Enhanced Mode

Only Chute Mac supports this feature

Some applications may not obey the system proxy settings. Enhanced Mode forces all network traffic through Chute by operating at a lower level than the system proxy. Chute Mac provides two Enhanced Mode implementations, selectable in Preferences > Misc > Enhanced Mode Type.

Mode Comparison

Common Behavior

Both modes share the following characteristics:

• Chute creates a virtual network interface and registers as the default route, redirecting traffic through the proxy for inspection and routing.

• For domains that should bypass the proxy, Chute returns real IP addresses instead of virtual IPs.

• Chute Enhanced Mode can only process TCP, UDP, and ICMP traffic. Only enable this feature when necessary.

• ICMP traffic (ping) cannot be proxied — packets are sent from the local device and Chute returns a direct response.

• UDP traffic cannot be proxied — it passes through like behind a NAT.

Type 1: VIF Mode (Legacy)

This is the original Enhanced Mode implementation using a virtual network interface.

How it works

• Chute creates a virtual network interface and configures system routes to direct all traffic through it.

• When IPv6 is enabled (ipv6-enabled = true in config), IPv6 traffic is also routed through the virtual interface.

• On teardown, all routes are removed and the original network configuration is restored.

Requirements

• You must manually configure DNS override before enabling Enhanced Mode.
• A privileged helper component must be installed and running.

Type 2: VPN Mode (Recommended)

This is the newer implementation using the system VPN framework.

How it works

• Chute starts a VPN tunnel that captures all network traffic at the system level.

• When IPv6 is enabled, IPv6 traffic is also routed through the VPN tunnel.

• On teardown, the VPN tunnel is stopped and the original network configuration is restored.

Requirements

• macOS 10.15 or later.
• The app must be located in /Applications.
• On first use, you must approve the network extension in System Settings > General > Login Items & Extensions > Network Extensions.
• The mode type cannot be changed while Enhanced Mode is active — disable first, then switch.

Important notes

• HTTP/HTTPS system proxy settings become ineffective while VPN Mode TUN is active. The system proxy will resume when Enhanced Mode is disabled.
• DNS configuration is automatic — no manual DNS override is needed.
• If the VPN is manually turned off in System Settings, Chute will clean up and disconnect gracefully.

Configuring Enhanced Mode Type

1. Open Preferences (Settings window)
2. Go to the Misc tab
3. Select the desired mode under Enhanced Mode Type:
   • VIF (Legacy) — the original virtual-interface-based mode
   • VPN (Recommended) — the newer VPN-based mode
4. The change takes effect the next time you enable Enhanced Mode.

Note: You cannot change the mode type while Enhanced Mode is currently active. Disable first, then switch.

Troubleshooting

• VPN Mode won't start: Ensure the app is in /Applications and that you have approved the network extension in System Settings.
• "System Extension Blocked" message: Go to System Settings > General > Login Items & Extensions > Network Extensions and enable the Chute extension.
• Stale VPN configuration: If the VPN gets stuck, use the Reset VPN... button in Preferences > Misc to remove and recreate the VPN configuration.
• DNS not working in VIF mode: Ensure you have configured DNS override. Chute will display a notice if it is not configured.