Xray-core

Commit Graph

Author	SHA1	Message	Date
yuhan6665	e2302b421c	Update proto file for websocket and httpupgrade (breaking)	8 months ago
Hossin Asaadi	53e5814d19	API - Add \| Remove Routing Rules (#3189 ) * add RuleTag to routing rules * add router pb commands * add and remove routing rules api * cleanup * fix * improve error msg * add append flag apply balancer config	8 months ago
风扇滑翔翼	8a439bf3f2	Fix host in headers field does not work XTLS#3191	8 months ago
lelemka0	e2439c0483	fix: config `burstObservatory` override	8 months ago
风扇滑翔翼	9a619f9e7c	Add support for HTTPupgrade custom headers	8 months ago
风扇滑翔翼	70a5fe9a25	Allow to send through random IPv6	8 months ago
チセ	fe3a0cf954	Chore: Clean up legacy `field` usage	8 months ago
RPRX	18b823b4a6	HTTPUpgrade 0-RTT (#3152 ) * Add ed to enable HTTPUpgrade 0-RTT https://github.com/XTLS/Xray-core/issues/3128#issuecomment-2002563369 * WebSocket hub.go MaxHeaderBytes: 4096 -> 8192	8 months ago
Eken Chan	173b03448f	transport: add httpupgrade	9 months ago
RPRX	7184a8165f	Add Authority to gRPC Transport (#3076 ) Why couldn't you have Host, for the last three years?	9 months ago
yuhan6665	fa5d7a255b	Least load balancer (#2999 ) * v5: Health Check & LeastLoad Strategy (rebased from 2c5a71490368500a982018a74a6d519c7e121816) Some changes will be necessary to integrate it into V2Ray * Update proto * parse duration conf with time.Parse() * moving health ping to observatory as a standalone component * moving health ping to observatory as a standalone component: auto generated file * add initialization for health ping * incorporate changes in router implementation * support principle target output * add v4 json support for BurstObservatory & fix balancer reference * update API command * remove cancelled API * return zero length value when observer is not found * remove duplicated targeted dispatch * adjust test with updated structure * bug fix for observer * fix strategy selector * fix strategy least load * Fix ticker usage ticker.Close does not close ticker.C * feat: Replace default Health Ping URL to HTTPS (#1991) * fix selectLeastLoad() returns wrong number of nodes (#2083) * Test: fix leastload strategy unit test * fix(router): panic caused by concurrent map read and write (#2678) * Clean up code --------- Co-authored-by: Jebbs <qjebbs@gmail.com> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com> Co-authored-by: 世界 <i@sekai.icu> Co-authored-by: Bernd Eichelberger <46166740+4-FLOSS-Free-Libre-Open-Source-Software@users.noreply.github.com> Co-authored-by: 秋のかえで <autmaple@protonmail.com> Co-authored-by: Rinka <kujourinka@gmail.com>	9 months ago
Iain Lau	3a99520370	Add PROXY Protocol support for freedom outbound	10 months ago
Qi Lin	0ea2a50264	Add option `realitySettings.masterKeyLog`	11 months ago
nobody	44bb83033f	Add sub-command "-dump" to "run". (#2854 ) * Add MarshalToJson(). * Add cmd arg -dump for printing out merged multiple json configs. --------- Co-authored-by: nobody <nobody@nowhere.mars>	11 months ago
Allo	006cf491e5	fix(conf): add Windows support for Unix Domain Socket in the fallback settings	11 months ago
Allo	b0bf0d7fd5	fix(conf): add Windows support for Unix Domain Socket	11 months ago
Hossin Asaadi	01c14a5994	add Round-Robin Strategy to balancer (#2844 ) * add Round-Robin Strategy * clean up	11 months ago
风扇滑翔翼	9becf02316	allow empty route type default field	11 months ago
yuhan6665	6f092bd212	Add "masterKeyLog" in TLS config (#2758 ) * Add "enableMasterKeyLog" in TLS config Turn on the debug option for Wireshark to decrypt traffic * Change to "masterKeyLog" to configure a path	1 year ago
hax0r31337	0ac7da2fc8	WireGuard Inbound (User-space WireGuard server) (#2477 ) * feat: wireguard inbound * feat(command): generate wireguard compatible keypair * feat(wireguard): connection idle timeout * fix(wireguard): close endpoint after connection closed * fix(wireguard): resolve conflicts * feat(wireguard): set cubic as default cc algorithm in gVisor TUN * chore(wireguard): resolve conflict * chore(wireguard): remove redurant code * chore(wireguard): remove redurant code * feat: rework server for gvisor tun * feat: keep user-space tun as an option * fix: exclude android from native tun build * feat: auto kernel tun * fix: build * fix: regulate function name & fix test	1 year ago
yuhan6665	7523f7f440	统一 `domainStrategy` 行为. (#2720 ) * 统一 `domainStrategy` 行为. * Update proto --------- Co-authored-by: rui0572 <125641819+rui0572@users.noreply.github.com>	1 year ago
yuhan6665	d9fd3f8eb1	Freedom xdomain strategy (#2719 ) * 统一 `domainStrategy` 行为. * aliases NG. * 化简. * 调整. * Let it crash. * Update proto --------- Co-authored-by: rui0572 <125641819+rui0572@users.noreply.github.com>	1 year ago
yuhan6665	a109389efb	Wireguard resolve strategy (#2717 ) * 增加 wireguard 出站选项 `resolveStrategy`. * They become a part of you. * 移除不必要的选项别名. * aliases NG. * 微调. --------- Co-authored-by: rui0572 <125641819+rui0572@users.noreply.github.com>	1 year ago
Ikko Eltociear Ashimine	1d89ae2847	Fix typo in xray.go overide -> override	1 year ago
yuhan6665	4f05e0ac2b	Unify environment var readers	1 year ago
Hossin Asaadi	67c66faaed	Override outbounds in multi config files (#2659 ) * fix override outbounds in multi config * log outbounds override status * fix prepend bug * improve outbounds-prepend test * fix prepend outbound * fix outbounds-prepend test	1 year ago
hossinasaadi	71fee07175	fix inbounds-replaceall test	1 year ago
hossinasaadi	42d586df09	log inbound override status	1 year ago
hossinasaadi	4f8b73bb1f	fix override Inbounds in multi config	1 year ago
cty123	4f6042c69f	feat(dns): Support DNS queryStrategy config per NameServer.	1 year ago
yylt	c00e56c0da	Add `tcpMptcp` to `sockopt` (#2520 )	1 year ago
hax0r31337	f67167bb3b	refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf	1 year ago
RPRX	f0f3b417f7	Refactor: Fragmentation `5f5ae37571` `9122d0f056`	1 year ago
RPRX	6d4194415d	Clean unnecessary code in Trojan	1 year ago
RPRX	4f8f49024b	Fix xray_test.go	1 year ago
RPRX	a9ed1a03aa	Fix dns_proxy_test.go	1 year ago
RPRX	253a422467	Fix "nonIPQuery"	1 year ago
RPRX	ee21763928	Run "go fmt ./..."	1 year ago
RPRX	667279af57	Add "nonIPQuery" to DNS outbound ("drop" by default) And fixed a memory leak And regenerated *.pb.go	1 year ago
rrouzbeh	9122d0f056	Add TLS Hello Fragmentation for freedom outbound (#2131 ) * Replace TCP Segmentation with TLS Hello Fragmentation * Update infra/conf/freedom.go * Refine proxy/freedom/freedom.go --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	1 year ago
yuhan6665	9112cfd39c	Clean legacy vmess (#2199 ) * Remove legacy Vmess * validators * protos	1 year ago
yuhan6665	bf4b1fab3c	Simplify http attrabute matching In the past, we use Starlark script, it is over engineered and barely used. By switching to simple key value string contains logic we can reduce core size about 0.7MB	1 year ago
yuhan6665	c9f517108c	Remove mtproto	1 year ago
sambali9	5f5ae37571	Added tcp fragmentation for freedom outbound (#2021 ) * Added tcp fragmentation for freedom outbound * Added TCP_NODELAY to outbound sockopt * Changed fragment parameters to accept ranges and changed strategy to use length * Changed packetNumber to packets, supporting range. * Refactored the freedom fragment logic * Refine Write() --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2 years ago
xqzr	dd81ad5342	Add `tcpMaxSeg` to `sockopt` (#2002 )	2 years ago
yichya QC	90d915ea05	feat: add tcp_user_timeout ```json {"streamSettings":{"sockopt": {"tcpUserTimeout": 10000}}} ``` run `gofmt -w -s .` as well	2 years ago
RPRX	06c9e50c52	Add "xudpProxyUDP443" to Mux config & XUDP rejects UDP/443 traffic by default (client side, excluding reverse proxy)	2 years ago
RPRX	24a2be43ef	Replace "only" with "xudpConcurrency" in Mux config	2 years ago
RPRX	29d7865d78	Refine "only" in Mux config	2 years ago
RPRX	be23d5d3b7	XUDP protocol: Add Global ID & UoT Migration The first UoT protocol that supports UoT Migration Thank @yuhan6665 for testing	2 years ago
RPRX	a0d06f3a97	Add env support to "address", "listen", etc. Usage: `"address": "env:ADDR"`, `"listen": "env:AUDS"`... Just like existing `"port": "env:PORT"`	2 years ago
Hirbod Behnam	6872be5cc3	Add user agent to gRPC (#1790 )	2 years ago
世界	55efac7236	Reformat code	2 years ago
世界	f57ec13880	Update UoT protocol	2 years ago
xqzr	c3322294be	Add `tcpWindowClamp` to `sockopt` (#1757 ) Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2 years ago
RPRX	c04c333afc	They become a part of you	2 years ago
yuhan6665	9e5bc07bf2	Legends never die (#1725 )	2 years ago
RPRX	ccba465590	Add reserved to WireGuard config Fixes https://github.com/XTLS/Xray-core/issues/1730	2 years ago
RPRX	55dc26f228	Add REALITY support to gRPC client and server Now you are able to configure REALITY gRPC client and server Duplicate of REALITY H2, perhaps, just for fun	2 years ago
sduoduo233	336b2daeb9	DNS Header for KCP (#1672 ) * dns header * fixed domain name encoding for dns header --------- Co-authored-by: kerry <lvhaiyangkerry@gmail.com>	2 years ago
xqzr	c8b4580869	add `V6Only` (#1677 ) * add `V6Only` * add `V6Only`	2 years ago
Yue Yin	03b8c094de	Support SPKI Fingerprint Pinning Support SPKI Fingerprint Pinning for TLSObject	2 years ago
RPRX	9d3de59d3f	Check "serverNames" and "shortIds" (client side) Prevents https://github.com/XTLS/Xray-core/issues/1675	2 years ago
RPRX	c7358a32f5	Allow empty "spiderX" (client side)	2 years ago
RPRX	e1cd1fd33e	Allow empty "shortId" (client side)	2 years ago
RPRX	4d2e2b24d3	THE NEXT FUTURE becomes THE REALITY NOW Thank @yuhan6665 for testing	2 years ago
RPRX	fa7300e910	Add warning on using old version of XTLS And checks param `fingerprint` also	2 years ago
RPRX	dc72cf2c78	Refine fingerprints Fixes https://github.com/XTLS/Xray-core/issues/1577	2 years ago
aeeq	620eb63c1b	Add sockopt interface setting for binding outbound to a particular device like "eth0" (#1494 ) * Update sockopt_linux.go add Interface Name * Update config.pb.go add Interface Name * Update transport_internet.go add Interface Name * Update config.pb.go * update config.proto add interface * Update config.pb.go	2 years ago
RPRX	ff5ce767df	Revert "add file soft link path resolve support (#1482 )" (#1495 ) This reverts commit `eaf401eda9`.	2 years ago
Nanyu	eaf401eda9	add file soft link path resolve support (#1482 ) * add file soft link path resolve * add configuration file soft link path resolve support	2 years ago
yuhan6665	c4fbdf1b78	Run core/format.go	2 years ago
PMExtra	c9b6fc0104	Add custom header support for HTTP proxy	2 years ago
yuhan6665	2e30093ffd	Enforce specific none flow for xtls vision In the past, when user open xtls vision on the server side, plain vless+tls can connect. Pure tls is known to have certain tls in tls characters. Now server need to specify "xtls-rprx-vision,none" for it be able usable on the same port.	2 years ago
nanoda0523	e18b52a5df	Implement WireGuard protocol as outbound (client) (#1344 ) * implement WireGuard protocol for Outbound * upload license * fix build for openbsd & dragonfly os * updated wireguard-go * fix up * switch to another wireguard fork * fix * switch to upstream * open connection through internet.Dialer (#1) * use internet.Dialer * maybe better code * fix * real fix Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com> * fix bugs & add ability to recover during connection reset on UDP over TCP parent protocols * improve performance improve performance * dns lookup endpoint && remove unused code * interface address fallback * better code && add config test case Co-authored-by: nanoda0523 <nanoda0523@users.noreply.github.com>	2 years ago
yuhan6665	5e695327b1	Add XTLS RPRX's Vision (#1235 ) * Add XTLS RPRX's Vision * Add helpful warning when security is wrong * Add XTLS padding (draft) * Fix number of packet to filter * Xtls padding version 1.0 and unpadding logic	2 years ago
xqzr	8cf23f1947	add `tcpcongestion` (#1234 ) * add `tcpcongestion` * Update sockopt_linux.go * Update config.pb.go * Update transport_internet.go * Update config.pb.go * Update transport_internet.go * Update config.proto	2 years ago
yuhan6665	debd2e3ba8	Remove compatibility code The minimum support go version is already 1.18	2 years ago
Mocking	4140bcd11a	Enhancement of "redirect" function, adding support for MacOS Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "Redirect" } } } ] 还原#1189 提交	2 years ago
S-Mocking	59602db02d	Add "tproxy" option (#1189 ) * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] * Add "tproxy" option Added the function of "MacOS" FreeBSD firewall traffic forwarding and resolving destination address example: "inbounds": [ { "listen": "127.0.0.1", "port": 1122, "protocol": "dokodemo-door", "tag": "dokodemo", "settings": { "network": "tcp", "followRedirect": true, "userLevel": 0 }, "streamSettings": { "sockopt": { "tproxy": "pf" } } } ] Co-authored-by: Mocking <fanhaiwang0817@gmail.com>	2 years ago
yuhan6665	b67314796f	Add shadowsocks 2022 relay config	2 years ago
yuhan6665	340234166b	Add TCPKeepAliveIdle in Sockopt option (#1166 ) * Add TCP keep alive idle setting * Add TCP keep alive idle setting: auto generated * Add TCP keep alive support in Linux * Add TCP keep alive support in MacOS, FreeBSD * Add TCP keep alive support in Windows * fix bug introduced in adding tcp keep alive adjustment * embed macOS const to avoid platform inconsistency * embed macOS const to avoid platform inconsistency(again) * add TCP Keep Alive support in config * use sys/unix instead of syscall Suggestion from: https://github.com/v2fly/v2ray-core/pull/1395#issuecomment-974761647 * use sys/unix instead of syscall Suggestion from: https://github.com/v2fly/v2ray-core/pull/1395#issuecomment-974761647 * Separate TcpKeepAliveIdle and TcpKeepAliveInterval check logic * Disable tcp keepAlive when TcpKeepAliveIdle < 0 and TcpKeepAliveInterval <= 0 Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com> Co-authored-by: ValdikSS <iam@valdikss.org.ru> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com> Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com>	2 years ago
yuhan6665	9480bc0379	Fix ss2022 user stat for single user	2 years ago
世界	c3505632fd	Add udp over tcp support for shadowsocks-2022	3 years ago
世界	f1d753f069	Fix build in legacy golang version	3 years ago
世界	79f3057687	Migrate shadowsocks-2022 to protocol library	3 years ago
世界	cf7e675c45	Add shadowsocks 2022 multi-user inbound	3 years ago
世界	b6391cbbe1	Fix shadowsocks config	3 years ago
世界	3b77e26fa7	Merge shadowsocks 2022 config	3 years ago
世界	087f0d1240	Add shadowsocks-2022 inbound/outbound (#1061 )	3 years ago
yuhan6665	3f64f3206c	Quic sniffer (#1074 ) * Add quic sniffer * Fix quic sniffer * Add uTP sniffer * rename buf pool membership status to unmanaged * rename buf type adaptor into FromBytes Co-authored-by: 世界 <i@sekai.icu> Co-authored-by: Shelikhoo <xiaokangwang@outlook.com>	3 years ago
世界	f046feb9ca	Reformat code	3 years ago
yichya QC	2f86c7c795	fix: read port from environment variable	3 years ago
yuhan6665	b413066012	Fakedns fix xUDP destination override (#1011 ) * Fix UDP destination override * Fix code style * Fix fakedns object init Do type convertion at runtime in case if user don't use fakedns in config. Since dispatcher now depend on fakedns object, move the injection order of fakedns to top (As a temporary solution) * Amend logic for handing fakedns client A map is used by server side when client turn on fakedns Client will send domain address in the buffer.UDP.Address, server record all possible target IP addrs. When target replies, server will restore the domain and send back to client. Co-authored-by: hmol233 <82594500+hmol233@users.noreply.github.com>	3 years ago
yichya	35eb165f63	feat: metrics including pprof, expvars	3 years ago
hmol233	63da3a5481	grpc: add initial_windows_size option	3 years ago
xqzr	c8e2a99e68	fix unsupported cipher method: xChaCha20-IETF-Poly1305	3 years ago
yuhan6665	e93da4bd02	Fix some tests and format code (#830 ) * Increase some tls test timeout * Fix TestUserValidator * Change all tests to VMessAEAD Old VMess MD5 tests will be rejected and fail in 2022 * Chore: auto format code	3 years ago
lucifer9	d6ae4e9ba2	Make it easier to configure multiple listening ports	3 years ago
Zhu Sheng Li	28b17b529d	Add concurrency option for outbound observation Add `enableConcurrency` option, false by default. If it's set as `true`, start probing outbounds concurrently in every circle of observation. Wait `probeInterval` between observation circles.	3 years ago

1 2 3 4 5

212 Commits (ccc4b7b2cf93a06273f738350aa81e5ef1ec3212)