patternihaandClaude Opus 5.5 1c225a8041 TUN inbound: Make autoSystemWfpBlockLeak a list of the leaks to block ...

autoSystemWfpBlockLeak now takes ["dns", "misconfig"] instead of true:
"dns" keeps DNS inside the TUN, and "misconfig" blocks an IP version
that no route leads to the TUN, the leak of a configuration that routes
only one of them. Either can be used alone, e.g. ["dns"] to block DNS
leaks while an IP version stays out of the TUN on purpose. Unknown
values are rejected. The config field becomes a repeated string with
the same number; it was never released.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-30 07:46:51 +03:30

..

cfgcommon/duration

Config: Implement missing MarshalJSON for structs having custom UnmarshalJSON (#4585)

2025-04-07 11:46:49 -04:00

json

Reformat code

2022-05-18 15:29:01 +08:00

serial

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

api.go

Refactor log (#3446)

2024-06-29 14:32:57 -04:00

blackhole_test.go

Blackhole outbound: Add customizable response data support (#6713)

2026-09-07 21:09:58 +00:00

blackhole.go

Blackhole outbound: Add customizable response data support (#6713)

2026-09-07 21:09:58 +00:00

buildable.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

common_test.go

Reformat code

2022-05-18 15:29:01 +08:00

common.go

Config: Fix some issues (#6640)

2026-08-27 20:03:59 +08:00

conf.go

Remove legacy code (#3838)

2024-09-23 11:28:19 -04:00

dns_proxy_test.go

DNS outbound: Replace "reject" with "return" (rCode is 0 by default) (#6214)

2026-06-01 01:25:47 +00:00

dns_proxy.go

DNS outbound: Replace "reject" with "return" (rCode is 0 by default) (#6214)

2026-06-01 01:25:47 +00:00

dns_test.go

Xray-core: Refactor geodata (#5814)

2026-04-13 16:42:29 +00:00

dns.go

Xray-core: Refactor geodata (#5814)

2026-04-13 16:42:29 +00:00

dokodemo_test.go

Config: Rename network/address/port in Tunnel inbound and DNS outbound (#6084)

2026-05-07 14:13:25 +00:00

dokodemo.go

Config: Rename network/address/port in Tunnel inbound and DNS outbound (#6084)

2026-05-07 14:13:25 +00:00

env_test.go

Root config: Add env config (#6400)

2026-07-10 02:56:49 +00:00

fakedns.go

Sniffing: domainsExcluded supports "geosite:" (#5927)

2026-04-13 17:39:53 +00:00

freedom_test.go

Direct/Freedom outbound: Add blockDelay to finalRules (30~90s by default) (#6060)

2026-05-02 20:40:46 +00:00

freedom.go

Direct/Freedom outbound: Add blockDelay to finalRules (30~90s by default) (#6060)

2026-05-02 20:40:46 +00:00

general_test.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

geodata_test.go

Geodata: Support automatically updating .dat files and hot reloading (#5992)

2026-04-25 21:20:42 +00:00

geodata.go

Geodata: Support automatically updating .dat files and hot reloading (#5992)

2026-04-25 21:20:42 +00:00

http_test.go

Config: Remove more legacy fields (#3817)

2024-09-19 01:05:59 +00:00

http.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

hysteria.go

WireGuard inbound: Support dynamic peer management (#6360)

2026-06-27 11:41:22 +00:00

init.go

Add Fake DNS support (#309)

2021-03-07 04:39:50 +00:00

lint.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

loader.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

log.go

Log: Add MaskAddress option to hide IP addresses (#3783)

2024-09-11 10:45:47 -04:00

loopback.go

Loopback outbound: Add sniffing (#6326)

2026-06-18 23:17:01 +00:00

masque_test.go

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844)

2026-09-27 19:16:54 +00:00

masque.go

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844)

2026-09-27 19:16:54 +00:00

metrics.go

Metrics: Add direct listen (#4409)

2025-02-18 11:32:48 +00:00

observatory.go

Routing: Export HealthCheckSettings (#6680)

2026-08-30 12:19:54 +00:00

policy_test.go

v1.1.0

2020-12-04 09:36:16 +08:00

policy.go

API: Add user online stats (#3637)

2024-11-03 08:44:15 -05:00

reverse_test.go

v1.1.0

2020-12-04 09:36:16 +08:00

reverse.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

router_strategy.go

Routing: Export HealthCheckSettings (#6680)

2026-08-30 12:19:54 +00:00

router_test.go

Geodata: Support reversed CIDR rules in IP rules (#5951)

2026-04-17 22:13:35 +00:00

router.go

Routing: Add localOS that directly matches runtime.GOOS (#6553)

2026-08-12 05:29:32 +00:00

shadowsocks_test.go

remove deprecate ciphers in shadowsocks (#710)

2021-09-17 04:13:07 +08:00

shadowsocks.go

SS2022 proxy: Refactor to remove sing* dependencies (#6831)

2026-09-27 18:42:53 +00:00

socks_test.go

Outbound: One endpoint and at most one user only (#5144)

2025-09-15 13:31:27 +00:00

socks.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

transport_finalmask_xmc_test.go

XMC finalmask: Add default directional padding/keep-alive packets, matching Minecraft 26.1.2 login/join/etc traffic shapes (#6487)

2026-07-28 06:45:36 +00:00

transport_finalmask.go

Finalmask: Fix panic when udpHop or xicmp fails; Restore udpHop's default interval (#6808)

2026-09-27 22:17:47 +00:00

transport_internet.go

Proxy: Add MASQUE outbound & transport (IETF CONNECT-IP, RFC 9484) (#6807)

2026-09-24 02:13:37 +00:00

transport_method.go

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844)

2026-09-27 19:16:54 +00:00

transport_security.go

Update github.com/xtls/reality to 20260908062103

2026-09-08 07:22:54 +00:00

transport_sockopt.go

Sockopt: Fix indentation of the CustomSockopt block for Linux (#6568)

2026-09-01 04:47:55 +00:00

transport_test.go

XDRIVE transport: Add the Google Drive and "template" backend (#6748)

2026-09-19 09:03:11 +00:00

trojan.go

Config: Rename inbounds' clients/accounts to users (#6083)

2026-05-07 14:13:05 +00:00

tun_test.go

TUN inbound: Make autoSystemWfpBlockLeak a list of the leaks to block

2026-09-30 07:46:51 +03:30

tun.go

TUN inbound: Make autoSystemWfpBlockLeak a list of the leaks to block

2026-09-30 07:46:51 +03:30

version.go

GitHub Action CI: Add Go source file format check (#6090)

2026-05-29 15:04:59 +00:00

vless_test.go

Config: Rename inbounds' clients/accounts to users (#6083)

2026-05-07 14:13:05 +00:00

vless.go

VLESS config: Fix validateOutboundTransportSecurity() (#6741)

2026-09-08 18:18:12 +00:00

vmess_test.go

Outbound: One endpoint and at most one user only (#5144)

2025-09-15 13:31:27 +00:00

vmess.go

Xray-core: Forbid unencrypted outbounds on public Internet for VLESS and Trojan; Remove "none/zero/plain" for VMess and Shadowsocks (#6303)

2026-07-07 02:01:53 +00:00

wireguard.go

WireGuard outbound: Remove remoteDNS' "local" mode and domainStrategy (#6771)

2026-09-20 19:07:51 +00:00

xray_test.go

Geodata: Support reversed CIDR rules in IP rules (#5951)

2026-04-17 22:13:35 +00:00

xray.go

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844)

2026-09-27 19:16:54 +00:00