Network settings
The Network workspace (⇧⌘R then Network, or the rail) controls how elcapture listens, decrypts, shapes and routes traffic. It is organised into pages.
Devices
Allow other devices opens the proxy to your LAN so a phone can connect; restrict it to specific client addresses, and optionally require a proxy username and password (Basic auth).
Traffic
Throttle bandwidth with presets (Fast 4G, 3G, Slow 3G, Edge) or a custom profile — latency, download and upload rate, jitter and packet loss — scoped to all hosts or chosen ones. Also: disable caching, block cookies, inject diagnostic headers, or post a report to a URL.
HTTPS
| Setting | Does |
|---|---|
| Decrypt HTTPS | Master switch for TLS interception. |
| Decrypt only / passthrough | Limit decryption to listed hosts, or let listed hosts pass through untouched (auto-passthrough handles the ones that fail). |
| Accept self-signed | Trust a server's own certificate for listed hosts. |
| Client certificates | Present a client certificate (mTLS) to servers that require one. |
| HTTP/3, keep Alt-Svc, HTTP/1 only, TLS keylog | Protocol controls and an SSLKEYLOG for external tools. |
DNS
Spoof DNS — map a host to an address while keeping the original URL, Host and SNI — set a custom DNS server, and choose IP preference (Auto, IPv4 first, IPv6 first).
Proxies
Chain through an upstream proxy (with a saved list), run reverse proxies, forward raw TCP and UDP ports, and set hosts that bypass the system proxy.
Recording and Scripts
Recording: ignore chosen hosts, or record only chosen ones. Scripts: set the environment variables your scripts read with env().