4976085ddb
Socks/HTTP inbound: Fix unexpected rawConn copy ( #5041 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5040
2025-08-28 13:41:44 +00:00
7951a5c4bf
VLESS protocol: Add lightweight, Post-Quantum ML-KEM-768-based PFS 1-RTT / anti-replay 0-RTT AEAD Encryption ( #5067 )
...
https://opensea.io/collection/vless
2025-08-28 10:40:48 +00:00
5fa5f3fbb9
WireGuard outbound: Fix close closed ( #5054 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5053
2025-08-27 09:33:09 +00:00
6d1695a686
Some refines related to direct/freedom and `targetStrategy`; More intelligent "useIP"/"ForceIP", enhance "origin" functionality ( #5030 )
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194264277
2025-08-20 01:19:13 +03:30
7f300dbf0c
VLESS practice: Use user-sent VLESS UUID's 7th<<8 | 8th bytes as `vlessRoute` instead
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3195718690
Replaces 105b306d07
2025-08-18 08:50:43 +00:00
5464862ee6
XTLS Vision inbound: Use user-sent VLESS UUID for NewTrafficState()
...
Fixes https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194523018
2025-08-17 18:13:56 +00:00
337b4b814e
Wireguard inbound: Fix context sharing problem ( #4988 )
...
* Try fix Wireguard inbound context sharing problem
* Shallow copy inbound and content
* Fix context passing
* Add notes for source address
2025-08-17 10:56:48 -04:00
105b306d07
VLESS practice: Use user-sent VLESS UUID's last byte as `vlessRoute` for `routing` `rules`
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194262087
2025-08-17 13:55:18 +00:00
de23e51077
DNS outbound: Set "reject" as the default value for `nonIPQuery`
...
https://github.com/XTLS/Xray-core/pull/4903#issuecomment-3091367130
2025-08-16 19:12:59 +00:00
aac0d6a6a5
VLESS inbound: Add option to set default `flow` ( #5023 )
...
Closes https://github.com/XTLS/Xray-core/issues/4994
2025-08-15 23:07:33 +00:00
b1107b9810
Refine must2 and apply NewAesGcm() to all usage ( #5011 )
...
* Refine must2 and apply NewAesGcm() to all usage
* Remove unused package
* Fix test
2025-08-10 21:37:46 -04:00
cde6e33ec9
Freedom: Add `maxSplit` fragment option; Add `applyTo` noises option ( #4998 )
2025-08-07 23:56:09 +00:00
146b14ab55
Tunnel inbound: Add `portMap` config (local listening port -> remote specified address/port)
...
Completes https://github.com/XTLS/Xray-core/pull/4968
2025-08-02 14:58:56 +00:00
116cd70a3a
Dokodemo-door: Add simple `tunnel` config (alias and default values) ( #4968 )
...
dokodemo-door -> tunnel
freedom -> direct
blackhole -> block
https://github.com/XTLS/Xray-core/discussions/4966#discussioncomment-13948546
https://github.com/XTLS/Xray-core/pull/4967#issuecomment-3143951306
2025-08-01 11:20:53 +00:00
10376f5b4d
Freedom UDP: Fix some cone uses like STUN,... when address is domain ( #4942 )
...
https://github.com/XTLS/Xray-core/issues/2962#issuecomment-3120472154
2025-07-26 01:59:15 +00:00
4e826abebf
Chore: Three small fixes ( #4922 )
2025-07-23 12:53:37 +00:00
050f596e8f
Freedom: Fix UDP reply mismatch-address ( #4816 )
2025-07-23 10:07:24 +00:00
3b47d0846e
Freedom: Cache UDP resolve result ( #4804 )
2025-07-23 10:02:27 +00:00
83686ebfaa
DNS outbound: Prevent panic from rejecting invalid domain ( #4903 )
...
Fixes https://github.com/XTLS/Xray-core/pull/4824#issuecomment-3078811352
2025-07-19 01:52:26 +00:00
38ed2cc387
DNS: Add new nonIPQuery "reject" ( #4824 )
2025-06-22 22:48:24 -04:00
b043db8260
API: Fix issue with inbounduser not finding emails with uppercase letters ( #4818 )
2025-06-22 21:57:02 -04:00
aa4134f4a6
DNS: Fix some bugs; Refactors; Optimizations ( #4659 )
2025-04-29 08:39:57 +00:00
7a2f42f8d5
Fix issues related to android client ( #4616 )
...
* WireGuard: Fix tunnel not closed
* Dialer: Apply controllers in lc.Control
2025-04-14 11:08:26 -04:00
17207fc5e4
WireGuard: Improve config error handling; Prevent panic in case of errors during server initialization ( #4566 )
...
https://github.com/XTLS/Xray-core/pull/4566#issuecomment-2764779273
2025-03-30 22:55:21 +00:00
29e37e8a82
HTTP inbound: Directly forward plain HTTP 1xx response header ( #4547 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4545
2025-03-26 12:30:48 +00:00
4afe2d0cff
DNS: Support returning upstream TTL to clients ( #4526 )
...
Closes https://github.com/XTLS/Xray-core/issues/4527
2025-03-24 13:33:56 +00:00
e466b0497c
DNS DoH: Use Chrome's fingerprint & keepAlivePeriod, Add header padding by default
...
https://github.com/XTLS/Xray-core/discussions/4430#discussioncomment-12374292
2025-03-03 14:45:12 +00:00
b38a53e629
UDS: Use UnixListenerWrapper & UnixConnWrapper ( #4413 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4411
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-02-19 11:31:29 +00:00
8cb63db6c0
XHTTP server: Set remoteAddr & localAddr correctly
...
Completes 22c50a70c6
2025-02-18 10:50:50 +00:00
eef74b2c7d
XTLS: More separate uplink/downlink flags for splice copy ( #4407 )
...
- In 03131c72dbhttps://github.com/XTLS/Xray-core/issues/4033
2025-02-18 08:37:52 +00:00
117de1fd3c
MITM freedom RAW TLS: Report website with unexpected Negotiated Protocol / invalid Domain Fronting certificate
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2639965524
Needs `"alpn": ["fromMitm"]` / `"verifyPeerCertInNames": ["fromMitm", ...]`.
2025-02-07 08:15:40 +00:00
c6a31f457c
MITM: Allow using local received SNI in the outgoing `serverName` & `verifyPeerCertInNames`
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
9b7841178a
MITM: Allow forwarding local negotiated ALPN http/1.1 to the real website
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2633656408
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2633865039
Local negotiated ALPN http/1.1 was sent by browser/app or is written in dokodemo-door RAW's `tlsSettings`.
Set `"alpn": ["fromMitm"]` in freedom RAW's `tlsSettings` to forward it to the real website.
2025-02-04 15:10:08 +00:00
03131c72db
XTLS Vision: Use separate uplink/downlink flag for direct copy ( #4329 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4033
2025-01-27 20:44:33 +00:00
30cb22afb1
Mixed inbound: Handle immediately closing connection gracefully ( #4297 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-01-17 13:37:40 +00:00
3e590a4eb1
Freedom: Don't use rawConn copy when using utls ( #4272 )
2025-01-12 14:10:39 -05:00
de53a3b94e
Upgrade gVisor to a newer version ( #3903 )
2025-01-03 15:50:23 +00:00
33186ca5e6
Freedom noises: Change legacy variable name ( #4238 )
...
Closes https://github.com/XTLS/Xray-core/issues/4237
2025-01-02 08:21:32 +00:00
0658c9545b
Freedom config: Fix noises delay ( #4233 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
2025-01-01 11:49:08 +00:00
a8559a1b46
Dokodemo TPROXY: Interrupt UDP download if upload timeouts
...
https://github.com/XTLS/Xray-core/issues/4194#issuecomment-2564156340
Fixes https://github.com/XTLS/Xray-core/issues/4194
2024-12-28 04:06:49 +00:00
42aea01fb5
Core: Add mutex to injection resolution ( #4206 )
...
* Revert "Add RequireFeaturesAsync() that works regardless order of app init"
* Add mutex to injection resolution
- Turns out we already support async DI resolution regardless of feature ordering
Previous code contain a race condition causing some resolution is lost
- Note that the new mutex cover s.pendingResolutions and s.features
but must not cover callbackResolution() due to deadlock
- Refactor some method names and simplify code
* Add OptionalFeatures injection
For example OptionalFeatures() is useful for fakedns module
2024-12-26 12:55:12 +00:00
0e2304c403
Core: Fix memory leaks with RequireFeatures() ( #4095 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4054
Fixes https://github.com/XTLS/Xray-core/issues/3338
Fixes https://github.com/XTLS/Xray-core/issues/3221
2024-12-11 01:07:52 +00:00
3e7002d24c
WireGuard inbound: Add missing inbound session information back ( #4126 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4121
2024-12-06 23:50:26 +00:00
d8934cf839
Chore: Improved log messaging ( #4050 )
...
* update log messages
* Update inbound.go
2024-11-25 11:16:29 -05:00
59e5d24280
WireGuard inbound: Fix leaking session information between requests ( #4030 )
...
Fixes https://github.com/XTLS/Xray-core/issues/3948 https://github.com/XTLS/Xray-core/issues/4025
2024-11-20 05:00:40 +00:00
17825b25f2
WireGuard kernelTun: Fix multi-outbounds not work ( #4015 )
...
Fixes https://github.com/XTLS/Xray-core/issues/2817
2024-11-14 00:13:27 +00:00
7b4a686b74
Chore: Use a more direct and less error-prone return value ( #4008 )
...
Signed-off-by: pinglanlu <pinglanlu@outlook.com>
2024-11-12 10:44:41 -05:00
83bab5dd90
Chore: Run gofmt ( #3990 )
2024-11-09 11:16:11 +00:00
71cfea8aae
Chore: Fix some spelling errors ( #3976 )
2024-11-06 10:42:43 -05:00
85a1c33709
API: Add new Get Inbound User ( #3644 )
...
* Add GetInboundUser in proto
* Add get user logic for all existing inbounds
* Add inbounduser command
* Add option to get all users
* Fix shadowsocks2022 config
* Fix init users in shadowsocks2022
* Fix copy
* Add inbound user count command
This api costs much less than get inbound user, could be useful in some case
* Update from latest main
2024-11-03 00:25:23 -04:00
风扇滑翔翼