Roman Rublev
8d0a7cf856
SS2022 inbound: Fix data races and duplicate acceptance when decoding one UDP session concurrently
...
Packets of one client session can be processed by two inbound workers at
the same time (e.g. the client's old and new source address after a NAT
rebinding). The sliding window was checked and updated in two separate
critical sections, and clientBodyCipher and the session's User were read
without the lock, so the same packet ID could be accepted more than once
and go test -race reported data races.
Re-check the window and publish the cached body cipher in one critical
section after the packet is fully validated, and always initialize the
session's User under the lock.
2026-10-18 16:28:31 +03:00
RPRX and GitHub
92ccc939aa
Xray-core v26.10.17
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
2026-10-17 15:23:56 +00:00
Artem Lytkin and GitHub
95461cc148
XDRIVE transport: Require VLESS Multiplex+Encryption; "Google Drive"->"google-drive" ( #7182 )
...
https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5752780799
2026-10-17 14:13:57 +00:00
Artem Lytkin and GitHub
3834e504b8
XDRIVE transport: Prefer h2 (Chrome CH by default); End stalled requests; Other small changes ( #7181 )
...
https://github.com/XTLS/Xray-core/pull/7170#issuecomment-6204133548
2026-10-17 09:24:53 +00:00
0f127f934c
XTLS Vision: Compatible with Go 1.27.3+ ( #7176 )
...
https://github.com/XTLS/Xray-core/pull/7176#issuecomment-6229087350
Fixes https://github.com/XTLS/Xray-core/issues/7162#issuecomment-6210430747
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-10-17 03:37:14 +00:00
0f3d884786
WireGuard outbound: Keep the device when its setup fails ( #7151 )
...
https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6186150131
Fixes https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6190189547
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-16 09:50:47 +00:00
da2248c516
Hysteria client: Reset stalled writes when the connection is closed ( #7172 )
...
https://github.com/XTLS/Xray-core/pull/7172#issuecomment-6208589708
Fixes https://github.com/XTLS/Xray-core/issues/7169#issuecomment-6204450876
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-16 15:25:17 +08:00
fe2ae23f42
Sockopt: Cancel dialing after failed to bind interface, external controllers included such as TUN inbound's ( #7173 )
...
https://github.com/XTLS/Xray-core/pull/7161#issuecomment-6185101741
Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6200788453
---------
Co-authored-by: Gleb <a1212gleb@gmail.com >
2026-10-16 06:37:52 +00:00
d15966c76c
Fixes: Regard int() as int32() by default, which should be a coding standard ( #7155 )
...
https://github.com/XTLS/Xray-core/pull/7155#issuecomment-6208455069
Fixes https://github.com/XTLS/Xray-core/pull/7148#issuecomment-6173633056
---------
Co-authored-by: Denis Orlov <freshcrowd@gmail.com >
Co-authored-by: Milomilo777 <117558067+Milomilo777@users.noreply.github.com >
2026-10-16 05:12:52 +00:00
206a24a9f0
Noise finalmask: Support Lua script as well (on main branch: inline scripts were disabled for now; sandbox-only for now) ( #7124 )
...
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6108165942
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6149363945
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6207934753
---------
Co-authored-by: Meow <197331664+Meo597@users.noreply.github.com >
2026-10-16 04:43:55 +00:00
Meow and RPRX
ac5d8a83ba
Lua: Sandbox by default (whitelisted functions); Disable inline scripts for now; Add more checks for security reasons ( #7136 )
...
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6158632073
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6170831601
https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6184362904
2026-10-16 01:55:35 +00:00
Artem Lytkin and GitHub
8703fdb101
WireGuard, MASQUE proxies: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor as well ( #7156 )
...
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6120742739
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6137264458
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6202933664
https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6203239736
2026-10-15 23:38:14 +00:00
LjhAUMEM and GitHub
10879a4a8b
XDNS finalmask: Support DoH ("https://", tlsConfig, domain fronting, etc., quicConfig, Chrome Client Hello by default) with empty HTTP User-Agent ( #7140 )
...
https://github.com/XTLS/Xray-core/pull/7103#issuecomment-6118333973
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6161808702
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6167254749
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6185965142
https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6200775375
2026-10-15 22:41:19 +00:00
0888beb38a
SS2022 proxy: Correct interrupt behavior and UDP conn change ( #7143 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7142 and https://github.com/XTLS/Xray-core/pull/7143#issuecomment-6163926468
---------
Co-authored-by: ChownYourLife <260039878+ChownYourLife@users.noreply.github.com >
2026-10-14 11:05:45 +00:00
34acded003
Bump golang.org/x/net from 0.60.0 to 0.61.0 ( #7147 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.60.0 to 0.61.0.
- [Commits](https://github.com/golang/net/compare/v0.60.0...v0.61.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.61.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-14 10:57:32 +00:00
RPRX and GitHub
676a600edb
Update github.com/xtls/reality to 20261014101318
...
https://github.com/XTLS/REALITY/commit/83f621788ca88b83179810b12baa7ae518aacb83
https://github.com/XTLS/REALITY/commit/14cefac9bd7a724a811b02759fa97aa86a1ec894
https://github.com/XTLS/REALITY/commit/3c98159dee388c2914a2b9e73ea57bc10023f9d3
2026-10-14 10:44:41 +00:00
c77a4d0e49
MASQUE client: Support XMUX ("maxConnections": 1 by default); Use Chrome's User-Agent by default ( #7121 )
...
https://github.com/XTLS/Xray-core/pull/6810#issuecomment-5842441136
https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6095112915
https://github.com/XTLS/Xray-core/pull/7121#issuecomment-6117636043
---------
Co-authored-by: SVLAVR <skugorov.s@gmail.com >
2026-10-12 19:40:04 +00:00
Meow and GitHub
5a64db009b
Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command ( #7132 )
...
https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6110557806
https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6118169645
https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6126428359
2026-10-12 16:58:20 +00:00
SVLAVR and GitHub
2bea2df6a1
Hysteria client: Release client map lock before cleanup ( #7122 )
...
https://github.com/XTLS/Xray-core/pull/7122#issuecomment-6119280343
2026-10-12 06:56:24 +00:00
fb2dcedbb7
Bump golang.org/x/net from 0.59.0 to 0.60.0 ( #7133 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.59.0 to 0.60.0.
- [Commits](https://github.com/golang/net/compare/v0.59.0...v0.60.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.60.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-12 05:16:45 +00:00
7c2e05dc47
Hysteria client: Honor cancellation during dialing ( #7119 )
...
Fixes https://github.com/XTLS/Xray-core/issues/7120
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-12 05:01:23 +00:00
brookwko and RPRX
1dd2a0bd3c
TUN inbound: Support autoSystemDnsToGateway on FreeBSD as well ( #7123 )
...
https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5859521287
https://github.com/XTLS/Xray-core/pull/6691#issuecomment-5445818753
https://github.com/XTLS/Xray-core/pull/6773 & https://github.com/XTLS/Xray-core/pull/6853
2026-10-12 02:48:59 +00:00
Artem Lytkin and RPRX
70ef97d564
TUN inbound: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor ( #7130 )
...
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5752154561
https://github.com/XTLS/Xray-core/pull/6795#issuecomment-6095740152
https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188
2026-10-12 02:18:56 +00:00
RPRX and GitHub
701af60772
Xray-core v26.10.10
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
2026-10-10 09:21:07 +00:00
Meow and GitHub
8855145e58
Xray-core: Add Lua script for dns and routing ( #6823 )
...
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-5843754759
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-5861456450
https://github.com/XTLS/Xray-core/pull/6823#issuecomment-6093596069
2026-10-10 09:01:16 +00:00
c7dbfd5e1e
Hysteria client: Remove closed instance conn ( #7107 )
...
https://github.com/XTLS/Xray-core/pull/7102#issuecomment-6054105250
Fixes https://github.com/XTLS/Xray-core/issues/7100
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-10-10 08:08:06 +00:00
RPRX
aa7aa9ad0a
MASQUE client: Ignore publicKey in warp when pcs/vcn exists (domain fronting for WARP)
...
Closes https://github.com/XTLS/Xray-core/issues/7115#issuecomment-6088708005
2026-10-10 06:56:57 +00:00
2cc08769a5
TLS ECH DoH h2c: Support verifyPeerCertByName's "fromMitm" (after dialerProxy, in RAW outbound's tlsSettings) ( #6246 )
...
https://github.com/XTLS/Xray-core/pull/6246#issuecomment-5850758711
Like https://github.com/XTLS/Xray-core/commit/613c63b165829a0b3e5bfc3a72eff21d96ab4874
---------
Co-authored-by: patterniha <71074308+patterniha@users.noreply.github.com >
2026-10-10 06:55:46 +00:00
风扇滑翔翼 and RPRX
5af2e9c228
TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) ( #7105 )
...
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3745598515
https://github.com/XTLS/Xray-core/pull/7098#issuecomment-6053012480
https://github.com/XTLS/Xray-core/pull/7105#issuecomment-6093006914
2026-10-10 06:53:39 +00:00
Artem Lytkin and GitHub
836a6fed38
Mux client: Fix b.UDP being overwritten by the next frame ( #6822 )
...
https://github.com/XTLS/Xray-core/pull/6822#issuecomment-5993165787
2026-10-08 09:24:11 +00:00
2a14c50775
Socks inbound: Fix stats for UDP Associate traffic ( #7101 )
...
https://github.com/XTLS/Xray-core/pull/7101#pullrequestreview-5452526703
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-08 09:21:21 +00:00
8989adfd3f
TUN inbound: Handle weak host send and forwarding on the outbound interface on Windows ( #7092 )
...
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994046421
https://github.com/XTLS/Xray-core/issues/6776#issuecomment-5994796106
Closes https://github.com/XTLS/Xray-core/issues/6776
Closes https://github.com/XTLS/Xray-core/issues/6872
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-08 05:49:28 +00:00
Hossin Asaadi and GitHub
1a60fc78ff
TUN inbound: Duplicate the iOS tunnel file descriptor ( #6883 )
...
https://github.com/XTLS/Xray-core/pull/6883#issuecomment-6008368575
2026-10-08 05:14:14 +00:00
Artem Lytkin and GitHub
2eedef51a2
DNS: Fix pubsub cleanup sizing every topic's slice by the topic count ( #7091 )
...
https://github.com/XTLS/Xray-core/pull/7091#pullrequestreview-5414371870
2026-10-08 05:08:43 +00:00
LjhAUMEM and GitHub
37184948d4
XDNS finalmask: Refine upload ( #7095 )
...
Fixes https://github.com/XTLS/Xray-core/pull/7090#issuecomment-6009651970
2026-10-08 04:58:49 +00:00
Cluvex and GitHub
9e55a6ed18
MASQUE client: Support WARP ( #6878 )
...
https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859092964
https://github.com/XTLS/Xray-core/pull/6862#issuecomment-5897508127
https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6052448898
2026-10-08 04:53:07 +00:00
7da5dae650
Mux client: Fix a race condition between Dispatch and SessionManager.Close ( #6871 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6870
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-05 09:52:18 +00:00
LjhAUMEM and GitHub
a3c6cc6aa8
XDNS finalmask: Default values for types; name->names; type+addr->addrs ( #7090 )
...
https://github.com/XTLS/Xray-core/pull/7090#issuecomment-5989883544
https://github.com/XTLS/Xray-core/pull/7090#issuecomment-5988755551
https://github.com/XTLS/Xray-core/pull/7089#issuecomment-5987266008
2026-10-05 08:07:19 +00:00
nSQUICK and GitHub
1e08d48d88
TUN inbound: Start on Windows when IPv6 is disabled system-wide ( #6874 )
...
https://github.com/XTLS/Xray-core/pull/6874#issuecomment-5989986544
2026-10-05 07:26:00 +00:00
5121c28b85
QUIC sniffer: Handle zero-filled datagram tails ( #6882 )
...
https://github.com/XTLS/Xray-core/pull/6882#pullrequestreview-5395639793
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-05 03:53:22 +00:00
92f7e72490
WireGuard kernelTun: Fix IPv6 table index allocation when the first table is occupied ( #6881 )
...
https://github.com/XTLS/Xray-core/pull/6881#issuecomment-5927334896
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-10-05 03:50:22 +00:00
Жора Змейкин and GitHub
eddad37c69
XDNS finalmask: Fix resolver close deadlock and socket leaks ( #7089 )
...
https://github.com/XTLS/Xray-core/pull/7089#issuecomment-5987521972
2026-10-05 03:31:46 +00:00
SVLAVR and GitHub
00cde72a9b
Test: Fix process leaks when retrying scenario tests ( #6863 )
...
https://github.com/XTLS/Xray-core/pull/6863#pullrequestreview-5362117967
2026-10-05 02:13:03 +00:00
Denis and GitHub
08775afd65
WireGuard inbound: Reduce memory held by idle UDP flows ( #6856 )
...
https://github.com/XTLS/Xray-core/pull/6856#issuecomment-5870639238
2026-10-05 01:56:36 +00:00
Denis and GitHub
e0bae21201
WireGuard inbound: Reply fake pong to ICMP ping ( #6855 )
...
https://github.com/XTLS/Xray-core/pull/6015#issuecomment-4321525342
2026-10-05 01:36:54 +00:00
9d9a7a1c00
gRPC client: Fix redial with the first request's canceled context ( #6877 )
...
https://github.com/XTLS/Xray-core/pull/6877#issuecomment-5986476726
Fixes https://github.com/XTLS/Xray-core/issues/6876
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-05 01:26:12 +00:00
RPRX and GitHub
b26a91de4f
Xray-core v26.9.30
...
Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668
Project X Channel: https://t.me/projectXtls
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v26.9.30
2026-09-30 07:40:04 +00:00
1f304916bd
TUN inbound: Add autoSystemWfpBlockLeak on Windows (blocks "dns" and "misconfigtun" IPv4/IPv6 traffic leaks outside the TUN); Rename autoSystemDNS to autoSystemDnsToGateway on Linux (and change some behaviors) ( #6853 )
...
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5899791359
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5901287980
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5903680113
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904123488
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904647772
https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5905047424
Fixes https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5863800676
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-30 06:26:16 +00:00
风扇滑翔翼
0086362663
SS2022 proxy: Refactor to fix some issues ( #6866 )
...
https://github.com/XTLS/Xray-core/pull/6866#issuecomment-5904374529
Fixes https://github.com/XTLS/Xray-core/pull/6831#issuecomment-5884408501 and https://github.com/XTLS/Xray-core/pull/6866#issuecomment-5889568266
2026-09-30 13:16:27 +08:00
Cluvex and GitHub
e51b3c3621
Noise finalmask: type supports "exp" ( #6862 )
...
https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859092964
https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859855674
https://github.com/XTLS/Xray-core/pull/6862#issuecomment-5897471145
2026-09-30 03:11:12 +00:00