Xray-core

Commit Graph

Author	SHA1	Message	Date
RPRX	ccba465590	Add reserved to WireGuard config Fixes https://github.com/XTLS/Xray-core/issues/1730	2 years ago
yuhan6665	7b54255cc1	Fix padding extends out of bound	2 years ago
yuhan6665	2d898480be	Vision padding upgrade (#1646 ) * Vision server allow multiple blocks of padding * Fix Vision client to support multiple possible padding blocks * Vision padding upgrade - Now we have two types of padding: long (pad to 900-1400) and traditional (0-256) - Long padding is applied to tls handshakes and first (empty) packet - Traditional padding is applied to all beginning (7) packets of the connection (counted two-way) - Since receiver changed its way to unpad buffer in `fd6973b3c6`, we can freely extend padding packet length easily in the future - Simplify code * Adjust receiver withinPaddingBuffers Now default withinPaddingBuffers = true to give it a chance to do unpadding * Fix magic numbers for Vision Thanks @H1JK Thanks @RPRX for guidance	2 years ago
RPRX	c38179a67f	Upgrade github.com/xtls/reality to f34b4d174342 Fixes https://github.com/XTLS/Xray-core/issues/1712	2 years ago
Hellojack	267d93f7bd	Improve ReshapeMultiBuffer (#1636 ) * Improve ReshapeMultiBuffer * Improve again * Always resize	2 years ago
RPRX	4d2e2b24d3	THE NEXT FUTURE becomes THE REALITY NOW Thank @yuhan6665 for testing	2 years ago
yuhan6665	c3faa8b7ac	Insert padding with empty content to camouflage VLESS header (#1610 ) This only affects the Vision client for protocols expecting server to send data first. The change is compatible with existing version of Vision server.	2 years ago
RPRX	74416570d4	Format VLESS inbound.go and outbound.go	2 years ago
RPRX	b70912799b	Generate *.pb.go files with protoc v3.21.12 https://github.com/protocolbuffers/protobuf/releases/tag/v21.12 go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28 go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2 go run ./infra/vprotogen	2 years ago
yuhan6665	15bb23e4ec	XTLS Vision rejects Mux except for XUDP (#1567 ) * Xtls vision reject vless-tcp-tls+Mux * Address review comment	2 years ago
yuhan6665	fb212905bd	XTLS Vision checks outer TLS version (#1554 )	2 years ago
MP	77d2f9edd7	Revise the Code per XTLS#1515 (#1536 ) * Use buf.FromBytes(make([]byte, 0, buf.Size)) to create `first` Fixes https://github.com/XTLS/Xray-core/issues/1515 * Update server.go * Update inbound.go Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2 years ago
RPRX	8c0d3c0257	XTLS Vision supports acceptProxyProtocol (test needed) Fixes https://github.com/XTLS/Xray-core/issues/1339	2 years ago
RPRX	6f61021f7a	XTLS Vision processes struct TLS Conn's input and rawInput Fixes https://github.com/XTLS/Xray-core/issues/1444	2 years ago
yuhan6665	c4fbdf1b78	Run core/format.go	2 years ago
PMExtra	c9b6fc0104	Add custom header support for HTTP proxy	2 years ago
pocketW	a55cf1d0bf	fix: email inconsistent	2 years ago
yuhan6665	f35ded79ad	Vision only reject TCP command for VLESS-TCP-TLS UDP and MUX command currently has no flow value. Also the character is the same with or without XTLS	2 years ago
yuhan6665	bc4de6a026	Fix VLESS client doesn't handle traffic if not send data first Certain ssh, mySQL and reverse proxy need server data first in a connection	2 years ago
yuhan6665	2e30093ffd	Enforce specific none flow for xtls vision In the past, when user open xtls vision on the server side, plain vless+tls can connect. Pure tls is known to have certain tls in tls characters. Now server need to specify "xtls-rprx-vision,none" for it be able usable on the same port.	2 years ago
yuhan6665	1d7c40d728	Enable Xtls Vision (Direct not Splice) for any inbound connection Before this change, Vision client need a pure inbound like socks or http. After this change, it will support any inbound. This is useful in traffic forwarder use case inside China.	2 years ago
Senis John	143229b148	update: Implement the proxy.UserManager of ss2022	2 years ago
yuhan6665	d87758d46f	Parse big server hello properly	2 years ago
yuhan6665	e5e9e58d66	Fix direct flow on Windows	2 years ago
nanoda0523	e18b52a5df	Implement WireGuard protocol as outbound (client) (#1344 ) * implement WireGuard protocol for Outbound * upload license * fix build for openbsd & dragonfly os * updated wireguard-go * fix up * switch to another wireguard fork * fix * switch to upstream * open connection through internet.Dialer (#1) * use internet.Dialer * maybe better code * fix * real fix Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com> * fix bugs & add ability to recover during connection reset on UDP over TCP parent protocols * improve performance improve performance * dns lookup endpoint && remove unused code * interface address fallback * better code && add config test case Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com>	2 years ago
yuhan6665	494a10971b	Fix xtls vision issue with big server hello	2 years ago
yuhan6665	8006430c15	Add logic to filter TLS_AES_128_CCM_8_SHA256	2 years ago
yuhan6665	04278a8940	Refactor some variable names	2 years ago
yuhan6665	48f7cc2132	Reshape multi buffer to fix the padding when buffer is full	2 years ago
yuhan6665	8ef609ff46	Enable UTLS fingerprint for XTLS Vision	2 years ago
yuhan6665	fffd908db2	Fix direct and splice flow	2 years ago
yuhan6665	5e695327b1	Add XTLS RPRX's Vision (#1235 ) * Add XTLS RPRX's Vision * Add helpful warning when security is wrong * Add XTLS padding (draft) * Fix number of packet to filter * Xtls padding version 1.0 and unpadding logic	2 years ago
yuhan6665	8117b66949	Generate all protos	2 years ago
yuhan6665	c21595a937	Fix an issue with ss2022 generics	2 years ago
yuhan6665	debd2e3ba8	Remove compatibility code The minimum support go version is already 1.18	2 years ago
yuhan6665	84537e98c4	Update xtls and go to 1.19	2 years ago
yuhan6665	71a9a6dd55	Update dependencies - Sync with sing upstream	2 years ago
世界	7d52ded2a3	Update dependencies	2 years ago
世界	52930a16b2	Fix check ss bad udp request #1122	2 years ago
Shelikhoo	d4f18b1342	Fix DoS attack vulnerability in VMess Option Processing	2 years ago
世界	ba4ce4c24f	Add shadowsocks 2022 relay service	2 years ago
世界	bd0cf955c7	Update shadowsocks-2022 multi-server usage	3 years ago
世界	c3505632fd	Add udp over tcp support for shadowsocks-2022	3 years ago
世界	f1d753f069	Fix build in legacy golang version	3 years ago
世界	91ce752405	Fix close pipe	3 years ago
世界	79f3057687	Migrate shadowsocks-2022 to protocol library	3 years ago
世界	1edce576ca	Fix missing user in shadowsocks-2022 inbound	3 years ago
世界	cf7e675c45	Add shadowsocks 2022 multi-user inbound	3 years ago
世界	087f0d1240	Add shadowsocks-2022 inbound/outbound (#1061 )	3 years ago
世界	f046feb9ca	Reformat code	3 years ago
yuhan6665	41ce6ccf9f	Make reverse proxy compatible with v2fly (#924 ) * Make reverse proxy compatible with v2fly * Fix gitignore * Regenerate proto files - fix v2ray name in loopback * Fix fly.org in unit tests	3 years ago
yuhan6665	578d903a9e	Quic related improvements (#915 ) * DialSystem for Quic DialSystem() is needed in case of Android client, where the raw conn is protected for vpn service * Fix client dialer log Log such as: tunneling request to tcp:www.google.com:80 via tcp:x.x.x.x:443 the second "tcp" is misleading when using mKcp or quic transport Remove the second "tcp" and add the correct logging for transport dialer: - transport/internet/tcp: dialing TCP to tcp:x.x.x.x:443 - transport/internet/quic: dialing quic to udp:x.x.x.x:443 * Quic new stream allocation mode Currently this is how Quic works: client muxing all tcp and udp traffic through a single session, when there are more than 32 running streams in the session, the next stream request will fail and open with a new session (port). Imagine lineup the session from left to right: \| \| \| \| \| \| As the streams finishes, we still open stream from the left, original session. So the base session will always be there and new sessions on the right come and go. However, either due to QOS or bugs in Quic implementation, the traffic "wear out" the base session. It will become slower and in the end not receiving any data from server side. I couldn't figure out a solution for this problem at the moment, as a workaround: \| \| \| \| \| \| \| \| I came up with this new stream allocation mode, that it will never open new streams in the old sessions, but only from current or new session from right. The keeplive config is turned off from server and client side. This way old sessions will natually close and new sessions keep generating. Note the frequency of new session is still controlled by the server side. Server can assign a large max stream limit. In this case the new allocation mode will be similar to the current mode.	3 years ago
Machtergreifung	e96e5994d0	Update Vmess Warning Errors	3 years ago
yuhan6665	9ea1bf7c1d	Fix shadowsocks xchacha cipher nonce size	3 years ago
yuhan6665	4e88a369c4	Fix vmess test with portList	3 years ago
yuhan6665	e93da4bd02	Fix some tests and format code (#830 ) * Increase some tls test timeout * Fix TestUserValidator * Change all tests to VMessAEAD Old VMess MD5 tests will be rejected and fail in 2022 * Chore: auto format code	3 years ago
yuhan6665	d5a7901601	Unified drain support for vmess and shadowsocks (#791 ) * Added test for no terminate signal * unified drain support for vmess and shadowsockets * drain: add generated file Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
Shelikhoo	6fb5c887b2	Fix DoS attack vulnerability in CommandSwitchAccountFactory	3 years ago
lucifer9	d6ae4e9ba2	Make it easier to configure multiple listening ports	3 years ago
秋のかえで	63d0cb1bd6	Refactor: new Shadowsocks validator (#629 ) * Refactor: new Shadowsocks validator * Fix NoneCliper cannot work * Feat: refine the size of drain * fix: fix validator after merge 'main' * fix: UDP user logic * style: refine code style	3 years ago
Shelikhoo	7038bded7b	Added experiment to avoid sending the termination signal (cherry picked from commit c5357e1f000054ba5836468922cae52a830c8019)	3 years ago
Shelikhoo	ff35118af5	VMess AEAD based packet length (cherry picked from commit 08221600082a79376bdc262f2ffec1a3129ae98d)	3 years ago
世界	707efd6d12	Add loopback outound	3 years ago
世界	77d0419aca	Add socks4/4a support	3 years ago
maskedeken	238bd5d050	Add xchacha20-ietf-poly1305 for Shadowsocks	3 years ago
秋のかえで	9b204ed99b	Fix: Trojan fallback (cherry picked from commit 908408dd45a58c3c284ecf0dfef539c5681230d9)	3 years ago
yuhan6665	45dc97e2b6	Use shadowsocket's bloomring for shadowsocket's replay protection (#764 ) * use shadowsocket's bloomring for shadowsocket's replay protection * added shadowsockets iv check for tcp socket * Rename to shadowsockets iv check * shadowsocks iv check config file * iv check should proceed after decryption * use shadowsocket's bloomring for shadowsocket's replay protection * Chore: format code (#842) Co-authored-by: Shelikhoo <xiaokangwang@outlook.com> Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>	3 years ago
yuhan6665	e286cdcaa8	Style: format code by gofumpt (#761 )	3 years ago
世界	cd4631ce99	Merge dns (#722 ) * DNS: add clientip for specific nameserver * Refactoring: DNS App * DNS: add DNS over QUIC support * Feat: add disableCache option for DNS * Feat: add queryStrategy option for DNS * Feat: add disableFallback & skipFallback option for DNS * Feat: DNS hosts support multiple addresses * Feat: DNS transport over TCP * DNS: fix typo & refine code * DNS: refine code * Add disableFallbackIfMatch dns option * Feat: routing and freedom outbound ignore Fake DNS Turn off fake DNS for request sent from Routing and Freedom outbound. Fake DNS now only apply to DNS outbound. This is important for Android, where VPN service take over all system DNS traffic and pass it to core. "UseIp" option can be used in Freedom outbound to avoid getting fake IP and fail connection. * Fix test * Fix dns return * Fix local dns return empty * Apply timeout to dns outbound * Update app/dns/config.go Co-authored-by: Loyalsoldier <10487845+loyalsoldier@users.noreply.github.com> Co-authored-by: Ye Zhihao <vigilans@foxmail.com> Co-authored-by: maskedeken <52683904+maskedeken@users.noreply.github.com> Co-authored-by: V2Fly Team <51714622+vcptr@users.noreply.github.com> Co-authored-by: CalmLong <37164399+calmlong@users.noreply.github.com> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com> Co-authored-by: 秋のかえで <autmaple@protonmail.com> Co-authored-by: 朱聖黎 <digglife@gmail.com> Co-authored-by: rurirei <72071920+rurirei@users.noreply.github.com> Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com> Co-authored-by: Arthur Morgan <4637240+badO1a5A90@users.noreply.github.com>	3 years ago
KallyDev	4abf98c1be	Move from deprecated ioutil to os and io packages (#744 )	3 years ago
世界	3b31189f13	Send shadowsocks handshake with payload if available (#736 )	3 years ago
hmol233	7033f7cf5f	Fix: protobuf file (#724 )	3 years ago
Arthur Morgan	ffc2f7c4e2	Style: format code	3 years ago
Arthur Morgan	24b637cd5e	Fix: CounterConnection with ReadV/WriteV (#720 ) Co-authored-by: JimhHan <50871214+JimhHan@users.noreply.github.com>	3 years ago
yuhan6665	f2cb13a8ec	Deprecate legacy VMess header with a planned decommission (#712 ) * Deprecate legacy VMess header with a planned decommission * show legacy warning only once Co-authored-by: Xiaokang Wang <xiaokangwang@outlook.com> Co-authored-by: hmol233 <82594500+hmol233@users.noreply.github.com>	3 years ago
yuhan6665	42d158bd85	vprotogen refine (#717 ) * Update all proto files with existing vprotogen * Chore: remove protoc-gen-gofast * Feat: vprotogen adds version detector to block generation code from old protobuf version * Feat: vprotogen refine logic Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>	3 years ago
yuhan6665	00bcd40c34	remove deprecate ciphers in shadowsocks (#710 ) * remove deprecate ciphers in shadowsocks Co-authored-by: Kslr <kslrwang@gmail.com>	3 years ago
RPRX	100edc370b	Stop at '?' when reading HTTP PATH before shunting	4 years ago
RPRX	924fe16077	Skip Port 53, 443 before using single XUDP for VLESS & VMess	4 years ago
yuhan6665	f50eff5ebb	Add Fake DNS support (#309 ) Co-authored-by: Xiaokang Wang <xiaokangwang@outlook.com> Co-authored-by: loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com> Co-authored-by: kslr <kslrwang@gmail.com>	4 years ago
RPRX	e1a5392beb	Use buf.PacketReader when UDPOverride is available	4 years ago
RPRX	055fb51ed9	Apply UDPOverride to Freedom Outbound PacketReader	4 years ago
秋のかえで	6380abca73	feat: enforcing VMessAEAD via environment variable (#334 )	4 years ago
秋のかえで	1dae2c5636	feat: vmess zero encryption (#333 )	4 years ago
RPRX	fed8610d3f	Fix Freedom Outbound UDP redirect 已检查 b.UDP 各源头：Mux（VLESS、VMess）、Trojan、Shadowsocks、Socks、TPROXY（Dokodemo-door）	4 years ago
RPRX	d22c2d034c	Avoid panic in KDF func for Go 1.16 `2a206c7fcc`	4 years ago
秋のかえで	df39991bb3	Refactor: Add Shadowsocks Validator (#233 )	4 years ago
秋のかえで	96d7156eba	Fix a typo (#236 )	4 years ago
RPRX	d170416219	Add environment variable XRAY_CONE_DISABLED option	4 years ago
RPRX	8ca8a7126b	Add XUDP support by simply renaming vudp to xudp https://t.me/projectXray/243505	4 years ago
RPRX	1174ff3090	Refactor: VLESS & VMess & Mux UDP FullCone NAT https://t.me/projectXray/242770	4 years ago
Jim Han	4cd343f2d5	Fix tests (#201 ) Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	4 years ago
RPRX	303fd6e261	Standardize Socks Outbound Authentication Behavior	4 years ago
RPRX	ceff4185dc	Improve the request for UDP Associate in Socks5	4 years ago
RPRX	8ffc430351	Fix VLESS & Trojan fallbacks xver	4 years ago
Bohan Yang	5bc1bf30ae	Fix fallbacks xver when original address is not TCP address (#182 ) Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	4 years ago
Arthur Morgan	5aa053a65f	Convert domain names to lowercase before matching (#195 ) Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	4 years ago
Jim Han	7f5e34c857	Regenerate .pb.go files (#187 ) Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	4 years ago
RPRX	b60cf02603	Optimize TPROXY Inbound UDP write back Enhanced stability.	4 years ago
RPRX	ae98dc75cf	Set unix.SO_REUSEPORT=1 for TPROXY Inbound FakeUDP Solved some issues.	4 years ago
RPRX	8ff43519fd	Fix Shadowsocks tests; AEAD drop small UDP packets https://t.me/projectXray/172063	4 years ago
RPRX	33755d6e90	Refactor: Shadowsocks AEAD Single-port Multi-user (Needs Optimizations) https://t.me/projectXray/170851	4 years ago
RPRX	99863aa2ac	Add SNI shunt support for Trojan fallbacks	4 years ago
RPRX	88f6537540	Make necessary maps in non-empty names before copy	4 years ago
RPRX	f0efc0cfde	As substring to match in VLESS fallbacks SNI shunt	4 years ago
RPRX	f13ac3cb55	Fix VLESS fallbacks SNI shunt	4 years ago
eMeab	d85162ea44	Add SNI shunt support for VLESS (#141 )	4 years ago
maskedeken	96adf3fbca	Trojan: Do not panic when UDP dispatcher failed to write response (#153 )	4 years ago
RPRX	ee15cc253f	Improve configuration detector (cone or symmetric)	4 years ago
RPRX	700966508f	Improve the response to UDP Associate in Socks5	4 years ago
RPRX	7427a55ef1	Adjust Trojan Outbound postRequest	4 years ago
RPRX	fb0e517158	Adjust Trojan & Socks handleUDPPayload	4 years ago
maskedeken	d5aeb6c545	Refine Trojan packet reader & writer (#142 )	4 years ago
RPRX	161e18299c	Fix TPROXY UDP/IPv6 https://github.com/XTLS/Xray-core/issues/137#issuecomment-756064627 十分感谢 @Ninedyz @changyp6	4 years ago
RPRX	c41a1a56fe	Refactor: TPROXY inbound UDP write back https://t.me/projectXray/119670 虽然不一定是最终的版本，但值得记录，感谢协助测试的各位朋友，特别感谢 @yichya @huyz	4 years ago
RPRX	310a938511	VLESS & VMess are not ready to accept FullCone yet	4 years ago
RPRX	2da07e0f8a	Refactor: FullCone TPROXY Inbound & Socks Outbound https://t.me/projectXray/116037	4 years ago
RPRX	13ad3fddf6	Refactor: net.UDPAddr -> net.Destination https://t.me/projectXray/111998	4 years ago
Arthur Morgan	6f25191822	Changes from v2ray-core (#93 )	4 years ago
RPRX	8f8f7dd66f	Refactor: Shadowsocks & Trojan UDP FullCone NAT https://t.me/projectXray/95704	4 years ago
RPRX	f390047b37	Disable VMess drain when not pure connection	4 years ago
RPRX	6a5618bc54	Outbound Splice supports Inbound XTLS	4 years ago
RPRX	2e942e0303	Fix Trojan XTLS	4 years ago
RPRX	f8faf3c8b8	Removal: confonly	4 years ago
RPRX	b4e84603a2	Add XTLS Splice to Trojan Outbound	4 years ago
RPRX	b3f3c5be81	Use runtime.Gosched() instead	4 years ago
RPRX	41beb4ec04	Add Timer to Inbound metadata struct	4 years ago
RPRX	0d772cd800	Adjust Splice panic strategy	4 years ago
RPRX	16544c18ab	v1.1.0	4 years ago
RPRX	c7f7c08ead	v1.0.0	4 years ago

1 2 3 4 5

230 Commits (main)