Multiple server modesRun as HTTP, SOCKS5, TPROXY, REDIRECT, or NFQUEUE to support explicit proxy and transparent gateway deployments.
Flexible rule engineMatch domains, ports, IP ranges, headers, and URLs, then rewrite, delete, reject, drop, or redirect traffic.
HTTPS MitMEnable MitM for selected hostnames to rewrite request and response headers or bodies over HTTPS.
OpenWrt readyShips opkg/apk packages, LuCI integration, Clash coexistence examples, and transparent proxy modes.
L3 Rewriting and DesyncRewrite TTL, IPID, TCP Timestamp, and TCP Initial Window, with TCP reordering and injection based Desync support.