patterniha and Claude Opus 5.5
4ec4fb8aab
TUN inbound: Rename to autoSystemWfpBlockLeak and autoSystemDnsToGateway
...
autoSystemWFP becomes autoSystemWfpBlockLeak, saying that the WFP filters
block leaks, and autoSystemDNS becomes autoSystemDnsToGateway, saying
where it points the system DNS, so that pointing the system DNS at the
gateway on Windows later would fit the same name. Their config fields
keep their numbers; neither was released.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-30 02:31:00 +03:30
patterniha and Claude Opus 5.5
63de6135cb
TUN inbound: Rename strictRoute to autoSystemWFP
...
It only turns on the Windows Filtering Platform filters, along with Xray
resolving its own lookups while they restrict DNS, so it is named after
what it sets up in the system, like autoSystemRoutingTable and
autoSystemDNS. The config field becomes auto_system_wfp, with the same
number; strictRoute was never released.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-30 01:22:22 +03:30
patterniha and Claude Opus 5.5
eb29a4e3de
TUN inbound: Make strictRoute false by default
...
Like sing-box's strict_route, strictRoute is now false by default, so the
Windows Filtering Platform filters are only added when it is set to true
(together with autoSystemRoutingTable). With unset meaning false,
strict_route becomes a plain bool field.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-29 14:51:17 +03:30
patterniha and Claude Opus 5.5
2db099b34b
TUN inbound: Block DNS and IPv6 leaks outside the TUN on Windows; Add strictRoute
...
Windows sends name queries to the DNS servers of all interfaces, and a
resolver on the local network (e.g. 192.168.1.1 from DHCP) is reached
through its more specific LAN route instead of the TUN, so DNS leaks
past it. IPv6 bypasses a TUN that cannot carry it.
With autoSystemRoutingTable set, the Windows TUN now adds Windows
Filtering Platform filters, all in one transaction and in a dynamic
session, so that they are removed when Xray exits, even if it crashes:
- DNS (port 53) only goes through the TUN, in both directions: its local
address, and the interface it leaves or arrives by, must be the TUN's.
- IPv6 is blocked in both directions when the TUN has no IPv6 address or
no IPv6 route, except loopback, neighbor and multicast listener
discovery, and DHCPv6.
- Xray's own traffic is exempt: its connections out with a hard permit,
which Windows Firewall rules do not override (like sing-box's
strict_route), connections to its inbounds with an ordinary one.
If the filters cannot be added, the TUN does not start on Windows 10 and
later (only a warning on 7/8). The new `strictRoute` option (true by
default) turns them off.
Also on Windows:
- A warning for `dns` servers outside gateway and autoSystemRoutingTable,
as queries to them cannot go through the TUN and are blocked.
- While DNS is restricted and autoOutboundsInterface is in use, Xray
resolves the names it would ask Windows for itself (Go's resolver on
its own sockets). Those lookups and the `localhost` DNS server skip the
TUN's DNS servers, unless another interface uses them too, instead of
looping back into the TUN.
- The DNS cache is flushed when the TUN starts and stops, and DNS
registration is turned off on the TUN (through netsh before Windows 10
1809).
- Close no longer panics when registering the route or interface change
callbacks failed.
The README's Windows section describes all of it.
Tested on Windows 11, elevated, amd64 and 386: the filters, DNS arriving
through a real Wintun adapter and blocked outside it, the IPv6 block,
Windows Firewall rules, and a real Xray run. Windows 7/8 and Windows 10
before 1809 are untested.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-09-28 08:15:40 +03:30
7780db9bbe
Finalmask: Fix panic when udpHop or xicmp fails; Restore udpHop's default interval ( #6808 )
...
https://github.com/XTLS/Xray-core/pull/6808#pullrequestreview-5324529175
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-09-27 22:17:47 +00:00
youugiuhiuh and GitHub
47a2c2ffdc
TUN inbound: Add autoSystemDNS on Linux (to TUN's gateway) ( #6773 )
...
https://github.com/XTLS/Xray-core/issues/6454#issuecomment-4931311976
https://github.com/XTLS/Xray-core/pull/6773#issuecomment-5755516423
https://github.com/XTLS/Xray-core/pull/6807#issuecomment-5807844210
2026-09-27 20:07:53 +00:00
Cluvex and GitHub
7a018833ec
Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) ( #6844 )
...
Completes https://github.com/XTLS/Xray-core/pull/6807 and https://github.com/XTLS/Xray-core/pull/6810
2026-09-27 19:16:54 +00:00
风扇滑翔翼 and GitHub
65e853ed84
SS2022 proxy: Refactor to remove sing* dependencies ( #6831 )
...
https://github.com/XTLS/Xray-core/pull/4356#issuecomment-2639571931
2026-09-27 18:42:53 +00:00
风扇滑翔翼 and RPRX
61cad5ec8b
Xray-core: Reduce error log usage for performance ( #6796 )
...
https://github.com/XTLS/Xray-core/pull/6796#issuecomment-5807809588
2026-09-25 17:59:49 +00:00
Esko Mobius and GitHub
7d3e44fee2
Proxy: Add MASQUE outbound & transport (IETF CONNECT-IP, RFC 9484) ( #6807 )
...
Closes https://github.com/XTLS/Xray-core/issues/5495#issuecomment-3710683679
2026-09-24 02:13:37 +00:00
LjhAUMEM and RPRX
efc9e6da62
WireGuard outbound: Remove remoteDNS' "local" mode and domainStrategy ( #6771 )
...
https://github.com/XTLS/Xray-core/issues/6567#issuecomment-5660953757
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751826982
https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751831637
2026-09-20 19:07:51 +00:00
LjhAUMEM and GitHub
8267cf953a
Transport: Refactor to be based on Finalmask's dialer & listener ( #6754 )
...
https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5645958010
https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5720818254
https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5751585906
2026-09-20 18:12:50 +00:00
dcdfc57ccd
XDRIVE transport: Add the Google Drive and "template" backend ( #6748 )
...
https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3849778103
https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3851839033
https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627294204
https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5660444946
https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5719209642
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-09-19 09:03:11 +00:00
3461c511aa
XDRIVE transport: The universal remote-storage/any-service-based proxy, ignoring IP whitelists ( #5645 )
...
https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3796734827
https://github.com/XTLS/Xray-core/pull/5581#issuecomment-3797134147
https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3899873945
https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627420177
https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5740443122
---------
Co-authored-by: Risaro <62798663+Risaro@users.noreply.github.com >
2026-09-19 08:23:38 +00:00
18a1b5042a
Finalmask: Make "udpHop" a new UDP mask ( #6327 )
...
https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5592421364
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-09-08 22:15:02 +00:00
风扇滑翔翼 and GitHub
a1bf968be9
VLESS config: Fix validateOutboundTransportSecurity() ( #6741 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6737#issuecomment-5587270250
2026-09-08 18:18:12 +00:00
风扇滑翔翼 and GitHub
c037ccd98d
infra/vformat/main.go: Refactor ( #6739 )
...
https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5581733848
2026-09-08 17:19:15 +00:00
RPRX
47cfe9994a
Update github.com/xtls/reality to 20260908062103
...
https://github.com/XTLS/REALITY/commit/8cdf7bf9c7f09cb9814bf08c3eb877f68b85fba8
https://github.com/XTLS/REALITY/commit/e1986a4d31ca33c087a72ab4644aef1295693b69
https://github.com/XTLS/REALITY/commit/393f8de3ee2d685271d79ee608334e441b2db324
2026-09-08 07:22:54 +00:00
Meow and GitHub
3e2f040cd8
Direct/Freedom outbound: Better Compatibility ( #6058 )
...
Fixes https://github.com/XTLS/Xray-core/issues/6393
2026-09-08 03:31:25 +00:00
01a034be53
Blackhole outbound: Add customizable response data support ( #6713 )
...
https://github.com/XTLS/Xray-core/pull/6711#issuecomment-5508683394
---------
Co-authored-by: Raaad1on <djilyawhite@gmail.com >
2026-09-07 21:09:58 +00:00
patterniha and GitHub
fc7b980636
Sockopt: Fix indentation of the CustomSockopt block for Linux ( #6568 )
...
https://github.com/XTLS/Xray-core/pull/6568#issuecomment-5488145252
Fixes https://github.com/XTLS/Xray-core/issues/6564
Fixes https://github.com/XTLS/Xray-core/issues/6602
2026-09-01 04:47:55 +00:00
meanwhile131 and GitHub
5e245b082e
Routing: Export HealthCheckSettings ( #6680 )
2026-08-30 12:19:54 +00:00
LjhAUMEM and GitHub
ada99a4eb0
Hysteria: Upgrade to official v2.12.2 ( #6565 )
...
https://github.com/XTLS/Xray-core/pull/6565#issuecomment-5202554275
Fixes https://github.com/XTLS/Xray-core/issues/6408
Fixes https://github.com/XTLS/Xray-core/issues/6598
...
2026-08-27 17:25:56 +00:00
风扇滑翔翼
65458e919f
Config: Fix some issues ( #6640 )
...
https://github.com/XTLS/Xray-core/pull/6640#issuecomment-5420106315
Fixes https://github.com/XTLS/Xray-core/issues/6636
Fixes https://github.com/XTLS/Xray-core/issues/6600
...
2026-08-27 20:03:59 +08:00
c7e569b037
WireGuard outbound: Add remoteDNS & honor TTL ( #6620 )
...
Closes https://github.com/XTLS/Xray-core/pull/6569#issuecomment-5263789755
Fixes https://github.com/XTLS/Xray-core/issues/6567#issuecomment-5150957597
---------
Co-authored-by: LagPixelLOL <2282688304@qq.com >
2026-08-25 14:28:36 +00:00
fanymagnet and GitHub
a12801c13b
Routing: Add localOS that directly matches runtime.GOOS ( #6553 )
...
https://github.com/XTLS/Xray-core/pull/6553#issuecomment-5262686006
2026-08-12 05:29:32 +00:00
RPRX
18e283909c
XHTTP client: Reduce default maxConnections from 6 to 3 for anti-TSPU
...
https://github.com/XTLS/Xray-core/issues/6376#issuecomment-5101210849
Replaces https://github.com/XTLS/Xray-core/commit/18b85adb4e288f49a7894351c6e0f2428c0beef6
2026-07-28 07:57:55 +00:00
6ab123bf8f
XMC finalmask: Add default directional padding/keep-alive packets, matching Minecraft 26.1.2 login/join/etc traffic shapes ( #6487 )
...
https://github.com/XTLS/Xray-core/pull/6487#issuecomment-5092235757
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2026-07-28 06:45:36 +00:00
Jasper344612 and GitHub
1d8eb81d70
TUN inbound: Add desc config for Windows ("Wintun" by default) ( #6486 )
...
https://github.com/XTLS/Xray-docs-next/pull/872#issuecomment-4936055488
2026-07-17 22:21:33 +00:00
e78d8ef184
REALITY server: Refine warnings in parsing configuration ( #6508 )
...
https://github.com/XTLS/Xray-core/pull/6508#issuecomment-4995787310
https://github.com/XTLS/Xray-core/pull/6507#issuecomment-4995466980
---------
Co-authored-by: Enle <42325154+EnleStars@users.noreply.github.com >
Co-authored-by: Aleksey <fraybyl@gmail.com >
2026-07-17 21:51:29 +00:00
Jasper344612 and GitHub
6ce924ad56
TUN inbound: Change default name to "utunN" (10~1024) ( #6485 )
...
https://github.com/XTLS/Xray-docs-next/pull/872#issuecomment-4936853064
2026-07-16 19:53:04 +00:00
RPRX and GitHub
af7eb68028
REALITY server: Set default "minClientVer": "26.3.27" (change it at your own risk)
...
https://github.com/XTLS/Xray-core/pull/6181#issuecomment-4567373533
https://t.me/projectXtls/3373
https://t.me/projectXtls/3378
2026-07-11 14:30:54 +00:00
Exclude0122 and GitHub
35387572e0
Finalmask: Add XMC (TCP, Minecraft) ( #6210 )
...
https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4573680059
https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4582554889
https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4937008835
2026-07-11 13:59:24 +00:00
yiguodev and GitHub
d5bc58dc6b
Root config: Add env config ( #6400 )
...
https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4880198100
https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4916892425
https://github.com/XTLS/Xray-core/pull/6400#issuecomment-4929136670
2026-07-10 02:56:49 +00:00
d7fa2076c3
Xray-core: Forbid unencrypted outbounds on public Internet for VLESS and Trojan; Remove "none/zero/plain" for VMess and Shadowsocks ( #6303 )
...
https://github.com/XTLS/Xray-core/pull/5640#issuecomment-4611416512
https://github.com/XTLS/Xray-core/pull/6303#issuecomment-4668055274
---------
Co-authored-by: Meow <197331664+Meo597@users.noreply.github.com >
2026-07-07 02:01:53 +00:00
fb548f54d2
infra/conf/transport_internet.go: Split into multiple files; Rename network to method ( #6426 )
...
https://github.com/XTLS/Xray-core/issues/6376#issuecomment-4817591444
https://github.com/XTLS/Xray-core/pull/6426#issuecomment-4899048255
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-07-07 01:26:15 +00:00
RPRX and GitHub
18b85adb4e
XHTTP client: Change default maxConnections to 6 for anti-RKN
...
"xmux": {
"maxConcurrency": 0,
"maxConnections": "6",
"cMaxReuseTimes": 0,
"hMaxRequestTimes": "600-900",
"hMaxReusableSecs": "1800-3000",
"hKeepAlivePeriod": 0
}
Replaces https://github.com/XTLS/Xray-core/commit/9cc7907234a8297a87a0ff77fc40db373b74a0f2 and https://github.com/XTLS/Xray-core/commit/4ce65fc74c4c50919b10b3faff9725f75bba5d73
Closes https://github.com/XTLS/Xray-core/issues/6376#issuecomment-4817033592
2026-06-27 12:41:39 +00:00
345c76f9a8
WireGuard inbound: Support dynamic peer management ( #6360 )
...
https://github.com/XTLS/Xray-core/pull/6360#issuecomment-4780311547
Closes https://github.com/XTLS/Xray-core/issues/6314
---------
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
Co-authored-by: LjhAUMEM <llnu14702@gmail.com >
2026-06-27 11:41:22 +00:00
567500c4af
Fragment finalmask: Add lengths and delays ( #6334 )
...
Usage: https://github.com/XTLS/Xray-core/pull/6334#issue-4685556394
Behavior: https://github.com/XTLS/Xray-core/pull/6334#issuecomment-4751547750
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2026-06-22 17:38:12 +00:00
j2rong4cn and GitHub
c815c2f2df
Loopback outbound: Add sniffing ( #6326 )
...
Example: https://github.com/XTLS/Xray-core/pull/6326#issue-4659701786
2026-06-18 23:17:01 +00:00
Meow and GitHub
711aea4e34
XHTTP & WS & HU & gRPC servers: Require sockopt.trustedXForwardedFor ( #6309 )
...
https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4663652131
Behavior: https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4746598275
Replaces https://github.com/XTLS/Xray-core/pull/6159
2026-06-18 22:31:21 +00:00
LjhAUMEM and RPRX
ad2e4cb0e1
Finalmask: Fix unexpected order and UDP's buf issue ( #6331 )
...
https://github.com/XTLS/Xray-docs-next/pull/866#issuecomment-4729859528
And https://github.com/XTLS/Xray-core/pull/6331#issuecomment-4730527410
Fixes https://github.com/XTLS/Xray-core/issues/6184#issuecomment-4725831023
2026-06-17 14:44:12 +00:00
LjhAUMEM and RPRX
862631172d
WireGuard proxy: Refactor ( #6287 )
...
And https://github.com/XTLS/Xray-core/pull/6303#issuecomment-4669158076
Fixes https://github.com/XTLS/Xray-core/issues/6257
2026-06-17 12:02:10 +00:00
e10347bf01
XHTTP transport: Add sessionIDTable and sessionIDLength; Rename session* to sessionID* ( #6258 )
...
https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4658534046
https://github.com/XTLS/Xray-core/pull/6253#issuecomment-4657704004
https://github.com/XTLS/Xray-core/pull/6251#issuecomment-4612756220
Usage: https://github.com/XTLS/Xray-core/pull/6258#issue-4580617110
Closes https://github.com/XTLS/Xray-core/issues/6264
---------
Co-authored-by: XXcipherX <knazevvv6514@gmail.com >
2026-06-09 15:58:02 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 and GitHub
95e9816223
Chore: Limit sing* dependencies to shadowsocks_2022 only ( #6286 )
...
https://github.com/XTLS/Xray-core/pull/6286#issuecomment-4658968225
2026-06-09 10:55:42 +00:00
55956f8d70
TLS config: Remove some deprecated fields ( #6226 )
...
https://t.me/projectXtls/1490
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-06-02 23:36:42 +00:00
cb8cd048c1
DNS outbound: Replace "reject" with "return" (rCode is 0 by default) ( #6214 )
...
https://github.com/XTLS/Xray-core/pull/6214#issuecomment-4587988752
Example: https://github.com/XTLS/Xray-core/pull/6214#issue-4553786283
---------
Co-authored-by: Meo597 <197331664+Meo597@users.noreply.github.com >
2026-06-01 01:25:47 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 and GitHub
d43a808ea5
GitHub Action CI: Add Go source file format check ( #6090 )
...
https://github.com/XTLS/Xray-core/pull/6057#issuecomment-4364819830
And https://github.com/XTLS/Xray-core/pull/6149#issuecomment-4546876261
2026-05-29 15:04:59 +00:00
LjhAUMEM and RPRX
aba22722a6
Finalmask: Add mkcp-legacy (UDP) to replace mkcp-* and legacy header-* ( #6201 )
...
https://github.com/XTLS/Xray-core/pull/6193#issuecomment-4543737699
https://github.com/XTLS/Xray-core/pull/6201#issuecomment-4574213827
Example: https://github.com/XTLS/Xray-core/pull/6201#issue-4525483699
2026-05-29 11:57:32 +00:00
LjhAUMEM and GitHub
2b42699623
XICMP finalmask: Refactor & Speed up; Add multi ips and dgram mode (client) ( #6168 )
...
https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4198514120
https://github.com/XTLS/Xray-core/pull/6168#issuecomment-4571606666
https://github.com/XTLS/Xray-core/pull/6168#issuecomment-4573294637
Example: https://github.com/XTLS/Xray-core/pull/6168#issue-4484980927
Closes https://github.com/XTLS/Xray-core/discussions/5879
2026-05-29 09:44:06 +00:00
