Chute - Network Toolbox

Advance Network Toolbox

Free · In-App Purchases

One switch and the whole device runs behind rules you wrote: 37 rule types, 15 protocols, MITM capture, DoH3/DoQ DNS, a JavaScript engine. Hot reload, nothing reconnects. Chute turns your iPhone and iPad into a complete network workstation: a rule-based proxy client, an HTTPS debugging proxy, and a full DNS stack — all running on a network engine written from scratch for Apple platforms. Switch it on once and the entire device works behind the proxy. Every connection your apps make can be inspected, routed, rewritten, or blocked by rules you wrote. SYSTEM-WIDE PROXY • Transparent proxy on a custom TCP/IP stack — no per-app setup • Local HTTP and SOCKS5 servers for other devices on your network • Hot configuration reload — edit rules without dropping a single connection • On-demand activation and per-Wi-Fi behavior 37 RULE TYPES • DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD, DOMAIN-WILDCARD, DOMAIN-REGEX • IP-CIDR, IP-CIDR6, GEOIP, IP-ASN, SUBNET, SRC-IP, DEST-PORT, SRC-PORT • PROCESS-NAME, PROCESS-PATH, USER-AGENT, URL-REGEX, PROTOCOL, SSID, BSSID • AND / OR / NOT logical operators for composite conditions • RULE-SET and DOMAIN-SET with remote subscriptions and auto-update • SCRIPT rules for the cases a rule alone cannot express TRAFFIC INSPECTION • Capture HTTP, HTTPS, and DNS requests live, with full headers and bodies • MITM decryption scoped to exactly the hosts and paths you choose • URL rewrite, header rewrite, and JSONPath body rewrite • Local mock responses for offline work and edge-case testing • Real-time throughput charts, per-connection detail, and traffic accounting MODERN DNS • DoH, DoH3, DoQ, DoT, and plain DNS — a different resolver per domain if you want • FakeDNS for fast, leak-free routing decisions • EDNS Client Subnet, negative caching, custom hosts, and full query logs 15 PROXY PROTOCOLS HTTP, HTTPS, SOCKS5, SOCKS5 over TLS, Shadowsocks, ShadowsocksR, Shadowsocks 2022, Trojan, VMess, VLESS with XTLS Vision and REALITY, TUIC, Hysteria2, AnyTLS, WireGuard, and SSH tunneling. POLICY GROUPS • URL-Test — always ride the lowest-latency node • Fallback — automatic failover the moment a node degrades • Load Balance — round-robin, consistent hash, or sticky sessions • SSID — switch policy automatically by Wi-Fi network • Select — take the wheel manually whenever you want it SCRIPTING AND MODULES • JavaScript engine for rewriting requests, responses, and scheduled tasks • A persistent store, HTTP client, and notification API ava • Module system that packages rules, rewrites, and scripts into one installable file BUILT FOR DAILY USE • Home Screen widgets and a Notification Center toggle • Face ID / Touch ID lock • Picture in Picture traffic monitor • Import your existing configurations and subscriptions Chute does not operate proxy servers and does not provide network access on its own — you bring your own server or a service you already use. Traffic and logs stay on your device. Chute collects no browsing data and sells nothing to anyone.

  • This app has not received enough ratings or reviews to display an overview.

New Features: Added XHTTP transport to the policy editor — enable toggle, mode (auto, packet-up, stream-up, stream-one), path, and host — for Trojan, VMess, and VLESS Added AEGIS-128L and AEGIS-256 Shadowsocks encryption methods Added ECH (Encrypted Client Hello) settings for TLS policies — enable toggle, pinned ECH config (ech-config), and cover-name override (ech-public-name) Added client fingerprint (uTLS) per policy, plus a profile-wide default Added AmneziaWG protocol support, including a parameter editor for this WireGuard variant with traffic obfuscation Added Clash and sing-box profile import from subscription URLs, files, and Wi-Fi uploads Added a configuration error report page with copyable contents to replace alerts that block interaction Added X25519MLKEM768 post-quantum hybrid key exchange for TLS 1.3 Improves: When saving, the policy editor now preserves existing options that are not available for editing (ECH, ALPN, certificate pinning, test-url, underlying-proxy, udp-relay) Bug Fixes: Fixed a tunnel crash caused by malformed IP-CIDR rules Fixed the SSH idle-timeout setting being written under the wrong key and discarded on save Fixed onboarding rules placing the policy name after no-resolve, which could break IP-based rules Various stability and performance improvements

The developer, S. Smart Rabbit LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Linked to You

    The following data may be collected and linked to your identity:

    • Identifiers
  • Data Not Linked to You

    The following data may be collected but it is not linked to your identity:

    • User Content
    • Diagnostics

Privacy practices may vary based, for example, on the features you use or your age. Learn More

The developer has not yet indicated which accessibility features this app supports. Learn More

Provider
  • S. Smart Rabbit LLC
Size
  • 59.3 MB
Category
  • Utilities
Compatibility
Requires iOS 12.0 or later.
  • iPhone
    Requires iOS 12.0 or later.
  • iPad
    Requires iPadOS 12.0 or later.
  • iPod touch
    Requires iOS 12.0 or later.
Languages
  • English
Age Rating
4+
In-App Purchases
Yes
Copyright
  • © 2019-2026 S. Smart Rabbit LLC