Commit Graph

295 Commits (main)

Author SHA1 Message Date
patterniha 6d1695a686 Some refines related to direct/freedom and `targetStrategy`; More intelligent "useIP"/"ForceIP", enhance "origin" functionality (#5030)
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194264277
2025-08-20 01:19:13 +03:30
RPRX 105b306d07 VLESS practice: Use user-sent VLESS UUID's last byte as `vlessRoute` for `routing` `rules`
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194262087
2025-08-17 13:55:18 +00:00
RPRX de23e51077 DNS outbound: Set "reject" as the default value for `nonIPQuery`
https://github.com/XTLS/Xray-core/pull/4903#issuecomment-3091367130
2025-08-16 19:12:59 +00:00
patterniha 40ce850bd9 Direct/Freedom config: Add `targetStrategy` as an alias of `domainStrategy`; Routing config: Remove `domainMatcher`, "linear" and `type` (#5027)
https://github.com/XTLS/Xray-core/pull/5006#issuecomment-3193547307
2025-08-16 14:54:10 +00:00
Jesus aac0d6a6a5
VLESS inbound: Add option to set default `flow` (#5023)
Closes https://github.com/XTLS/Xray-core/issues/4994
2025-08-15 23:07:33 +00:00
patterniha f557bf7da4
Outbound: Add `targetStrategy`; Fix mux does not close `link.Reader`; Fix `origin` does not work on UDP; Add logs (#5006) 2025-08-15 20:51:36 +00:00
patterniha cde6e33ec9
Freedom: Add `maxSplit` fragment option; Add `applyTo` noises option (#4998) 2025-08-07 23:56:09 +00:00
patterniha 5dce7e4e25
Router: Add `localIP` and `localPort`; Add `sourceIP` as an alias of `source` (#4992)
https://github.com/XTLS/Xray-core/discussions/4984#discussioncomment-13990687

Closes https://github.com/XTLS/Xray-core/issues/4993
2025-08-07 23:50:39 +00:00
风扇滑翔翼 7cbf5b004c
TLS ECH client: `echForceQuery` "full" / "half" / "none" (default) (#4973)
https://github.com/XTLS/Xray-core/pull/4971#issuecomment-3148113203
2025-08-03 10:15:42 +00:00
patterniha 87fff12fd9
Root config: Add `version` config (`min` and `max`) (#4970)
https://github.com/XTLS/Xray-core/pull/4968#issuecomment-3146592323
2025-08-03 01:06:47 +00:00
patterniha a02723e63f TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and `echSockopt`; Fix some issues (#4949)
Completes https://github.com/XTLS/Xray-core/pull/3813
2025-08-02 16:05:00 +00:00
RPRX 146b14ab55
Tunnel inbound: Add `portMap` config (local listening port -> remote specified address/port)
Completes https://github.com/XTLS/Xray-core/pull/4968
2025-08-02 14:58:56 +00:00
风扇滑翔翼 b2829219a0
TLS ECH client: Add `echForceQuery` config (#4947)
https://github.com/XTLS/Xray-core/pull/4947#issuecomment-3124359776
2025-08-01 11:25:15 +00:00
RPRX 116cd70a3a
Dokodemo-door: Add simple `tunnel` config (alias and default values) (#4968)
dokodemo-door -> tunnel
freedom -> direct
blackhole -> block

https://github.com/XTLS/Xray-core/discussions/4966#discussioncomment-13948546
https://github.com/XTLS/Xray-core/pull/4967#issuecomment-3143951306
2025-08-01 11:20:53 +00:00
风扇滑翔翼 fb7a9d8d61
TLS client & server: Support Encrypted Client Hello (ECH) (#3813)
b9a72a4a26

---------

Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>
2025-07-26 08:47:27 +00:00
RPRX 5f93ff6c3a
REALITY config: `mldsa65Seed` and `privateKey` can not be the same value
Otherwise the point of using ML-DSA-65 is lost.
2025-07-26 08:36:58 +00:00
RPRX 31b508d372
REALITY config: Convert `mldsa65Seed` to its private key later 2025-07-24 01:31:07 +00:00
风扇滑翔翼 955a569181
REALITY config: Allow `mldsa65` fields to be empty (#4924) 2025-07-24 01:15:48 +00:00
RPRX 446315cf1f
REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions (#4915)
00881f6740
2025-07-23 02:29:11 +00:00
xqzr abd551e9f7
VLESS fallbacks: `dest` defaults to "127.0.0.1" -> "localhost" (#4840)
https://github.com/XTLS/Xray-examples/issues/234#issuecomment-3091319391
2025-07-19 00:47:43 +00:00
风扇滑翔翼 38ed2cc387
DNS: Add new nonIPQuery "reject" (#4824) 2025-06-22 22:48:24 -04:00
Jesus 27742da2c6
BurstObservatory: add option to set http method for burst check (#4835)
* feat: add options to set method for burst check.

* chore: gen proto.

* chore: change protoc-gen-go to latest.

* revert

---------

Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
2025-06-22 21:48:49 -04:00
Meow 18ab291e0c
REALITY: Add rate limiting to fallback handling via token bucket (#4553)
https://github.com/XTLS/REALITY/pull/12
2025-06-08 13:43:55 +00:00
patterniha 97fdcb4228
New feature: Happy Eyeballs (RFC 8305) (#4667)
Closes https://github.com/XTLS/Xray-core/issues/4473
2025-06-07 13:20:06 +00:00
patterniha 4e1a6f0fd1
Sniffer-destOverride: Remove `fakedns+others` option (#4739)
https://github.com/XTLS/Xray-core/pull/4726#issuecomment-2886494540
2025-06-07 09:01:57 +00:00
patterniha 6232e230d9
DNS New Features: `disableCache`, `finalQuery`, `unexpectedIPs`, `"*"`, `UseSystem-queryStrategy`, `useSystemHosts` (#4666) 2025-06-06 01:59:16 +00:00
Aubrey Yang 028e1114e6
Outbound: Fix sendthrough srcip precheck (#4750)
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-06-06 01:54:15 +00:00
风扇滑翔翼 462bc3cfba
BurstObservatory: Fix nil panic when pingConfig is missing (#4757)
Fixes https://github.com/XTLS/Xray-core/issues/4756
2025-06-04 12:37:43 +00:00
风扇滑翔翼 5f3ae64f0c
Sockopt: Allow `customSockopt` work for Windows & Darwin (#4576)
* Sockopt: Add custom sockopt on Windows & Darwin

* fix windows udp by the way

* use resolved addr

https://github.com/XTLS/Xray-core/pull/4504#issuecomment-2769153797
2025-04-18 02:30:47 +00:00
Ragavendaran Puliyadi 2d3126b752
Config: Implement missing MarshalJSON for structs having custom UnmarshalJSON (#4585)
* conf: implement MarshalJSON for FakeDNSConfig

* conf: Rewrite MarshalJSON for PortList
decouple PortRange from PortList.

* conf: implement MarshalJSON for HostAddress

* conf: Add MarshalJSON comments and use pointers.
2025-04-07 11:46:49 -04:00
Ilya Gulya 17207fc5e4 WireGuard: Improve config error handling; Prevent panic in case of errors during server initialization (#4566)
https://github.com/XTLS/Xray-core/pull/4566#issuecomment-2764779273
2025-03-30 22:55:21 +00:00
patterniha 5922caff89
DNS: Add `expectedIPs` as an alias of `expectIPs` (#4551)
https://github.com/XTLS/Xray-core/discussions/1903#discussioncomment-5543921
2025-03-26 12:18:58 +00:00
patterniha 2d3210e4b8 Env: Add `XRAY_LOCATION_CERT` variable (#4536)
https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941

Fixes https://github.com/XTLS/Xray-core/issues/4531

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-03-24 13:02:35 +00:00
风扇滑翔翼 b585b26f29
Sockopt: Fix Windows UDP `interface` bind; Allow `customSockopt` work for UDP (#4504) 2025-03-21 10:48:46 +00:00
patterniha 1067171e6a
DNS: Add `timeoutMs` for DnsServerObject (#4523) 2025-03-21 10:24:58 +00:00
风扇滑翔翼 6f8e253dec DNS: Add `tag` for DnsServerObject (#4515)
Closes https://github.com/XTLS/Xray-core/issues/4505
2025-03-21 08:58:24 +00:00
patterniha 6a211a0bb9
DNS: Add `allowUnexpectedIPs` for DnsServerObject (#4497)
Closes https://github.com/XTLS/Xray-core/issues/4424
2025-03-20 12:09:02 +00:00
RPRX dde0a4f272
REALITY config: Add `password` as an alias of `publicKey`
https://github.com/XTLS/Xray-core/issues/4458#issuecomment-2696181682
2025-03-04 05:29:03 +00:00
j3l11234 b9cb93d3c2
Sockopt: Add `addressPortStrategy` (query SRV or TXT) (#4416)
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
2025-03-02 13:07:55 +00:00
风扇滑翔翼 d451078e72
Chore: Fix tests (#4440) 2025-02-25 13:11:37 +00:00
lastrise 89792aee9d
Outbound: Add outbound sendThrough origin behavior (#4349)
* added support of sending through origin for outbounds

* added strings package import

* usage of net.SplitHostPort instead of manual splitting

---------

Co-authored-by: poly <poly@>
2025-02-20 15:15:59 -05:00
风扇滑翔翼 4b01eb4398
Metrics: Add direct listen (#4409) 2025-02-18 11:32:48 +00:00
yiguous 94c7970fd6
Config: Correctly marshal PortList and NameServerConfig to JSON (#4386) 2025-02-12 14:55:16 +00:00
RPRX d4c7cd02fd
MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in `verifyPeerCertInNames`, Add checking for `alpn` "fromMitm"
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
2025-02-08 12:11:25 +00:00
RPRX c6a31f457c
MITM: Allow using local received SNI in the outgoing `serverName` & `verifyPeerCertInNames`
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175

Local received SNI was sent by browser/app.

In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.

In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
RPRX 2522cfd7be
DNS DoH: Add h2c Remote mode (with TLS `serverNameToVerify`)
https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864

Applies https://github.com/refraction-networking/utls/pull/161

Closes https://github.com/XTLS/Xray-core/issues/4313
2025-01-25 10:51:44 +00:00
RPRX ca9a902213
XHTTP server: Add `scStreamUpServerSecs`, enabled by default (#4306)
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11682833
2025-01-19 13:32:07 +00:00
RPRX 2f52aa7ed8
Freedom noises: Support RawURLEncoding for "base64"
In case we want to share `noises` via sharing link.
2025-01-02 09:45:46 +00:00
GFW-knocker ca50c9cbe6
Freedom noises: Support "hex" as `type` & `packet` (#4239)
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-01-02 09:17:03 +00:00
风扇滑翔翼 33186ca5e6
Freedom noises: Change legacy variable name (#4238)
Closes https://github.com/XTLS/Xray-core/issues/4237
2025-01-02 08:21:32 +00:00