175502d807
header-custom finalmask: Add programmable handshake templates and runtime core ( #5920 )
...
https://github.com/XTLS/Xray-core/pull/5920#issuecomment-4252579201
https://github.com/XTLS/Xray-core/pull/5920#issuecomment-4231698135
https://t.me/projectXtls/1829
https://t.me/projectXtls/1640
2026-04-15 14:17:51 +00:00
7094f8dc07
mKCP transport: Add cwndMultiplier; Apply unaggressive strategy by default ( #5890 )
...
https://github.com/XTLS/Xray-core/issues/4846#issuecomment-4150329444
https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4184774915
https://github.com/XTLS/Xray-core/pull/5890#issuecomment-4240052251
2026-04-13 22:41:38 +00:00
1642fdfbdd
XDNS finalmask: Support resolvers (client) and domains (server) instead of domain ( #5872 )
...
https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4192730898
Example: https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4196172391
---------
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-04-11 19:37:32 +00:00
3f608b3a58
Finalmask quicParams: Add bbrProfile ("conservative" / "standard" (default) / "aggressive") ( #5869 )
...
And Update github.com/apernet/quic-go to 20260330051153
2026-04-05 13:45:50 +00:00
14524cc3b7
Finalmask: Add randRange to "noise" (UDP), as the same as "header-custom"'s (TCP & UDP) ( #5850 )
...
https://github.com/XTLS/Xray-core/pull/5812
2026-03-27 17:20:43 +00:00
157e65b34d
REALITY config: Print Warning when user is choosing apple/icloud as the target or listening on non-443 ports
...
https://t.me/projectXtls/1754
https://github.com/XTLS/BBS/issues/21#issuecomment-4103308607
2026-03-21 13:19:32 +00:00
06dc4cf8bd
Finalmask: Refactor header conns to avoid multiple-copy; Add randRange to "header-custom" (TCP & UDP) ( #5812 )
...
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016760602
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4052921628
2026-03-21 09:04:22 +00:00
50fc324728
REALITY config: Fix client's shortId length check ( #5738 )
2026-03-19 15:50:23 +00:00
0321cdd0d2
Hysteria & XHTTP/3: Unified Finalmask's quicParams to set congestion, brutalUp, brutalDown, udpHop (ports & interval), etc. ( #5772 )
...
https://github.com/XTLS/Xray-core/pull/5772#issuecomment-4023006179
2026-03-09 12:17:32 +00:00
acb06e831b
Finalmask: Add Sudoku (TCP & UDP) ( #5685 )
...
https://github.com/SUDOKU-ASCII/sudoku/issues/23#issuecomment-3859972396
2026-03-07 18:21:35 +00:00
a204873d79
Finalmask: Add header-custom (TCP & UDP), fragment (TCP), noise (UDP); Support dialer-proxy, XHTTP/3; Fix XDNS, XICMP potential panic ( #5657 )
...
https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016609446
2026-03-07 15:42:18 +00:00
88a2589498
mKCP config: Check TTI 10~100 -> Check TTI 10~5000 ( #5755 )
...
https://github.com/XTLS/Xray-core/pull/5755#issuecomment-3992400360
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-03-07 14:11:56 +00:00
5138ffcf22
XHTTP transport: Add "bbr" (default) and "force-brutal" congestion control for H3 ( #5711 )
...
https://github.com/XTLS/Xray-core/pull/5711#issuecomment-3984037632
2026-03-07 12:46:40 +00:00
0ac13bd910
XHTTP transport: Bugfixes for obfuscations ( #5720 )
...
https://github.com/XTLS/Xray-core/pull/5720#issuecomment-4016290343
2026-03-07 12:34:41 +00:00
6a909b2507
Proxy: Add Hysteria 2 inbound & transport (supports listening port range, Salamander finalmask) ( #5679 )
...
https://github.com/XTLS/Xray-core/pull/5679#issuecomment-3888548778
Closes https://github.com/XTLS/Xray-core/issues/5605
2026-02-12 14:56:06 +00:00
74c726ff62
Commands: Print CA cert's SHA256 in tls ping ( #5644 )
...
And https://github.com/XTLS/Xray-core/issues/5642#issuecomment-3840806246
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-02-03 21:03:48 +00:00
25d16914ff
Finalmask: Add XICMP (relies mKCP/QUIC or WireGuard) ( #5633 )
...
https://t.me/projectXtls/1473
2026-02-02 09:12:42 +00:00
a6ec3b6e70
XHTTP transport: Fix "auto" mode with REALITY ( #5638 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5635
BTW, fixes https://github.com/XTLS/Xray-core/issues/5631
2026-02-02 08:07:45 +00:00
c180c5980c
Finalmask: Add XDNS (relies mKCP, like DNSTT), header-*, mkcp-* ( #5560 )
...
And https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3825430761
2026-01-31 13:53:19 +00:00
5b849d51a9
XHTTP transport: New options for bypassing CDN's detection ( #5414 )
...
Usage: https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3770071786
Closes https://github.com/XTLS/Xray-core/issues/4346
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-01-31 13:34:13 +00:00
afcfdbca70
Commands: Print leaf cert's SHA256 in tls ping ( #5628 )
...
And https://github.com/XTLS/Xray-core/pull/5628#issuecomment-3828445442
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-31 13:11:36 +00:00
2c92339f95
TLS config: allowInsecure->pinnedPeerCertSha256; verifyPeerCertInNames->verifyPeerCertByName
...
And use `,` as the separator instead of `~`/array
https://github.com/XTLS/Xray-core/pull/5567#issuecomment-3766081805
https://t.me/projectXtls/1464
https://t.me/projectXtls/1465
https://t.me/projectXtls/1466
https://github.com/XTLS/Xray-core/pull/5625#issuecomment-3824855736
2026-01-31 09:32:51 +00:00
f1aee0b7c5
Hysteria transport: Support range & random for interval in udphop as well ( #5603 )
...
https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3794621260
2026-01-25 18:28:51 +00:00
cd8aab9544
common/errors/feature_errors.go: Add PrintNonRemovalDeprecatedFeatureWarning() ( #5567 )
...
And https://github.com/XTLS/Xray-core/pull/5567#issuecomment-3765466219
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-23 15:45:20 +00:00
5836f36f69
Config: Add Warning for deprecated features (allowInsecure, Shadowsocks, VMess, Trojan, VLESS without flow)
...
Accelerate!
2026-01-18 04:17:25 +00:00
cfc78b3ac1
Hysteria transport: Add congestion config (""/"reno"/"bbr"/"brutal"/"force-brutal") ( #5549 )
...
Closes https://github.com/XTLS/Xray-core/issues/5546
2026-01-17 13:29:50 +00:00
649e989fa2
Hysteria: Fix transport's "udphop without salamander" dialing issue; Require "version": 2 in outbound's settings as well ( #5537 )
...
Updated example: https://github.com/XTLS/Xray-core/pull/5508#issue-3795798712
2026-01-14 10:42:07 +00:00
92ada2dd1d
Proxy: Add Hysteria outbound & transport (version 2, udphop) and Salamander udpmask ( #5508 )
...
https://github.com/XTLS/Xray-core/issues/3547#issuecomment-3549896520
https://github.com/XTLS/Xray-core/issues/2635#issuecomment-3570871754
2026-01-13 13:31:51 +00:00
0ca13452b8
TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 ( #5154 )
...
Usage: https://github.com/XTLS/Xray-core/pull/5507
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-09 00:11:24 +00:00
2969a189e6
Sockopt config: Add trustedXForwardedFor (for XHTTP, WS, HU inbounds) ( #5331 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3404979909
2025-11-23 01:09:49 +00:00
1a32d18c16
REALITY config: Return error when short id is too long ( #5276 )
...
Closes https://github.com/XTLS/Xray-core/issues/5273
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-11-19 03:25:32 +00:00
9cc7907234
XHTTP client: Change default maxConcurrency to 1 for speed testing
...
https://t.me/projectXray/4386271
2025-10-14 23:33:06 +00:00
7cbf5b004c
TLS ECH client: echForceQuery "full" / "half" / "none" (default) ( #4973 )
...
https://github.com/XTLS/Xray-core/pull/4971#issuecomment-3148113203
2025-08-03 10:15:42 +00:00
a02723e63f
TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and echSockopt; Fix some issues ( #4949 )
...
Completes https://github.com/XTLS/Xray-core/pull/3813
2025-08-02 16:05:00 +00:00
b2829219a0
TLS ECH client: Add echForceQuery config ( #4947 )
...
https://github.com/XTLS/Xray-core/pull/4947#issuecomment-3124359776
2025-08-01 11:25:15 +00:00
fb7a9d8d61
TLS client & server: Support Encrypted Client Hello (ECH) ( #3813 )
...
https://github.com/XTLS/Xray-docs-next/commit/b9a72a4a26490cda4c915a857a78ce08ec273fe7
---------
Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com >
2025-07-26 08:47:27 +00:00
5f93ff6c3a
REALITY config: mldsa65Seed and privateKey can not be the same value
...
Otherwise the point of using ML-DSA-65 is lost.
2025-07-26 08:36:58 +00:00
31b508d372
REALITY config: Convert mldsa65Seed to its private key later
2025-07-24 01:31:07 +00:00
955a569181
REALITY config: Allow mldsa65 fields to be empty ( #4924 )
2025-07-24 01:15:48 +00:00
446315cf1f
REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions ( #4915 )
...
https://github.com/XTLS/REALITY/commit/00881f67406628275c0e4c778848e0c4dff4a2ee
2025-07-23 02:29:11 +00:00
abd551e9f7
VLESS fallbacks: dest defaults to "127.0.0.1" -> "localhost" ( #4840 )
...
https://github.com/XTLS/Xray-examples/issues/234#issuecomment-3091319391
2025-07-19 00:47:43 +00:00
18ab291e0c
REALITY: Add rate limiting to fallback handling via token bucket ( #4553 )
...
https://github.com/XTLS/REALITY/pull/12
2025-06-08 13:43:55 +00:00
97fdcb4228
New feature: Happy Eyeballs (RFC 8305) ( #4667 )
...
Closes https://github.com/XTLS/Xray-core/issues/4473
2025-06-07 13:20:06 +00:00
5f3ae64f0c
Sockopt: Allow customSockopt work for Windows & Darwin ( #4576 )
...
* Sockopt: Add custom sockopt on Windows & Darwin
* fix windows udp by the way
* use resolved addr
https://github.com/XTLS/Xray-core/pull/4504#issuecomment-2769153797
2025-04-18 02:30:47 +00:00
2d3210e4b8
Env: Add XRAY_LOCATION_CERT variable ( #4536 )
...
https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941
Fixes https://github.com/XTLS/Xray-core/issues/4531
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-03-24 13:02:35 +00:00
b585b26f29
Sockopt: Fix Windows UDP interface bind; Allow customSockopt work for UDP ( #4504 )
2025-03-21 10:48:46 +00:00
dde0a4f272
REALITY config: Add password as an alias of publicKey
...
https://github.com/XTLS/Xray-core/issues/4458#issuecomment-2696181682
2025-03-04 05:29:03 +00:00
b9cb93d3c2
Sockopt: Add addressPortStrategy (query SRV or TXT) ( #4416 )
...
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-03-02 13:07:55 +00:00
d4c7cd02fd
MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in verifyPeerCertInNames, Add checking for alpn "fromMitm"
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
2025-02-08 12:11:25 +00:00
c6a31f457c
MITM: Allow using local received SNI in the outgoing serverName & verifyPeerCertInNames
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
Иван