patterniha and Claude Opus 5.5
3d830eea02
TUN inbound: Don't set IP_BOUND_IF on IPv6 sockets on Darwin
...
Since #7173 , a failed interface binding fails the dial. On Darwin (macOS
and iOS), setinterface fell through from IPV6_BOUND_IF to IP_BOUND_IF on
IPv6 sockets, which Darwin rejects with EINVAL. So every UDP dial failed,
as Go opens a dual-stack IPv6 socket for it, and so did TCP to IPv6. TCP to
IPv4 uses an IPv4 socket and kept working. Before #7173 the error was only
logged.
IPV6_BOUND_IF binds the whole socket, so on a dual-stack socket it covers
its IPv4 traffic as well. Set only the option of the socket's family, as
sockopt_darwin.go already does for sockopt.interface. The new test binds
each kind of socket to lo0.
Linux, Android and FreeBSD bind with socket-level options (SO_BINDTODEVICE,
SO_SETFIB) that don't depend on the IP version. On Windows, the related case
of an adapter without IPv4 or IPv6 is handled in #7214 .
Fixes #7228
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-22 11:17:33 +03:30
RPRX and GitHub
1b1647cd9d
Xray-core v26.10.21
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v26.10.21
2026-10-21 11:59:30 +00:00
Artem Lytkin and GitHub
557657b576
TUN inbound: Read large TCP segments straight into Xray-core's buffers on Linux ( #7179 )
...
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6119897360
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6205035216
https://github.com/XTLS/Xray-core/pull/7179#issuecomment-6250145934
2026-10-21 11:49:36 +00:00
Artem Lytkin and GitHub
fc5ba8e6a2
XDRIVE transport: Support h3 (Chrome CH by default) and XMUX as well; Send Chrome HTTP headers (User-Agent, etc.) by default ( #7187 )
...
https://github.com/XTLS/Xray-core/pull/7181#issuecomment-6229694351
https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6250200781
https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6314784068
2026-10-21 11:33:55 +00:00
genkauzen and RPRX
00c0277787
XDRIVE transport: Support two-step "template" operations (hrefPath) ( #7188 )
...
https://github.com/XTLS/Xray-core/pull/7188#issuecomment-6250146420
2026-10-21 10:55:36 +00:00
Meow and GitHub
3653dcb4fc
Finalmask: Add filter for inbound (TCP & UDP, source IP filtering) ( #7206 )
...
https://github.com/XTLS/Xray-core/pull/7206#issuecomment-6312634417
2026-10-21 10:48:15 +00:00
061c2df291
HTTP outbound: Fix hanging on server-first traffic ( #7193 )
...
https://github.com/XTLS/Xray-core/pull/7193#issuecomment-6312885274
Fixes https://github.com/XTLS/Xray-core/issues/3459
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-21 10:33:27 +00:00
23e2292344
Transport: Pass UDP destination to dialer controllers ( #7201 )
...
https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6275732621
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-21 10:20:35 +00:00
41797c234d
Socks inbound: Initialize TempUDPConn's Timer at the beginning ( #7203 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7200
---------
Co-authored-by: Eliot the Cougar <1861169+eliotcougar@users.noreply.github.com >
2026-10-21 09:17:34 +00:00
Meow and GitHub
9424810830
Docker: Restrict log & conf permissions ( #7204 )
...
https://github.com/XTLS/Xray-core/pull/7204#issuecomment-6292218518
2026-10-21 08:55:32 +00:00
12b7f85de3
Routing: Fix Linux UDP process ( #7202 )
...
Fixes https://github.com/XTLS/Xray-core/issues/7192 and https://github.com/XTLS/Xray-core/pull/7195
---------
Co-authored-by: Faraquic! <141701604+faraquic@users.noreply.github.com >
2026-10-21 08:35:52 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 and GitHub
de1bbbff88
GitHub Actions: Switch geodata to XTLS/Xray-rules-dat ( #7185 )
...
https://github.com/XTLS/Xray-core/pull/7185#issuecomment-6247177356
2026-10-21 08:18:32 +00:00
ec73b73f5e
Bump github.com/klauspost/cpuid/v2 from 2.4.0 to 2.4.1 ( #7197 )
...
Bumps [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/klauspost/cpuid/releases )
- [Commits](https://github.com/klauspost/cpuid/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/cpuid/v2
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-21 08:07:31 +00:00
风扇滑翔翼 and RPRX
6307fa1265
TLS client: Update built-in RootCAs to remove newly low-credit certs ( #7212 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7212#issuecomment-6310150214
... https://github.com/XTLS/Xray-core/pull/7105#issuecomment-6056053599
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-10-21 07:55:00 +00:00
RPRX and GitHub
92ccc939aa
Xray-core v26.10.17
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
2026-10-17 15:23:56 +00:00
Artem Lytkin and GitHub
95461cc148
XDRIVE transport: Require VLESS Multiplex+Encryption; "Google Drive"->"google-drive" ( #7182 )
...
https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5752780799
2026-10-17 14:13:57 +00:00
Artem Lytkin and GitHub
3834e504b8
XDRIVE transport: Prefer h2 (Chrome CH by default); End stalled requests; Other small changes ( #7181 )
...
https://github.com/XTLS/Xray-core/pull/7170#issuecomment-6204133548
2026-10-17 09:24:53 +00:00
0f127f934c
XTLS Vision: Compatible with Go 1.27.3+ ( #7176 )
...
https://github.com/XTLS/Xray-core/pull/7176#issuecomment-6229087350
Fixes https://github.com/XTLS/Xray-core/issues/7162#issuecomment-6210430747
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-10-17 03:37:14 +00:00
0f3d884786
WireGuard outbound: Keep the device when its setup fails ( #7151 )
...
https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6186150131
Fixes https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6190189547
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-16 09:50:47 +00:00
da2248c516
Hysteria client: Reset stalled writes when the connection is closed ( #7172 )
...
https://github.com/XTLS/Xray-core/pull/7172#issuecomment-6208589708
Fixes https://github.com/XTLS/Xray-core/issues/7169#issuecomment-6204450876
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-16 15:25:17 +08:00
fe2ae23f42
Sockopt: Cancel dialing after failed to bind interface, external controllers included such as TUN inbound's ( #7173 )
...
https://github.com/XTLS/Xray-core/pull/7161#issuecomment-6185101741
Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6200788453
---------
Co-authored-by: Gleb <a1212gleb@gmail.com >
2026-10-16 06:37:52 +00:00
d15966c76c
Fixes: Regard int() as int32() by default, which should be a coding standard ( #7155 )
...
https://github.com/XTLS/Xray-core/pull/7155#issuecomment-6208455069
Fixes https://github.com/XTLS/Xray-core/pull/7148#issuecomment-6173633056
---------
Co-authored-by: Denis Orlov <freshcrowd@gmail.com >
Co-authored-by: Milomilo777 <117558067+Milomilo777@users.noreply.github.com >
2026-10-16 05:12:52 +00:00
206a24a9f0
Noise finalmask: Support Lua script as well (on main branch: inline scripts were disabled for now; sandbox-only for now) ( #7124 )
...
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6108165942
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6149363945
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6207934753
---------
Co-authored-by: Meow <197331664+Meo597@users.noreply.github.com >
2026-10-16 04:43:55 +00:00
Meow and RPRX
ac5d8a83ba
Lua: Sandbox by default (whitelisted functions); Disable inline scripts for now; Add more checks for security reasons ( #7136 )
...
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6158632073
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6170831601
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6184362904
2026-10-16 01:55:35 +00:00
Artem Lytkin and GitHub
8703fdb101
WireGuard, MASQUE proxies: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor as well ( #7156 )
...
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6120742739
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6137264458
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6202933664
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6203239736
2026-10-15 23:38:14 +00:00
LjhAUMEM and GitHub
10879a4a8b
XDNS finalmask: Support DoH ("https://", tlsConfig, domain fronting, etc., quicConfig, Chrome Client Hello by default) with empty HTTP User-Agent ( #7140 )
...
https://github.com/XTLS/Xray-core/pull/7103#issuecomment-6118333973
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6161808702
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6167254749
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6185965142
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6200775375
2026-10-15 22:41:19 +00:00
0888beb38a
SS2022 proxy: Correct interrupt behavior and UDP conn change ( #7143 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7142 and https://github.com/XTLS/Xray-core/pull/7143#issuecomment-6163926468
---------
Co-authored-by: ChownYourLife <260039878+ChownYourLife@users.noreply.github.com >
2026-10-14 11:05:45 +00:00
34acded003
Bump golang.org/x/net from 0.60.0 to 0.61.0 ( #7147 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.60.0 to 0.61.0.
- [Commits](https://github.com/golang/net/compare/v0.60.0...v0.61.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.61.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-14 10:57:32 +00:00
RPRX and GitHub
676a600edb
Update github.com/xtls/reality to 20261014101318
...
https://github.com/XTLS/REALITY/commit/83f621788ca88b83179810b12baa7ae518aacb83
https://github.com/XTLS/REALITY/commit/14cefac9bd7a724a811b02759fa97aa86a1ec894
https://github.com/XTLS/REALITY/commit/3c98159dee388c2914a2b9e73ea57bc10023f9d3
2026-10-14 10:44:41 +00:00
c77a4d0e49
MASQUE client: Support XMUX ("maxConnections": 1 by default); Use Chrome's User-Agent by default ( #7121 )
...
https://github.com/XTLS/Xray-core/pull/6810#issuecomment-5842441136
https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6095112915
https://github.com/XTLS/Xray-core/pull/7121#issuecomment-6117636043
---------
Co-authored-by: SVLAVR <skugorov.s@gmail.com >
2026-10-12 19:40:04 +00:00
Meow and GitHub
5a64db009b
Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command ( #7132 )
...
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6110557806
https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6118169645
https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6126428359
2026-10-12 16:58:20 +00:00
SVLAVR and GitHub
2bea2df6a1
Hysteria client: Release client map lock before cleanup ( #7122 )
...
https://github.com/XTLS/Xray-core/pull/7122#issuecomment-6119280343
2026-10-12 06:56:24 +00:00
fb2dcedbb7
Bump golang.org/x/net from 0.59.0 to 0.60.0 ( #7133 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.59.0 to 0.60.0.
- [Commits](https://github.com/golang/net/compare/v0.59.0...v0.60.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.60.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-12 05:16:45 +00:00
7c2e05dc47
Hysteria client: Honor cancellation during dialing ( #7119 )
...
Fixes https://github.com/XTLS/Xray-core/issues/7120
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-12 05:01:23 +00:00
brookwko and RPRX
1dd2a0bd3c
TUN inbound: Support autoSystemDnsToGateway on FreeBSD as well ( #7123 )
...
https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5859521287
https://github.com/XTLS/Xray-core/pull/6691#issuecomment-5445818753
https://github.com/XTLS/Xray-core/pull/6773 & https://github.com/XTLS/Xray-core/pull/6853
2026-10-12 02:48:59 +00:00
Artem Lytkin and RPRX
70ef97d564
TUN inbound: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor ( #7130 )
...
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5752154561
https://github.com/XTLS/Xray-core/pull/6795#issuecomment-6095740152
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
2026-10-12 02:18:56 +00:00
RPRX and GitHub
701af60772
Xray-core v26.10.10
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
2026-10-10 09:21:07 +00:00
Meow and GitHub
8855145e58
Xray-core: Add Lua script for dns and routing ( #6823 )
...
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-5843754759
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-5861456450
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-6093596069
2026-10-10 09:01:16 +00:00
c7dbfd5e1e
Hysteria client: Remove closed instance conn ( #7107 )
...
https://github.com/XTLS/Xray-core/pull/7102#issuecomment-6054105250
Fixes https://github.com/XTLS/Xray-core/issues/7100
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-10 08:08:06 +00:00
RPRX
aa7aa9ad0a
MASQUE client: Ignore publicKey in warp when pcs/vcn exists (domain fronting for WARP)
...
Closes https://github.com/XTLS/Xray-core/issues/7115#issuecomment-6088708005
2026-10-10 06:56:57 +00:00
2cc08769a5
TLS ECH DoH h2c: Support verifyPeerCertByName's "fromMitm" (after dialerProxy, in RAW outbound's tlsSettings) ( #6246 )
...
https://github.com/XTLS/Xray-core/pull/6246#issuecomment-5850758711
Like https://github.com/XTLS/Xray-core/commit/613c63b165829a0b3e5bfc3a72eff21d96ab4874
---------
Co-authored-by: patterniha <71074308+patterniha@users.noreply.github.com >
2026-10-10 06:55:46 +00:00
风扇滑翔翼 and RPRX
5af2e9c228
TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) ( #7105 )
...
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3745598515
https://github.com/XTLS/Xray-core/pull/7098#issuecomment-6053012480
https://github.com/XTLS/Xray-core/pull/7105#issuecomment-6093006914
2026-10-10 06:53:39 +00:00
Artem Lytkin and GitHub
836a6fed38
Mux client: Fix b.UDP being overwritten by the next frame ( #6822 )
...
https://github.com/XTLS/Xray-core/pull/6822#issuecomment-5993165787
2026-10-08 09:24:11 +00:00
2a14c50775
Socks inbound: Fix stats for UDP Associate traffic ( #7101 )
...
https://github.com/XTLS/Xray-core/pull/7101#pullrequestreview-5452526703
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-08 09:21:21 +00:00
8989adfd3f
TUN inbound: Handle weak host send and forwarding on the outbound interface on Windows ( #7092 )
...
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994046421
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994796106
Closes https://github.com/XTLS/Xray-core/issues/6776
Closes https://github.com/XTLS/Xray-core/issues/6872
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-08 05:49:28 +00:00
Hossin Asaadi and GitHub
1a60fc78ff
TUN inbound: Duplicate the iOS tunnel file descriptor ( #6883 )
...
https://github.com/XTLS/Xray-core/pull/6883#issuecomment-6008368575
2026-10-08 05:14:14 +00:00
Artem Lytkin and GitHub
2eedef51a2
DNS: Fix pubsub cleanup sizing every topic's slice by the topic count ( #7091 )
...
https://github.com/XTLS/Xray-core/pull/7091#pullrequestreview-5414371870
2026-10-08 05:08:43 +00:00
LjhAUMEM and GitHub
37184948d4
XDNS finalmask: Refine upload ( #7095 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7090#issuecomment-6009651970
2026-10-08 04:58:49 +00:00
Cluvex and GitHub
9e55a6ed18
MASQUE client: Support WARP ( #6878 )
...
https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859092964
https://github.com/XTLS/Xray-core/pull/6862#issuecomment-5897508127
https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6052448898
2026-10-08 04:53:07 +00:00
7da5dae650
Mux client: Fix a race condition between Dispatch and SessionManager.Close ( #6871 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6870
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-05 09:52:18 +00:00