yuhan6665
a4790133d2
Fix padding extends out of bound again
2 years ago
RPRX
ccba465590
Add reserved to WireGuard config
...
Fixes https://github.com/XTLS/Xray-core/issues/1730
2 years ago
yuhan6665
7b54255cc1
Fix padding extends out of bound
2 years ago
yuhan6665
2d898480be
Vision padding upgrade ( #1646 )
...
* Vision server allow multiple blocks of padding
* Fix Vision client to support multiple possible padding blocks
* Vision padding upgrade
- Now we have two types of padding: long (pad to 900-1400) and traditional (0-256)
- Long padding is applied to tls handshakes and first (empty) packet
- Traditional padding is applied to all beginning (7) packets of the connection (counted two-way)
- Since receiver changed its way to unpad buffer in fd6973b3c6
, we can freely extend padding packet length easily in the future
- Simplify code
* Adjust receiver withinPaddingBuffers
Now default withinPaddingBuffers = true to give it a chance to do unpadding
* Fix magic numbers for Vision
Thanks @H1JK
Thanks @RPRX for guidance
2 years ago
RPRX
c38179a67f
Upgrade github.com/xtls/reality to f34b4d174342
...
Fixes https://github.com/XTLS/Xray-core/issues/1712
2 years ago
Hellojack
267d93f7bd
Improve ReshapeMultiBuffer ( #1636 )
...
* Improve ReshapeMultiBuffer
* Improve again
* Always resize
2 years ago
RPRX
4d2e2b24d3
THE NEXT FUTURE becomes THE REALITY NOW
...
Thank @yuhan6665 for testing
2 years ago
yuhan6665
c3faa8b7ac
Insert padding with empty content to camouflage VLESS header ( #1610 )
...
This only affects the Vision client for protocols expecting server to send data first.
The change is compatible with existing version of Vision server.
2 years ago
RPRX
74416570d4
Format VLESS inbound.go and outbound.go
2 years ago
RPRX
b70912799b
Generate *.pb.go files with protoc v3.21.12
...
https://github.com/protocolbuffers/protobuf/releases/tag/v21.12
go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28
go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2
go run ./infra/vprotogen
2 years ago
yuhan6665
15bb23e4ec
XTLS Vision rejects Mux except for XUDP ( #1567 )
...
* Xtls vision reject vless-tcp-tls+Mux
* Address review comment
2 years ago
yuhan6665
fb212905bd
XTLS Vision checks outer TLS version ( #1554 )
2 years ago
MP
77d2f9edd7
Revise the Code per XTLS#1515 ( #1536 )
...
* Use buf.FromBytes(make([]byte, 0, buf.Size)) to create `first`
Fixes https://github.com/XTLS/Xray-core/issues/1515
* Update server.go
* Update inbound.go
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2 years ago
RPRX
8c0d3c0257
XTLS Vision supports acceptProxyProtocol (test needed)
...
Fixes https://github.com/XTLS/Xray-core/issues/1339
2 years ago
RPRX
6f61021f7a
XTLS Vision processes struct TLS Conn's input and rawInput
...
Fixes https://github.com/XTLS/Xray-core/issues/1444
2 years ago
yuhan6665
c4fbdf1b78
Run core/format.go
2 years ago
PMExtra
c9b6fc0104
Add custom header support for HTTP proxy
2 years ago
pocketW
a55cf1d0bf
fix: email inconsistent
2 years ago
yuhan6665
f35ded79ad
Vision only reject TCP command for VLESS-TCP-TLS
...
UDP and MUX command currently has no flow value.
Also the character is the same with or without XTLS
2 years ago
yuhan6665
bc4de6a026
Fix VLESS client doesn't handle traffic if not send data first
...
Certain ssh, mySQL and reverse proxy need server data first in a connection
2 years ago
yuhan6665
2e30093ffd
Enforce specific none flow for xtls vision
...
In the past, when user open xtls vision on the server side, plain vless+tls can connect.
Pure tls is known to have certain tls in tls characters.
Now server need to specify "xtls-rprx-vision,none" for it be able usable on the same port.
2 years ago
yuhan6665
1d7c40d728
Enable Xtls Vision (Direct not Splice) for any inbound connection
...
Before this change, Vision client need a pure inbound like socks or http.
After this change, it will support any inbound.
This is useful in traffic forwarder use case inside China.
2 years ago
Senis John
143229b148
update: Implement the proxy.UserManager of ss2022
2 years ago
yuhan6665
d87758d46f
Parse big server hello properly
2 years ago
yuhan6665
e5e9e58d66
Fix direct flow on Windows
2 years ago
nanoda0523
e18b52a5df
Implement WireGuard protocol as outbound (client) ( #1344 )
...
* implement WireGuard protocol for Outbound
* upload license
* fix build for openbsd & dragonfly os
* updated wireguard-go
* fix up
* switch to another wireguard fork
* fix
* switch to upstream
* open connection through internet.Dialer (#1 )
* use internet.Dialer
* maybe better code
* fix
* real fix
Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com>
* fix bugs & add ability to recover during connection reset on UDP over TCP parent protocols
* improve performance
improve performance
* dns lookup endpoint && remove unused code
* interface address fallback
* better code && add config test case
Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com>
2 years ago
yuhan6665
494a10971b
Fix xtls vision issue with big server hello
2 years ago
yuhan6665
8006430c15
Add logic to filter TLS_AES_128_CCM_8_SHA256
2 years ago
yuhan6665
04278a8940
Refactor some variable names
2 years ago
yuhan6665
48f7cc2132
Reshape multi buffer to fix the padding when buffer is full
2 years ago
yuhan6665
8ef609ff46
Enable UTLS fingerprint for XTLS Vision
2 years ago
yuhan6665
fffd908db2
Fix direct and splice flow
2 years ago
yuhan6665
5e695327b1
Add XTLS RPRX's Vision ( #1235 )
...
* Add XTLS RPRX's Vision
* Add helpful warning when security is wrong
* Add XTLS padding (draft)
* Fix number of packet to filter
* Xtls padding version 1.0 and unpadding logic
2 years ago
yuhan6665
8117b66949
Generate all protos
2 years ago
yuhan6665
c21595a937
Fix an issue with ss2022 generics
2 years ago
yuhan6665
debd2e3ba8
Remove compatibility code
...
The minimum support go version is already 1.18
2 years ago
yuhan6665
84537e98c4
Update xtls and go to 1.19
2 years ago
yuhan6665
71a9a6dd55
Update dependencies
...
- Sync with sing upstream
2 years ago
世界
7d52ded2a3
Update dependencies
2 years ago
世界
52930a16b2
Fix check ss bad udp request #1122
2 years ago
Shelikhoo
d4f18b1342
Fix DoS attack vulnerability in VMess Option Processing
2 years ago
世界
ba4ce4c24f
Add shadowsocks 2022 relay service
2 years ago
世界
bd0cf955c7
Update shadowsocks-2022 multi-server usage
2 years ago
世界
c3505632fd
Add udp over tcp support for shadowsocks-2022
3 years ago
世界
f1d753f069
Fix build in legacy golang version
3 years ago
世界
91ce752405
Fix close pipe
3 years ago
世界
79f3057687
Migrate shadowsocks-2022 to protocol library
3 years ago
世界
1edce576ca
Fix missing user in shadowsocks-2022 inbound
3 years ago
世界
cf7e675c45
Add shadowsocks 2022 multi-user inbound
3 years ago
世界
087f0d1240
Add shadowsocks-2022 inbound/outbound ( #1061 )
3 years ago