2110 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
patternihaandClaude Opus 5.5	f2f292c90c	TUN inbound: Support "tcp/port" and "udp/port" in autoSystemWfpBlockLeak on Windows; "dns" covers DoT and DoQ as well ... "dns" in autoSystemWfpBlockLeak only blocked port 53 outside the TUN, plus the DNS Client service on Windows 11 and Server 2022 and later, so other programs' DNS over TLS (TCP 853) and DNS over QUIC (UDP 853) could still leave outside the TUN. autoSystemWfpBlockLeak now takes: - "tcp/<port>", "udp/<port>": connections to that port may only go through the TUN (or come from Xray itself). - "windnsclient": Windows' DNS Client service may only connect through the TUN, except for mDNS and LLMNR. As before, this only applies from Windows 11 and Server 2022 on, where the service may use DoH or DoT to any port; earlier versions only query port 53. - "dns": stands for "udp/53", "tcp/53", "windnsclient", "tcp/853" and "udp/853". - "misconfigtun": unchanged. Values are case-insensitive, deduplicated, and anything else, such as "tcp/0" or "icmp/1", is rejected. Keeping the system's DNS inside the TUN, with "udp/53", "tcp/53" or "windnsclient", needs dns to be set, as "dns" did; ports like 853 alone do not. Each port gets its own permit-through-TUN and block filters with a protocol condition, where port 53 used to have one for both protocols, and the log lists what is blocked, e.g. "[tun] blocked outside the TUN: udp/53, tcp/53, tcp/853, udp/853, windnsclient". Tested on Windows 11 with a Wintun adapter as the outside interface: with "tcp/853", "udp/853", "tcp/7215" and "udp/7216", those are blocked outside the TUN over IPv4 and IPv6, while tcp/7216, udp/7215 and 443 are not, port 853 works through the TUN, Xray's own connections to port 853 still leave outside it, and nothing is blocked after Xray stops. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-29 14:52:11 +03:30
RPRXandGitHub	0afec66085	Xray-core v26.10.29 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2 v26.10.29	2026-10-29 08:38:50 +00:00
3 people	55eecaed16	Config: Move inbound module initialization to the end (#7284) ... Fixes https://github.com/XTLS/Xray-core/pull/7284#issuecomment-6491545028 --------- Co-authored-by: Copilot <copilot@github.com>	2026-10-29 08:34:16 +00:00
3 people	2dfee4b842	XDRIVE transport: Carry a Google Drive session in a ring of slots (#7217) ... https://github.com/XTLS/Xray-core/pull/7217#issuecomment-6489554617 --------- Co-authored-by: Ahmad-2213 <106820058+Ahmad-2213@users.noreply.github.com>	2026-10-29 06:47:42 +00:00
Жора ЗмейкинandGitHub	b4123b5748	XDRIVE transport: Add "s3" storage backend (#7231) ... https://github.com/XTLS/Xray-core/pull/7231#issuecomment-6488077212	2026-10-29 04:44:41 +00:00
3 people	ec124ff9e0	WebSocket transport: Treat normal close frames as io.EOF (#7236) ... Fixes https://github.com/XTLS/Xray-core/issues/7235#issuecomment-6353389899 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-29 03:42:11 +00:00
SolomonandGitHub	8a3c0cbf1d	Sockopt: Fix swapped TCP keepalive idle and interval on Darwin (#7219) ... https://github.com/XTLS/Xray-core/pull/7219#pullrequestreview-5691960668	2026-10-29 02:54:53 +00:00
3 people	78b5a6ec5c	GitHub Action CI: Enforce stricter checks on generated protobuf files (#7263) ... https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6447862934 https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6484719865 https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6485805671 --------- Co-authored-by: Fangliding <Fangliding.fshxy@outlook.com>	2026-10-29 02:34:47 +00:00
4 people	5865e3ac3d	DNS outbound: Keep hijacked A/AAAA replies within the buffer (#7225) ... https://github.com/XTLS/Xray-core/pull/7225#pullrequestreview-5613859264 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-29 00:42:19 +00:00
3 people	48f62b801a	Geodata: Limit download size, file extensions, and update frequency (#7267) ... https://github.com/XTLS/Xray-core/pull/7265#issuecomment-6464588139 --------- Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com>	2026-10-29 00:22:51 +00:00
MeowandGitHub	43c29f8eb1	Geodata: Update built-in generalized "private" IP ranges (#7249) ... And https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6483478811 https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6391494484 https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6483591550	2026-10-28 23:45:22 +00:00
MeowandGitHub	613d8147bb	Direct/Freedom outbound: Warn about migrating fragment and noises to Finalmask (#7242) ... https://github.com/XTLS/Xray-core/issues/7240#issuecomment-6361862358	2026-10-28 22:49:30 +00:00
3 people	38f090255c	Commands: Fix xray api adrules c1.json c2.json (#7276) ... https://github.com/XTLS/Xray-core/pull/7276#pullrequestreview-5680949792 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-28 21:59:27 +00:00
3 people	35a3121a83	File loader: Check file extensions without resolving symlinks (#7255) ... https://github.com/XTLS/Xray-core/pull/7255#issuecomment-6481194940 https://github.com/XTLS/Xray-core/pull/7250#issuecomment-6398816842 Fixes https://github.com/XTLS/Xray-core/issues/7239#issuecomment-6356122816 --------- Co-authored-by: Eljees <3.14hell@gmail.com>	2026-10-28 21:59:03 +00:00
风扇滑翔翼andGitHub	bca08ac080	Routing: Fix Linux IPv6 process (#7232) ... Fixes https://github.com/XTLS/Xray-core/issues/7227	2026-10-28 20:49:08 +00:00
3 people	6a4274ab75	TUN inbound: autoOutboundsInterface should not set IP_BOUND_IF on IPv6 sockets on Darwin (mainly macOS) (#7230) ... Fixes https://github.com/XTLS/Xray-core/issues/7228 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-28 20:34:40 +00:00
solodecodeandGitHub	229799a7a3	Direct/Freedom outbound: Fix blockDelay for DispatchLink() inbounds such as VLESS, Hysteria, etc. (#7238) ... https://github.com/XTLS/Xray-core/pull/7238#pullrequestreview-5627787937 https://github.com/XTLS/Xray-core/pull/7238#issuecomment-6467092152 https://github.com/XTLS/Xray-core/pull/6060#issuecomment-4384511163	2026-10-28 11:02:55 +00:00
3 people	3071fbfa25	Sockopt: Handle single-family interface binding on Windows, including TUN inbound's autoOutboundsInterface (#7214) ... And https://github.com/XTLS/Xray-core/pull/7214#issuecomment-6329118637 https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6314453444 Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6246944012 --------- Co-authored-by: patterniha <71074308+patterniha@users.noreply.github.com>	2026-10-28 10:15:58 +00:00
3 people	1576e79563	Bump github.com/pires/go-proxyproto from 0.15.0 to 0.16.0 (#7237) ... Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.15.0 to 0.16.0. - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](https://github.com/pires/go-proxyproto/compare/v0.15.0...v0.16.0) --- updated-dependencies: - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-27 04:31:46 +00:00
3 people	67e7f82ca1	Bump docker/login-action from 4.6.0 to 4.7.0 (#7257) ... Bumps [docker/login-action](https://github.com/docker/login-action) from 4.6.0 to 4.7.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.6.0...v4.7.0) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-27 04:31:31 +00:00
RPRXandGitHub	1b1647cd9d	Xray-core v26.10.21 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2 v26.10.21	2026-10-21 11:59:30 +00:00
Artem LytkinandGitHub	557657b576	TUN inbound: Read large TCP segments straight into Xray-core's buffers on Linux (#7179) ... https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6119897360 https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6205035216 https://github.com/XTLS/Xray-core/pull/7179#issuecomment-6250145934	2026-10-21 11:49:36 +00:00
Artem LytkinandGitHub	fc5ba8e6a2	XDRIVE transport: Support h3 (Chrome CH by default) and XMUX as well; Send Chrome HTTP headers (User-Agent, etc.) by default (#7187) ... https://github.com/XTLS/Xray-core/pull/7181#issuecomment-6229694351 https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6250200781 https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6314784068	2026-10-21 11:33:55 +00:00
genkauzenandRPRX	00c0277787	XDRIVE transport: Support two-step "template" operations (hrefPath) (#7188) ... https://github.com/XTLS/Xray-core/pull/7188#issuecomment-6250146420	2026-10-21 10:55:36 +00:00
MeowandGitHub	3653dcb4fc	Finalmask: Add filter for inbound (TCP & UDP, source IP filtering) (#7206) ... https://github.com/XTLS/Xray-core/pull/7206#issuecomment-6312634417	2026-10-21 10:48:15 +00:00
4 people	061c2df291	HTTP outbound: Fix hanging on server-first traffic (#7193) ... https://github.com/XTLS/Xray-core/pull/7193#issuecomment-6312885274 Fixes https://github.com/XTLS/Xray-core/issues/3459 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-21 10:33:27 +00:00
3 people	23e2292344	Transport: Pass UDP destination to dialer controllers (#7201) ... https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6275732621 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-21 10:20:35 +00:00
3 people	41797c234d	Socks inbound: Initialize TempUDPConn's Timer at the beginning (#7203) ... Fixes https://github.com/XTLS/Xray-core/pull/7200 --------- Co-authored-by: Eliot the Cougar <1861169+eliotcougar@users.noreply.github.com>	2026-10-21 09:17:34 +00:00
MeowandGitHub	9424810830	Docker: Restrict log & conf permissions (#7204) ... https://github.com/XTLS/Xray-core/pull/7204#issuecomment-6292218518	2026-10-21 08:55:32 +00:00
3 people	12b7f85de3	Routing: Fix Linux UDP process (#7202) ... Fixes https://github.com/XTLS/Xray-core/issues/7192 and https://github.com/XTLS/Xray-core/pull/7195 --------- Co-authored-by: Faraquic! <141701604+faraquic@users.noreply.github.com>	2026-10-21 08:35:52 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇andGitHub	de1bbbff88	GitHub Actions: Switch geodata to XTLS/Xray-rules-dat (#7185) ... https://github.com/XTLS/Xray-core/pull/7185#issuecomment-6247177356	2026-10-21 08:18:32 +00:00
3 people	ec73b73f5e	Bump github.com/klauspost/cpuid/v2 from 2.4.0 to 2.4.1 (#7197) ... Bumps [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](https://github.com/klauspost/cpuid/compare/v2.4.0...v2.4.1) --- updated-dependencies: - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 08:07:31 +00:00
风扇滑翔翼andRPRX	6307fa1265	TLS client: Update built-in RootCAs to remove newly low-credit certs (#7212) ... Fixes https://github.com/XTLS/Xray-core/pull/7212#issuecomment-6310150214 ... https://github.com/XTLS/Xray-core/pull/7105#issuecomment-6056053599 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-10-21 07:55:00 +00:00
RPRXandGitHub	92ccc939aa	Xray-core v26.10.17 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2	2026-10-17 15:23:56 +00:00
Artem LytkinandGitHub	95461cc148	XDRIVE transport: Require VLESS Multiplex+Encryption; "Google Drive"->"google-drive" (#7182) ... https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5752780799	2026-10-17 14:13:57 +00:00
Artem LytkinandGitHub	3834e504b8	XDRIVE transport: Prefer h2 (Chrome CH by default); End stalled requests; Other small changes (#7181) ... https://github.com/XTLS/Xray-core/pull/7170#issuecomment-6204133548	2026-10-17 09:24:53 +00:00
3 people	0f127f934c	XTLS Vision: Compatible with Go 1.27.3+ (#7176) ... https://github.com/XTLS/Xray-core/pull/7176#issuecomment-6229087350 Fixes https://github.com/XTLS/Xray-core/issues/7162#issuecomment-6210430747 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-10-17 03:37:14 +00:00
3 people	0f3d884786	WireGuard outbound: Keep the device when its setup fails (#7151) ... https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6186150131 Fixes https://github.com/XTLS/Xray-core/pull/7151#issuecomment-6190189547 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-10-16 09:50:47 +00:00
3 people	da2248c516	Hysteria client: Reset stalled writes when the connection is closed (#7172) ... https://github.com/XTLS/Xray-core/pull/7172#issuecomment-6208589708 Fixes https://github.com/XTLS/Xray-core/issues/7169#issuecomment-6204450876 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>	2026-10-16 15:25:17 +08:00
3 people	fe2ae23f42	Sockopt: Cancel dialing after failed to bind interface, external controllers included such as TUN inbound's (#7173) ... https://github.com/XTLS/Xray-core/pull/7161#issuecomment-6185101741 Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6200788453 --------- Co-authored-by: Gleb <a1212gleb@gmail.com>	2026-10-16 06:37:52 +00:00
4 people	d15966c76c	Fixes: Regard int() as int32() by default, which should be a coding standard (#7155) ... https://github.com/XTLS/Xray-core/pull/7155#issuecomment-6208455069 Fixes https://github.com/XTLS/Xray-core/pull/7148#issuecomment-6173633056 --------- Co-authored-by: Denis Orlov <freshcrowd@gmail.com> Co-authored-by: Milomilo777 <117558067+Milomilo777@users.noreply.github.com>	2026-10-16 05:12:52 +00:00
3 people	206a24a9f0	Noise finalmask: Support Lua script as well (on main branch: inline scripts were disabled for now; sandbox-only for now) (#7124) ... https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6108165942 https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6149363945 https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6207934753 --------- Co-authored-by: Meow <197331664+Meo597@users.noreply.github.com>	2026-10-16 04:43:55 +00:00
MeowandRPRX	ac5d8a83ba	Lua: Sandbox by default (whitelisted functions); Disable inline scripts for now; Add more checks for security reasons (#7136) ... https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6158632073 https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6170831601 https://github.com/XTLS/Xray-core/pull/7136#issuecomment-6184362904	2026-10-16 01:55:35 +00:00
Artem LytkinandGitHub	8703fdb101	WireGuard, MASQUE proxies: Use Xray-core's built-in lightweight TCP/IP stack instead of gVisor as well (#7156) ... https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6116258188 https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6120742739 https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6137264458 https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6202933664 https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6203239736	2026-10-15 23:38:14 +00:00
LjhAUMEMandGitHub	10879a4a8b	XDNS finalmask: Support DoH ("https://", tlsConfig, domain fronting, etc., quicConfig, Chrome Client Hello by default) with empty HTTP User-Agent (#7140) ... https://github.com/XTLS/Xray-core/pull/7103#issuecomment-6118333973 https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6161808702 https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6167254749 https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6185965142 https://github.com/XTLS/Xray-core/pull/7140#issuecomment-6200775375	2026-10-15 22:41:19 +00:00
3 people	0888beb38a	SS2022 proxy: Correct interrupt behavior and UDP conn change (#7143) ... Fixes https://github.com/XTLS/Xray-core/pull/7142 and https://github.com/XTLS/Xray-core/pull/7143#issuecomment-6163926468 --------- Co-authored-by: ChownYourLife <260039878+ChownYourLife@users.noreply.github.com>	2026-10-14 11:05:45 +00:00
3 people	34acded003	Bump golang.org/x/net from 0.60.0 to 0.61.0 (#7147) ... Bumps [golang.org/x/net](https://github.com/golang/net) from 0.60.0 to 0.61.0. - [Commits](https://github.com/golang/net/compare/v0.60.0...v0.61.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.61.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-14 10:57:32 +00:00
RPRXandGitHub	676a600edb	Update github.com/xtls/reality to 20261014101318 ... https://github.com/XTLS/REALITY/commit/83f621788ca88b83179810b12baa7ae518aacb83 https://github.com/XTLS/REALITY/commit/14cefac9bd7a724a811b02759fa97aa86a1ec894 https://github.com/XTLS/REALITY/commit/3c98159dee388c2914a2b9e73ea57bc10023f9d3	2026-10-14 10:44:41 +00:00
3 people	c77a4d0e49	MASQUE client: Support XMUX ("maxConnections": 1 by default); Use Chrome's User-Agent by default (#7121) ... https://github.com/XTLS/Xray-core/pull/6810#issuecomment-5842441136 https://github.com/XTLS/Xray-core/pull/6878#issuecomment-6095112915 https://github.com/XTLS/Xray-core/pull/7121#issuecomment-6117636043 --------- Co-authored-by: SVLAVR <skugorov.s@gmail.com>	2026-10-12 19:40:04 +00:00
MeowandGitHub	5a64db009b	Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command (#7132) ... https://github.com/XTLS/Xray-core/pull/7124#issuecomment-6110557806 https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6118169645 https://github.com/XTLS/Xray-core/pull/7132#issuecomment-6126428359	2026-10-12 16:58:20 +00:00