Chute

Chute is a rule-based proxy and VPN client for people who want to control exactly how their device routes traffic — developers, network engineers, and anyone running their own proxy servers.

Chute does not provide, sell, or bundle proxy servers, node lists, or subscriptions. You bring your own configuration; Chute runs it and shows you exactly what it is doing.

CONFIGURATION, DONE PROPERLY
• Structured editor for every section: policies, policy groups, rules, logical rules, DNS, Local DNS Mapping, proxy/rule providers, modules, header/body rewrites, Mock Response, scripts, MitM and CA, plus advanced options
• Plain-text editor with syntax highlighting and live validation against the parser the tunnel uses
• Import from a file, URL, QR code, Wi-Fi upload or a remote repository
• Clash and sing-box configurations are converted automatically on import
• Subscriptions open read-only; one tap on Make Local to edit

ROUTING THAT MATCHES YOUR RULES
• Rule, Direct and Global outbound modes, switchable while connected
• 30 rule types: domain, suffix, keyword, wildcard, regex, IP-CIDR, GEOIP, IP-ASN, subnet (Wi-Fi SSID/BSSID, router), source IP, process name/path/regex, destination and source port, inbound port/type/user/name, user agent, URL regex, protocol, hostname type, rule sets, domain sets, script, final, and logical AND / OR / NOT to combine conditions
• Policy groups: select, URL-test, fallback, load balance (round robin, consistent hashing, sticky sessions), SSID and external
• Per-app routing: pick which apps go through the tunnel and which bypass it

PROTOCOLS
Shadowsocks, Shadowsocks 2022, ShadowsocksR, VMess, VLESS, Trojan, Hysteria2, TUIC, AnyTLS, ShadowTLS, SSH, SOCKS5, HTTP and HTTPS, WireGuard, AmneziaWG, MASQUE and Tailscale, alongside direct and reject outbounds.

SEE WHAT IS ACTUALLY HAPPENING
• Runtime dashboard: live throughput chart, per-policy traffic, TCP/UDP tunnel lists showing host, process, policy and the rule that matched
• DNS view: the system hosts file, Local DNS Mapping, runtime cache and Fake IP mappings, with purge
• Session history and runtime logs you can filter and export
• Network, proxy and route-table diagnostics, plus reachability tests
• Pro: traffic recorder and HTTPS inspection for the hostnames you configure, using your own CA certificate, with HAR and CSV export — for debugging your own traffic

BUILT FOR ANDROID
• Quick Settings tile, launcher shortcuts and a home screen widget for the policy group you choose
• Always-on VPN, start on boot, auto-pause on cellular and resume on Wi-Fi
• Automation: start, stop and toggle broadcasts for Tasker, adb or any automation app; chute:// links import a configuration
• Bio Pass: biometric or device-credential lock for opening the app and editing configurations
• HTTP control API and Web Console, on when you need them
• Guided setup wizard, in-app manual and eight interface languages
• Material design, light and dark

PRIVACY
• Firebase Analytics and Crashlytics; no advertising SDKs
• Configurations, logs and session history stay in the app's private storage and are excluded from backup; they leave the device only when you export a diagnostics bundle
• Chute does not log, inspect or retain the contents of your tunneled traffic
• Traffic to our license service is HTTPS with certificate pinning

FREE AND PRO
Free covers one local configuration, with the complete editor, tunnel, per-app routing, dashboards and diagnostics. A one-time in-app purchase unlocks Chute Pro: more than one local configuration, adding one through any channel without replacing your current one, switching while the tunnel runs, configuration copies, local HTTP and SOCKS5 proxy server control, HTTPS inspection (MitM) and the traffic recorder. An existing Chute license can be restored with your license mail and key.

Chute is also available for macOS.

Powered by KLNEKit. Produced by R³ Studio.
Support: [email protected] · Privacy policy: https://chute.life/privacy.html