Encrypted DNS
Uses encrypted DNS throughout and rejects plaintext requests
SURGE / IOS / MACOS / RULESET
Aegis
Surge Personal Digital Firewall Ruleset
Personal digital firewall ruleset for Surge on iOS & macOS, built for precise local traffic identification, classification, and user-defined traffic policies.
topics
project.snapshot
$project=Aegis
$platform=Surge / iOS / macOS
$distribution=GitHub / Self-hosted
$mode=Classification / Policy
$integrity=Auditable / Verifiable
CAPABILITY MATRIX
Aegis Design Philosophy
Aegis is a structured ruleset used to identify and present network communication behavior at the application and transport layers.
01Read More
The Design Intent of Aegis
Aegis starts from security anxiety, invisible communication, and missing decision context, then rethinks the role of rulesets in personal device security.
- Re-examine personal device security through abnormal communication and persistent security anxiety
- Present communication sources, protocols, and related services before execution or restriction
- Maintain technical neutrality, information transparency, and independence while preserving user control
- Rules are used for identification, classification, and structured presentation, not for making decisions on behalf of users
02Read More
What Aegis Includes
Aegis is a structured ruleset used to identify and present network communication behavior at the application and transport layers.
- Uses encrypted DNS throughout and rejects plaintext requests
- Focuses on identifying potential communication risks at the application and transport layers
- Provides 10+ preset rule modules for network traffic identification and classification
- Extends domain identification for major global advertising, behavior tracking, and adult-content platforms
03Read More
Why Choose Aegis as the Core of Your Next Personal Digital Firewall
With Aegis, you can build a modern, security-centered personal digital firewall without sacrificing performance or usability.
- Clear rule structure and modular design for auditing, maintenance, and long-term use
- All policies are decided by users; configurations can be reviewed, traced, and supervised
- A public-interest open source security ruleset centered on security, long-term maintenance, and continuous review
Explore the Core Capabilities of Aegis
Aegis focuses on identifying potential communication risks at the application and transport layers, helping users classify traffic accurately and define traffic policies according to their own needs.
Communication Identification
Suitable for policy routing, communication identification, and security-assisted configuration
Security Verification
Project commits use GPG signatures to help verify rule and configuration integrity
Rule Autonomy
All policies are decided by users; configurations can be reviewed, traced, and supervised
How to Use the Aegis Ruleset
Introduces how to import, configure, and update Aegis so you can complete setup and start using it quickly.
Choose the subscription configuration that matches your IPv4 / IPv6 network environment, platform, and language
Download the configuration from a URL in Surge, then replace node parameters after import
Enable GeoIP and optional regional routing as needed while keeping rule mode active
Update according to MAJOR / MINOR / PATCH changes by re-downloading the configuration or refreshing external resources
From subscription import and module enablement to version updates, follow the steps to complete the configuration.
LATEST WRITINGS
Latest Articles
This section collects Aegis project articles and technical documents, covering design principles, module configuration notes, and practical explanations related to Surge usage.
Scenarios
Aegis Adaptation for Cloudflare Usage Scenarios
This article introduces how Aegis adapts to Cloudflare-related communication environments and its practical value in Cloudflare usage scenarios, helping Surge users understand complex communication behavior and independently build controllable traffic policies on a transparent and auditable basis.
Scenarios
Aegis Adaptation for OpenAI Usage Scenarios
This article introduces how Aegis adapts to OpenAI-related communication environments and its practical value in OpenAI usage scenarios, helping Surge users understand complex communication behavior and independently build controllable traffic policies on a transparent and auditable basis.
Scenarios
Aegis Adaptation for Microsoft Usage Scenarios
This article introduces how Aegis adapts to Microsoft-related communication environments and its practical value in Microsoft usage scenarios, helping Surge users understand complex communication behavior and independently build controllable traffic policies on a transparent and auditable basis.
Scenarios
Aegis Adaptation for Apple Usage Scenarios
This article introduces how Aegis adapts to Apple-related communication environments and its practical value in Apple usage scenarios, helping Surge users understand complex communication behavior and independently build controllable traffic policies on a transparent and auditable basis.