wtf is opensurge-for-mac?

OpenSurge for Mac turns a Mac into a whole home network gateway, similar in style to the Surge proxy app, that can route traffic differently for each device on your home network. It is aimed at people who want more control than a typical router over how their devices reach the internet, letting some devices go through a proxy or filtering setup while everything else stays untouched. There are three ways to use it. In the simplest mode, your main router keeps handling DHCP as normal, and you manually point specific devices, like your phone or a game console, to the Mac by giving them a fixed address and setting the Mac as their gateway. A more advanced mode has the Mac take over DHCP and DNS duties for your whole local network, so any device that joins automatically gets configured to use it, no manual setup per device required. A third mode creates a separate downstream network, using its own access point, wireless network name, or VLAN, that runs entirely through the Mac without touching your existing network at all. Once a device is connected, you can set an individual outbound policy for it, such as routing a phone and a Mac through the same rules, sending a game console straight to its game servers, or letting a television or media player pass through with as little interference as possible. Under the hood, dnsmasq handles DHCP and DNS, mihomo acts as the proxy engine, and macOS built in packet filtering along with IPv4 forwarding provide the actual network path. The project ships with a menu bar app and a local web control panel that shows connection status, live upload and download speeds per device, and lets you check whether the network is healthy or needs attention. It supports importing an existing mihomo configuration or subscription, so you keep your current proxy nodes and rules rather than starting over. It is written mostly in Go, requires macOS 13 or newer, provides installers for both Apple Silicon and Intel Macs, and is released under the GPL 3.0 license. Because misconfigured network gateways can disrupt an entire home network, the project also includes an isolated virtual lab setup meant for testing risky network behavior safely before applying it to a real network.