copilot-swe-agent[bot]
7792ca405e
Fix WireGuard inbound domain-based routing by storing sniffing config at init time
...
The root cause of issue #4760 was that the sniffing configuration and inbound tag
were being stored during Process() instead of at initialization time. This caused
a race condition where concurrent connections would overwrite each other's session
information, breaking domain-based routing.
The fix follows the same pattern as the TUN handler:
- Save tag and sniffingRequest during NewServer (at creation time)
- Use these saved values in forwardConnection for each new connection
This ensures that each connection uses the correct sniffing configuration that was
set for the inbound, regardless of concurrent connections from multiple WireGuard peers.
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-16 16:18:23 +00:00
LjhAUMEM
649e989fa2
Hysteria: Fix transport's "udphop without salamander" dialing issue; Require "version": 2 in outbound's settings as well ( #5537 )
...
Updated example: https://github.com/XTLS/Xray-core/pull/5508#issue-3795798712
2026-01-14 10:42:07 +00:00
Owersun
ef2a967f12
TUN inbound: Close connection when handling is done ( #5531 )
...
https://github.com/XTLS/Xray-core/pull/5531#issuecomment-3744446015
2026-01-13 14:25:42 +00:00
LjhAUMEM
92ada2dd1d
Proxy: Add Hysteria outbound & transport (version 2, udphop) and Salamander udpmask ( #5508 )
...
https://github.com/XTLS/Xray-core/issues/3547#issuecomment-3549896520
https://github.com/XTLS/Xray-core/issues/2635#issuecomment-3570871754
2026-01-13 13:31:51 +00:00
Owersun
e742e84ded
Upgrade gVisor to latest version v0.0.0-20260109181451-4be7c433dae2 ( #5527 )
...
https://github.com/XTLS/Xray-core/pull/5526#issuecomment-3738638586
2026-01-12 18:18:02 +00:00
Owersun
7726fbece0
TUN inbound: Make udp_fullcone pure side effect free udp connection ( #5526 )
...
https://github.com/XTLS/Xray-core/pull/5526#issue-3804306341
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-12 15:34:09 +00:00
Copilot
0c09f4342b
TUN inbound: Fix log, CanSpliceCopy, tag, sniffing, and port config issues ( #5522 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732488294 & https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732740897
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-12 10:01:27 +00:00
Copilot
14e171ac8e
TUN inbound: Implement UDP FullCone NAT ( #5509 )
...
https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732898130
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
Co-authored-by: Fangliding <45535409+Fangliding@users.noreply.github.com >
Co-authored-by: Owersun <4807375+Owersun@users.noreply.github.com >
2026-01-11 14:26:45 +00:00
Owersun
39ba1f7952
Proxy: Add TUN inbound for Windows & Linux, including Android ( #5464 )
...
* Proxy: Implement tun raw network interface inbound support for Linux
* Proxy: Tun. Include "android" as build condition for build of tun_default implementation
* Proxy: Tun. Add .Close() cleanup calls to Handler.Init() where needed
* Proxy: Add Tun for Android
* Proxy: Tun. Implement Windows support
---------
Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com >
2026-01-07 22:05:08 +00:00
yuhan6665
a54e1f2be4
Remove redundant stats in mux and bridge dispatcher ( #5466 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5446
2025-12-31 11:00:45 +00:00
ari-ahm
6738ecf68e
common/uuid: fix panic when parsing 32-len invalid UUID string. ( #5468 )
...
* common/uuid: fix panic when parsing 32-len invalid UUID string.
* fix: removed typo
2025-12-26 15:17:24 -05:00
风扇滑翔翼
fa64775f07
Tunnel/Dokodemo: Fix stats conn unwrap ( #5440 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5439
2025-12-23 09:44:54 +00:00
xtlsee
dd757ca27c
VLESS inbound: Print invalid UUID string ( #5426 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-12-23 08:27:40 +00:00
Meow
a3ba3eefb6
Wireguard: Decouple server endpoint DNS from address option ( #5417 )
...
* Wireguard: Decouple server endpoint DNS from address option
Previously, Wireguard server endpoint's domain resolution was incorrectly constrained by the local `address` option. For example, `ForceIPv6v4` might fail to resolve AAAA records for the server domain if no IPv6 was explicitly configured in the `address` option.
This commit decouples the server endpoint's domain resolution from the local `address` configuration. It ensures the Wireguard server address is resolved independently, allowing its `domainStrategy` to function correctly without being limited by the client's local network or `address` settings.
* Delete code instead of commenting it out
2025-12-14 10:13:47 -05:00
风扇滑翔翼
a610a4c89a
Chore: Remove all double gonet import ( #5402 )
2025-12-10 07:17:29 +00:00
RPRX
bd7503d506
XTLS Vision: LogInfo() -> LogDebug()
...
https://t.me/projectXray/4543105
2025-12-08 13:19:59 +00:00
yuhan6665
903214a0f0
XTLS Vision: Fix enabled uplink splice flag by mistake ( #5391 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5379
2025-12-08 13:13:43 +00:00
RPRX
c123f163c2
XTLS Vision: Discard expired pre-connect conn automatically
...
https://t.me/projectXray/4538408
https://github.com/XTLS/Xray-core/pull/5270#issuecomment-3602122299
2025-12-02 13:44:27 +00:00
风扇滑翔翼
93312d29e5
XTLS Vision: Fix IsCompleteRecord() ( #5365 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5179
2025-12-02 13:01:44 +00:00
RPRX
cadcb47074
XTLS Vision: Add testpre (outbound pre-connect) and testseed (outbound & inbound) ( #5270 )
...
https://t.me/projectXtls/1034
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-12-01 13:27:27 +00:00
yuhan6665
c6afcd5fb6
XTLS Vision: Check TLS record isComplete ( #5179 )
...
Fixes https://github.com/XTLS/Xray-core/discussions/5169#discussioncomment-14482684
2025-11-30 10:28:01 +00:00
RPRX
a83253f3d7
VLESS Reverse Proxy: Forbid reverse-proxy UUID using forward-proxy, enabled by default
...
https://t.me/projectXtls/1070
https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3567464144
2025-11-23 04:23:48 +00:00
hax0r31337
e914183996
HTTP outbound: Read negotiated protocol from uTLS ( #5251 )
2025-11-21 02:29:25 +00:00
风扇滑翔翼
f9dd3aef72
Refactor WrapLink logic ( #5288 )
...
https://github.com/XTLS/Xray-core/pull/5133
https://github.com/XTLS/Xray-core/pull/5286
2025-11-20 15:53:42 +00:00
vemneyy
b16a5f03fe
Socks: Fix buffer full panic when encoding large UDP packets ( #5252 )
...
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-11-20 12:21:22 +00:00
Exclude0122
18a4104737
Fix wireguard not discarding broken connection on android ( #5304 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5303
2025-11-19 04:53:54 +00:00
RPRX
12f4a014e0
VLESS Reverse Proxy: Transfer real Source & Local (IP & port), enabled by default
...
https://t.me/projectXtls/1039
https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3404979909
2025-10-15 07:41:49 +00:00
风扇滑翔翼
c0c88f3d73
Fix vless reverse panic in vision ( #5189 )
...
* Fix vless reverse panic in vision
* Add panic
2025-10-04 23:04:18 -04:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇
fe57507fd9
Outbound: One endpoint and at most one user only ( #5144 )
...
https://github.com/XTLS/Xray-core/pull/5124#issuecomment-3281091009
Fixes https://github.com/XTLS/Xray-core/pull/5124#pullrequestreview-3218097421
2025-09-15 13:31:27 +00:00
patterniha
9f5dcb1591
MUX: Prevent goroutine leak ( #5110 )
2025-09-10 00:33:19 +00:00
RPRX
845010b535
VLESS protocol: Add Reverse Proxy (4) Command and extremely simple config ( #5101 )
...
https://github.com/XTLS/Xray-core/issues/5088#issuecomment-3263093341
2025-09-09 14:19:12 +00:00
风扇滑翔翼
a0c63ba1cf
VMess: Returns clearer error in AuthIDDecoderHolder ( #5090 )
2025-09-08 14:19:17 +00:00
patterniha
197b319f9a
DNS outbound: Fix some issues ( #5081 )
2025-09-05 08:15:16 +00:00
RPRX
cbade89ab1
VLESS Encryption: Improve server-side tickets' expiration mechanism
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3253717319
2025-09-04 14:03:55 +00:00
RPRX
d20397c15d
DispatchLink(): Fix user stats
...
Fixes https://github.com/XTLS/Xray-core/pull/5076#issuecomment-3243431593
2025-09-03 23:25:17 +00:00
RPRX
19f8907296
VLESS Encryption: Randomize seconds in ticket and simplify expiration mechanism
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3246925902
2025-09-02 23:37:14 +00:00
RPRX
e943de5300
proxy/proxy.go: IsRAWTransport() -> IsRAWTransportWithoutSecurity()
2025-09-02 18:15:08 +00:00
yuhan6665
4064f8dd80
XTLS Vision: Refactor code to use DispatchLink() in VLESS inbound ( #5076 )
...
* Xtls: code refactor
- Move more logic to VisionReader/Writer
- Remove XtlsWrite()
- XtlsRead now only handle splice at the outbound
- This helps VLESS inbound to have simple buf.copy() so that we can remove pipe next
* Add bufferFlushNext; Use DispatchLink() in VLESS inbound
* Use TimeoutWrapperReader; clean up timer/buffer
2025-09-01 15:15:32 +00:00
yuhan6665
2acd206821
Direct/Freedom outbound: Use proxy.IsRAWTransport(conn) ( #5074 )
2025-09-01 15:03:01 +00:00
RPRX
4c6fd94d97
VLESS Encryption: Server checks one specific zero-bit in the peer-sent X25519 public key in relays
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3240198336
2025-09-01 15:01:54 +00:00
RPRX
6768a22f67
VLESS Encryption: Switch to "probability-from-to" format for customizable 1-RTT padding parameters
...
See https://github.com/XTLS/Xray-core/pull/5067#issue-3361308276 for details
2025-08-31 11:35:38 +00:00
RPRX
e8b02cd664
VLESS Encryption: Add customizable 1-RTT padding parameters; Decrease memory using; Chores
...
Completes https://github.com/XTLS/Xray-core/pull/5067
---------
Co-authored-by: wwqgtxx <wwqgtxx@gmail.com >
2025-08-31 04:09:28 +00:00
patterniha
ea1a3ae8f1
Trojan UoT: Fix memory/goroutine leak ( #5064 )
2025-08-29 14:32:13 +00:00
patterniha
593ededd3e
Trojan-UoT & UDP-nameserver: Fix forgotten release buffer; UDP dispatcher: Simplified and optimized ( #5050 )
2025-08-29 14:31:46 +00:00
RPRX
82ea7a3cc5
VLESS Encryption: Re-add automatically ChaCha20-Poly1305
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3234892060
Fixes https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3234083367 for cheap routers
2025-08-29 14:05:39 +00:00
RPRX
56a45ad578
First step of upcoming refactor for Xray-core: Add TimeoutWrapperReader; Use DispatchLink() in Tunnel/Socks/HTTP inbounds
...
https://github.com/XTLS/Xray-core/pull/5067#issuecomment-3236833240
Fixes https://github.com/XTLS/Xray-core/pull/4952#issuecomment-3229878125 for client's Xray-core
2025-08-29 12:35:56 +00:00
风扇滑翔翼
4976085ddb
Socks/HTTP inbound: Fix unexpected rawConn copy ( #5041 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5040
2025-08-28 13:41:44 +00:00
RPRX
7951a5c4bf
VLESS protocol: Add lightweight, Post-Quantum ML-KEM-768-based PFS 1-RTT / anti-replay 0-RTT AEAD Encryption ( #5067 )
...
https://opensea.io/collection/vless
2025-08-28 10:40:48 +00:00
风扇滑翔翼
5fa5f3fbb9
WireGuard outbound: Fix close closed ( #5054 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5053
2025-08-27 09:33:09 +00:00
patterniha
6d1695a686
Some refines related to direct/freedom and targetStrategy; More intelligent "useIP"/"ForceIP", enhance "origin" functionality ( #5030 )
...
https://github.com/XTLS/Xray-core/pull/5009#issuecomment-3194264277
2025-08-20 01:19:13 +03:30