cbade89ab1
VLESS Encryption: Improve server-side tickets' expiration mechanism
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3253717319
2025-09-04 14:03:55 +00:00
19f8907296
VLESS Encryption: Randomize seconds in ticket and simplify expiration mechanism
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3246925902
2025-09-02 23:37:14 +00:00
e8b02cd664
VLESS Encryption: Add customizable 1-RTT padding parameters; Decrease memory using; Chores
...
Completes https://github.com/XTLS/Xray-core/pull/5067
---------
Co-authored-by: wwqgtxx <wwqgtxx@gmail.com>
2025-08-31 04:09:28 +00:00
7951a5c4bf
VLESS protocol: Add lightweight, Post-Quantum ML-KEM-768-based PFS 1-RTT / anti-replay 0-RTT AEAD Encryption ( #5067 )
...
https://opensea.io/collection/vless
2025-08-28 10:40:48 +00:00
6d1695a686
Some refines related to direct/freedom and `targetStrategy`; More intelligent "useIP"/"ForceIP", enhance "origin" functionality ( #5030 )
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194264277
2025-08-20 01:19:13 +03:30
105b306d07
VLESS practice: Use user-sent VLESS UUID's last byte as `vlessRoute` for `routing` `rules`
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194262087
2025-08-17 13:55:18 +00:00
de23e51077
DNS outbound: Set "reject" as the default value for `nonIPQuery`
...
https://github.com/XTLS/Xray-core/pull/4903#issuecomment-3091367130
2025-08-16 19:12:59 +00:00
40ce850bd9
Direct/Freedom config: Add `targetStrategy` as an alias of `domainStrategy`; Routing config: Remove `domainMatcher`, "linear" and `type` ( #5027 )
...
https://github.com/XTLS/Xray-core/pull/5006#issuecomment-3193547307
2025-08-16 14:54:10 +00:00
aac0d6a6a5
VLESS inbound: Add option to set default `flow` ( #5023 )
...
Closes https://github.com/XTLS/Xray-core/issues/4994
2025-08-15 23:07:33 +00:00
f557bf7da4
Outbound: Add `targetStrategy`; Fix mux does not close `link.Reader`; Fix `origin` does not work on UDP; Add logs ( #5006 )
2025-08-15 20:51:36 +00:00
cde6e33ec9
Freedom: Add `maxSplit` fragment option; Add `applyTo` noises option ( #4998 )
2025-08-07 23:56:09 +00:00
5dce7e4e25
Router: Add `localIP` and `localPort`; Add `sourceIP` as an alias of `source` ( #4992 )
...
https://github.com/XTLS/Xray-core/discussions/4984#discussioncomment-13990687
Closes https://github.com/XTLS/Xray-core/issues/4993
2025-08-07 23:50:39 +00:00
7cbf5b004c
TLS ECH client: `echForceQuery` "full" / "half" / "none" (default) ( #4973 )
...
https://github.com/XTLS/Xray-core/pull/4971#issuecomment-3148113203
2025-08-03 10:15:42 +00:00
87fff12fd9
Root config: Add `version` config (`min` and `max`) ( #4970 )
...
https://github.com/XTLS/Xray-core/pull/4968#issuecomment-3146592323
2025-08-03 01:06:47 +00:00
a02723e63f
TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and `echSockopt`; Fix some issues ( #4949 )
...
Completes https://github.com/XTLS/Xray-core/pull/3813
2025-08-02 16:05:00 +00:00
146b14ab55
Tunnel inbound: Add `portMap` config (local listening port -> remote specified address/port)
...
Completes https://github.com/XTLS/Xray-core/pull/4968
2025-08-02 14:58:56 +00:00
b2829219a0
TLS ECH client: Add `echForceQuery` config ( #4947 )
...
https://github.com/XTLS/Xray-core/pull/4947#issuecomment-3124359776
2025-08-01 11:25:15 +00:00
116cd70a3a
Dokodemo-door: Add simple `tunnel` config (alias and default values) ( #4968 )
...
dokodemo-door -> tunnel
freedom -> direct
blackhole -> block
https://github.com/XTLS/Xray-core/discussions/4966#discussioncomment-13948546
https://github.com/XTLS/Xray-core/pull/4967#issuecomment-3143951306
2025-08-01 11:20:53 +00:00
fb7a9d8d61
TLS client & server: Support Encrypted Client Hello (ECH) ( #3813 )
...
b9a72a4a26
2025-07-26 08:47:27 +00:00
5f93ff6c3a
REALITY config: `mldsa65Seed` and `privateKey` can not be the same value
...
Otherwise the point of using ML-DSA-65 is lost.
2025-07-26 08:36:58 +00:00
31b508d372
REALITY config: Convert `mldsa65Seed` to its private key later
2025-07-24 01:31:07 +00:00
955a569181
REALITY config: Allow `mldsa65` fields to be empty ( #4924 )
2025-07-24 01:15:48 +00:00
446315cf1f
REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions ( #4915 )
...
00881f6740
2025-07-23 02:29:11 +00:00
abd551e9f7
VLESS fallbacks: `dest` defaults to "127.0.0.1" -> "localhost" ( #4840 )
...
https://github.com/XTLS/Xray-examples/issues/234#issuecomment-3091319391
2025-07-19 00:47:43 +00:00
38ed2cc387
DNS: Add new nonIPQuery "reject" ( #4824 )
2025-06-22 22:48:24 -04:00
27742da2c6
BurstObservatory: add option to set http method for burst check ( #4835 )
...
* feat: add options to set method for burst check.
* chore: gen proto.
* chore: change protoc-gen-go to latest.
* revert
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
2025-06-22 21:48:49 -04:00
18ab291e0c
REALITY: Add rate limiting to fallback handling via token bucket ( #4553 )
...
https://github.com/XTLS/REALITY/pull/12
2025-06-08 13:43:55 +00:00
97fdcb4228
New feature: Happy Eyeballs (RFC 8305) ( #4667 )
...
Closes https://github.com/XTLS/Xray-core/issues/4473
2025-06-07 13:20:06 +00:00
4e1a6f0fd1
Sniffer-destOverride: Remove `fakedns+others` option ( #4739 )
...
https://github.com/XTLS/Xray-core/pull/4726#issuecomment-2886494540
2025-06-07 09:01:57 +00:00
6232e230d9
DNS New Features: `disableCache`, `finalQuery`, `unexpectedIPs`, `"*"`, `UseSystem-queryStrategy`, `useSystemHosts` ( #4666 )
2025-06-06 01:59:16 +00:00
028e1114e6
Outbound: Fix sendthrough srcip precheck ( #4750 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-06-06 01:54:15 +00:00
462bc3cfba
BurstObservatory: Fix nil panic when pingConfig is missing ( #4757 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4756
2025-06-04 12:37:43 +00:00
5f3ae64f0c
Sockopt: Allow `customSockopt` work for Windows & Darwin ( #4576 )
...
* Sockopt: Add custom sockopt on Windows & Darwin
* fix windows udp by the way
* use resolved addr
https://github.com/XTLS/Xray-core/pull/4504#issuecomment-2769153797
2025-04-18 02:30:47 +00:00
2d3126b752
Config: Implement missing MarshalJSON for structs having custom UnmarshalJSON ( #4585 )
...
* conf: implement MarshalJSON for FakeDNSConfig
* conf: Rewrite MarshalJSON for PortList
decouple PortRange from PortList.
* conf: implement MarshalJSON for HostAddress
* conf: Add MarshalJSON comments and use pointers.
2025-04-07 11:46:49 -04:00
17207fc5e4
WireGuard: Improve config error handling; Prevent panic in case of errors during server initialization ( #4566 )
...
https://github.com/XTLS/Xray-core/pull/4566#issuecomment-2764779273
2025-03-30 22:55:21 +00:00
5922caff89
DNS: Add `expectedIPs` as an alias of `expectIPs` ( #4551 )
...
https://github.com/XTLS/Xray-core/discussions/1903#discussioncomment-5543921
2025-03-26 12:18:58 +00:00
2d3210e4b8
Env: Add `XRAY_LOCATION_CERT` variable ( #4536 )
...
https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941
Fixes https://github.com/XTLS/Xray-core/issues/4531
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-03-24 13:02:35 +00:00
b585b26f29
Sockopt: Fix Windows UDP `interface` bind; Allow `customSockopt` work for UDP ( #4504 )
2025-03-21 10:48:46 +00:00
1067171e6a
DNS: Add `timeoutMs` for DnsServerObject ( #4523 )
2025-03-21 10:24:58 +00:00
6f8e253dec
DNS: Add `tag` for DnsServerObject ( #4515 )
...
Closes https://github.com/XTLS/Xray-core/issues/4505
2025-03-21 08:58:24 +00:00
6a211a0bb9
DNS: Add `allowUnexpectedIPs` for DnsServerObject ( #4497 )
...
Closes https://github.com/XTLS/Xray-core/issues/4424
2025-03-20 12:09:02 +00:00
dde0a4f272
REALITY config: Add `password` as an alias of `publicKey`
...
https://github.com/XTLS/Xray-core/issues/4458#issuecomment-2696181682
2025-03-04 05:29:03 +00:00
b9cb93d3c2
Sockopt: Add `addressPortStrategy` (query SRV or TXT) ( #4416 )
...
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
2025-03-02 13:07:55 +00:00
d451078e72
Chore: Fix tests ( #4440 )
2025-02-25 13:11:37 +00:00
89792aee9d
Outbound: Add outbound sendThrough origin behavior ( #4349 )
...
* added support of sending through origin for outbounds
* added strings package import
* usage of net.SplitHostPort instead of manual splitting
---------
Co-authored-by: poly <poly@>
2025-02-20 15:15:59 -05:00
4b01eb4398
Metrics: Add direct listen ( #4409 )
2025-02-18 11:32:48 +00:00
94c7970fd6
Config: Correctly marshal PortList and NameServerConfig to JSON ( #4386 )
2025-02-12 14:55:16 +00:00
d4c7cd02fd
MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in `verifyPeerCertInNames`, Add checking for `alpn` "fromMitm"
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
2025-02-08 12:11:25 +00:00
c6a31f457c
MITM: Allow using local received SNI in the outgoing `serverName` & `verifyPeerCertInNames`
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
2522cfd7be
DNS DoH: Add h2c Remote mode (with TLS `serverNameToVerify`)
...
https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864
Applies https://github.com/refraction-networking/utls/pull/161
Closes https://github.com/XTLS/Xray-core/issues/4313
2025-01-25 10:51:44 +00:00
RPRX