In daemon mode, tun2socks provides transparent proxying at the IP level via pf + utun, so apps don't need proxy env vars. Setting HTTP_PROXY and HTTPS_PROXY to socks5h:// breaks apps like Bun/Node.js that read these vars but don't support the SOCKS5 protocol (UnsupportedProxyProtocol).