot sharing.
· egern:/profiles/new now supports an optional name parameter.
· The TUIC proxy protocol now automatically closes idle connections to save resources.
· Connection details page now supports long-press to copy text.

Improvements

· Connection search is now case-insensitive.
· Performance optimizations across multiple proxy protocols.
· Improved compatibility in proxy server address resolution.
· Enhanced QUIC proxy behavior — concurrent connections to the same server will now merge into a single connection if the initial connection isn’t established yet, reducing resource usage.

Bug Fixes

· Fixed icon set UI display issues.
· Fixed a crash on app launch.
· Fixed an issue where modifying the local HTTP proxy port while VPN was active could cause the VPN to disconnect.
· Fixed policy group selection state occasionally being lost.
· Fixed display issues in the logical rules interface.
· Fixed TLS compatibility issues when using proxies.
· Fixed abnormal memory usage in the QUIC proxy protocol.

New Features

· Added support for the STUN protocol in proxy rules

Improvements

· Optimized in-app text descriptions
· Adjusted and refined certain UI elements

New Features

· Added support for Traditional Chinese, Portuguese, Japanese, and Russian interface languages
· Policy group icons can now be selected from iCloud local files
· DNS now supports local rule sets
· Hosts mapping supports UDP proxy requests
· When multiple addresses are defined in Hosts mapping, proxy requests can be initiated concurrently, selecting the fastest response

Improvements

· Removed the “swipe to the end to delete” operation for list items
· Optimized performance when updating subscriptions in policy groups
· When downloading configurations, the filename in Content-Disposition is now prioritized
· Resource updates now support remote Body content for Map Local
· Module resources can now be reused to avoid repeated downloads and updates

Bug Fixes

· Fixed an issue where UDP connection rules failed to correctly match QUIC SNI
· Fixed a problem where proxy connection timeouts did not trigger failover
· Fixed an occasional issue where TCP connections did not display DNS timeout errors
· Fixed a QUIC protocol sniffing failure issue
· Fixed an issue where the Hosts mapping feature did not work on the first configuration load
· Script execution will now terminate immediately when an exception occurs, instead of waiting for a timeout

New Features

· The Hosts feature now supports using IP addresses as keys.
· All request URLs are now processed through the Hosts feature.

Improvements

· VPN proxy subscription updates will now automatically validate content integrity.

Bug Fixes

· Fixed a potential issue in the VLESS Vision protocol.
· Fixed occasional connection failures in the Hy2 protocol.

New Features

· Supports automatic upgrade of REJECT requests to REJECT-DROP when encountering duplicate requests.
· Added caching functionality for remote Map Local message bodies.
· VLESS protocol now supports XTLS-RPRX-VISION REALITY.
· Configuration now supports automatic update functionality.

Improvements

· Optimized DNS Over TLS connection reuse to improve connection efficiency.

Bug Fixes

· Fixed memory leak issue with DNS Over QUIC.
· Fixed crash issue caused by an excessively large number of delay test results.

New Features

· The app is now free to download! Unlock all Pro features with a one-time purchase.

Bug Fixes

· Fixed an issue where the SNI field was missing when editing VMess protocol with HTTP/2 transport.
· Fixed missing ASN and region information on the UDP connection details page.
· Resolved connection failures caused by Hy2 server MTU being set too low.
· Fixed incorrect network interface detection in certain scenarios that prevented connectivity.
· Fixed connection issues when using Shadowsocks 2022 with the simple-obfs plugin.
· Resolved connection failures when using Hy2 protocol with obfs enabled.

New Features

· Added support for filtering failed connections.
· Detailed error messages are now displayed when a connection fails.
· A new script key-value editor has been added to the settings page.
· When adding rule sets, policy group subscriptions, or modules, if YAML parsing fails, the specific error line and column will be indicated.
· When ShadowTLS is enabled for Shadowsocks, UDP port configuration is now supported.
· The Hy2 protocol will now automatically reconnect on connection failure.
· The current outbound mode is now displayed at the top of the Analytics page (only shown when the mode is not "Rule").

Improvements

· HTTP connections will now display request and response headers even if HTTP packet capture is not enabled.
· Improved connection parsing performance.
· Lists in tool subpages now automatically refresh after configuration changes.
· Deleting a policy will now also remove any dependent items.
· Further optimized the upload performance of the Egern virtual interface — upload speed has improved by approximately 60% compared to version 2.3.0.

Bug Fixes

· Fixed an issue where the MaxMind database could not update automatically.
· Fixed behavior errors caused by rule matching anomalies.
· Fixed a UI update issue when toggling global packet capture and MITM states in the connection log.
· Fixed inaccurate traffic statistics for policies.
· Fixed UI display issues on the connection filtering page.
· Fixed a crash issue that could cause the application to unexpectedly exit.

Improvements

· Optimized virtual network interface performance: download speed increased by approximately 50%, upload speed by about 28%
· Improved loading speed of the analytics page
· Initial adaptation for iPad layout

Bug Fixes

· Fixed an issue where the bottom tab bar displayed incorrectly
· Fixed a bug that could cause script execution to fail
· Fixed occasional data display errors on the analytics page
· Fixed app stuttering when processing large amounts of data on the analytics page
· Fixed an issue where `REJECT-DROP` rules in policy groups were not effective
· Fixed a parsing failure issue for certain Shadowsocks URIs

New Features

· Support for directly adding rules on the connection page.
· The connection details page now displays the modules used by each rule.
· Added support for the REJECT-DROP policy.

Improvements

· Enhanced failover capabilities for policy groups, improving overall stability.
· Load balancing functionality now automatically detects the availability of proxy nodes.
· Improved UI performance and image loading speed on the policy management page, including automatic image caching.
· Optimized log display for manual script executions.
· Policies not included in any rules will no longer automatically perform latency tests, avoiding unnecessary operations.
· Proxy node address resolution now adheres to hosts configurations.
· Duplicate names for policy groups, proxy servers, scripts, and module URLs are now disallowed to prevent configuration conflicts.

Bug Fixes

· Fixed startup failure issues on iOS 26.
· Corrected display errors for policy group selection paths under specific conditions.
· Resolved inaccuracies in latency test results.
· Addressed MITM failures under lower TLS versions.
· Fixed SNI parsing failures with certain QUIC versions.
· Resolved compilation failures due to excessively long filenames when compiling rulesets.
· Fixed the issue where error messages were not properly displayed when configuration writes failed.

New Features

· Support enabling Global Sniffing and Global MITM directly from the connection list
· Policy management now supports both list and grid views
· Long press on scripts to run or edit directly
· Support adjusting the size of policy icons
· Added confirmation prompt before deleting configurations

Improvements

· Automatically download and validate URL format when saving policy groups, modules, scripts, and rule sets
· Optimized the way default proxy and subscription configurations are added
· Improved sensitivity of the slider in the network speed UI
· Script notifications now have sound enabled by default

Bug Fixes

· Fixed an issue where scripts could fail to execute

New Features

· Improved notification API for script functionality
· IP information is now displayed even for untested policies
· YAML content can now be viewed directly in the module list
· Added a visual editor for module parameters

Improvements

· Automatically adds .yaml suffix when renaming files in configuration management to prevent format errors

Bug Fixes

· Fixed an issue with template parameter parsing
· Fixed a crash that could occur when running scripts

New Features

· Completely redesigned UI using UIKit, replacing the previous SwiftUI-based implementation
· Added support for displaying sub-policies in Policy Management
· Subscription settings for policy groups now support disabling individual items, including URLs, Rewrite, Script, MITM hosts, and HTTP Sniffing hosts
· Unlimited rule set size is now supported for more complex configurations
· Policy Management supports expanding and collapsing all sub-policies with one click
· The expanded/collapsed state in Policy Management is now preserved
· Added search functionality to tool subpages and analysis subpages
· Support for managing multiple configuration files

Improvements

· Significant performance enhancements and memory usage optimization
· Domain queries now support returning real IP addresses
· Setting the update interval to -1 will now disable resource auto-updates

Bug Fixes

· Fixed occasional failures in script execution
· Fixed an issue where the network could become unavailable after switching connections
· Fixed an issue where scheduled scripts would run multiple times
· Fixed occasional incorrect responses from DNS over TLS
· Fixed an issue where using `*` with hijacked DNS servers could block normal UDP traffic
· Fixed abnormal network behavior when not using the "VIF only" mode
· Fixed domain name resolution issues after MITM processing
· Fixed rule parsing errors for domains containing hyphens (`-`)

New Features

· HTTP proxy now supports custom headers
· Added support for Shadow TLS protocol

Improvements

· Enhanced compatibility and optimized transmission performance for Vmess protocol
· Improved script execution efficiency
· Optimized user interface in some areas

Bug Fixes

· Fixed issue where hosts domain mapping didn’t take effect for certain domains
· Fixed URI parsing error in Trojan protocol
· Resolved connection failure issue with TUIC protocol on certain servers
· Fixed issue where rule sets failed to resolve domain names in specific scenarios
· Fixed occasional connection sniffing failures in VIF mode

New Features:

· Support for proxy rules based on HTTP User Agent headers.
· Support for parsing Surge logic rules.

Improvements:

· Error lines and columns are now highlighted when editing configurations.
· Improved regex matching performance for policy group filters.
· Updated configuration parameters for proxies.

Bug Fixes:

· Fixed the issue of panel scripts and network event scripts not updating automatically.

New Features

· Supports logic rules, port rules, and network protocol rules.
· Supports TUIC protocol
· Supports panel functionality
· Supports Shadowsocks 2022 protocol

Bug Fixes

New Features

· Added support for selecting policy group icons from an icon set.
· Added port-hopping functionality for the Hysteria2 protocol.
· Virtual network interfaces now support ICMP.

Improvements

· The policy page now supports multi-column display.
· Optimized the app package size.
· Adjusted the layout and interaction logic of the resource update page.

Bug Fixes

· Fixed an issue where invalid JSON caused a crash when executing JQ.
· Fixed a connection failure when using the Shadowsocks rc4-md5 encryption method.
· Fixed an issue where Hysteria2 became unable to connect after a network switch.
· Fixed errors caused by format incompatibilities when parsing Surge proxies.
· Fixed a memory overflow issue during DNS chart rendering.
· Fixed connection anomalies triggered by UDP in specific scenarios.

New Features

· Support for launching the Egern engine directly from the iOS 18 Control Center.
· Added support for URL Scheme.
· Introduced certificate trust guidance.
· Support for proxy chaining.

Improvements

· Optimized the hostname exclusion feature for Mitm.
· Improved the mechanism for updating local DNS servers after network changes.
· Automatic synchronization of the Geolite database after updating the Egern version.
· Enhanced the UI for resource updates.

Bug Fixes

· Fixed the issue where configuration changes did not take effect immediately.
· Resolved UI anomalies on the policy data statistics page.
· Fixed incorrect file suffixes when exporting configurations.
· Addressed rule matching errors caused by rule caching.
· Fixed an issue where the hy2 protocol sent empty UDP packets, causing connection drops.
· Ensured that scheduled task scripts continue running without interruption after configuration updates.