patterniha and Claude Opus 5.5
266df8c644
TUN inbound: Document autoOutboundsInterface binding and other recent changes in README
...
Covers XTLS/Xray-core#7173 (a connection that cannot be bound fails
instead of leaving unbound), #7214 (IPv4-only and IPv6-only outbound
interfaces on Windows), #7230 (IPV6_BOUND_IF on macOS), and also #7130
(built-in TCP/IP stack), #6874 (IPv6 disabled system-wide on Windows),
#6811 (an existing Wintun adapter is reused) and #6883 (the iOS fd is
duplicated). #7092 and autoSystemWfpBlockLeak were already covered.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-29 23:38:34 +03:30
patterniha and Claude Opus 5.5
f2f292c90c
TUN inbound: Support "tcp/port" and "udp/port" in autoSystemWfpBlockLeak on Windows; "dns" covers DoT and DoQ as well
...
"dns" in autoSystemWfpBlockLeak only blocked port 53 outside the TUN, plus
the DNS Client service on Windows 11 and Server 2022 and later, so other
programs' DNS over TLS (TCP 853) and DNS over QUIC (UDP 853) could still
leave outside the TUN.
autoSystemWfpBlockLeak now takes:
- "tcp/<port>", "udp/<port>": connections to that port may only go through
the TUN (or come from Xray itself).
- "windnsclient": Windows' DNS Client service may only connect through the
TUN, except for mDNS and LLMNR. As before, this only applies from Windows
11 and Server 2022 on, where the service may use DoH or DoT to any port;
earlier versions only query port 53.
- "dns": stands for "udp/53", "tcp/53", "windnsclient", "tcp/853" and
"udp/853".
- "misconfigtun": unchanged.
Values are case-insensitive, deduplicated, and anything else, such as
"tcp/0" or "icmp/1", is rejected. Keeping the system's DNS inside the TUN,
with "udp/53", "tcp/53" or "windnsclient", needs dns to be set, as "dns"
did; ports like 853 alone do not. Each port gets its own permit-through-TUN
and block filters with a protocol condition, where port 53 used to have one
for both protocols, and the log lists what is blocked, e.g. "[tun] blocked
outside the TUN: udp/53, tcp/53, tcp/853, udp/853, windnsclient".
Tested on Windows 11 with a Wintun adapter as the outside interface: with
"tcp/853", "udp/853", "tcp/7215" and "udp/7216", those are blocked outside
the TUN over IPv4 and IPv6, while tcp/7216, udp/7215 and 443 are not, port
853 works through the TUN, Xray's own connections to port 853 still leave
outside it, and nothing is blocked after Xray stops.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-29 14:52:11 +03:30
78b5a6ec5c
GitHub Action CI: Enforce stricter checks on generated protobuf files ( #7263 )
...
https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6447862934
https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6484719865
https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6485805671
---------
Co-authored-by: Fangliding <Fangliding.fshxy@outlook.com >
2026-10-29 02:34:47 +00:00
5865e3ac3d
DNS outbound: Keep hijacked A/AAAA replies within the buffer ( #7225 )
...
https://github.com/XTLS/Xray-core/pull/7225#pullrequestreview-5613859264
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-29 00:42:19 +00:00
6a4274ab75
TUN inbound: autoOutboundsInterface should not set IP_BOUND_IF on IPv6 sockets on Darwin (mainly macOS) ( #7230 )
...
Fixes https://github.com/XTLS/Xray-core/issues/7228
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-28 20:34:40 +00:00
solodecode and GitHub
229799a7a3
Direct/Freedom outbound: Fix blockDelay for DispatchLink() inbounds such as VLESS, Hysteria, etc. ( #7238 )
...
https://github.com/XTLS/Xray-core/pull/7238#pullrequestreview-5627787937
https://github.com/XTLS/Xray-core/pull/7238#issuecomment-6467092152
https://github.com/XTLS/Xray-core/pull/6060#issuecomment-4384511163
2026-10-28 11:02:55 +00:00
3071fbfa25
Sockopt: Handle single-family interface binding on Windows, including TUN inbound's autoOutboundsInterface ( #7214 )
...
And https://github.com/XTLS/Xray-core/pull/7214#issuecomment-6329118637
https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6314453444
Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6246944012
---------
Co-authored-by: patterniha <71074308+patterniha@users.noreply.github.com >
2026-10-28 10:15:58 +00:00
Artem Lytkin and GitHub
557657b576
TUN inbound: Read large TCP segments straight into Xray-core's buffers on Linux ( #7179 )
...
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6119897360
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6205035216
https://github.com/XTLS/Xray-core/pull/7179#issuecomment-6250145934
2026-10-21 11:49:36 +00:00
061c2df291
HTTP outbound: Fix hanging on server-first traffic ( #7193 )
...
https://github.com/XTLS/Xray-core/pull/7193#issuecomment-6312885274
Fixes https://github.com/XTLS/Xray-core/issues/3459
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-21 10:33:27 +00:00
41797c234d
Socks inbound: Initialize TempUDPConn's Timer at the beginning ( #7203 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7200
---------
Co-authored-by: Eliot the Cougar <1861169+eliotcougar@users.noreply.github.com >
2026-10-21 09:17:34 +00:00
0f127f934c
XTLS Vision: Compatible with Go 1.27.3+ ( #7176 )
...
https://github.com/XTLS/Xray-core/pull/7176#issuecomment-6229087350
Fixes https://github.com/XTLS/Xray-core/issues/7162#issuecomment-6210430747
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-10-17 03:37:14 +00:00
0f3d884786
WireGuard outbound: Keep the device when its setup fails ( #7151 )
...
https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6186150131
Fixes https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6190189547
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-16 09:50:47 +00:00
fe2ae23f42
Sockopt: Cancel dialing after failed to bind interface, external controllers included such as TUN inbound's ( #7173 )
...
https://github.com/XTLS/Xray-core/pull/7161#issuecomment-6185101741
Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6200788453
---------
Co-authored-by: Gleb <a1212gleb@gmail.com >
2026-10-16 06:37:52 +00:00
d15966c76c
Fixes: Regard int() as int32() by default, which should be a coding standard ( #7155 )
...
https://github.com/XTLS/Xray-core/pull/7155#issuecomment-6208455069
Fixes https://github.com/XTLS/Xray-core/pull/7148#issuecomment-6173633056
---------
Co-authored-by: Denis Orlov <freshcrowd@gmail.com >
Co-authored-by: Milomilo777 <117558067+Milomilo777@users.noreply.github.com >
2026-10-16 05:12:52 +00:00
Artem Lytkin and GitHub
8703fdb101
WireGuard, MASQUE proxies: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor as well ( #7156 )
...
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6120742739
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6137264458
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6202933664
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6203239736
2026-10-15 23:38:14 +00:00
0888beb38a
SS2022 proxy: Correct interrupt behavior and UDP conn change ( #7143 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7142 and https://github.com/XTLS/Xray-core/pull/7143#issuecomment-6163926468
---------
Co-authored-by: ChownYourLife <260039878+ChownYourLife@users.noreply.github.com >
2026-10-14 11:05:45 +00:00
c77a4d0e49
MASQUE client: Support XMUX ("maxConnections": 1 by default); Use Chrome's User-Agent by default ( #7121 )
...
https://github.com/XTLS/Xray-core/pull/6810#issuecomment-5842441136
https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6095112915
https://github.com/XTLS/Xray-core/pull/7121#issuecomment-6117636043
---------
Co-authored-by: SVLAVR <skugorov.s@gmail.com >
2026-10-12 19:40:04 +00:00
brookwko and RPRX
1dd2a0bd3c
TUN inbound: Support autoSystemDnsToGateway on FreeBSD as well ( #7123 )
...
https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5859521287
https://github.com/XTLS/Xray-core/pull/6691#issuecomment-5445818753
https://github.com/XTLS/Xray-core/pull/6773 & https://github.com/XTLS/Xray-core/pull/6853
2026-10-12 02:48:59 +00:00
Artem Lytkin and RPRX
70ef97d564
TUN inbound: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor ( #7130 )
...
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5752154561
https://github.com/XTLS/Xray-core/pull/6795#issuecomment-6095740152
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
2026-10-12 02:18:56 +00:00
2a14c50775
Socks inbound: Fix stats for UDP Associate traffic ( #7101 )
...
https://github.com/XTLS/Xray-core/pull/7101#pullrequestreview-5452526703
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-08 09:21:21 +00:00
8989adfd3f
TUN inbound: Handle weak host send and forwarding on the outbound interface on Windows ( #7092 )
...
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994046421
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994796106
Closes https://github.com/XTLS/Xray-core/issues/6776
Closes https://github.com/XTLS/Xray-core/issues/6872
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-08 05:49:28 +00:00
Hossin Asaadi and GitHub
1a60fc78ff
TUN inbound: Duplicate the iOS tunnel file descriptor ( #6883 )
...
https://github.com/XTLS/Xray-core/pull/6883#issuecomment-6008368575
2026-10-08 05:14:14 +00:00
nSQUICK and GitHub
1e08d48d88
TUN inbound: Start on Windows when IPv6 is disabled system-wide ( #6874 )
...
https://github.com/XTLS/Xray-core/pull/6874#issuecomment-5989986544
2026-10-05 07:26:00 +00:00
92f7e72490
WireGuard kernelTun: Fix IPv6 table index allocation when the first table is occupied ( #6881 )
...
https://github.com/XTLS/Xray-core/pull/6881#issuecomment-5927334896
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-05 03:50:22 +00:00
Denis and GitHub
08775afd65
WireGuard inbound: Reduce memory held by idle UDP flows ( #6856 )
...
https://github.com/XTLS/Xray-core/pull/6856#issuecomment-5870639238
2026-10-05 01:56:36 +00:00
Denis and GitHub
e0bae21201
WireGuard inbound: Reply fake pong to ICMP ping ( #6855 )
...
https://github.com/XTLS/Xray-core/pull/6015#issuecomment-4321525342
2026-10-05 01:36:54 +00:00
1f304916bd
TUN inbound: Add autoSystemWfpBlockLeak on Windows (blocks "dns" and "misconfigtun" IPv4/IPv6 traffic leaks outside the TUN); Rename autoSystemDNS to autoSystemDnsToGateway on Linux (and change some behaviors) ( #6853 )
...
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5899791359
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5901287980
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5903680113
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904123488
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904647772
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5905047424
Fixes https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5863800676
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-30 06:26:16 +00:00
风扇滑翔翼
0086362663
SS2022 proxy: Refactor to fix some issues ( #6866 )
...
https://github.com/XTLS/Xray-core/pull/6866#issuecomment-5904374529
Fixes https://github.com/XTLS/Xray-core/pull/6831#issuecomment-5884408501 and https://github.com/XTLS/Xray-core/pull/6866#issuecomment-5889568266
2026-09-30 13:16:27 +08:00
风扇滑翔翼
35e616d3b9
Xray-core: Move PacketConnWrapper to common/net ( #6854 )
...
https://github.com/XTLS/Xray-core/pull/6854#issuecomment-5895541650
Fixes https://github.com/XTLS/Xray-core/issues/6849
2026-09-30 02:33:53 +08:00
v2ray and RPRX
08cb6e6bca
WireGuard proxy: Fix potential startup races ( #6852 )
...
https://github.com/XTLS/Xray-core/pull/6852#issuecomment-5871816550
Fixes https://github.com/XTLS/Xray-core/issues/6850
2026-09-29 18:13:43 +00:00
e5e85ca9da
XTLS Vision: Suppress outer CloseNotify after switching to direct copy ( #6834 )
...
https://github.com/XTLS/Xray-core/pull/6816#issuecomment-5828082031
https://github.com/XTLS/Xray-core/issues/6794#issuecomment-5847200576
https://github.com/XTLS/Xray-core/pull/6834#issuecomment-5860728689
Fixes https://github.com/XTLS/Xray-core/issues/6794#issuecomment-5754894283
Fixes https://github.com/XTLS/Xray-core/issues/6124#issuecomment-4439918073
Fixes https://github.com/XTLS/Xray-core/issues/4878#issuecomment-5754638401
---------
Co-authored-by: Artem Lytkin <146867384+4RH1T3CT0R7@users.noreply.github.com >
2026-09-27 23:39:21 +00:00
7b8ade3ec5
TUN inbound: Only close the UDP connection that actually finished ( #6814 )
...
https://github.com/XTLS/Xray-core/pull/6814#pullrequestreview-5324536423
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-09-27 21:06:19 +00:00
Artem Lytkin and GitHub
5dda894e29
TUN inbound: Reuse existing Wintun adapter by name on Windows again ( #6811 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6780
2026-09-27 20:39:17 +00:00
youugiuhiuh and GitHub
47a2c2ffdc
TUN inbound: Add autoSystemDNS on Linux (to TUN's gateway) ( #6773 )
...
https://github.com/XTLS/Xray-core/issues/6454#issuecomment-4931311976
https://github.com/XTLS/Xray-core/pull/6773#issuecomment-5755516423
https://github.com/XTLS/Xray-core/pull/6807#issuecomment-5807844210
2026-09-27 20:07:53 +00:00
Cluvex and GitHub
7a018833ec
Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) ( #6844 )
...
Completes https://github.com/XTLS/Xray-core/pull/6807 and https://github.com/XTLS/Xray-core/pull/6810
2026-09-27 19:16:54 +00:00
风扇滑翔翼 and GitHub
65e853ed84
SS2022 proxy: Refactor to remove sing* dependencies ( #6831 )
...
https://github.com/XTLS/Xray-core/pull/4356#issuecomment-2639571931
2026-09-27 18:42:53 +00:00
风扇滑翔翼 and RPRX
61cad5ec8b
Xray-core: Reduce error log usage for performance ( #6796 )
...
https://github.com/XTLS/Xray-core/pull/6796#issuecomment-5807809588
2026-09-25 17:59:49 +00:00
Hossin Asaadi and GitHub
60e2a0c502
WireGuard proxy: Release packet views after use ( #6801 )
...
https://github.com/XTLS/Xray-core/pull/6801#issuecomment-5807228464
2026-09-24 05:46:26 +00:00
Esko Mobius and GitHub
7d3e44fee2
Proxy: Add MASQUE outbound & transport (IETF CONNECT-IP, RFC 9484) ( #6807 )
...
Closes https://github.com/XTLS/Xray-core/issues/5495#issuecomment-3710683679
2026-09-24 02:13:37 +00:00
LjhAUMEM and GitHub
a308ded2e6
WireGuard outbound: Fix endpoint IP address ( #6804 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6803
2026-09-24 01:59:28 +00:00
d562d8947d
Hysteria outbound: Fix UDP DATAGRAM truncation with ChromeParrot ( #6788 )
...
https://github.com/XTLS/Xray-core/pull/6788#issuecomment-5751428127
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-09-20 22:51:03 +00:00
Hossin Asaadi and GitHub
dbb1ea30ba
WireGuard proxy: Prevent panic when closing netTun with a write in flight ( #6778 )
...
https://github.com/XTLS/Xray-core/pull/6778#pullrequestreview-5251957308
2026-09-20 20:07:54 +00:00
LjhAUMEM and RPRX
efc9e6da62
WireGuard outbound: Remove remoteDNS' "local" mode and domainStrategy ( #6771 )
...
https://github.com/XTLS/Xray-core/issues/6567#issuecomment-5660953757
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751826982
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751831637
2026-09-20 19:07:51 +00:00
LjhAUMEM and GitHub
8267cf953a
Transport: Refactor to be based on Finalmask's dialer & listener ( #6754 )
...
https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5645958010
https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5720818254
https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5751585906
2026-09-20 18:12:50 +00:00
c412e77a9b
TUN inbound: Preserve UDP packet destinations with traffic stats ( #6747 )
...
https://github.com/XTLS/Xray-core/pull/6747#issuecomment-5647964551
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-09-12 20:09:35 +00:00
patterniha and GitHub
c26d2eda24
Direct/Freedom outbound: Skip domain resolution and finalRules when using sockopt.dialerProxy ( #6742 )
...
https://github.com/XTLS/Xray-core/pull/6058#issuecomment-5578800461
2026-09-08 18:45:38 +00:00
Meow and GitHub
3e2f040cd8
Direct/Freedom outbound: Better Compatibility ( #6058 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6393
2026-09-08 03:31:25 +00:00
LjhAUMEM and GitHub
c7245c0336
TUN inbound: Refine Windows support ( #6478 )
...
https://github.com/XTLS/Xray-core/pull/6478#issuecomment-5489052152
2026-09-08 02:51:35 +00:00
01a034be53
Blackhole outbound: Add customizable response data support ( #6713 )
...
https://github.com/XTLS/Xray-core/pull/6711#issuecomment-5508683394
---------
Co-authored-by: Raaad1on <djilyawhite@gmail.com >
2026-09-07 21:09:58 +00:00
Younes and RPRX
8ee131cbbb
HTTP inbound: Fix a potential panic in readResponseAndHandle100Continue() ( #6545 )
2026-09-01 02:59:56 +03:00
