Without Reroute
- The whole Mac takes the same route, personal browsing, music and banking included.
- Split tunnelling, where it exists, only uses that provider's servers.
- Two VPN-style apps, say a VPN and Tailscale, can refuse to run together.
Per-app proxy for macOS
One app. A different route.
Pick the Mac apps that should take a different road: through the office proxy, an SSH tunnel or a proxy of your own. Everything else stays on your normal connection.
- macOS 15 Sequoia or later
- Apple silicon and Intel
- Signed and notarised
- No account needed
On — routing 2 apps
- SOCKS5
- HTTP CONNECT
- HTTPS proxies
- Username + password
- Your VPN plan's SOCKS5
- wireproxy
- ssh -D
- Office proxies
- Tailscale-friendly
- Apple silicon + Intel
Why Reroute
Your VPN is all or nothing.
Your apps aren't.
With Reroute
- Only the apps you choose take the turn. The rest of the Mac doesn't notice.
- Any SOCKS5, HTTP or HTTPS proxy you already have, from any provider or your own server.
- It isn't a VPN, so it sits happily beside Tailscale and your VPN app.
How it works
Three steps. Then forget about it.
-
1
Add your proxy
Paste in a SOCKS5, HTTP or HTTPS proxy, with a login if it needs one. Press Test to see the IP and country it shows the world.
OfficeHTTP proxy.office.example:3128✓ 198.51.100.7 — London, United Kingdom · 21 msTest -
2
Pick an app
Choose an app and where its traffic goes: your proxy, direct, or blocked. Helper processes the app launches follow the same rule.
SSlackOnly this app · Slack Technologies L.L.C.Direct→ Office ⌄ -
3
That's it
Routing starts straight away and comes back on its own after a restart. Open the menu bar icon whenever you want to check or switch.
The app
One window. Every route in view.
A proper Mac app with a menu bar shortcut, not a config file. Every app gets one line and one choice.
S
SlackOnly this app · Slack Technologies L.L.C.
→ Office ⌄
L
LinearAll apps by Linear Orbit, Inc.
→ Office ⌄
P
PostmanAll apps by Postman, Inc.
→ Staging tunnel ⌄
F
FirefoxOnly this app · Mozilla Corporation
→ QA — Frankfurt ⌄
G
Google ChromeOnly this app · Google LLC
Direct ⌄
- Matched by developerBig apps launch helpers with generic names. Reroute matches the developer's signature, so they all follow the rule.
- A route per appAny proxy, Direct or Blocked. Choose "Only this app" for developers who make several.
- One switchTurn routing off and every app goes back to your normal connection at once.
Who it's for
Why take a different route? Plenty of reasons.
Work tools on the office proxy
Some company tools only accept connections from the office. Send Slack and the work apps through the company proxy while everything personal stays on home broadband.
Test your own site from another region
Point one browser at a test proxy and check the language, currency and cookie banner your visitors in Frankfurt or New York get, without moving your whole Mac there.
Reach staging through an SSH tunnel
Run ssh -D to the server your staging environment trusts and send just your API client or database tool through it. The browser and everything else stay put.
Keep Tailscale running
Stop choosing between Tailscale and your VPN. Reroute leaves Tailscale, your local network and DNS alone.
Keep one app separate
Give a single app its own exit, so its traffic doesn't come from your home address.
Keep an app offline
Set any app to Blocked and it can't connect at all, until you change your mind.
Activity
See every connection take the turn.
The Activity view lists each connection Reroute handles: which app made it, where it was going, which proxy carried it and how much data moved. No guessing whether it's working.
- Liveupdates as your apps connect
- Per proxysee which route carried each one
- Filterby app or destination
AppDestinationViaStatus
Slackapp.slack.com:443
Office
Open
Linearapi.linear.app:443
Office
Open
Postmanapi.staging.example:443
Staging tunnel
Open
Slackwss-primary.slack.com:443
Office
Open
Firefoxshop.example:443
QA — Frankfurt
Open
Linearclient-api.linear.app:443
Office
Closed
Postmanauth.staging.example:443
Staging tunnel
Open
FirefoxUDP
Blocked
Blocked
Rules of the road
Built to stay out of the way. No quiet fallbacks.
No quiet fallback
If your proxy goes down, or your trial or licence runs out, routed apps are blocked rather than slipping out over your normal connection. You find out, instead of showing up from the wrong place. Turn routing off when you want everything direct.
Plays well with others
Reroute isn't a VPN, so it doesn't fight one. Your local network, Tailscale addresses and plain DNS are never touched.
Survives restarts
Routing starts on its own after a reboot, before you open anything. The menu bar icon is optional.
Checks your exit
Test any proxy and see the public IP and country the world will see, before you send an app through it.
Passwords kept properly
Proxy logins live in your Keychain and in a root-only file that only Reroute's system extension reads, never in plain network settings.
No servers of ours
Reroute runs on your Mac and your traffic goes to your proxy. The app itself only checks your licence with Lemon Squeezy, looks for updates on our feed, and loads Cloudflare's trace page through your proxy when you press Test.
Under the hood
For the people who'll ask.
The details, for anyone who wants to know exactly what runs on their Mac.
- How it hooks in
- A Network Extension system extension using Apple's transparent proxy API. macOS hands it each new connection with the app that opened it.
- How apps are matched
- By code-signing Team ID, so generic helpers (
node,codex) are caught. "Only this app" matches the bundle ID under the same team. - What gets proxied
- TCP, via SOCKS5 or HTTP CONNECT (over TLS for HTTPS proxies), using the hostname the app asked for, so the lookup happens at the proxy end. Unmatched apps are handed straight back to macOS.
- UDP and QUIC
- Refused for routed apps by default, so QUIC falls back to TCP through the proxy. Allow it direct per app if you prefer.
- Never touched
- Loopback, private ranges, Tailscale's
100.64.0.0/10, link-local, multicast and plain DNS (UDP port 53), so a routed app's own DNS lookups can still use your normal connection. - When it can't proxy
- If the proxy is unreachable, or the trial or licence has lapsed, routed connections are refused, never sent direct. Turning routing off sends everything direct.
- What the app contacts
- Lemon Squeezy's licence API, our Sparkle update feed at
updates.flavrapps.com, and Cloudflare's/cdn-cgi/tracepage, through your proxy, when you press Test. No analytics. - Distribution
- Universal binary for macOS 15 Sequoia and later. Developer ID signed and notarised, direct download, updates through Sparkle.
Pricing
Pay once. Keep it.
£9.99
One payment. No subscription.
- Use it on up to 3 of your Macs
- All 1.x updates included
- 7 days free first, every feature on
- No account, card or email to try
Per-app routing without the per-month bill
| Feature | Reroute | AppLanes | Proxifier | VPN split tunnel |
|---|---|---|---|---|
| Price | £9.99 once | $2.99/mo or $19.99/yr | $39.95 once | Part of a VPN subscription |
| How you pay | Once | Subscription | Once | Subscription |
| Your own proxy | SOCKS5, HTTP, HTTPS | Not checked | Not checked | Usually that provider's servers |
| Needs a VPN app | No | Not checked | Not checked | Yes |
Prices in GBP. Local taxes may be added at checkout. Lemon Squeezy, our reseller, works them out from your location.
Competitor details from their websites, October 2026; prices in their own currencies. A dash means we haven't checked it, so see their site.
Questions
Before you take the turn.
Do I need a VPN subscription?
You need a proxy, and Reroute doesn't include one. Many VPN plans come with SOCKS5 details you can paste straight in. If yours only gives you a WireGuard file, the free wireproxy tool turns it into a local SOCKS5 proxy.
Which apps can I route?
Any Mac app, including the helper tools a developer ships with it. Choose "Only this app" when a developer makes several apps and you want just one of them routed.
What about voice calls and games?
Reroute blocks a routed app's other traffic (UDP) by default so nothing slips out around the proxy, and most apps fall back to a connection that goes through it. If an app's calls stop working, let its UDP traffic go direct for that app.
Will it slow my Mac down?
Apps you haven't added aren't touched. Routed apps run at the speed of your proxy.
Does it see my traffic?
No. Reroute runs on your Mac and sends routed traffic straight to your proxy. The app itself makes only three kinds of request: licence checks to Lemon Squeezy, update checks to our update feed, and, when you press Test, a fetch of Cloudflare's public connection-check page through your proxy to show the IP and country it presents. No analytics.
Can a routed app slip out around the proxy?
Not quietly. If your proxy is down, or your trial or licence has run out, routed apps' connections fail instead of going over your normal connection. Hostnames are passed to the proxy, so those lookups happen at the proxy end, but plain DNS queries are left alone, so a routed app's own DNS lookups can still use your normal connection.
Can I try it first?
Yes. Reroute is free for 7 days with every feature on, and you don't need a card, account or email to start.
Does it work with my VPN app or Tailscale?
Yes. Reroute isn't a VPN, so it doesn't compete for the VPN slot. Tailscale, your local network and plain DNS lookups are left alone. If a full VPN is switched on, the connection to your proxy simply travels inside it.
What happens when the trial ends?
Apps with a proxy or Blocked rule are blocked, marked Licence needed, until you buy a licence or turn routing off. Turning routing off sends every app back to your normal connection. Enter a licence key at any time and your rules work again.
Can I use it on more than one Mac?
One licence covers up to 3 Macs at a time. To move it, choose Deactivate This Mac on the old one first.
Why isn't it on the Mac App Store?
Reroute is a system extension built on Apple's transparent proxy API, and we distribute it directly so it can run beside your VPN app, Tailscale and other network tools. Selling it through Lemon Squeezy keeps the price to a single payment. It's still signed and notarised by Apple, with updates built into the app.
Take the turn.
7 days free, every feature on. Then £9.99 once, for up to 3 Macs.