Xray-core

Commit Graph

Author	SHA1	Message	Date
RPRX	ee21763928	Run "go fmt ./..."	1 year ago
RPRX	084f4f2e4c	Update comments in reality.go	1 year ago
Hellojack	65b467e448	REALITY protocol: Add ChaCha20-Poly1305 auth mode (#2212 ) https://github.com/XTLS/REALITY/pull/4	1 year ago
yuhan6665	d11d72be6c	Update proto file and fix protoc version parsing The new protoc cli return version v23.1, so we parse the file version v4.23.1 without "4."	1 year ago
dependabot[bot]	86b4b81f1d	Bump github.com/quic-go/quic-go from 0.34.0 to 0.35.1 Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.34.0 to 0.35.1. - [Release notes](https://github.com/quic-go/quic-go/releases) - [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md) - [Commits](https://github.com/quic-go/quic-go/compare/v0.34.0...v0.35.1) --- updated-dependencies: - dependency-name: github.com/quic-go/quic-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
sambali9	5f5ae37571	Added tcp fragmentation for freedom outbound (#2021 ) * Added tcp fragmentation for freedom outbound * Added TCP_NODELAY to outbound sockopt * Changed fragment parameters to accept ranges and changed strategy to use length * Changed packetNumber to packets, supporting range. * Refactored the freedom fragment logic * Refine Write() --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2 years ago
yuhan6665	c80646a045	Clean code dependencies on github.com/miekg/dns (#2099 )	2 years ago
rurirei	d9af02812f	Add ctx to UDP dispatcherConn (#2024 )	2 years ago
xqzr	dd81ad5342	Add `tcpMaxSeg` to `sockopt` (#2002 )	2 years ago
世界	18e5b0963f	Update dependencies	2 years ago
yichya QC	90d915ea05	feat: add tcp_user_timeout ```json {"streamSettings":{"sockopt": {"tcpUserTimeout": 10000}}} ``` run `gofmt -w -s .` as well	2 years ago
yuhan6665	197bc78ea1	Turn off Quic qlog since it jam the regular test info	2 years ago
RPRX	2c0a89f7dc	REALITY protocol: Set the fourth byte as reserved	2 years ago
RPRX	beb603af06	Allow IP address ServerName when "serverName" is not configured In this case, TLS Client Hello will not have SNI (RFC 6066, Section 3)	2 years ago
Hirbod Behnam	526c6789ed	Add custom path to gRPC (#1815 )	2 years ago
Hirbod Behnam	6872be5cc3	Add user agent to gRPC (#1790 )	2 years ago
RPRX	0573760346	Do not show ciphertext SessionID or full AuthKey	2 years ago
世界	55efac7236	Reformat code	2 years ago
xqzr	c3322294be	Add `tcpWindowClamp` to `sockopt` (#1757 ) Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2 years ago
RPRX	836e84b851	Add recover() to H2 server's flushWriter.Write() Fixes https://github.com/XTLS/Xray-core/issues/1748	2 years ago
yuhan6665	9e5bc07bf2	Legends never die (#1725 )	2 years ago
RPRX	6526e74d49	Add WaitReadCloser to make H2 real 0-RTT	2 years ago
RPRX	55dc26f228	Add REALITY support to gRPC client and server Now you are able to configure REALITY gRPC client and server Duplicate of REALITY H2, perhaps, just for fun	2 years ago
RPRX	9401d65ef1	Add REALITY support to H2 server Now you are able to configure REALITY H2 server directly Before: REALITY VLESS fallbacks -> H2C inbound	2 years ago
RPRX	c38179a67f	Upgrade github.com/xtls/reality to f34b4d174342 Fixes https://github.com/XTLS/Xray-core/issues/1712	2 years ago
sduoduo233	336b2daeb9	DNS Header for KCP (#1672 ) * dns header * fixed domain name encoding for dns header --------- Co-authored-by: kerry <lvhaiyangkerry@gmail.com>	2 years ago
xqzr	c8b4580869	add `V6Only` (#1677 ) * add `V6Only` * add `V6Only`	2 years ago
Yue Yin	03b8c094de	Support SPKI Fingerprint Pinning Support SPKI Fingerprint Pinning for TLSObject	2 years ago
RPRX	4d5c3195d2	Refine random Fixes https://github.com/XTLS/Xray-core/issues/1666	2 years ago
RPRX	4d2e2b24d3	THE NEXT FUTURE becomes THE REALITY NOW Thank @yuhan6665 for testing	2 years ago
RPRX	9046eda5ce	Add callClose to UDP Dispatcher Fixes https://github.com/XTLS/Xray-core/issues/1611	2 years ago
RPRX	f32921df30	Refine randomized But we should avoid using it unless we have to, see https://github.com/refraction-networking/utls/pull/157#issuecomment-1417156797	2 years ago
RPRX	f176ec54ee	v1.7.3	2 years ago
pocketW	bf35e9dcd6	fix: handle error raised by dispatcher	2 years ago
RPRX	dc72cf2c78	Refine fingerprints Fixes https://github.com/XTLS/Xray-core/issues/1577	2 years ago
RPRX	b70912799b	Generate *.pb.go files with protoc v3.21.12 https://github.com/protocolbuffers/protobuf/releases/tag/v21.12 go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.28 go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.2 go run ./infra/vprotogen	2 years ago
mra9776	f571aa72df	uTLS PinnedPeerCertificateChainSha256 (#1556 ) * Add tests for utls PinnedPeerCertificateChain * Fix utls not checking PinnedPeerCertificate Co-authored-by: ahmadi <ahmadi@meshkan.com>	2 years ago
yuhan6665	3fb67f065a	Add fingerprint xray_random (#1540 ) * Add fingerprint xray_random xray_random means to pick a random uTLS fingerprint at the core startup This way, the fingerprint is stable for a user for some days. While there is no identifiable signature for the whole xray community * Fingerprint "random" refine Exclude old fingerprint from RNG	2 years ago
aeeq	620eb63c1b	Add sockopt interface setting for binding outbound to a particular device like "eth0" (#1494 ) * Update sockopt_linux.go add Interface Name * Update config.pb.go add Interface Name * Update transport_internet.go add Interface Name * Update config.pb.go * update config.proto add interface * Update config.pb.go	2 years ago
yuhan6665	32ce7cd730	Add new uTLS fingerprints - correct safari - new format is the variable name in https://github.com/refraction-networking/utls/blob/master/u_common.go#L163 - notable ones "HelloChrome_106_Shuffle", "Hello360_Auto", "HelloQQ_Auto"	2 years ago
yuhan6665	c4fbdf1b78	Run core/format.go	2 years ago
aabbccgg	0565589b8b	Changed quic MaxIdleTimeout from 30s to 5min & HandshakeIdleTimeout to 8s	2 years ago
Cubarco	8e75e9d763	Fix sockopt.TcpKeepAliveInterval The Keep-Alive configs may be overridden with golang default settings when `tcpKeepAliveInterval` is set without `tcpKeepAliveIdle`.	2 years ago
Hirbod Behnam	da0b13cca0	Added uTLS to gRPC (#1264 ) * Added uTLS to gRPC * Use base 16 of ciphers as StandardName	2 years ago
Hirbod Behnam	1f93cbbc5d	Added utls to websocket (#1256 ) * Added utls to websocket * Slightly better code One less allocation	2 years ago
Hirbod Behnam	93c7ebe382	Added utls to http2 transport	2 years ago
yuhan6665	8117b66949	Generate all protos	2 years ago
xqzr	8cf23f1947	add `tcpcongestion` (#1234 ) * add `tcpcongestion` * Update sockopt_linux.go * Update config.pb.go * Update transport_internet.go * Update config.pb.go * Update transport_internet.go * Update config.proto	2 years ago
Mocking	4140bcd11a	Enhancement of "redirect" function, adding support for MacOS Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "Redirect" } } } ] 还原#1189 提交	2 years ago
S-Mocking	59602db02d	Add "tproxy" option (#1189 ) * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] Co-authored-by: Mocking <fanhaiwang0817@gmail.com>	2 years ago
ksco.he	76638d793c	fix(udp): check addr nil (close 1807)	2 years ago
yuhan6665	340234166b	Add TCPKeepAliveIdle in Sockopt option (#1166 ) * Add TCP keep alive idle setting * Add TCP keep alive idle setting: auto generated * Add TCP keep alive support in Linux * Add TCP keep alive support in MacOS, FreeBSD * Add TCP keep alive support in Windows * fix bug introduced in adding tcp keep alive adjustment * embed macOS const to avoid platform inconsistency * embed macOS const to avoid platform inconsistency(again) * add TCP Keep Alive support in config * use sys/unix instead of syscall Suggestion from: https://github.com/v2fly/v2ray-core/pull/1395#issuecomment-974761647 * use sys/unix instead of syscall Suggestion from: https://github.com/v2fly/v2ray-core/pull/1395#issuecomment-974761647 * Separate TcpKeepAliveIdle and TcpKeepAliveInterval check logic * Disable tcp keepAlive when TcpKeepAliveIdle < 0 and TcpKeepAliveInterval <= 0 Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com> Co-authored-by: ValdikSS <iam@valdikss.org.ru> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com> Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com>	2 years ago
yuhan6665	00230a74d5	Fix new Quic lib: KeepAlivePeriod (#1139 ) * Bump github.com/lucas-clemente/quic-go from 0.27.2 to 0.28.0 Bumps [github.com/lucas-clemente/quic-go](https://github.com/lucas-clemente/quic-go) from 0.27.2 to 0.28.0. - [Release notes](https://github.com/lucas-clemente/quic-go/releases) - [Changelog](https://github.com/lucas-clemente/quic-go/blob/master/Changelog.md) - [Commits](https://github.com/lucas-clemente/quic-go/compare/v0.27.2...v0.28.0) --- updated-dependencies: - dependency-name: github.com/lucas-clemente/quic-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Fix new Quic lib: KeepAlivePeriod Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
世界	6f93ef7736	Remove useless error log	3 years ago
世界	f046feb9ca	Reformat code	3 years ago
yuhan6665	c9df755426	Add quic qlog to debug logs	3 years ago
yuhan6665	393d211d1e	Rename quic session to connection Co-authored-by: 秋のかえで <autmaple@protonmail.com>	3 years ago
hmol233	b3ab94ef5b	Refine domain socket permission	3 years ago
yuhan6665	41ce6ccf9f	Make reverse proxy compatible with v2fly (#924 ) * Make reverse proxy compatible with v2fly * Fix gitignore * Regenerate proto files - fix v2ray name in loopback * Fix fly.org in unit tests	3 years ago
yuhan6665	578d903a9e	Quic related improvements (#915 ) * DialSystem for Quic DialSystem() is needed in case of Android client, where the raw conn is protected for vpn service * Fix client dialer log Log such as: tunneling request to tcp:www.google.com:80 via tcp:x.x.x.x:443 the second "tcp" is misleading when using mKcp or quic transport Remove the second "tcp" and add the correct logging for transport dialer: - transport/internet/tcp: dialing TCP to tcp:x.x.x.x:443 - transport/internet/quic: dialing quic to udp:x.x.x.x:443 * Quic new stream allocation mode Currently this is how Quic works: client muxing all tcp and udp traffic through a single session, when there are more than 32 running streams in the session, the next stream request will fail and open with a new session (port). Imagine lineup the session from left to right: \| \| \| \| \| \| As the streams finishes, we still open stream from the left, original session. So the base session will always be there and new sessions on the right come and go. However, either due to QOS or bugs in Quic implementation, the traffic "wear out" the base session. It will become slower and in the end not receiving any data from server side. I couldn't figure out a solution for this problem at the moment, as a workaround: \| \| \| \| \| \| \| \| I came up with this new stream allocation mode, that it will never open new streams in the old sessions, but only from current or new session from right. The keeplive config is turned off from server and client side. This way old sessions will natually close and new sessions keep generating. Note the frequency of new session is still controlled by the server side. Server can assign a large max stream limit. In this case the new allocation mode will be similar to the current mode.	3 years ago
hmol233	63da3a5481	grpc: add initial_windows_size option	3 years ago
yuhan6665	e93da4bd02	Fix some tests and format code (#830 ) * Increase some tls test timeout * Fix TestUserValidator * Change all tests to VMessAEAD Old VMess MD5 tests will be rejected and fail in 2022 * Chore: auto format code	3 years ago
yaotthaha-vscode	4fc284a8e9	Try to fix UDP error	3 years ago
roc	dd6769954c	hotRelodaInterval --> hotReloadInterval	3 years ago
世界	5c366db847	Add observatory / latestPing balancing strategy Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
Xiaokang Wang	13bc0432bc	WebSocket Early Data Protocol Harmonization with V2Ray/V2Fly (#548 ) * protocol harmonization with V2Ray/V2Fly by supporting both V2Ray server and XRay server * protocol harmonization with V2Ray/V2Fly by supporting both V2Ray server and XRay server comment	3 years ago
yuhan6665	acb81ebe3d	Verify peer cert function for better man in the middle prevention (#746 ) * verify peer cert function for better man in the middle prevention * publish cert chain hash generation algorithm * added calculation of certificate hash as separate command and tlsping, use base64 to represent fingerprint to align with jsonPb * apply coding style * added test case for pinned certificates * refactored cert pin * pinned cert test * added json loading of the PinnedPeerCertificateChainSha256 * removed tool to prepare for v5 * Add server cert pinning for Xtls Change command "xray tls certChainHash" to xray style Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
yuhan6665	c4fc277758	add comment for gRPC TLS silent failure behavior (#779 ) When gRPC transport have been configured to use TLS, it may silently ignore TLS failure. This may make it harder to diagnose TLS setting issues when gRPC transport is used. This comment is added to help other developers be aware of this caveat. Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
世界	50e576081e	Add DispatchLink	3 years ago
世界	625cf7361a	Export PacketConnWrapper	3 years ago
yuhan6665	e286cdcaa8	Style: format code by gofumpt (#761 )	3 years ago
yuhan6665	a229a7f85e	Revert "cancel failed grpc connection (#707 )" (#768 ) This reverts commit `0f79126379`.	3 years ago
lucifer	5e606169f1	gRPC: Parse X-Real-IP header, fix #766 (#769 )	3 years ago
Arthur Morgan	575c7a9687	adjust	3 years ago
yuhan6665	e6711d1b48	Add header and method support to http2 transport (#755 ) Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
yuhan6665	4bb61701b5	Add tcpKeepAliveInterval in transport sockopt (#754 ) Co-authored-by: Ahmad Karimi <ak12hastam@gmail.com> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
yuhan6665	ef4c63812b	Fix: nullcheck on alternative systemDialer (#752 ) * fix: null-check on alternative systemDialer * delete deprecated option DualStack Co-authored-by: rurirei <72071920+rurirei@users.noreply.github.com>	3 years ago
yuhan6665	3554886ce1	vformat supports multi-core processing (#757 ) * Feat: vformat supports multi-core processing (#996) Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>	3 years ago
hmol233	7033f7cf5f	Fix: protobuf file (#724 )	3 years ago
Arthur Morgan	ffc2f7c4e2	Style: format code	3 years ago
Arthur Morgan	24b637cd5e	Fix: CounterConnection with ReadV/WriteV (#720 ) Co-authored-by: JimhHan <50871214+JimhHan@users.noreply.github.com>	3 years ago
WeidiDeng	b0b2aaa70c	Fixed refresh error when multiple certificates exist (#663 ) * Fix when there are multiple certs, after refresh from file all will be the same as the last.	3 years ago
yuhan6665	42d158bd85	vprotogen refine (#717 ) * Update all proto files with existing vprotogen * Chore: remove protoc-gen-gofast * Feat: vprotogen adds version detector to block generation code from old protobuf version * Feat: vprotogen refine logic Co-authored-by: Loyalsoldier <10487845+Loyalsoldier@users.noreply.github.com>	3 years ago
yuhan6665	0f79126379	cancel failed grpc connection (#707 ) Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
Arthur Morgan	e6019a89c9	adjust for go1.17	3 years ago
Arthur Morgan	c950edede2	Merge pull request #618 from XTLS/fix/service-name gRPC: Use `PathEscape` encoded service name	3 years ago
Arthur Morgan	64892fb2c3	Merge pull request #609 from XTLS/fix/dialer Move `DomainStrategy` & `DialerProxy` to `DialSystem`	3 years ago
Arthur Morgan	d9d239750b	Merge pull request #633 from XTLS/feature/h2-health-check Add health check for h2 & gRPC	3 years ago
Arthur Morgan	7a9e72b133	Merge pull request #589 from bhoppi/main Fix: new cert issuing is incorrectly delayed	3 years ago
hmol233	31c7141fef	gRPC: add keepalive option `PermitWithoutStream`	3 years ago
hmol233	57b9006d26	gRPC: add keepalive option for server	3 years ago
hmol233	d9d04a230f	Add h2 & gRPC health check	3 years ago
hmol233	3dc9fba20d	gRPC: Use `PathEscape` encoded service name	3 years ago
hmol233	86a8fb5d84	Move `DomainStrategy` & `DialerProxy` to `DialSystem` Fix https://github.com/XTLS/Xray-core/issues/608	3 years ago
Bhoppi Chaw	2220411644	fix new cert issuing is incorrectly delayed	4 years ago
hmol233	3b8618b379	Fix linkname	4 years ago
hmol233	e8a8465220	Fix reject unknown sni with single cert	4 years ago
hmol233	1f92b948c0	Fix errNoCertificates	4 years ago
hmol233	53b99efe78	Add: reject unknown SNI Co-Authored-By: 玖柒Max <60207794+jiuqi9997@users.noreply.github.com>	4 years ago
Bhoppi Chaw	bf94fb53ca	Fix QUIC disconnecting issue (#475 ) Co-authored-by: RPRX <63339210+rprx@users.noreply.github.com>	4 years ago

1 2 3 4

190 Commits (c1ad35fba8feb7812f40c52d08d0add7a12d6c96)