Settings

Settings open from the application menu (Cmd/Ctrl + ,) and are grouped into Proxy, Startup, Bypass List, Advanced, and Account.

Proxy

Address. Which interfaces the proxy listens on. 0.0.0.0 — all of them; this is the default and it is what mobile devices need in order to reach your computer. 127.0.0.1 — the local machine only.

Port. Any port from 1 to 65535; the default is 7070. Ports below 1024 are privileged and need administrator rights or port forwarding.

Capture mode (Linux only). System proxy captures the browsers and apps that use the GNOME proxy setting. Transparent mode — all apps redirects all HTTP/HTTPS traffic to the proxy at the kernel level, so command-line tools and Flatpak apps are captured too.

The first time transparent mode is turned on, it needs the administrator password, to install the Solpuga network helper service. Switching back to the system proxy stops the redirection but leaves the service installed. To remove it, click Remove the Solpuga network helper service under the transparent mode card.

While transparent mode is on, the titlebar shows a blue T after the proxy address. A T in a dashed frame means the mode is chosen but off.

To capture terminal and Flatpak apps without transparent mode, see Linux: terminal and Flatpak apps.

Certificate. The installed root CA with its issue and expiry dates and its trust status. It can be exported in PEM format or removed here — see Certificate Installation.

Auto-forward disconnected requests. When a client closes the connection while a request is paused on a breakpoint, the captured request is sent to the server anyway and the response is attached to it. Off by default.

Startup

Override the system proxy at launch. Configure the system proxy as soon as the app starts.

Capture automatically. Start capturing traffic as soon as the app starts.

Bypass List

Services that use certificate pinning do not work through HTTPS interception. A host on the bypass list is tunnelled through without being decrypted: it keeps working, and its traffic is still recorded, just not readable.

Patterns can be a hostname (example.com), a wildcard (*.example.com), an IP address (192.168.1.1), or a CIDR range (192.168.1.0/24) — without http:// or https://.

Hosts can also be added and removed straight from captured traffic.

Advanced

Strict TLS validation makes the proxy validate upstream server certificates against standard WebPKI roots.

It is off by default, so the proxy accepts upstream certificates without that validation — which is what you want when debugging staging servers with self-signed certificates. Turn it on for production-level strictness. The proxy has to be restarted for the change to take effect.

Account

The licence state on this device, and where it is activated — see License and activation.

Language, theme, updates

The interface language (English or Russian) and the theme (system, light, or dark) are both under the View menu, and apply immediately.

Updates are checked on every launch. A new version is announced in the main window, and installing it restarts the app. A manual check is available from the application menu.