2123 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
patternihaandClaude Opus 5.5	bb4cd4b6d3	TUN inbound's autoSystemWfpBlockLeak: Add "allexceptlan" ... "allexceptlan" is "all" but for the local network: traffic to and from private (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, fc00::/7), link-local (169.254.0.0/16, fe80::/10), multicast (224.0.0.0/4, ff00::/8) and broadcast (255.255.255.255) addresses stays allowed, so that printers, the router's settings page, or casting to a TV keep working while nothing else leaves outside the TUN. It includes "dns": a resolver on the local network, like the router's, would forward the queries outside the TUN, so DNS stays blocked there. The LAN permit sits below the other values, like the permit through the TUN, so they still apply on the local network, e.g. "tcp/445" blocks Windows file sharing with it. The DNS Client service keeps mDNS and LLMNR, to the local network's addresses only. "all" overrides it. The addresses are matched with FWP_V4_ADDR_MASK and FWP_V6_ADDR_MASK conditions on the remote address, which match when any of them does. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-02 11:50:18 +03:30
patternihaandClaude Opus 5.5	468f745fc2	TUN inbound's autoSystemWfpBlockLeak: Add "all", "tcp", "udp", "icmp" and port ranges; Always allow loopback, DHCP and IPv6 neighbor discovery ... autoSystemWfpBlockLeak now also takes: - "all": everything outside the TUN, IPv4 and IPv6, in both directions, so nothing but Xray leaves except through the TUN. - "tcp", "udp": all ports of that protocol, also written "tcp/0", "udp/0". - "tcp/<low>-<high>", "udp/<low>-<high>": a range of ports, matched with FWP_MATCH_RANGE, as two conditions on the same field would match when either does. - "icmp": ICMP and ICMPv6, e.g. ping. It takes no port: in ICMP filters the local port holds the type, and "icmp/0" would read as the echo reply. Values are normalized: "tcp/0" and "tcp/1-65535" become "tcp", and "tcp/53-53" becomes "tcp/53". Whatever is blocked, loopback, which cannot leave the system, and what Windows itself needs on the local link now always stay allowed: DHCP, DHCPv6, and IPv6 neighbor and multicast listener discovery. These used to be allowed only along with "misconfigtun", so "udp" or "icmp" would otherwise have cut DHCP or IPv6 neighbor discovery, and "tcp" any local proxy, Xray's own inbounds included. Loopback being allowed means that with "dns", a local resolver on 127.0.0.1:53 now works for other programs (its own queries to port 53 or 853 outside the TUN stay blocked), and the DNS Client service may use it. "all" reuses the filters of "misconfigtun", which now also let everything through the TUN, for both IP versions whatever the routes. On other TUN options: keeping the system's DNS inside the TUN, with "all", "dns", "windnsclient", or anything covering TCP or UDP port 53 ("udp", "tcp/50-60", ...), needs dns, as Windows can no longer reach the DNS servers of the other interfaces; the config is rejected otherwise. Like the other values, the new ones need autoSystemRoutingTable. The filters do not need autoOutboundsInterface, as Xray is allowed by its app ID; it still keeps Xray's own connections out of the TUN's routes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-02 11:13:10 +03:30
3 people	7c8dbcb4bb	Bump google.golang.org/grpc from 1.84.0 to 1.85.0 (#7311) ... Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.84.0 to 1.85.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.84.0...v1.85.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.85.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-11-02 02:03:49 +00:00
3 people	8ab161a2b0	Bump golang.org/x/net from 0.61.0 to 0.62.0 (#7312) ... Bumps [golang.org/x/net](https://github.com/golang/net) from 0.61.0 to 0.62.0. - [Commits](https://github.com/golang/net/compare/v0.61.0...v0.62.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-11-02 02:03:35 +00:00
RPRXandGitHub	a4a3dff5b2	Xray-core v26.10.31 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2 v26.10.31	2026-10-31 13:20:19 +00:00
3 people	6cdd323ad8	TUN inbound's autoSystemWfpBlockLeak: Support "tcp/port" and "udp/port"; "dns" covers "tcp/853" and "udp/853" as well (#7288) ... https://github.com/XTLS/Xray-core/pull/6853#issuecomment-6492838227 https://github.com/XTLS/Xray-core/pull/7288#issuecomment-6507229727 https://github.com/XTLS/Xray-core/pull/7288#issuecomment-6516762634 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-31 13:16:31 +00:00
3 people	316e07a538	XHTTP server: Add h2Params (#7295) ... https://github.com/XTLS/Xray-core/pull/7282#issuecomment-6523157944 https://github.com/XTLS/Xray-core/pull/7295#issuecomment-6543501751 Closes https://github.com/XTLS/Xray-core/issues/6268 --------- Co-authored-by: pqhaz3925 <195911022+pqhaz3925@users.noreply.github.com>	2026-10-31 12:52:14 +00:00
MeowandRPRX	0c3402d778	Geodata: Support streaming gzip decompression when downloading assets (#7294) ... https://github.com/XTLS/Xray-core/pull/7294#issuecomment-6542074150	2026-10-31 11:56:59 +00:00
3 people	bc7c895278	HTTP inbound: Forward short 100 Continue responses promptly (#7298) ... https://github.com/XTLS/Xray-core/pull/7298#issuecomment-6542585254 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-31 11:29:02 +00:00
konstpicandRPRX	e7a69fa85a	XHTTP server: Accept OPTIONS as uplinkHTTPMethod (#7290) ... https://github.com/XTLS/Xray-core/pull/7290#issuecomment-6505845186	2026-10-31 08:43:57 +00:00
3 people	9b8190f52c	QUIC sniffer: Don't accept ClientHello with gaps in CRYPTO data (#7292) ... https://github.com/XTLS/Xray-core/pull/7292#pullrequestreview-5712194488 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-31 08:31:30 +00:00
3 people	6ca6d8a693	Commands: Fix xray api bi balancer1 balancer2 (#7299) ... https://github.com/XTLS/Xray-core/pull/7279#issuecomment-6468250523 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-10-31 07:21:32 +00:00
风扇滑翔翼andGitHub	d1140de273	Chore: Regenerate *.pb.go files (#7287) ... https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6464669635	2026-10-31 07:13:55 +00:00
风扇滑翔翼andGitHub	6ea0ab5d3a	DefaultListener: Disable MPTCP by default (#7291) ... Fixes https://github.com/XTLS/Xray-core/pull/7291#issuecomment-6540309985	2026-10-31 07:05:32 +00:00
RPRXandGitHub	0afec66085	Xray-core v26.10.29 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2	2026-10-29 08:38:50 +00:00
3 people	55eecaed16	Config: Move inbound module initialization to the end (#7284) ... Fixes https://github.com/XTLS/Xray-core/pull/7284#issuecomment-6491545028 --------- Co-authored-by: Copilot <copilot@github.com>	2026-10-29 08:34:16 +00:00
3 people	2dfee4b842	XDRIVE transport: Carry a Google Drive session in a ring of slots (#7217) ... https://github.com/XTLS/Xray-core/pull/7217#issuecomment-6489554617 --------- Co-authored-by: Ahmad-2213 <106820058+Ahmad-2213@users.noreply.github.com>	2026-10-29 06:47:42 +00:00
Жора ЗмейкинandGitHub	b4123b5748	XDRIVE transport: Add "s3" storage backend (#7231) ... https://github.com/XTLS/Xray-core/pull/7231#issuecomment-6488077212	2026-10-29 04:44:41 +00:00
3 people	ec124ff9e0	WebSocket transport: Treat normal close frames as io.EOF (#7236) ... Fixes https://github.com/XTLS/Xray-core/issues/7235#issuecomment-6353389899 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-29 03:42:11 +00:00
SolomonandGitHub	8a3c0cbf1d	Sockopt: Fix swapped TCP keepalive idle and interval on Darwin (#7219) ... https://github.com/XTLS/Xray-core/pull/7219#pullrequestreview-5691960668	2026-10-29 02:54:53 +00:00
3 people	78b5a6ec5c	GitHub Action CI: Enforce stricter checks on generated protobuf files (#7263) ... https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6447862934 https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6484719865 https://github.com/XTLS/Xray-core/pull/7263#issuecomment-6485805671 --------- Co-authored-by: Fangliding <Fangliding.fshxy@outlook.com>	2026-10-29 02:34:47 +00:00
4 people	5865e3ac3d	DNS outbound: Keep hijacked A/AAAA replies within the buffer (#7225) ... https://github.com/XTLS/Xray-core/pull/7225#pullrequestreview-5613859264 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-29 00:42:19 +00:00
3 people	48f62b801a	Geodata: Limit download size, file extensions, and update frequency (#7267) ... https://github.com/XTLS/Xray-core/pull/7265#issuecomment-6464588139 --------- Co-authored-by: xqzr <34030394+xqzr@users.noreply.github.com>	2026-10-29 00:22:51 +00:00
MeowandGitHub	43c29f8eb1	Geodata: Update built-in generalized "private" IP ranges (#7249) ... And https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6483478811 https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6391494484 https://github.com/XTLS/Xray-core/pull/7249#issuecomment-6483591550	2026-10-28 23:45:22 +00:00
MeowandGitHub	613d8147bb	Direct/Freedom outbound: Warn about migrating fragment and noises to Finalmask (#7242) ... https://github.com/XTLS/Xray-core/issues/7240#issuecomment-6361862358	2026-10-28 22:49:30 +00:00
3 people	38f090255c	Commands: Fix xray api adrules c1.json c2.json (#7276) ... https://github.com/XTLS/Xray-core/pull/7276#pullrequestreview-5680949792 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-28 21:59:27 +00:00
3 people	35a3121a83	File loader: Check file extensions without resolving symlinks (#7255) ... https://github.com/XTLS/Xray-core/pull/7255#issuecomment-6481194940 https://github.com/XTLS/Xray-core/pull/7250#issuecomment-6398816842 Fixes https://github.com/XTLS/Xray-core/issues/7239#issuecomment-6356122816 --------- Co-authored-by: Eljees <3.14hell@gmail.com>	2026-10-28 21:59:03 +00:00
风扇滑翔翼andGitHub	bca08ac080	Routing: Fix Linux IPv6 process (#7232) ... Fixes https://github.com/XTLS/Xray-core/issues/7227	2026-10-28 20:49:08 +00:00
3 people	6a4274ab75	TUN inbound: autoOutboundsInterface should not set IP_BOUND_IF on IPv6 sockets on Darwin (mainly macOS) (#7230) ... Fixes https://github.com/XTLS/Xray-core/issues/7228 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-28 20:34:40 +00:00
solodecodeandGitHub	229799a7a3	Direct/Freedom outbound: Fix blockDelay for DispatchLink() inbounds such as VLESS, Hysteria, etc. (#7238) ... https://github.com/XTLS/Xray-core/pull/7238#pullrequestreview-5627787937 https://github.com/XTLS/Xray-core/pull/7238#issuecomment-6467092152 https://github.com/XTLS/Xray-core/pull/6060#issuecomment-4384511163	2026-10-28 11:02:55 +00:00
3 people	3071fbfa25	Sockopt: Handle single-family interface binding on Windows, including TUN inbound's autoOutboundsInterface (#7214) ... And https://github.com/XTLS/Xray-core/pull/7214#issuecomment-6329118637 https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6314453444 Fixes https://github.com/XTLS/Xray-core/issues/7160#issuecomment-6246944012 --------- Co-authored-by: patterniha <71074308+patterniha@users.noreply.github.com>	2026-10-28 10:15:58 +00:00
3 people	1576e79563	Bump github.com/pires/go-proxyproto from 0.15.0 to 0.16.0 (#7237) ... Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.15.0 to 0.16.0. - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](https://github.com/pires/go-proxyproto/compare/v0.15.0...v0.16.0) --- updated-dependencies: - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-27 04:31:46 +00:00
3 people	67e7f82ca1	Bump docker/login-action from 4.6.0 to 4.7.0 (#7257) ... Bumps [docker/login-action](https://github.com/docker/login-action) from 4.6.0 to 4.7.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.6.0...v4.7.0) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-27 04:31:31 +00:00
RPRXandGitHub	1b1647cd9d	Xray-core v26.10.21 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2 v26.10.21	2026-10-21 11:59:30 +00:00
Artem LytkinandGitHub	557657b576	TUN inbound: Read large TCP segments straight into Xray-core's buffers on Linux (#7179) ... https://github.com/XTLS/Xray-core/pull/7130#issuecomment-6119897360 https://github.com/XTLS/Xray-core/pull/7156#issuecomment-6205035216 https://github.com/XTLS/Xray-core/pull/7179#issuecomment-6250145934	2026-10-21 11:49:36 +00:00
Artem LytkinandGitHub	fc5ba8e6a2	XDRIVE transport: Support h3 (Chrome CH by default) and XMUX as well; Send Chrome HTTP headers (User-Agent, etc.) by default (#7187) ... https://github.com/XTLS/Xray-core/pull/7181#issuecomment-6229694351 https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6250200781 https://github.com/XTLS/Xray-core/pull/7187#issuecomment-6314784068	2026-10-21 11:33:55 +00:00
genkauzenandRPRX	00c0277787	XDRIVE transport: Support two-step "template" operations (hrefPath) (#7188) ... https://github.com/XTLS/Xray-core/pull/7188#issuecomment-6250146420	2026-10-21 10:55:36 +00:00
MeowandGitHub	3653dcb4fc	Finalmask: Add filter for inbound (TCP & UDP, source IP filtering) (#7206) ... https://github.com/XTLS/Xray-core/pull/7206#issuecomment-6312634417	2026-10-21 10:48:15 +00:00
4 people	061c2df291	HTTP outbound: Fix hanging on server-first traffic (#7193) ... https://github.com/XTLS/Xray-core/pull/7193#issuecomment-6312885274 Fixes https://github.com/XTLS/Xray-core/issues/3459 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-21 10:33:27 +00:00
3 people	23e2292344	Transport: Pass UDP destination to dialer controllers (#7201) ... https://github.com/XTLS/Xray-core/pull/7201#issuecomment-6275732621 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>	2026-10-21 10:20:35 +00:00
3 people	41797c234d	Socks inbound: Initialize TempUDPConn's Timer at the beginning (#7203) ... Fixes https://github.com/XTLS/Xray-core/pull/7200 --------- Co-authored-by: Eliot the Cougar <1861169+eliotcougar@users.noreply.github.com>	2026-10-21 09:17:34 +00:00
MeowandGitHub	9424810830	Docker: Restrict log & conf permissions (#7204) ... https://github.com/XTLS/Xray-core/pull/7204#issuecomment-6292218518	2026-10-21 08:55:32 +00:00
3 people	12b7f85de3	Routing: Fix Linux UDP process (#7202) ... Fixes https://github.com/XTLS/Xray-core/issues/7192 and https://github.com/XTLS/Xray-core/pull/7195 --------- Co-authored-by: Faraquic! <141701604+faraquic@users.noreply.github.com>	2026-10-21 08:35:52 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇andGitHub	de1bbbff88	GitHub Actions: Switch geodata to XTLS/Xray-rules-dat (#7185) ... https://github.com/XTLS/Xray-core/pull/7185#issuecomment-6247177356	2026-10-21 08:18:32 +00:00
3 people	ec73b73f5e	Bump github.com/klauspost/cpuid/v2 from 2.4.0 to 2.4.1 (#7197) ... Bumps [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) from 2.4.0 to 2.4.1. - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](https://github.com/klauspost/cpuid/compare/v2.4.0...v2.4.1) --- updated-dependencies: - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-10-21 08:07:31 +00:00
风扇滑翔翼andRPRX	6307fa1265	TLS client: Update built-in RootCAs to remove newly low-credit certs (#7212) ... Fixes https://github.com/XTLS/Xray-core/pull/7212#issuecomment-6310150214 ... https://github.com/XTLS/Xray-core/pull/7105#issuecomment-6056053599 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-10-21 07:55:00 +00:00
RPRXandGitHub	92ccc939aa	Xray-core v26.10.17 ... Sponsor & Donation & NFTs: https://github.com/XTLS/Xray-core/issues/3668 Project X Channel: https://t.me/projectXtls Announcement of NFTs by Project X: https://github.com/XTLS/Xray-core/discussions/3633 Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1 VLESS Post-Quantum Encryption: https://github.com/XTLS/Xray-core/pull/5067 VLESS NFT: https://opensea.io/collection/vless XHTTP: Beyond REALITY: https://github.com/XTLS/Xray-core/discussions/4113 REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2	2026-10-17 15:23:56 +00:00
Artem LytkinandGitHub	95461cc148	XDRIVE transport: Require VLESS Multiplex+Encryption; "Google Drive"->"google-drive" (#7182) ... https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5752780799	2026-10-17 14:13:57 +00:00
Artem LytkinandGitHub	3834e504b8	XDRIVE transport: Prefer h2 (Chrome CH by default); End stalled requests; Other small changes (#7181) ... https://github.com/XTLS/Xray-core/pull/7170#issuecomment-6204133548	2026-10-17 09:24:53 +00:00
3 people	0f127f934c	XTLS Vision: Compatible with Go 1.27.3+ (#7176) ... https://github.com/XTLS/Xray-core/pull/7176#issuecomment-6229087350 Fixes https://github.com/XTLS/Xray-core/issues/7162#issuecomment-6210430747 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>	2026-10-17 03:37:14 +00:00