¥1,000
App Store で開く
iPhone / iPad 対応
142.2MB
年齢4+
Stash - Rule Based Proxyはどんなアプリ？
Stash - Rule Based Proxyは、独自のルールに基づいて通信を振り分けるプロキシクライアントです。
特定のドメインやIPアドレスを判別して通信経路を制御できるため、用途に合わせて細かく設定を分けることができます。複数のプロトコルに対応しており、暗号化された通信を復号する機能も備わっています。独自のスクリプトによる書き換えや、ネットワーク環境に応じた動的な接続の切り替えも行えるため、複雑な通信環境にも対応できます。
特定のサイトだけを特定のサーバー経由で表示させたいときや、接続先ごとに異なる通信ルールを適用したい場面で役立ちます。高度な設定を自動化したいユーザーが、意図した通りに通信を制御する際に重宝します。
アノアプリによる紹介文です。デベロッパー公式の説明はApp Storeでご確認いただけます。
Stash - Rule Based Proxyの注目ポイント
独自のルールに基づく通信の振り分け
あらかじめ設定した独自のルールに従って通信を自動で振り分けます。特定のサイトだけを個別のサーバー経由で表示させたい場面でも、意図した通りに挙動を制御できます。
複数のプロトコルへの対応
TCPやUDP、ICMPといった多様な通信規格に対応しています。ネットワーク環境に合わせて接続先を動的に切り替えるため、複雑な環境下でも安定した接続を維持できます。
ドメインやIPアドレスによる経路制御
特定のドメイン名やIPアドレスの範囲を指定して、通信ルートを個別に指定できます。接続先ごとに異なるルールを適用したい高度な運用にも対応しています。
暗号化された通信の復号機能
中間者攻撃の手法を用いて暗号化された通信を復号する機能が入っています。安全な通信経路を確保しながら、必要なデータの処理を正確に行えるようになります。
価格履歴
今の価格は1,000円です。過去155日間、価格は変わっていません。
アノアプリが独自に収集した価格履歴をもとに分析しています。
- 買い時判定
- 通常価格
- 記録期間
- 155日
- 最頻価格
- ¥1,000
- 記録上の最安値
- ¥1,000
価格更新履歴
| 日付 | 価格 |
|---|---|
| 2026-06-01 | ¥1,000 |
ランキング推移
ユーザーレビュー （当サイト投稿）
まだレビューがありません。最初のレビューを書いてみましょう。
アプリ更新履歴 活発に更新中
Ver 3.6.5 2026-10-22
Fixes
• Rewriting body text now supports more response types
• Scripts can read duplicate response headers
• Script requests now follow the selected proxy node
• Fixed IPv4 UDP communication in Snell: UDP data returned by the server is now delivered correctly when connecting to IPv4 destinations via Snell v4, v5, or v6.
• Tailscale login links can be refreshed after they expire: expired links are updated automatically, and you can continue logging in after refreshing them.
• Rewriting body text now supports more response types
• Scripts can read duplicate response headers
• Script requests now follow the selected proxy node
• Fixed IPv4 UDP communication in Snell: UDP data returned by the server is now delivered correctly when connecting to IPv4 destinations via Snell v4, v5, or v6.
• Tailscale login links can be refreshed after they expire: expired links are updated automatically, and you can continue logging in after refreshing them.
Ver 3.6.4 2026-10-19
New Features
• Exit location names are now displayed in the app's language
• Automatically select a latency test target
Improvements
• Improved compatibility notices for Tailscale nodes
• Improved error messages for body rewrite rules
Fixes
• Complex rewrite rules no longer cause crashes
• Fixed cached data being lost after restarting
• Fixed browsing failures on some websites
• Fixed VLESS Vision connections getting stuck: some TLS 1.3 requests can now continue connecting as expected.
• Automatically retry StashLink initialization after network recovery
• Fixed a crash when deleting an override
• Improved device syncing on restricted networks
• Exit location names are now displayed in the app's language
• Automatically select a latency test target
Improvements
• Improved compatibility notices for Tailscale nodes
• Improved error messages for body rewrite rules
Fixes
• Complex rewrite rules no longer cause crashes
• Fixed cached data being lost after restarting
• Fixed browsing failures on some websites
• Fixed VLESS Vision connections getting stuck: some TLS 1.3 requests can now continue connecting as expected.
• Automatically retry StashLink initialization after network recovery
• Fixed a crash when deleting an override
• Improved device syncing on restricted networks
Ver 3.6.3 2026-10-15
New Features
• Hybrid proxies now support more SOCKS connection methods: added SOCKS4 and SOCKS4a support, and compatibility with SOCKS5 connections that use username-and-password authentication only.
Improvements
• Improved the accuracy of direct connection latency tests.
• QR codes and share links can now import more proxy configurations: support for additional node formats, while preserving supported TLS, REALITY, and transport settings. Parameters that cannot be safely preserved will be rejected during import.
Fixes
• Improved Tailscale node version detection: the Tailscale admin console can now correctly identify Stash node versions and manage node settings.
• Fixed StashLink device identity recovery: if identity credentials can’t be used, the app will try to obtain new ones and preserve existing valid credentials if renewal fails.
• Hybrid proxies now support more SOCKS connection methods: added SOCKS4 and SOCKS4a support, and compatibility with SOCKS5 connections that use username-and-password authentication only.
Improvements
• Improved the accuracy of direct connection latency tests.
• QR codes and share links can now import more proxy configurations: support for additional node formats, while preserving supported TLS, REALITY, and transport settings. Parameters that cannot be safely preserved will be rejected during import.
Fixes
• Improved Tailscale node version detection: the Tailscale admin console can now correctly identify Stash node versions and manage node settings.
• Fixed StashLink device identity recovery: if identity credentials can’t be used, the app will try to obtain new ones and preserve existing valid credentials if renewal fails.
Ver 3.6.2 2026-10-13
New Features
• Added XHTTP padding options: When configuring a VLESS XHTTP proxy, you can set the padding mode, key, request headers, placement, and method.
Improvements
• Reduced memory usage for large sets of HTTP rewrite rules: This lowers the chance of the app exiting before the tunnel starts due to insufficient memory.
• Display and download missing GeoIP databases: Undownloaded GeoIP databases now appear in the resource list and can be downloaded with a tap.
Fixes
• Improved Tailscale connections and address updates: Fixed version detection to prevent issues with connections and network address updates.
• Allow startup when resource caching fails: If a cache file can’t be read, the original resource is used instead, preventing the issue from blocking network operation.
• Improved Mieru connections: Connections can now be established without traffic features being configured, and connection resets in some network environments have been addressed.
• Correctly read SSH node login usernames: SSH nodes imported in mihomo format no longer unexpectedly use root to log in.
• Support servers with older certificates: When certificate verification is skipped or certificate pinning is enabled, you can connect to servers using X.509 v1 certificates, including MASQUE servers.
• Improved SOCKS5 server compatibility: Relaxed restrictions on authentication and connection response formats to support more servers.
• Keep measured results in latency tests: Previously measured latency remains visible if a later request times out or fails.
• Prevent tunnel startup failures when iCloud sync is disabled: iCloud placeholder files no longer prevent the network from starting when iCloud configuration sync is turned off.
• Added XHTTP padding options: When configuring a VLESS XHTTP proxy, you can set the padding mode, key, request headers, placement, and method.
Improvements
• Reduced memory usage for large sets of HTTP rewrite rules: This lowers the chance of the app exiting before the tunnel starts due to insufficient memory.
• Display and download missing GeoIP databases: Undownloaded GeoIP databases now appear in the resource list and can be downloaded with a tap.
Fixes
• Improved Tailscale connections and address updates: Fixed version detection to prevent issues with connections and network address updates.
• Allow startup when resource caching fails: If a cache file can’t be read, the original resource is used instead, preventing the issue from blocking network operation.
• Improved Mieru connections: Connections can now be established without traffic features being configured, and connection resets in some network environments have been addressed.
• Correctly read SSH node login usernames: SSH nodes imported in mihomo format no longer unexpectedly use root to log in.
• Support servers with older certificates: When certificate verification is skipped or certificate pinning is enabled, you can connect to servers using X.509 v1 certificates, including MASQUE servers.
• Improved SOCKS5 server compatibility: Relaxed restrictions on authentication and connection response formats to support more servers.
• Keep measured results in latency tests: Previously measured latency remains visible if a later request times out or fails.
• Prevent tunnel startup failures when iCloud sync is disabled: iCloud placeholder files no longer prevent the network from starting when iCloud configuration sync is turned off.
Ver 3.6.1 2026-10-11
New Features
• Added support for custom XHTTP request padding. Configure how and where padding is added to meet different server connection requirements.
Fixes
• Fixed connection failures with AnyTLS subscription nodes by correctly reading certificate fingerprints from subscriptions and preventing certificate validation errors.
• Added support for custom XHTTP request padding. Configure how and where padding is added to meet different server connection requirements.
Fixes
• Fixed connection failures with AnyTLS subscription nodes by correctly reading certificate fingerprints from subscriptions and preventing certificate validation errors.
Ver 3.6.0 2026-10-10
· Protocols and Transports
- Added the MASQUE protocol
- Added VLESS Encryption: encrypts the stream without TLS underneath, and stacks with Vision flow control
- Added the XHTTP transport with HTTP/1.1, HTTP/2 and HTTP/3; upload and download legs can be configured separately
- Snell now supports v4, v5 and v6 (v6 in its unsafe-raw / unshaped / default modes)
- REALITY is no longer limited to VLESS over TCP: it now works under VLESS WebSocket, H2, gRPC and HTTP-obfuscation transports, and under Trojan and VMess
- VLESS and VMess support plaintext gRPC
- VMess supports XUDP and packetaddr; VLESS and VMess gain the packet-encoding, xudp and packet-addr keys
- TUIC lets you choose the congestion controller (congestion-controller: bbr / cubic / new_reno)
- SOCKS5 outbound supports TLS (tls, sni, skip-cert-verify, alpn, server-cert-fingerprint)
- SSH supports host-key pinning and host-key-algorithms
- WebSocket transport supports Early Data (ws-opts.max-early-data, early-data-header-name, and the ?ed= marker in subscription links)
· TLS and Security
- Every TLS ClientHello now offers the X25519MLKEM768 post-quantum hybrid key exchange by default; REALITY can enable it with reality-opts.support-x25519mlkem768, and shadow-tls v3 carries it as well
- MitM leaf certificates are reused per public suffix, so far fewer certificates are generated
· Tailscale
- Adding a Tailscale node automatically routes its MagicDNS suffix and every peer address to that node, with no hand-written rules; disable with auto-route-disabled: true
- The runtime exit-node choice persists across restarts
- The status API shows whether each peer is reached directly or through a DERP relay
· StashLink
- When underlying-proxy is left empty, the relay carrier is chosen automatically from the device's own proxies, and re-chosen after network changes or subscription updates
- Device names resolve under the .stash suffix and route to the matching device automatically
- The path a StashLink proxy is currently on is visible; direct paths are kept across network changes where possible
· Rules and DNS
- GEOIP and IP-ASN support UNKNOWN, matching addresses with no database entry
- A rule that cannot be parsed is skipped with a warning instead of failing the whole configuration load
- fake-ip-filter and nameserver-policy can reference rule-set: and geosite:
- A nameserver-policy key can list several matchers separated by commas
- Added the MASQUE protocol
- Added VLESS Encryption: encrypts the stream without TLS underneath, and stacks with Vision flow control
- Added the XHTTP transport with HTTP/1.1, HTTP/2 and HTTP/3; upload and download legs can be configured separately
- Snell now supports v4, v5 and v6 (v6 in its unsafe-raw / unshaped / default modes)
- REALITY is no longer limited to VLESS over TCP: it now works under VLESS WebSocket, H2, gRPC and HTTP-obfuscation transports, and under Trojan and VMess
- VLESS and VMess support plaintext gRPC
- VMess supports XUDP and packetaddr; VLESS and VMess gain the packet-encoding, xudp and packet-addr keys
- TUIC lets you choose the congestion controller (congestion-controller: bbr / cubic / new_reno)
- SOCKS5 outbound supports TLS (tls, sni, skip-cert-verify, alpn, server-cert-fingerprint)
- SSH supports host-key pinning and host-key-algorithms
- WebSocket transport supports Early Data (ws-opts.max-early-data, early-data-header-name, and the ?ed= marker in subscription links)
· TLS and Security
- Every TLS ClientHello now offers the X25519MLKEM768 post-quantum hybrid key exchange by default; REALITY can enable it with reality-opts.support-x25519mlkem768, and shadow-tls v3 carries it as well
- MitM leaf certificates are reused per public suffix, so far fewer certificates are generated
· Tailscale
- Adding a Tailscale node automatically routes its MagicDNS suffix and every peer address to that node, with no hand-written rules; disable with auto-route-disabled: true
- The runtime exit-node choice persists across restarts
- The status API shows whether each peer is reached directly or through a DERP relay
· StashLink
- When underlying-proxy is left empty, the relay carrier is chosen automatically from the device's own proxies, and re-chosen after network changes or subscription updates
- Device names resolve under the .stash suffix and route to the matching device automatically
- The path a StashLink proxy is currently on is visible; direct paths are kept across network changes where possible
· Rules and DNS
- GEOIP and IP-ASN support UNKNOWN, matching addresses with no database entry
- A rule that cannot be parsed is skipped with a warning instead of failing the whole configuration load
- fake-ip-filter and nameserver-policy can reference rule-set: and geosite:
- A nameserver-policy key can list several matchers separated by commas
Ver 3.4.1 2026-07-17
Optimization
• Optimized StashTun
Fixes
• Fixed an issue where switching networks could cause disconnection
• Fixed a crash that might occur when iCloud syncs in the background
• Optimized StashTun
Fixes
• Fixed an issue where switching networks could cause disconnection
• Fixed a crash that might occur when iCloud syncs in the background
Ver 3.4.0 2026-07-04
New Features
• Added icon search
• Added long-press option on Tailscale nodes to select Exit Node
• Fully re-engineered StashTun — reaches up to 9Gbps on iPhone 17 Pro, about 6× faster than before
• Added Tailscale Web login authentication
• Added visual editor for local overrides
• Optimized Tun performance when the network is unavailable
• Visual editor now supports editing Hysteria2 obfuscation modes
• Added local override editing
• Added Tailscale support — documentation: https://stash.wiki/proxy-protocols/proxy-types#tailscale
• Added support for VLESS-TCP-REALITY
• Added Hysteria2 salamander obfuscation mode
• Providers can now set custom request headers
• DNS Nameserver Policy supports GEOSITE matching and concurrent access to multiple Nameservers
• Added support for the TrustTunnel protocol
• Added gecko obfuscation support for Hysteria2
Improvements
• Added an action button at the top right of the Override page
• Improved the override operation flow
• Visual editor now supports Tailscale type
• Improved status display for quick component toggles
• Improved the display of the TLS protocol visual editor
• Reorganized and refined the Settings page categories
• Improved network change detection
• Improved TUIC visual editing
• Obfuscation modes in visual editing are now selectable options
• Removed gVisor tunnel stack
• Enhanced VLESS visual editing interactions
• Optimized congestion control for the QUIC protocol
• Added visual editing support for TrustTunnel and Hysteria2 Gecko
• Tailscale visual editing no longer requires an auth-key
• Improved iCloud read/write events
• Improved TrustTunnel descriptions
• Comprehensive localization improvements
• Visual editor now supports AnyTLS
• Enhanced Darwin Tun compatibility
• Improved TUIC compatibility
• Optimized StashLink resource usage
• Stash DeviceID is now used as the default Tailscale hostname
• Improved CORS support for Private Network
• Optimized idle HTTP proxy requests
• Improved Block QUIC handling
• Refined speed test strategy and memory usage during network switching
Fixes
• Fixed an issue where the Start button could be hidden on iPadOS in certain cases
• Improved reliability when switching overrides not taking effect
• Fixed abnormal button styles on iOS 27
• Fixed possible freeze issues caused by iCloud in some situations
• Fixed proxy page display errors in certain cases
• Optimized subscription fetching
• Fixed an issue where configuration might revert to Default when iCloud is unavailable
• Fixed UDP fragmentation for the Hysteria v1 protocol
• Fixed timing issues in VLESS UDP handshake
• Fixed an issue where uTLS could not enable skip-cert-verify
• Fixed an IPv6 CNAME configuration issue that could incorrectly return IPv4 records
• Fixed a possible StashLink speed test freeze issue
• Improved remote resource loading and fixed cases where failed downloads returned 0
• Improved Shadowsocks 2022 compatibility
• Fixed a crash issue where Tailscale could fail during network switching
• Fixed crash issues caused by invalid MRS resources
• Improved IP → domain reverse lookup strategy
• Tunnel traffic sniffing now activates earlier
• Improved latency after policy group refresh
• Fixed incorrect destination address when sending via WireGuard
• Fixed incorrect destination address for VLESS XUDP
• Fixed memory recycling delay in HTTP connectivity checks
• Fixed reconnection issues for the WireGuard protocol under certain conditions
• Added icon search
• Added long-press option on Tailscale nodes to select Exit Node
• Fully re-engineered StashTun — reaches up to 9Gbps on iPhone 17 Pro, about 6× faster than before
• Added Tailscale Web login authentication
• Added visual editor for local overrides
• Optimized Tun performance when the network is unavailable
• Visual editor now supports editing Hysteria2 obfuscation modes
• Added local override editing
• Added Tailscale support — documentation: https://stash.wiki/proxy-protocols/proxy-types#tailscale
• Added support for VLESS-TCP-REALITY
• Added Hysteria2 salamander obfuscation mode
• Providers can now set custom request headers
• DNS Nameserver Policy supports GEOSITE matching and concurrent access to multiple Nameservers
• Added support for the TrustTunnel protocol
• Added gecko obfuscation support for Hysteria2
Improvements
• Added an action button at the top right of the Override page
• Improved the override operation flow
• Visual editor now supports Tailscale type
• Improved status display for quick component toggles
• Improved the display of the TLS protocol visual editor
• Reorganized and refined the Settings page categories
• Improved network change detection
• Improved TUIC visual editing
• Obfuscation modes in visual editing are now selectable options
• Removed gVisor tunnel stack
• Enhanced VLESS visual editing interactions
• Optimized congestion control for the QUIC protocol
• Added visual editing support for TrustTunnel and Hysteria2 Gecko
• Tailscale visual editing no longer requires an auth-key
• Improved iCloud read/write events
• Improved TrustTunnel descriptions
• Comprehensive localization improvements
• Visual editor now supports AnyTLS
• Enhanced Darwin Tun compatibility
• Improved TUIC compatibility
• Optimized StashLink resource usage
• Stash DeviceID is now used as the default Tailscale hostname
• Improved CORS support for Private Network
• Optimized idle HTTP proxy requests
• Improved Block QUIC handling
• Refined speed test strategy and memory usage during network switching
Fixes
• Fixed an issue where the Start button could be hidden on iPadOS in certain cases
• Improved reliability when switching overrides not taking effect
• Fixed abnormal button styles on iOS 27
• Fixed possible freeze issues caused by iCloud in some situations
• Fixed proxy page display errors in certain cases
• Optimized subscription fetching
• Fixed an issue where configuration might revert to Default when iCloud is unavailable
• Fixed UDP fragmentation for the Hysteria v1 protocol
• Fixed timing issues in VLESS UDP handshake
• Fixed an issue where uTLS could not enable skip-cert-verify
• Fixed an IPv6 CNAME configuration issue that could incorrectly return IPv4 records
• Fixed a possible StashLink speed test freeze issue
• Improved remote resource loading and fixed cases where failed downloads returned 0
• Improved Shadowsocks 2022 compatibility
• Fixed a crash issue where Tailscale could fail during network switching
• Fixed crash issues caused by invalid MRS resources
• Improved IP → domain reverse lookup strategy
• Tunnel traffic sniffing now activates earlier
• Improved latency after policy group refresh
• Fixed incorrect destination address when sending via WireGuard
• Fixed incorrect destination address for VLESS XUDP
• Fixed memory recycling delay in HTTP connectivity checks
• Fixed reconnection issues for the WireGuard protocol under certain conditions
Ver 3.3.3 2026-04-02
New Features
• Added support for VLESS-TCP-REALITY
Improvements
• Improved compatibility with Shadowsocks 2022
Fixes
• Fixed an issue where the Start button might disappear when using large fonts on iPadOS
• Fixed an issue where StashLink speed tests might get stuck
• Added support for VLESS-TCP-REALITY
Improvements
• Improved compatibility with Shadowsocks 2022
Fixes
• Fixed an issue where the Start button might disappear when using large fonts on iPadOS
• Fixed an issue where StashLink speed tests might get stuck