Go's internal/cpu never detects ARM64 features on GOOS=ios, so AES, AES-GCM
and SHA-256 use their generic implementations on iOS and tvOS. Patch the
Go source in the Apple library build to assert the ARMv8.0 cryptographic
extensions, as Go already does for macOS.
See https://github.com/SagerNet/sing-box/issues/4486
Report application limited to injected congestion controllers when the packer stays empty for longer than the pacer burst window, instead of suppressing the report within one RTT of a pacing or congestion limit. The suppression let low bandwidth samples from small bursts after idle periods enter the BBR bandwidth filter, so long-lived TUIC and naive QUIC connections lost throughput after light traffic.
- Remove `bbr_standard`, `bbr2` and `bbr2_variant` from the naive inbound
- Report injected congestion controllers with connection-wide packet numbers in quic-go
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
世界