透明代理与 TUNTransparent Proxy + TUN
按应用连接流或整个虚拟网络接口接管流量,支持规则、全局与直连路由。Route app flows or a complete virtual interface with Rule, Global, and Direct modes.
原生 Swift、透明代理与 TUN,以及面向现代协议的高性能数据平面。简洁、私密,并且始终由你掌控。Native Swift, Transparent Proxy and TUN, backed by a high-performance data plane for modern protocols. Private, focused, and always under your control.
官网中的产品画面直接来自当前 macOS 构建。应用完整支持简体中文和英文,并适配浅色、深色外观;窗口、侧边栏、控件和状态反馈均使用原生 SwiftUI 与 AppKit 实现。Every product image on this site comes directly from the current macOS build. The app supports Simplified Chinese and English, light and dark appearances, with native SwiftUI and AppKit windows, sidebars, controls, and state feedback.
界面截图使用测试数据演示连接状态,不包含真实订阅、服务器地址、密钥或个人信息。Screenshots use test data to demonstrate product states and contain no real subscriptions, server addresses, keys, or personal information.
界面、生命周期、设置和网络扩展均使用 Apple 平台技术构建;协议核心被严格限制在数据平面内。The interface, lifecycle, settings, and Network Extensions use Apple platform technologies. The protocol core remains strictly confined to the data plane.
按应用连接流或整个虚拟网络接口接管流量,支持规则、全局与直连路由。Route app flows or a complete virtual interface with Rule, Global, and Direct modes.
配置目录使用 AES-GCM 加密,密钥保存在数据保护钥匙串;订阅和导入均经过边界校验。AES-GCM profile storage backed by the Data Protection Keychain, with bounded subscription and import validation.
Developer ID 签名和 Apple 公证,更新清单使用 Ed25519 签名,DMG 下载后再次验证 SHA-256。Developer ID signing and Apple notarization, Ed25519-signed manifests, and SHA-256 verification for downloaded DMGs.
支持 URL 订阅、本地配置与原生节点编辑。导入过程逐条校验,保留可用节点并给出结构化错误摘要。Import URL subscriptions and local configs, or edit native nodes. Entries are validated individually so usable nodes survive with a structured error summary.
遵循 macOS 导航、键盘焦点、减少动态效果和系统外观约定;状态、错误和恢复操作始终出现在明确位置。Follows macOS navigation, keyboard focus, Reduce Motion, and appearance conventions, with status, errors, and recovery actions kept in predictable places.
导入、延迟测试和连接任务具有大小、并发与超时限制;协议核心未就绪时不会把界面伪装成已连接。Imports, latency checks, and connection work are bounded by size, concurrency, and timeouts. The UI never claims a connection before the protocol core is ready.
原生节点编辑与受限的 Clash 风格导入适配器,让迁移简单,同时不依赖其他客户端的配置格式。Native node editing plus a bounded Clash-style import adapter makes migration straightforward without making another client's format the product contract.
此构建已经 Developer ID 签名、Apple 公证和装订,面向真实安装反馈;它尚不是生产稳定版。This build is Developer ID signed, Apple notarized, and stapled for real installation feedback. It is not yet the production-stable release.