A complete wrapper around hev-socks5-tunnel that turns it into a system-wide transparent SOCKS5 → TUN setup on macOS:
- All TCP and UDP traffic is forwarded to a SOCKS5 proxy via a
utuninterface - Private RFC1918 networks bypass the tunnel and go via the physical gateway
- The proxy host itself bypasses the tunnel (no routing loop)
- DNS is handled by an in-tunnel MapDNS / fake-IP responder so QUIC and
apps that ignore
/etc/resolveruse the tunnel transparently