XTLS_Xray-core

mirror of https://github.com/XTLS/Xray-core.git synced 2026-10-01 19:38:00 +03:00

Author	SHA1	Message	Date
patternihaandClaude Opus 5.5	2db099b34b	TUN inbound: Block DNS and IPv6 leaks outside the TUN on Windows; Add `strictRoute` Windows sends name queries to the DNS servers of all interfaces, and a resolver on the local network (e.g. 192.168.1.1 from DHCP) is reached through its more specific LAN route instead of the TUN, so DNS leaks past it. IPv6 bypasses a TUN that cannot carry it. With autoSystemRoutingTable set, the Windows TUN now adds Windows Filtering Platform filters, all in one transaction and in a dynamic session, so that they are removed when Xray exits, even if it crashes: - DNS (port 53) only goes through the TUN, in both directions: its local address, and the interface it leaves or arrives by, must be the TUN's. - IPv6 is blocked in both directions when the TUN has no IPv6 address or no IPv6 route, except loopback, neighbor and multicast listener discovery, and DHCPv6. - Xray's own traffic is exempt: its connections out with a hard permit, which Windows Firewall rules do not override (like sing-box's strict_route), connections to its inbounds with an ordinary one. If the filters cannot be added, the TUN does not start on Windows 10 and later (only a warning on 7/8). The new `strictRoute` option (true by default) turns them off. Also on Windows: - A warning for `dns` servers outside gateway and autoSystemRoutingTable, as queries to them cannot go through the TUN and are blocked. - While DNS is restricted and autoOutboundsInterface is in use, Xray resolves the names it would ask Windows for itself (Go's resolver on its own sockets). Those lookups and the `localhost` DNS server skip the TUN's DNS servers, unless another interface uses them too, instead of looping back into the TUN. - The DNS cache is flushed when the TUN starts and stops, and DNS registration is turned off on the TUN (through netsh before Windows 10 1809). - Close no longer panics when registering the route or interface change callbacks failed. The README's Windows section describes all of it. Tested on Windows 11, elevated, amd64 and 386: the filters, DNS arriving through a real Wintun adapter and blocked outside it, the IPv6 block, Windows Firewall rules, and a real Xray run. Windows 7/8 and Windows 10 before 1809 are untested. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-28 08:15:40 +03:30
Esko Mobiusand风扇滑翔翼	7780db9bbe	Finalmask: Fix panic when udpHop or xicmp fails; Restore udpHop's default `interval` (#6808 ) https://github.com/XTLS/Xray-core/pull/6808#pullrequestreview-5324529175 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-09-27 22:17:47 +00:00
Cluvex	7a018833ec	Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844 ) Completes https://github.com/XTLS/Xray-core/pull/6807 and https://github.com/XTLS/Xray-core/pull/6810	2026-09-27 19:16:54 +00:00
Cluvex	df261e4479	MASQUE client: Support HTTP/2 (Extended CONNECT, RFC 8441) (#6810 ) https://github.com/XTLS/Xray-core/pull/6807#issuecomment-5808933074 https://github.com/XTLS/Xray-core/pull/6810#issuecomment-5842441136	2026-09-26 03:49:37 +00:00
风扇滑翔翼	61cad5ec8b	Xray-core: Reduce error log usage for performance (#6796 ) https://github.com/XTLS/Xray-core/pull/6796#issuecomment-5807809588	2026-09-25 17:59:49 +00:00
Esko Mobius	7d3e44fee2	Proxy: Add MASQUE outbound & transport (IETF CONNECT-IP, RFC 9484) (#6807 ) Closes https://github.com/XTLS/Xray-core/issues/5495#issuecomment-3710683679	2026-09-24 02:13:37 +00:00
Жора ЗмейкинandLjhAUMEM	d562d8947d	Hysteria outbound: Fix UDP DATAGRAM truncation with ChromeParrot (#6788 ) https://github.com/XTLS/Xray-core/pull/6788#issuecomment-5751428127 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-09-20 22:51:03 +00:00
LjhAUMEM	8267cf953a	Transport: Refactor to be based on Finalmask's dialer & listener (#6754 ) https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5645958010 https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5720818254 https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5751585906	2026-09-20 18:12:50 +00:00
RisaroandRPRX	dcdfc57ccd	XDRIVE transport: Add the Google Drive and "template" backend (#6748 ) https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3849778103 https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3851839033 https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627294204 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5660444946 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5719209642 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-09-19 09:03:11 +00:00
RPRXandRisaro	3461c511aa	XDRIVE transport: The universal remote-storage/any-service-based proxy, ignoring IP whitelists (#5645 ) https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3796734827 https://github.com/XTLS/Xray-core/pull/5581#issuecomment-3797134147 https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3899873945 https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627420177 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5740443122 --------- Co-authored-by: Risaro <62798663+Risaro@users.noreply.github.com>	2026-09-19 08:23:38 +00:00
LjhAUMEMandRPRX	18a1b5042a	Finalmask: Make "udpHop" a new UDP mask (#6327 ) https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5592421364 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-09-08 22:15:02 +00:00
风扇滑翔翼	c037ccd98d	infra/vformat/main.go: Refactor (#6739 ) https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5581733848	2026-09-08 17:19:15 +00:00
Meow	3e2f040cd8	Direct/Freedom outbound: Better Compatibility (#6058 ) Fixes https://github.com/XTLS/Xray-core/issues/6393	2026-09-08 03:31:25 +00:00
Eninspaceand风扇滑翔翼	eef6e63bc1	XHTTP client: Fix a data race in WaitReadCloser (#6694 ) https://github.com/XTLS/Xray-core/pull/6694#issuecomment-5575759500 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-09-07 22:38:16 +00:00
XXcipherX	de2caf3cef	Hysteria server: Fix Unix masquerade socket path (#6705 ) https://github.com/XTLS/Xray-core/pull/6705#issuecomment-5489788730	2026-09-07 21:01:45 +00:00
pexcn	cd4ce973e9	WebSocket client: Avoid panic before real dialing in delayDialConn (#6544 ) Fixes https://github.com/teddysun/xray-plugin-android/issues/11	2026-09-01 04:57:10 +00:00
patterniha	fc7b980636	Sockopt: Fix indentation of the CustomSockopt block for Linux (#6568 ) https://github.com/XTLS/Xray-core/pull/6568#issuecomment-5488145252 Fixes https://github.com/XTLS/Xray-core/issues/6564 Fixes https://github.com/XTLS/Xray-core/issues/6602	2026-09-01 04:47:55 +00:00
Maksim Varentsovand风扇滑翔翼	540b9070f5	Transport: Bind the UDP outbound socket in the destination family (#6688 ) https://github.com/XTLS/Xray-core/pull/6688#issuecomment-5445559197 Completes https://github.com/XTLS/Xray-core/pull/6624#issuecomment-5430488664 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-08-27 21:46:26 +00:00
LjhAUMEM	ada99a4eb0	Hysteria: Upgrade to official v2.12.2 (#6565 ) https://github.com/XTLS/Xray-core/pull/6565#issuecomment-5202554275 Fixes https://github.com/XTLS/Xray-core/issues/6408 Fixes https://github.com/XTLS/Xray-core/issues/6598 ...	2026-08-27 17:25:56 +00:00
风扇滑翔翼	65458e919f	Config: Fix some issues (#6640 ) https://github.com/XTLS/Xray-core/pull/6640#issuecomment-5420106315 Fixes https://github.com/XTLS/Xray-core/issues/6636 Fixes https://github.com/XTLS/Xray-core/issues/6600 ...	2026-08-27 20:03:59 +08:00
Maksim Varentsov	25c11e2d2b	Tunnel inbound: SO_REUSEPORT fix and IPv6 support for the OpenBSD transparent proxy (#6624 ) Completes https://github.com/XTLS/Xray-core/pull/6546	2026-08-26 21:05:05 +00:00
FunLay123and风扇滑翔翼	dffc7ada5e	XHTTP client: Define Request.GetBody() for packet-up so h2 can replay after GOAWAY (#6632 ) https://github.com/XTLS/Xray-core/pull/6632#issuecomment-5430735467 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-08-26 20:41:43 +00:00
ivolframand风扇滑翔翼	77f98eba09	XHTTP client: Fix a race condition and a data race (#6665 ) https://github.com/XTLS/Xray-core/pull/6665#issuecomment-5429028477 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-08-26 19:19:41 +00:00
Maksim Varentsov	a000371b2a	Tunnel inbound: Support TPROXY on OpenBSD as well (#6546 ) https://github.com/XTLS/Xray-core/pull/6546#issuecomment-5100711574	2026-08-12 04:51:38 +00:00
Sparrowand风扇滑翔翼	6ab123bf8f	XMC finalmask: Add default directional padding/keep-alive packets, matching Minecraft 26.1.2 login/join/etc traffic shapes (#6487 ) https://github.com/XTLS/Xray-core/pull/6487#issuecomment-5092235757 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-07-28 06:45:36 +00:00
风扇滑翔翼andechoowall	4aba687dd3	XHTTP & gRPC servers: Get accurate localAddr (#6526 ) Fixes https://github.com/XTLS/Xray-core/pull/6476 --------- Co-authored-by: echoowall <echoowall@gmail.com>	2026-07-27 13:11:25 +00:00
Exclude0122	35387572e0	Finalmask: Add XMC (TCP, Minecraft) (#6210 ) https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4573680059 https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4582554889 https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4937008835	2026-07-11 13:59:24 +00:00
风扇滑翔翼	64fada32b5	TLS client: Pinning CA must have `serverName` (or higher-priority `verifyPeerCertByName` or outbound's `address`) for `pinnedPeerCertSha256` (#6472 ) Fixes https://github.com/XTLS/Xray-core/security/advisories/GHSA-5wf9-h793-w73c	2026-07-10 21:03:35 +00:00
yiguodev	d5bc58dc6b	Root config: Add `env` config (#6400 ) https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4880198100 https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4916892425 https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4929136670	2026-07-10 02:56:49 +00:00
patterniha	c18b39ed80	TLS client: Support more `cipherSuites` for "unsafe" (golang) `fingerprint` for anti-NIN (#6450 ) https://github.com/XTLS/Xray-core/pull/6450#issuecomment-4929495504	2026-07-10 02:02:31 +00:00
Ran Theand风扇滑翔翼	c320e89108	HTTPUpgrade server: Keep accepting after transient errors as RAW does; Add handshake read deadline as WS does (#6463 ) https://github.com/XTLS/Xray-core/pull/6463#issuecomment-4929183257 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-07-09 20:55:40 +00:00
ivolfram	1aabe7ea78	XHTTP transport: Do not force trailing path `/` when both sessionID and seq are placed elsewhere (#6307 ) https://github.com/XTLS/Xray-core/discussions/6385#discussioncomment-17454120 https://github.com/XTLS/Xray-core/pull/6307#issuecomment-4917498294 Closes https://github.com/XTLS/Xray-core/issues/6410	2026-07-08 17:59:19 +00:00
James Liuand风扇滑翔翼	e4e7614c62	TLS ECH: Update ECH configuration parsing logic to be more robust (#6441 ) https://github.com/XTLS/Xray-core/pull/6441#issuecomment-4903624643 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-07-08 11:12:37 +00:00
seallyandLjhAUMEM	452b719504	Hysteria inbound: Support `routing`'s `vlessRoute` as well (#6375 ) https://github.com/XTLS/Xray-core/pull/6375#issuecomment-4795522284 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-06-27 12:04:58 +00:00
bitwiresys Claude Sonnet 4.6 LjhAUMEM	345c76f9a8	WireGuard inbound: Support dynamic peer management (#6360 ) https://github.com/XTLS/Xray-core/pull/6360#issuecomment-4780311547 Closes https://github.com/XTLS/Xray-core/issues/6314 --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-06-27 11:41:22 +00:00
迷途的猫风扇滑翔翼 RPRX	f496437b84	XHTTP server: Refactor upload_queue.go (#6372 ) https://github.com/XTLS/Xray-core/pull/6372#issuecomment-4801395378 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com> Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-06-27 10:40:58 +00:00
Omoeba	583bb4a63f	XHTTP server: Fix `scStreamUpServerSecs` when `xPaddingObfsMode` is true (#6343 ) https://github.com/XTLS/Xray-core/pull/6343#issuecomment-4771666966	2026-06-22 18:51:47 +00:00
patternihaandcopilot-swe-agent[bot]	567500c4af	Fragment finalmask: Add `lengths` and `delays` (#6334 ) Usage: https://github.com/XTLS/Xray-core/pull/6334#issue-4685556394 Behavior: https://github.com/XTLS/Xray-core/pull/6334#issuecomment-4751547750 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>	2026-06-22 17:38:12 +00:00
风扇滑翔翼	1e036ce1c5	XHTTP/3 client: Actively close underlying QUIC & UDP (#6332 ) Fixes https://github.com/XTLS/Xray-core/issues/6328#issuecomment-4730379021	2026-06-18 23:55:11 +00:00
bytecategory	986c512e0f	XHTTP client: Avoid panic when `host` is invalid (#6316 ) Fixes https://github.com/XTLS/Xray-core/issues/6315	2026-06-18 22:55:18 +00:00
Meow	711aea4e34	XHTTP & WS & HU & gRPC servers: Require `sockopt.trustedXForwardedFor` (#6309 ) https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4663652131 Behavior: https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4746598275 Replaces https://github.com/XTLS/Xray-core/pull/6159	2026-06-18 22:31:21 +00:00
LjhAUMEM	ad2e4cb0e1	Finalmask: Fix unexpected order and UDP's buf issue (#6331 ) https://github.com/XTLS/Xray-docs-next/pull/866#issuecomment-4729859528 And https://github.com/XTLS/Xray-core/pull/6331#issuecomment-4730527410 Fixes https://github.com/XTLS/Xray-core/issues/6184#issuecomment-4725831023	2026-06-17 14:44:12 +00:00
Hossin AsaadiandLjhAUMEM	829d54d7be	Hysteria & XHTTP/3 clients: `udpHop` supports `dialerProxy` (#6320 ) https://github.com/XTLS/Xray-core/pull/6320#issuecomment-4725679616 Fixes https://github.com/XTLS/Xray-core/pull/6320#issuecomment-4699599655 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-06-17 12:20:28 +00:00
风扇滑翔翼andXXcipherX	e10347bf01	XHTTP transport: Add `sessionIDTable` and `sessionIDLength`; Rename `session` to `sessionID` (#6258 ) https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4658534046 https://github.com/XTLS/Xray-core/pull/6253#issuecomment-4657704004 https://github.com/XTLS/Xray-core/pull/6251#issuecomment-4612756220 Usage: https://github.com/XTLS/Xray-core/pull/6258#issue-4580617110 Closes https://github.com/XTLS/Xray-core/issues/6264 --------- Co-authored-by: XXcipherX <knazevvv6514@gmail.com>	2026-06-09 15:58:02 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇	95e9816223	Chore: Limit sing* dependencies to shadowsocks_2022 only (#6286 ) https://github.com/XTLS/Xray-core/pull/6286#issuecomment-4658968225	2026-06-09 10:55:42 +00:00
LjhAUMEM	6189d2bfd5	XICMP finalmask: Refine Linux sever (#6272 ) Fixes https://github.com/XTLS/Xray-core/pull/6168	2026-06-09 09:14:54 +00:00
风扇滑翔翼andj2rong4cn	a0e9347f1b	TLS ECH: Handle "h2c://" query correctly (#6261 ) Fixes https://github.com/XTLS/Xray-core/issues/6259#issuecomment-4614984919 --------- Co-authored-by: j2rong4cn <36783515+j2rong4cn@users.noreply.github.com>	2026-06-09 09:03:24 +00:00
IconHHw	83cf229909	Salamander finalmask: Replace `math/rand` with `crypto/rand` in salt generation (#6228 ) And https://github.com/XTLS/Xray-core/pull/6228#issuecomment-4612712100 Fixes https://github.com/XTLS/Xray-core/pull/6228#issuecomment-4599037015	2026-06-08 19:55:06 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇andRPRX	55956f8d70	TLS config: Remove some deprecated fields (#6226 ) https://t.me/projectXtls/1490 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-06-02 23:36:42 +00:00
Davoyan	455f6bc2d5	uTLS: Update `ModernFingerprints` map and `OtherFingerprints` map (#6181 ) Paying attention to https://github.com/XTLS/Xray-core/pull/6181#issuecomment-4567373533 And a real issue: https://github.com/XTLS/Xray-core/pull/6181#issuecomment-4583018017	2026-05-30 17:29:33 +00:00

1 2 3 4 5 ...