Encrypted DNS
Uses encrypted DNS throughout and rejects plaintext requests
SURGE / IOS / MACOS / RULESET
Aegis
Surge Personal Digital Firewall Ruleset
Personal digital firewall ruleset for Surge on iOS & macOS, built for precise local traffic identification, classification, and user-defined traffic policies.
topics
project.snapshot
$project=Aegis
$platform=Surge / iOS / macOS
$distribution=GitHub / Self-hosted
$mode=Classification / Policy
$integrity=Auditable / Verifiable
CAPABILITY MATRIX
Aegis Design Philosophy
Aegis is a structured ruleset used to identify and present network communication behavior at the application and transport layers.
01Read More
The Design Intent of Aegis
Aegis starts from security anxiety, invisible communication, and missing decision context, then rethinks the role of rulesets in personal device security.
- Re-examine personal device security through abnormal communication and persistent security anxiety
- Present communication sources, protocols, and related services before execution or restriction
- Maintain technical neutrality, information transparency, and independence while preserving user control
- Rules are used for identification, classification, and structured presentation, not for making decisions on behalf of users
02Read More
What Aegis Includes
Aegis is a structured ruleset used to identify and present network communication behavior at the application and transport layers.
- Uses encrypted DNS throughout and rejects plaintext requests
- Focuses on identifying potential communication risks at the application and transport layers
- Provides 10+ preset rule modules for network traffic identification and classification
- Extends domain identification for major global advertising, behavior tracking, and adult-content platforms
03Read More
Why Choose Aegis as the Core of Your Next Personal Digital Firewall
With Aegis, you can build a modern, security-centered personal digital firewall without sacrificing performance or usability.
- Clear rule structure and modular design for auditing, maintenance, and long-term use
- All policies are decided by users; configurations can be reviewed, traced, and supervised
- A public-interest open source security ruleset centered on security, long-term maintenance, and continuous review
Explore the Core Capabilities of Aegis
Aegis focuses on identifying potential communication risks at the application and transport layers, helping users classify traffic accurately and define traffic policies according to their own needs.
Communication Identification
Suitable for policy routing, communication identification, and security-assisted configuration
Security Verification
Project commits use GPG signatures to help verify rule and configuration integrity
Rule Autonomy
All policies are decided by users; configurations can be reviewed, traced, and supervised
How to Use the Aegis Ruleset
Introduces how to import, configure, and update Aegis so you can complete setup and start using it quickly.
Choose the subscription configuration that matches your IPv4 / IPv6 network environment, platform, and language
Download the configuration from a URL in Surge, then replace node parameters after import
Enable GeoIP and optional regional routing as needed while keeping rule mode active
Update according to MAJOR / MINOR / PATCH changes by re-downloading the configuration or refreshing external resources
From subscription import and module enablement to version updates, follow the steps to complete the configuration.
LATEST WRITINGS
Latest Articles
This section collects Aegis project articles and technical documents, covering design principles, module configuration notes, and practical explanations related to Surge usage.
Concepts
Core Reasons to Choose Aegis
This article systematically introduces the core reasons to choose Aegis, helping Surge users understand its rule structure, usage boundaries, and design thinking, so they can independently build network traffic policies on a transparent and auditable basis.
Concepts
Explore the Core Capabilities of Aegis
This article systematically introduces the core capabilities of the Aegis ruleset, helping Surge users understand its rule structure, usage boundaries, and design thinking, so they can independently build network traffic policies on a transparent and auditable basis.
Concepts
What Is Included in Aegis
This article systematically introduces the core content and functional modules included in the Aegis ruleset, helping Surge users understand its rule structure, usage boundaries, and design thinking, so they can independently build network traffic policies on a transparent and auditable basis.
Usage
How to Use the Aegis Ruleset
This article explains how to obtain, subscribe to, and correctly use the Aegis ruleset, helping Surge users understand network communication behavior and independently build security policies on a transparent and auditable basis.