hesoyam/Xray-core
1
0
Fork 0
mirror of https://github.com/XTLS/Xray-core.git synced 2026-05-15 02:19:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,637 Commits 68 Branches 126 Tags
aca75d5b80da2f57f88742520681d3950fcd0ade
Commit Graph

1637 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
copilot-swe-agent[bot] aca75d5b80 Fix Vision SSL errors by clearing stale TLS buffers in pre-connections 
When testpre is enabled, connections are pre-established and may sit idle for up to 2 minutes. During this time, TLS 1.3 post-handshake messages (NewSessionTicket, etc.) can accumulate in the TLS connection's internal buffers (input and rawInput).

These stale messages are not part of the proxied application data and should not be forwarded by Vision. The fix clears these buffers immediately after extracting them for Vision use, before any data transfer begins.

This prevents the SSL protocol errors that occur when Vision later reads and forwards these stale TLS control messages as if they were application data.

Fixes #4878

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-11 01:14:02 +00:00
copilot-swe-agent[bot] 7a71924ffe Improve comment clarity per code review 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-11 01:07:55 +00:00
copilot-swe-agent[bot] 7d70aefa5f Fix Vision SSL errors by not reading encrypted rawInput buffer 
The issue occurs when switching to direct copy mode - Vision was incorrectly reading from rawInput buffer which contains ENCRYPTED outer TLS/Reality records and merging them with decrypted application data. This caused SSL protocol errors, especially with testpre where pre-established connections may have TLS session tickets or other post-handshake messages in rawInput.

The fix: Only read from input buffer (decrypted application data), skip rawInput (encrypted TLS records).

Fixes #4878

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-11 01:05:15 +00:00
copilot-swe-agent[bot] ca12c4d909 Revert incorrect fix - restore original RemainingServerHello logic 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-10 22:43:48 +00:00
copilot-swe-agent[bot] c6cc048e05 Final verification: code review and security scan passed 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-10 22:27:50 +00:00
copilot-swe-agent[bot] 933088c1d4 Remove accidentally committed binary 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-10 22:25:36 +00:00
copilot-swe-agent[bot] 0a7aeb7cda Fix XTLS Vision incomplete TLS record handling - correct RemainingServerHello calculation 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-10 22:25:06 +00:00
copilot-swe-agent[bot] 249cb9facd Initial plan 2026-01-10 22:19:55 +00:00
风扇滑翔翼 07a0dafa41 DNS: Check err for UDP dns.PackMessage(req.msg) (#5512) 
Fixes https://github.com/XTLS/Xray-core/issues/5506
 2026-01-09 14:22:07 +00:00
风扇滑翔翼 0ca13452b8 TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 (#5154) 
Usage: https://github.com/XTLS/Xray-core/pull/5507

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-09 00:11:24 +00:00
Hossin Asaadi 36425d2a6e Tests: Improve geosite & geoip tests (#5502) 
https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3711843548
 2026-01-08 08:00:49 +00:00
Owersun 39ba1f7952 Proxy: Add TUN inbound for Windows & Linux, including Android (#5464) 
* Proxy: Implement tun raw network interface inbound support for Linux

* Proxy: Tun. Include "android" as build condition for build of tun_default implementation

* Proxy: Tun. Add .Close() cleanup calls to Handler.Init() where needed

* Proxy: Add Tun for Android

* Proxy: Tun. Implement Windows support

---------

Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>
 2026-01-07 22:05:08 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 394e117998 GitHub Actions: Add wintun.dll into Windows zips; Workflow refinement (#5501) 
For https://github.com/XTLS/Xray-core/pull/5464
 2026-01-07 12:59:23 +00:00
风扇滑翔翼 446df149bd Routing config: Replace processName with process (full-name/abs-path/abs-folder) (#5496) 
About `self/` & `xray/`: https://github.com/XTLS/Xray-core/pull/5496#issuecomment-3714620380

Replaces https://github.com/XTLS/Xray-core/pull/5489
 2026-01-06 14:03:21 +00:00
风扇滑翔翼 d9025857fe transport/pipe/impl.go: Remove runtime.Gosched() in WriteMultiBuffer() (#5467) 2026-01-06 12:43:08 +00:00
Alireza Ahmand ced3e75bf3 README.md: Add TX-UI to Web Panels (#4981) 2026-01-06 12:24:32 +00:00
Hossin Asaadi 961c352127 DNS: Fix parse domain and geoip (#5499) 
Fixes https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3712856715
 2026-01-06 12:21:50 +00:00
Hossin Asaadi c715154309 Routing: Reduce peak memory usage (#5488) 
https://github.com/XTLS/Xray-core/pull/5488#issuecomment-3711430369

For https://github.com/XTLS/Xray-core/issues/4422
 2026-01-05 23:02:40 +00:00
RPRX b38a41249f README.md: Re-add 3X-UI to Web Panels 
https://github.com/XTLS/Xray-core/pull/3884#issuecomment-3678495173

https://github.com/XTLS/Xray-core/issues/5478#issuecomment-3700567911
 2026-01-05 08:42:35 +00:00
风扇滑翔翼 7265b5ac3f Routing config: Add processName (#5489) 2026-01-05 01:12:13 +00:00
fanymagnet e7c72c011f XHTTP server: Fix ScStreamUpServerSecs' non-default value (#5486) 2026-01-05 01:07:00 +00:00
yuhan6665 a54e1f2be4 Remove redundant stats in mux and bridge dispatcher (#5466) 
Fixes https://github.com/XTLS/Xray-core/issues/5446
 2025-12-31 11:00:45 +00:00
Hossin Asaadi 5d94a62a83 Geofiles: Implement mmap in filesystem to reduce ram usage (#5480) 
For https://github.com/XTLS/Xray-core/issues/4422
 2025-12-31 08:50:30 +00:00
Maxim Plotnikov ad468e462d API: Add GetAllOnlineUsers RPC to StatsService for retrieving online users (#5080) 2025-12-26 16:07:06 -05:00
ari-ahm 6738ecf68e common/uuid: fix panic when parsing 32-len invalid UUID string. (#5468) 
* common/uuid: fix panic when parsing 32-len invalid UUID string.

* fix: removed typo
 2025-12-26 15:17:24 -05:00
dependabot[bot] 36968909a1 Bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#5469) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.77.0 to 1.78.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-24 20:45:54 -05:00
Meow 7f6ceb39f7 DomainMatcher: Prevent illegal domain rules from causing core startup failures (#5430) 
Closes https://github.com/XTLS/Xray-core/issues/5429
 2025-12-23 10:14:42 +00:00
风扇滑翔翼 fa64775f07 Tunnel/Dokodemo: Fix stats conn unwrap (#5440) 
Fixes https://github.com/XTLS/Xray-core/issues/5439
 2025-12-23 09:44:54 +00:00
patterniha a6792dda69 TLS ECH: Increase DOH timeout (#5455) 
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
 2025-12-23 09:41:01 +00:00
ari-ahm 3572209cbd REALITY client: Clearer log when receiving real certificate (#5427) 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2025-12-23 08:58:43 +00:00
xtlsee dd757ca27c VLESS inbound: Print invalid UUID string (#5426) 
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2025-12-23 08:27:40 +00:00
dependabot[bot] 04b433dd97 Bump github.com/cloudflare/circl from 1.6.1 to 1.6.2 (#5465) 
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.2)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-23 08:13:09 +00:00
dependabot[bot] 6bf0376773 Bump github.com/quic-go/quic-go from 0.57.1 to 0.58.0 (#5459) 
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.57.1 to 0.58.0.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.1...v0.58.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-21 22:28:33 -05:00
dependabot[bot] 74df63add2 Bump actions/upload-artifact from 5 to 6 (#5425) 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-14 22:01:02 -05:00
dependabot[bot] c40326dfd7 Bump google.golang.org/protobuf from 1.36.10 to 1.36.11 (#5424) 
Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-14 22:00:53 -05:00
Meow a3ba3eefb6 Wireguard: Decouple server endpoint DNS from address option (#5417) 
* Wireguard: Decouple server endpoint DNS from address option

Previously, Wireguard server endpoint's domain resolution was incorrectly constrained by the local `address` option. For example, `ForceIPv6v4` might fail to resolve AAAA records for the server domain if no IPv6 was explicitly configured in the `address` option.

This commit decouples the server endpoint's domain resolution from the local `address` configuration. It ensures the Wireguard server address is resolved independently, allowing its `domainStrategy` to function correctly without being limited by the client's local network or `address` settings.

* Delete code instead of commenting it out
 2025-12-14 10:13:47 -05:00
dependabot[bot] 9cf22114a1 Bump github.com/miekg/dns from 1.1.68 to 1.1.69 (#5410) 
Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.68 to 1.1.69.
- [Commits](https://github.com/miekg/dns/compare/v1.1.68...v1.1.69)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-12 06:01:44 +00:00
dependabot[bot] a903e80356 Bump actions/cache from 4 to 5 (#5411) 
Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-12 06:01:24 +00:00
风扇滑翔翼 a610a4c89a Chore: Remove all double gonet import (#5402) 2025-12-10 07:17:29 +00:00
dependabot[bot] b451f8929d Bump golang.org/x/net from 0.47.0 to 0.48.0 (#5397) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/net/compare/v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-10 07:16:37 +00:00
RPRX 81f8f398c7 v25.12.8 
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless

XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v1.251208.0 v25.12.8 		2025-12-08 13:35:16 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 aea123842b Chore: Remove ctlcmd and leftover envvar (#5392) 
https://github.com/v2fly/v2ray-core/issues/360
 2025-12-08 13:27:22 +00:00
RPRX bd7503d506 XTLS Vision: LogInfo() -> LogDebug() 
https://t.me/projectXray/4543105
 2025-12-08 13:19:59 +00:00
yuhan6665 903214a0f0 XTLS Vision: Fix enabled uplink splice flag by mistake (#5391) 
Fixes https://github.com/XTLS/Xray-core/issues/5379
 2025-12-08 13:13:43 +00:00
RPRX e403abe360 v25.12.2 
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless

XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v25.12.2 		2025-12-02 13:53:08 +00:00
RPRX c123f163c2 XTLS Vision: Discard expired pre-connect conn automatically 
https://t.me/projectXray/4538408

https://github.com/XTLS/Xray-core/pull/5270#issuecomment-3602122299
 2025-12-02 13:44:27 +00:00
风扇滑翔翼 93312d29e5 XTLS Vision: Fix IsCompleteRecord() (#5365) 
Fixes https://github.com/XTLS/Xray-core/pull/5179
 2025-12-02 13:01:44 +00:00
RPRX 36cb0f00bd v25.12.1 
Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633
Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067
VLESS NFT: https://opensea.io/collection/vless

XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113
REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
v25.12.1 		2025-12-01 13:27:50 +00:00
RPRX cadcb47074 XTLS Vision: Add testpre (outbound pre-connect) and testseed (outbound & inbound) (#5270) 
https://t.me/projectXtls/1034

---------

Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
 2025-12-01 13:27:27 +00:00
yuhan6665 c6afcd5fb6 XTLS Vision: Check TLS record isComplete (#5179) 
Fixes https://github.com/XTLS/Xray-core/discussions/5169#discussioncomment-14482684
 2025-11-30 10:28:01 +00:00