RPRX
7f778a4e2f
SHA256(nfsEKeyBytes) for XOR's key
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3185590465
2025-08-13 21:37:06 +00:00
RPRX
09cc92c61d
chore
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3183681018
2025-08-13 12:44:58 +00:00
RPRX
0fd7691d6b
Fix reading ticket hello
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3183283514
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3183324745
2025-08-13 11:24:10 +00:00
RPRX
1720be168f
aes128xor (all) -> xored (optimized)
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3182301703
2025-08-13 10:41:26 +00:00
RPRX
3c20bddfcf
Add 5-bytes header for client/server/ticket hello and server random
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3182301703
2025-08-13 09:17:37 +00:00
RPRX
23d7aad461
Add Close() for ServerInstance; Fix server's nonce overflow
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3180075690
5c61142048 (r163855798)
2025-08-12 17:07:57 +00:00
RPRX
5c61142048
Generate new key when nonce reaches max value
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3179685937
2025-08-12 14:50:44 +00:00
RPRX
ec1cc35188
Mainly reverse VLESS Client Hello
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3176751311
2025-08-12 11:51:28 +00:00
RPRX
7ffb555fc8
Add optional aes128xor layer
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3172703168
2025-08-11 12:07:00 +00:00
RPRX
3e19bf9233
Rename reuse/index -> ticket
2025-08-11 00:24:08 +00:00
RPRX
f61c14e9c6
VLESS protocol: Add lightweight Post-Quantum ML-KEM-768-based PFS 1-RTT / anti-replay 0-RTT AEAD encryption
...
https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3163335040
2025-08-10 11:50:18 +00:00
patterniha
cde6e33ec9
Freedom: Add maxSplit
fragment option; Add applyTo
noises option ( #4998 )
2025-08-07 23:56:09 +00:00
RPRX
146b14ab55
Tunnel inbound: Add portMap
config (local listening port -> remote specified address/port)
...
Completes https://github.com/XTLS/Xray-core/pull/4968
2025-08-02 14:58:56 +00:00
RPRX
116cd70a3a
Dokodemo-door: Add simple tunnel
config (alias and default values) ( #4968 )
...
dokodemo-door -> tunnel
freedom -> direct
blackhole -> block
https://github.com/XTLS/Xray-core/discussions/4966#discussioncomment-13948546
https://github.com/XTLS/Xray-core/pull/4967#issuecomment-3143951306
2025-08-01 11:20:53 +00:00
patterniha
10376f5b4d
Freedom UDP: Fix some cone uses like STUN,... when address is domain ( #4942 )
...
https://github.com/XTLS/Xray-core/issues/2962#issuecomment-3120472154
2025-07-26 01:59:15 +00:00
patterniha
4e826abebf
Chore: Three small fixes ( #4922 )
2025-07-23 12:53:37 +00:00
patterniha
050f596e8f
Freedom: Fix UDP reply mismatch-address ( #4816 )
2025-07-23 10:07:24 +00:00
风扇滑翔翼
3b47d0846e
Freedom: Cache UDP resolve result ( #4804 )
2025-07-23 10:02:27 +00:00
风扇滑翔翼
83686ebfaa
DNS outbound: Prevent panic from rejecting invalid domain ( #4903 )
...
Fixes https://github.com/XTLS/Xray-core/pull/4824#issuecomment-3078811352
2025-07-19 01:52:26 +00:00
风扇滑翔翼
38ed2cc387
DNS: Add new nonIPQuery "reject" ( #4824 )
2025-06-22 22:48:24 -04:00
fL1pSt3r
b043db8260
API: Fix issue with inbounduser not finding emails with uppercase letters ( #4818 )
2025-06-22 21:57:02 -04:00
patterniha
aa4134f4a6
DNS: Fix some bugs; Refactors; Optimizations ( #4659 )
2025-04-29 08:39:57 +00:00
Cl-He-O
7a2f42f8d5
Fix issues related to android client ( #4616 )
...
* WireGuard: Fix tunnel not closed
* Dialer: Apply controllers in lc.Control
2025-04-14 11:08:26 -04:00
Ilya Gulya
17207fc5e4
WireGuard: Improve config error handling; Prevent panic in case of errors during server initialization ( #4566 )
...
https://github.com/XTLS/Xray-core/pull/4566#issuecomment-2764779273
2025-03-30 22:55:21 +00:00
风扇滑翔翼
29e37e8a82
HTTP inbound: Directly forward plain HTTP 1xx response header ( #4547 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4545
2025-03-26 12:30:48 +00:00
Meo597
4afe2d0cff
DNS: Support returning upstream TTL to clients ( #4526 )
...
Closes https://github.com/XTLS/Xray-core/issues/4527
2025-03-24 13:33:56 +00:00
RPRX
e466b0497c
DNS DoH: Use Chrome's fingerprint & keepAlivePeriod, Add header padding by default
...
https://github.com/XTLS/Xray-core/discussions/4430#discussioncomment-12374292
2025-03-03 14:45:12 +00:00
风扇滑翔翼
b38a53e629
UDS: Use UnixListenerWrapper & UnixConnWrapper ( #4413 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4411
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-02-19 11:31:29 +00:00
RPRX
8cb63db6c0
XHTTP server: Set remoteAddr & localAddr correctly
...
Completes 22c50a70c6
2025-02-18 10:50:50 +00:00
yuhan6665
eef74b2c7d
XTLS: More separate uplink/downlink flags for splice copy ( #4407 )
...
- In 03131c72db
new flags were added for uplink/downlink, but that was not suffcient
- Now that the traffic state contains all possible info
- Each inbound and outbound is responsible to set their own CanSpliceCopy flag. Note that this also open up more splice usage. E.g. socks in -> freedom out
- Fixes https://github.com/XTLS/Xray-core/issues/4033
2025-02-18 08:37:52 +00:00
RPRX
117de1fd3c
MITM freedom RAW TLS: Report website with unexpected Negotiated Protocol / invalid Domain Fronting certificate
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2639965524
Needs `"alpn": ["fromMitm"]` / `"verifyPeerCertInNames": ["fromMitm", ...]`.
2025-02-07 08:15:40 +00:00
RPRX
c6a31f457c
MITM: Allow using local received SNI in the outgoing serverName
& verifyPeerCertInNames
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
RPRX
9b7841178a
MITM: Allow forwarding local negotiated ALPN http/1.1 to the real website
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2633656408
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2633865039
Local negotiated ALPN http/1.1 was sent by browser/app or is written in dokodemo-door RAW's `tlsSettings`.
Set `"alpn": ["fromMitm"]` in freedom RAW's `tlsSettings` to forward it to the real website.
2025-02-04 15:10:08 +00:00
yuhan6665
03131c72db
XTLS Vision: Use separate uplink/downlink flag for direct copy ( #4329 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4033
2025-01-27 20:44:33 +00:00
rPDmYQ
30cb22afb1
Mixed inbound: Handle immediately closing connection gracefully ( #4297 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-01-17 13:37:40 +00:00
风扇滑翔翼
3e590a4eb1
Freedom: Don't use rawConn copy when using utls ( #4272 )
2025-01-12 14:10:39 -05:00
Hossin Asaadi
de53a3b94e
Upgrade gVisor to a newer version ( #3903 )
2025-01-03 15:50:23 +00:00
风扇滑翔翼
33186ca5e6
Freedom noises: Change legacy variable name ( #4238 )
...
Closes https://github.com/XTLS/Xray-core/issues/4237
2025-01-02 08:21:32 +00:00
GFW-knocker
0658c9545b
Freedom config: Fix noises delay ( #4233 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-01-01 11:49:08 +00:00
RPRX
a8559a1b46
Dokodemo TPROXY: Interrupt UDP download if upload timeouts
...
https://github.com/XTLS/Xray-core/issues/4194#issuecomment-2564156340
Fixes https://github.com/XTLS/Xray-core/issues/4194
2024-12-28 04:06:49 +00:00
yuhan6665
42aea01fb5
Core: Add mutex to injection resolution ( #4206 )
...
* Revert "Add RequireFeaturesAsync() that works regardless order of app init"
* Add mutex to injection resolution
- Turns out we already support async DI resolution regardless of feature ordering
Previous code contain a race condition causing some resolution is lost
- Note that the new mutex cover s.pendingResolutions and s.features
but must not cover callbackResolution() due to deadlock
- Refactor some method names and simplify code
* Add OptionalFeatures injection
For example OptionalFeatures() is useful for fakedns module
2024-12-26 12:55:12 +00:00
yuhan6665
0e2304c403
Core: Fix memory leaks with RequireFeatures() ( #4095 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4054
Fixes https://github.com/XTLS/Xray-core/issues/3338
Fixes https://github.com/XTLS/Xray-core/issues/3221
2024-12-11 01:07:52 +00:00
风扇滑翔翼
3e7002d24c
WireGuard inbound: Add missing inbound session information back ( #4126 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4121
2024-12-06 23:50:26 +00:00
Aleksandr
d8934cf839
Chore: Improved log messaging ( #4050 )
...
* update log messages
* Update inbound.go
2024-11-25 11:16:29 -05:00
风扇滑翔翼
59e5d24280
WireGuard inbound: Fix leaking session information between requests ( #4030 )
...
Fixes https://github.com/XTLS/Xray-core/issues/3948 https://github.com/XTLS/Xray-core/issues/4025
2024-11-20 05:00:40 +00:00
风扇滑翔翼
17825b25f2
WireGuard kernelTun: Fix multi-outbounds not work ( #4015 )
...
Fixes https://github.com/XTLS/Xray-core/issues/2817
2024-11-14 00:13:27 +00:00
pinglanlu
7b4a686b74
Chore: Use a more direct and less error-prone return value ( #4008 )
...
Signed-off-by: pinglanlu <pinglanlu@outlook.com >
2024-11-12 10:44:41 -05:00
zonescape
83bab5dd90
Chore: Run gofmt ( #3990 )
2024-11-09 11:16:11 +00:00
zonescape
71cfea8aae
Chore: Fix some spelling errors ( #3976 )
2024-11-06 10:42:43 -05:00
yuhan6665
85a1c33709
API: Add new Get Inbound User ( #3644 )
...
* Add GetInboundUser in proto
* Add get user logic for all existing inbounds
* Add inbounduser command
* Add option to get all users
* Fix shadowsocks2022 config
* Fix init users in shadowsocks2022
* Fix copy
* Add inbound user count command
This api costs much less than get inbound user, could be useful in some case
* Update from latest main
2024-11-03 00:25:23 -04:00