copilot-swe-agent[bot]
7792ca405e
Fix WireGuard inbound domain-based routing by storing sniffing config at init time
...
The root cause of issue #4760 was that the sniffing configuration and inbound tag
were being stored during Process() instead of at initialization time. This caused
a race condition where concurrent connections would overwrite each other's session
information, breaking domain-based routing.
The fix follows the same pattern as the TUN handler:
- Save tag and sniffingRequest during NewServer (at creation time)
- Use these saved values in forwardConnection for each new connection
This ensures that each connection uses the correct sniffing configuration that was
set for the inbound, regardless of concurrent connections from multiple WireGuard peers.
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-16 16:18:23 +00:00
copilot-swe-agent[bot]
81db73e320
Initial plan
2026-01-16 16:11:04 +00:00
RPRX
760223ad70
TLS client: Skip TLS' built-in verification when using pinnedPeerCertSha256; Fixes
...
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3745598515
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3759930283
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3760057266
https://github.com/XTLS/Xray-core/pull/5532#issuecomment-3760540231
2026-01-16 15:23:39 +00:00
nobody
d75b33a3a3
Commands: "xray run -dump" supports reading JSON from STDIN ( #5550 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5534
2026-01-16 10:55:43 +00:00
Happ-dev
7c418486c8
README.md: Add Happ RU to iOS & macOS Clients ( #5551 )
2026-01-16 10:44:44 +00:00
风扇滑翔翼
a384be0f84
SS2022 outbound: Fix UDP leak ( #5544 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5541
2026-01-14 13:31:43 +00:00
LjhAUMEM
649e989fa2
Hysteria: Fix transport's "udphop without salamander" dialing issue; Require "version": 2 in outbound's settings as well ( #5537 )
...
Updated example: https://github.com/XTLS/Xray-core/pull/5508#issue-3795798712
2026-01-14 10:42:07 +00:00
dependabot[bot]
0443de7798
Bump github.com/refraction-networking/utls from 1.8.1 to 1.8.2 ( #5535 )
...
Bumps [github.com/refraction-networking/utls](https://github.com/refraction-networking/utls ) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/refraction-networking/utls/releases )
- [Commits](https://github.com/refraction-networking/utls/compare/v1.8.1...v1.8.2 )
---
updated-dependencies:
- dependency-name: github.com/refraction-networking/utls
dependency-version: 1.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-14 08:24:12 +00:00
RPRX
9a121a489b
v26.1.13
...
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless
XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v26.1.13
2026-01-13 15:32:01 +00:00
风扇滑翔翼
4bdf6e5c92
TLS client: Verify leaf cert (name, time) when pinning self-signed CA ( #5532 )
...
https://github.com/XTLS/Xray-core/pull/5154#issuecomment-3732159602
2026-01-13 14:35:24 +00:00
Owersun
ef2a967f12
TUN inbound: Close connection when handling is done ( #5531 )
...
https://github.com/XTLS/Xray-core/pull/5531#issuecomment-3744446015
2026-01-13 14:25:42 +00:00
LjhAUMEM
92ada2dd1d
Proxy: Add Hysteria outbound & transport (version 2, udphop) and Salamander udpmask ( #5508 )
...
https://github.com/XTLS/Xray-core/issues/3547#issuecomment-3549896520
https://github.com/XTLS/Xray-core/issues/2635#issuecomment-3570871754
2026-01-13 13:31:51 +00:00
dependabot[bot]
8a9dbd407f
Bump github.com/miekg/dns from 1.1.69 to 1.1.70 ( #5528 )
...
Bumps [github.com/miekg/dns](https://github.com/miekg/dns ) from 1.1.69 to 1.1.70.
- [Commits](https://github.com/miekg/dns/compare/v1.1.69...v1.1.70 )
---
updated-dependencies:
- dependency-name: github.com/miekg/dns
dependency-version: 1.1.70
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 09:55:42 +00:00
dependabot[bot]
de6be7c5a9
Bump golang.org/x/net from 0.48.0 to 0.49.0 ( #5530 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.48.0 to 0.49.0.
- [Commits](https://github.com/golang/net/compare/v0.48.0...v0.49.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.49.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 09:49:58 +00:00
Owersun
e742e84ded
Upgrade gVisor to latest version v0.0.0-20260109181451-4be7c433dae2 ( #5527 )
...
https://github.com/XTLS/Xray-core/pull/5526#issuecomment-3738638586
2026-01-12 18:18:02 +00:00
Owersun
7726fbece0
TUN inbound: Make udp_fullcone pure side effect free udp connection ( #5526 )
...
https://github.com/XTLS/Xray-core/pull/5526#issue-3804306341
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-12 15:34:09 +00:00
Copilot
0c09f4342b
TUN inbound: Fix log, CanSpliceCopy, tag, sniffing, and port config issues ( #5522 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732488294 & https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732740897
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-12 10:01:27 +00:00
Copilot
14e171ac8e
TUN inbound: Implement UDP FullCone NAT ( #5509 )
...
https://github.com/XTLS/Xray-core/pull/5509#issuecomment-3732898130
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
Co-authored-by: Fangliding <45535409+Fangliding@users.noreply.github.com >
Co-authored-by: Owersun <4807375+Owersun@users.noreply.github.com >
2026-01-11 14:26:45 +00:00
风扇滑翔翼
07a0dafa41
DNS: Check err for UDP dns.PackMessage(req.msg) ( #5512 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5506
2026-01-09 14:22:07 +00:00
风扇滑翔翼
0ca13452b8
TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 ( #5154 )
...
Usage: https://github.com/XTLS/Xray-core/pull/5507
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-09 00:11:24 +00:00
Hossin Asaadi
36425d2a6e
Tests: Improve geosite & geoip tests ( #5502 )
...
https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3711843548
2026-01-08 08:00:49 +00:00
Owersun
39ba1f7952
Proxy: Add TUN inbound for Windows & Linux, including Android ( #5464 )
...
* Proxy: Implement tun raw network interface inbound support for Linux
* Proxy: Tun. Include "android" as build condition for build of tun_default implementation
* Proxy: Tun. Add .Close() cleanup calls to Handler.Init() where needed
* Proxy: Add Tun for Android
* Proxy: Tun. Implement Windows support
---------
Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com >
2026-01-07 22:05:08 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇
394e117998
GitHub Actions: Add wintun.dll into Windows zips; Workflow refinement ( #5501 )
...
For https://github.com/XTLS/Xray-core/pull/5464
2026-01-07 12:59:23 +00:00
风扇滑翔翼
446df149bd
Routing config: Replace processName with process (full-name/abs-path/abs-folder) ( #5496 )
...
About `self/` & `xray/`: https://github.com/XTLS/Xray-core/pull/5496#issuecomment-3714620380
Replaces https://github.com/XTLS/Xray-core/pull/5489
2026-01-06 14:03:21 +00:00
风扇滑翔翼
d9025857fe
transport/pipe/impl.go: Remove runtime.Gosched() in WriteMultiBuffer() ( #5467 )
2026-01-06 12:43:08 +00:00
Alireza Ahmand
ced3e75bf3
README.md: Add TX-UI to Web Panels ( #4981 )
2026-01-06 12:24:32 +00:00
Hossin Asaadi
961c352127
DNS: Fix parse domain and geoip ( #5499 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3712856715
2026-01-06 12:21:50 +00:00
Hossin Asaadi
c715154309
Routing: Reduce peak memory usage ( #5488 )
...
https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3711430369
For https://github.com/XTLS/Xray-core/issues/4422
2026-01-05 23:02:40 +00:00
RPRX
b38a41249f
README.md: Re-add 3X-UI to Web Panels
...
https://github.com/XTLS/Xray-core/pull/3884#issuecomment-3678495173
https://github.com/XTLS/Xray-core/issues/5478#issuecomment-3700567911
2026-01-05 08:42:35 +00:00
风扇滑翔翼
7265b5ac3f
Routing config: Add processName ( #5489 )
2026-01-05 01:12:13 +00:00
fanymagnet
e7c72c011f
XHTTP server: Fix ScStreamUpServerSecs' non-default value ( #5486 )
2026-01-05 01:07:00 +00:00
yuhan6665
a54e1f2be4
Remove redundant stats in mux and bridge dispatcher ( #5466 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5446
2025-12-31 11:00:45 +00:00
Hossin Asaadi
5d94a62a83
Geofiles: Implement mmap in filesystem to reduce ram usage ( #5480 )
...
For https://github.com/XTLS/Xray-core/issues/4422
2025-12-31 08:50:30 +00:00
Maxim Plotnikov
ad468e462d
API: Add GetAllOnlineUsers RPC to StatsService for retrieving online users ( #5080 )
2025-12-26 16:07:06 -05:00
ari-ahm
6738ecf68e
common/uuid: fix panic when parsing 32-len invalid UUID string. ( #5468 )
...
* common/uuid: fix panic when parsing 32-len invalid UUID string.
* fix: removed typo
2025-12-26 15:17:24 -05:00
dependabot[bot]
36968909a1
Bump google.golang.org/grpc from 1.77.0 to 1.78.0 ( #5469 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.77.0 to 1.78.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.78.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-24 20:45:54 -05:00
Meow
7f6ceb39f7
DomainMatcher: Prevent illegal domain rules from causing core startup failures ( #5430 )
...
Closes https://github.com/XTLS/Xray-core/issues/5429
2025-12-23 10:14:42 +00:00
风扇滑翔翼
fa64775f07
Tunnel/Dokodemo: Fix stats conn unwrap ( #5440 )
...
Fixes https://github.com/XTLS/Xray-core/issues/5439
2025-12-23 09:44:54 +00:00
patterniha
a6792dda69
TLS ECH: Increase DOH timeout ( #5455 )
...
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-12-23 09:41:01 +00:00
ari-ahm
3572209cbd
REALITY client: Clearer log when receiving real certificate ( #5427 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-12-23 08:58:43 +00:00
xtlsee
dd757ca27c
VLESS inbound: Print invalid UUID string ( #5426 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-12-23 08:27:40 +00:00
dependabot[bot]
04b433dd97
Bump github.com/cloudflare/circl from 1.6.1 to 1.6.2 ( #5465 )
...
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-version: 1.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 08:13:09 +00:00
dependabot[bot]
6bf0376773
Bump github.com/quic-go/quic-go from 0.57.1 to 0.58.0 ( #5459 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.1 to 0.58.0.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.1...v0.58.0 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.58.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-21 22:28:33 -05:00
dependabot[bot]
74df63add2
Bump actions/upload-artifact from 5 to 6 ( #5425 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-14 22:01:02 -05:00
dependabot[bot]
c40326dfd7
Bump google.golang.org/protobuf from 1.36.10 to 1.36.11 ( #5424 )
...
Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-version: 1.36.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-14 22:00:53 -05:00
Meow
a3ba3eefb6
Wireguard: Decouple server endpoint DNS from address option ( #5417 )
...
* Wireguard: Decouple server endpoint DNS from address option
Previously, Wireguard server endpoint's domain resolution was incorrectly constrained by the local `address` option. For example, `ForceIPv6v4` might fail to resolve AAAA records for the server domain if no IPv6 was explicitly configured in the `address` option.
This commit decouples the server endpoint's domain resolution from the local `address` configuration. It ensures the Wireguard server address is resolved independently, allowing its `domainStrategy` to function correctly without being limited by the client's local network or `address` settings.
* Delete code instead of commenting it out
2025-12-14 10:13:47 -05:00
dependabot[bot]
9cf22114a1
Bump github.com/miekg/dns from 1.1.68 to 1.1.69 ( #5410 )
...
Bumps [github.com/miekg/dns](https://github.com/miekg/dns ) from 1.1.68 to 1.1.69.
- [Commits](https://github.com/miekg/dns/compare/v1.1.68...v1.1.69 )
---
updated-dependencies:
- dependency-name: github.com/miekg/dns
dependency-version: 1.1.69
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 06:01:44 +00:00
dependabot[bot]
a903e80356
Bump actions/cache from 4 to 5 ( #5411 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-12 06:01:24 +00:00
风扇滑翔翼
a610a4c89a
Chore: Remove all double gonet import ( #5402 )
2025-12-10 07:17:29 +00:00
dependabot[bot]
b451f8929d
Bump golang.org/x/net from 0.47.0 to 0.48.0 ( #5397 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/net/compare/v0.47.0...v0.48.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.48.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 07:16:37 +00:00