patternihaandClaude Opus 5.5 c684201cd8 TUN inbound's autoSystemWfpBlockLeak: "ipv4:" or "ipv6:" in front of any value instead of "tcpv4" and the like ...

"ipv4:" or "ipv6:" in front of any value limits it to that IP version,
e.g. "ipv4:udp/53", "ipv6:all", "ipv4:dns" or "ipv6:misconfigtun".
"tcpv4", "udpv6", "icmpv4" and the like are gone. Values that only differ
in the IP version become one: "ipv4:udp/53" with "ipv6:udp/53" is
"udp/53".

"all" overrides "allexceptlan" per IP version, and "all" over one IP
version needs dns, as port 53 over one does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-02 17:52:23 +03:30

..

cfgcommon/duration

Config: Implement missing MarshalJSON for structs having custom UnmarshalJSON (#4585)

2025-04-07 11:46:49 -04:00

json

Reformat code

2022-05-18 15:29:01 +08:00

serial

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

api.go

Refactor log (#3446)

2024-06-29 14:32:57 -04:00

blackhole_test.go

Blackhole outbound: Add customizable response data support (#6713)

2026-09-07 21:09:58 +00:00

blackhole.go

Blackhole outbound: Add customizable response data support (#6713)

2026-09-07 21:09:58 +00:00

buildable.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

common_test.go

Reformat code

2022-05-18 15:29:01 +08:00

common.go

Config: Fix some issues (#6640)

2026-08-27 20:03:59 +08:00

conf.go

Remove legacy code (#3838)

2024-09-23 11:28:19 -04:00

dns_proxy_test.go

DNS outbound: Replace "reject" with "return" (rCode is 0 by default) (#6214)

2026-06-01 01:25:47 +00:00

dns_proxy.go

DNS outbound: Replace "reject" with "return" (rCode is 0 by default) (#6214)

2026-06-01 01:25:47 +00:00

dns_test.go

Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command (#7132)

2026-10-12 16:58:20 +00:00

dns.go

Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command (#7132)

2026-10-12 16:58:20 +00:00

dokodemo_test.go

Config: Rename network/address/port in Tunnel inbound and DNS outbound (#6084)

2026-05-07 14:13:25 +00:00

dokodemo.go

Config: Rename network/address/port in Tunnel inbound and DNS outbound (#6084)

2026-05-07 14:13:25 +00:00

env_test.go

Root config: Add env config (#6400)

2026-07-10 02:56:49 +00:00

fakedns.go

Sniffing: domainsExcluded supports "geosite:" (#5927)

2026-04-13 17:39:53 +00:00

freedom_test.go

Direct/Freedom outbound: Add blockDelay to finalRules (30~90s by default) (#6060)

2026-05-02 20:40:46 +00:00

freedom.go

Direct/Freedom outbound: Warn about migrating fragment and noises to Finalmask (#7242)

2026-10-28 22:49:30 +00:00

general_test.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

geodata_test.go

Geodata: Limit download size, file extensions, and update frequency (#7267)

2026-10-29 00:22:51 +00:00

geodata.go

Geodata: Limit download size, file extensions, and update frequency (#7267)

2026-10-29 00:22:51 +00:00

http_test.go

Config: Remove more legacy fields (#3817)

2024-09-19 01:05:59 +00:00

http.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

hysteria.go

WireGuard inbound: Support dynamic peer management (#6360)

2026-06-27 11:41:22 +00:00

init.go

Add Fake DNS support (#309)

2021-03-07 04:39:50 +00:00

lint.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

loader.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

log.go

Log: Add MaskAddress option to hide IP addresses (#3783)

2024-09-11 10:45:47 -04:00

loopback.go

Loopback outbound: Add sniffing (#6326)

2026-06-18 23:17:01 +00:00

masque_test.go

MASQUE client: Support XMUX ("maxConnections": 1 by default); Use Chrome's User-Agent by default (#7121)

2026-10-12 19:40:04 +00:00

masque.go

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844)

2026-09-27 19:16:54 +00:00

metrics.go

Metrics: Add direct listen (#4409)

2025-02-18 11:32:48 +00:00

observatory.go

Routing: Export HealthCheckSettings (#6680)

2026-08-30 12:19:54 +00:00

policy_test.go

v1.1.0

2020-12-04 09:36:16 +08:00

policy.go

API: Add user online stats (#3637)

2024-11-03 08:44:15 -05:00

reverse_test.go

v1.1.0

2020-12-04 09:36:16 +08:00

reverse.go

refactor(deps): replace github.com/golang/protobuf with google.golang.org/protobuf

2023-08-10 10:43:27 -04:00

router_strategy.go

Routing: Export HealthCheckSettings (#6680)

2026-08-30 12:19:54 +00:00

router_test.go

Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command (#7132)

2026-10-12 16:58:20 +00:00

router.go

Lua: Support inline scripts; Add ./xray base64 encode/decode [-gzip] command (#7132)

2026-10-12 16:58:20 +00:00

shadowsocks_test.go

remove deprecate ciphers in shadowsocks (#710)

2021-09-17 04:13:07 +08:00

shadowsocks.go

SS2022 proxy: Refactor to remove sing* dependencies (#6831)

2026-09-27 18:42:53 +00:00

socks_test.go

Outbound: One endpoint and at most one user only (#5144)

2025-09-15 13:31:27 +00:00

socks.go

Xray-core: Reduce error log usage for performance (#6796)

2026-09-25 17:59:49 +00:00

transport_finalmask_filter_test.go

Finalmask: Add filter for inbound (TCP & UDP, source IP filtering) (#7206)

2026-10-21 10:48:15 +00:00

transport_finalmask_noise_test.go

Noise finalmask: Support Lua script as well (on main branch: inline scripts were disabled for now; sandbox-only for now) (#7124)

2026-10-16 04:43:55 +00:00

transport_finalmask_xmc_test.go

XMC finalmask: Add default directional padding/keep-alive packets, matching Minecraft 26.1.2 login/join/etc traffic shapes (#6487)

2026-07-28 06:45:36 +00:00

transport_finalmask.go

Finalmask: Add filter for inbound (TCP & UDP, source IP filtering) (#7206)

2026-10-21 10:48:15 +00:00

transport_internet.go

XDRIVE transport: Support h3 (Chrome CH by default) and XMUX as well; Send Chrome HTTP headers (User-Agent, etc.) by default (#7187)

2026-10-21 11:33:55 +00:00

transport_method.go

XHTTP server: Add h2Params (#7295)

2026-10-31 12:52:14 +00:00

transport_security.go

TLS client: Use Xray-core's built-in RootCAs by default (avoids maliciously injected CA in the OS) (#7105)

2026-10-10 06:53:39 +00:00

transport_sockopt.go

Sockopt: Fix indentation of the CustomSockopt block for Linux (#6568)

2026-09-01 04:47:55 +00:00

transport_test.go

XDRIVE transport: Add "s3" storage backend (#7231)

2026-10-29 04:44:41 +00:00

trojan.go

Config: Rename inbounds' clients/accounts to users (#6083)

2026-05-07 14:13:05 +00:00

tun_test.go

TUN inbound's autoSystemWfpBlockLeak: "ipv4:" or "ipv6:" in front of any value instead of "tcpv4" and the like

2026-11-02 17:52:23 +03:30

tun.go

TUN inbound's autoSystemWfpBlockLeak: Add "allexceptlan"

2026-11-02 11:50:18 +03:30

version.go

GitHub Action CI: Add Go source file format check (#6090)

2026-05-29 15:04:59 +00:00

vless_test.go

Config: Rename inbounds' clients/accounts to users (#6083)

2026-05-07 14:13:05 +00:00

vless.go

VLESS config: Fix validateOutboundTransportSecurity() (#6741)

2026-09-08 18:18:12 +00:00

vmess_test.go

Outbound: One endpoint and at most one user only (#5144)

2025-09-15 13:31:27 +00:00

vmess.go

Xray-core: Forbid unencrypted outbounds on public Internet for VLESS and Trojan; Remove "none/zero/plain" for VMess and Shadowsocks (#6303)

2026-07-07 02:01:53 +00:00

wireguard.go

WireGuard outbound: Remove remoteDNS' "local" mode and domainStrategy (#6771)

2026-09-20 19:07:51 +00:00

xray_test.go

Config: Move inbound module initialization to the end (#7284)

2026-10-29 08:34:16 +00:00

xray.go

Config: Move inbound module initialization to the end (#7284)

2026-10-29 08:34:16 +00:00