documentation: Bump version

Migrate multiplex and UoT server to inbound &
Add tcp-brutal support for multiplex
2026-10-14 10:03:58 +00:00 · 2023-11-07 15:04:09 +08:00 · 2023-11-07 15:03:30 +08:00 · 2023-11-07 15:03:30 +08:00 · 2023-11-07 15:03:30 +08:00 · 2023-11-07 15:03:30 +08:00
113 changed files with 1855 additions and 2008 deletions
@@ -46,7 +46,6 @@ body:
      description: If you are using the original command line program, please provide the output of the `sing-box version` command.
      value: |-
        <details>
-
        ```console
        # Replace this line with the output
        ```
@@ -72,7 +71,6 @@ body:
        For the Android client, please check the `/sdcard/Android/data/io.nekohasekai.sfa/files/stderr.log` file for crash logs.
      value: |-
        <details>
-        
        ```console
        # Replace this line with logs
        ```
@@ -46,7 +46,6 @@ body:
      description: 如果您使用原始命令行程序，请提供 `sing-box version` 命令的输出。
      value: |-
        <details>
-
        ```console
        # 使用输出内容覆盖此行
        ```
@@ -72,7 +71,6 @@ body:
        对于 Android 图形客户端程序，请检查 `/sdcard/Android/data/io.nekohasekai.sfa/files/stderr.log` 文件以导出崩溃日志。
      value: |-
        <details>
-        
        ```console
        # 使用日志内容覆盖此行
        ```
@@ -22,7 +22,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
        with:
          fetch-depth: 0
      - name: Get latest go version
@@ -50,7 +50,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
        with:
          fetch-depth: 0
      - name: Setup Go
@@ -70,7 +70,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
        with:
          fetch-depth: 0
      - name: Setup Go
@@ -201,7 +201,7 @@ jobs:
      TAGS: with_clash_api,with_quic
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
        with:
          fetch-depth: 0
      - name: Get latest go version
@@ -9,7 +9,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
      - name: Setup Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Setup QEMU for Docker Buildx
@@ -39,8 +39,6 @@ jobs:
        with:
          platforms: linux/386,linux/amd64,linux/arm64,linux/s390x
          target: dist
-          build-args: |
-            BUILDKIT_CONTEXT_KEEP_GIT_DIR=1
          tags: |
            ${{ steps.tag.outputs.latest }}
            ${{ steps.tag.outputs.versioned }}
@@ -22,7 +22,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
        with:
          fetch-depth: 0
      - name: Get latest go version
@@ -19,12 +19,10 @@ builds:
      - with_ech
      - with_utls
      - with_reality_server
-      - with_acme
      - with_clash_api
    env:
      - CGO_ENABLED=0
    targets:
-      - linux_386
      - linux_amd64_v1
      - linux_amd64_v3
      - linux_arm64
@@ -57,12 +55,11 @@ builds:
      - with_ech
      - with_utls
      - with_reality_server
-      - with_acme
      - with_clash_api
    env:
      - CGO_ENABLED=0
-      - GOROOT=/nix/store/kg6i737jjqs923jcijnm003h68c1dghj-go-1.20.11/share/go
-    gobinary: /nix/store/kg6i737jjqs923jcijnm003h68c1dghj-go-1.20.11/bin/go
+      - GOROOT=/nix/store/5h8gjl89zx8qxgc572wa3k81zplv8v4z-go-1.20.10/share/go
+    gobinary: /nix/store/5h8gjl89zx8qxgc572wa3k81zplv8v4z-go-1.20.10/bin/go
    targets:
      - windows_amd64_v1
      - windows_386
@@ -86,8 +83,6 @@ builds:
      - with_wireguard
      - with_ech
      - with_utls
-      - with_reality_server
-      - with_acme
      - with_clash_api
    env:
      - CGO_ENABLED=1
@@ -158,7 +153,6 @@ nfpms:
    formats:
      - deb
      - rpm
-      - archlinux
    priority: extra
    contents:
      - src: release/config/config.json
@@ -1,27 +1,23 @@
-FROM --platform=$BUILDPLATFORM golang:1.21-alpine AS builder
+FROM golang:1.21-alpine AS builder
 LABEL maintainer="nekohasekai <contact-git@sekai.icu>"
 COPY . /go/src/github.com/sagernet/sing-box
 WORKDIR /go/src/github.com/sagernet/sing-box
-ARG TARGETOS TARGETARCH
 ARG GOPROXY=""
 ENV GOPROXY ${GOPROXY}
 ENV CGO_ENABLED=0
-ENV GOOS=$TARGETOS
-ENV GOARCH=$TARGETARCH
 RUN set -ex \
    && apk add git build-base \
    && export COMMIT=$(git rev-parse --short HEAD) \
    && export VERSION=$(go run ./cmd/internal/read_tag) \
-    && go build -v -trimpath -tags \
-        "with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_acme,with_clash_api" \
+    && go build -v -trimpath -tags with_gvisor,with_quic,with_dhcp,with_wireguard,with_ech,with_utls,with_reality_server,with_clash_api,with_acme \
        -o /go/bin/sing-box \
        -ldflags "-X \"github.com/sagernet/sing-box/constant.Version=$VERSION\" -s -w -buildid=" \
        ./cmd/sing-box
-FROM --platform=$TARGETPLATFORM alpine AS dist
+FROM alpine AS dist
 LABEL maintainer="nekohasekai <contact-git@sekai.icu>"
 RUN set -ex \
    && apk upgrade \
    && apk add bash tzdata ca-certificates \
    && rm -rf /var/cache/apk/*
 COPY --from=builder /go/bin/sing-box /usr/local/bin/sing-box
-ENTRYPOINT ["sing-box"]
+ENTRYPOINT ["sing-box"]
@@ -3,7 +3,7 @@ COMMIT = $(shell git rev-parse --short HEAD)
 TAGS_GO118 = with_gvisor,with_dhcp,with_wireguard,with_utls,with_reality_server,with_clash_api
 TAGS_GO120 = with_quic,with_ech
 TAGS ?= $(TAGS_GO118),$(TAGS_GO120)
-TAGS_TEST ?= with_gvisor,with_quic,with_wireguard,with_grpc,with_ech,with_utls,with_reality_server
+TAGS_TEST ?= with_gvisor,with_quic,with_wireguard,with_grpc,with_ech,with_utls,with_reality_server,with_shadowsocksr

 GOHOSTOS = $(shell go env GOHOSTOS)
 GOHOSTARCH = $(shell go env GOHOSTARCH)
@@ -14,7 +14,7 @@ MAIN_PARAMS = $(PARAMS) -tags $(TAGS)
 MAIN = ./cmd/sing-box
 PREFIX ?= $(shell go env GOPATH)

-.PHONY: test release docs
+.PHONY: test release

 build:
 	go build $(MAIN_PARAMS) $(MAIN)
@@ -61,7 +61,7 @@ proto_install:
 release:
 	go run ./cmd/internal/build goreleaser release --clean --skip-publish || exit 1
 	mkdir dist/release
-	mv dist/*.tar.gz dist/*.zip dist/*.deb dist/*.rpm dist/*.pkg.tar.zst dist/release
+	mv dist/*.tar.gz dist/*.zip dist/*.deb dist/*.rpm dist/release
 	ghr --replace --draft --prerelease -p 3 "v${VERSION}" dist/release
 	rm -r dist/release

@@ -73,21 +73,21 @@ update_android_version:
 	go run ./cmd/internal/update_android_version

 build_android:
-	cd ../sing-box-for-android && ./gradlew :app:assemblePlayRelease && ./gradlew --stop
+	cd ../sing-box-for-android && ./gradlew :app:assembleRelease && ./gradlew --stop

 upload_android:
 	mkdir -p dist/release_android
-	cp ../sing-box-for-android/app/build/outputs/apk/play/release/*.apk dist/release_android
+	cp ../sing-box-for-android/app/build/outputs/apk/release/*.apk dist/release_android
 	ghr --replace --draft --prerelease -p 3 "v${VERSION}" dist/release_android
 	rm -rf dist/release_android

 release_android: lib_android update_android_version build_android upload_android

 publish_android:
-	cd ../sing-box-for-android && ./gradlew :app:publishPlayReleaseBundle
+	cd ../sing-box-for-android && ./gradlew :app:publishReleaseBundle

 publish_android_appcenter:
-	cd ../sing-box-for-android && ./gradlew :app:appCenterAssembleAndUploadPlayRelease
+	cd ../sing-box-for-android && ./gradlew :app:appCenterAssembleAndUploadRelease

 build_ios:
 	cd ../sing-box-for-apple && \
@@ -182,14 +182,6 @@ lib_install:
 	go install -v github.com/sagernet/gomobile/cmd/gomobile@v0.0.0-20230915142329-c6740b6d2950
 	go install -v github.com/sagernet/gomobile/cmd/gobind@v0.0.0-20230915142329-c6740b6d2950

-docs:
-	mkdocs serve
-
-publish_docs:
-	mkdocs gh-deploy -m "Update" --force --ignore-version --no-history
-
-docs_install:
-	pip install --force-reinstall mkdocs-material=="9.*" mkdocs-static-i18n=="1.2.*"
 clean:
 	rm -rf bin dist sing-box
 	rm -f $(shell go env GOPATH)/sing-box
@@ -41,7 +41,6 @@ type Options struct {
 	option.Options
 	Context           context.Context
 	PlatformInterface platform.Interface
-	PlatformLogWriter log.PlatformWriter
 }

 func New(options Options) (*Box, error) {
@@ -72,7 +71,7 @@ func New(options Options) (*Box, error) {
 		Observable:     needClashAPI,
 		DefaultWriter:  defaultLogWriter,
 		BaseTime:       createdAt,
-		PlatformWriter: options.PlatformLogWriter,
+		PlatformWriter: options.PlatformInterface,
 	})
 	if err != nil {
 		return nil, E.Cause(err, "create log factory")
@@ -12,7 +12,7 @@ import (
 func main() {
 	build_shared.FindSDK()

-	if os.Getenv("GOPATH") == "" {
+	if os.Getenv("build.Default.GOPATH") == "" {
 		os.Setenv("GOPATH", build.Default.GOPATH)
 	}

@@ -17,6 +17,9 @@ func ReadTag() (string, error) {
 	}
 	shortCommit, _ := shell.Exec("git", "rev-parse", "--short", "HEAD").ReadOutput()
 	version := badversion.Parse(currentTagRev[1:])
+	if version.PreReleaseIdentifier == "" {
+		version.Patch++
+	}
 	return version.String() + "-" + shortCommit, nil
 }

@@ -1,43 +1,5 @@
-# :material-alert-decagram: ChangeLog
+#### 1.7.0-alpha.9

-#### 1.7.0-beta.3
-
-* Fix zero TTL was incorrectly reset
-* Fixes and improvements
-
-#### 1.6.5
-
-* Fix crash if TUIC inbound authentication failed
-* Fixes and improvements
-
-#### 1.7.0-beta.2
-
-* Fix crash if TUIC inbound authentication failed
-* Update quic-go to v0.40.0
-* Fixes and improvements
-
-#### 1.6.4
-
-* Fixes and improvements
-
-#### 1.7.0-beta.1
-
-* Fixes and improvements
-
-#### 1.6.3
-
-* iOS/Android: Fix profile auto update
-* Fixes and improvements
-
-#### 1.7.0-alpha.11
-
-* iOS/Android: Fix profile auto update
-* Fixes and improvements
-
-#### 1.7.0-alpha.10
-
-* Fix tcp-brutal not working with TLS
-* Fix Android client not closing in some cases
 * Fixes and improvements

 #### 1.6.2
@@ -1,54 +0,0 @@
-# :material-decagram: Features
-
-#### UI options
-
-* Display realtime network speed in the notification
-
-#### Service
-
-SFA allows you to run sing-box through ForegroundService or VpnService (when TUN is required).
-
-#### TUN
-
-SFA provides an unprivileged TUN implementation through Android VpnService.
-
-| TUN inbound option            | Available | Note               |
-|-------------------------------|-----------|--------------------|
-| `interface_name`              | ✖️        | Managed by Android |
-| `inet4_address`               | ✔️        | /                  |
-| `inet6_address`               | ✔️        | /                  |
-| `mtu`                         | ✔️        | /                  |
-| `auto_route`                  | ✔️        | /                  |
-| `strict_route`                | ✖️        | Not implemented    |
-| `inet4_route_address`         | ✔️        | /                  |
-| `inet6_route_address`         | ✔️        | /                  |
-| `inet4_route_exclude_address` | ✔️        | /                  |
-| `inet6_route_exclude_address` | ✔️        | /                  |
-| `endpoint_independent_nat`    | ✔️        | /                  |
-| `stack`                       | ✔️        | /                  |
-| `include_interface`           | ✖️        | No permission      |
-| `exclude_interface`           | ✖️        | No permission      |
-| `include_uid`                 | ✖️        | No permission      |
-| `exclude_uid`                 | ✖️        | No permission      |
-| `include_android_user`        | ✖️        | No permission      |
-| `include_package`             | ✔️        | /                  |
-| `exclude_package`             | ✔️        | /                  |
-| `platform`                    | ✔️        | /                  |
-
-### Override
-
-Overrides profile configuration items with platform-specific values.
-
-#### Per-app proxy
-
-SFA allows you to select a list of Android apps that require proxying or bypassing in the graphical interface to
-override the `include_package` and `exclude_package` configuration items.
-
-In particular, the selector also provides the “China apps” scanning feature, providing Chinese users with an excellent
-experience to bypass apps that do not require a proxy. Specifically, by scanning China application or SDK
-characteristics through dex class path and other means, there will be almost no missed reports.
-
-### Chore
-
-* The working directory is located at `/sdcard/Android/data/io.nekohasekai.sfa/files` (External files directory)
-* Crash logs is located in `$working_directory/stderr.log`
@@ -1,18 +0,0 @@
-# :material-android: sing-box for Android
-
-SFA allows users to manage and run local or remote sing-box configuration files, and provides
-platform-specific function implementation, such as TUN transparent proxy implementation.
-
-## :material-graph: Requirements
-
-* Android 5.0+
-
-## :material-download: Download
-
-* [Play Store](https://play.google.com/store/apps/details?id=io.nekohasekai.sfa)
-* [Play Store (Beta)](https://play.google.com/apps/testing/io.nekohasekai.sfa)
-* [Github Releases](https://github.com/SagerNet/sing-box/releases)
-
-## :material-source-repository: Source code
-
-* [Github](https://github.com/SagerNet/sing-box-for-android)
@@ -1,42 +0,0 @@
-# :material-decagram: Features
-
-#### UI options
-
-* Always On
-* Include All Networks (Proxy traffic for LAN and cellular services)
-* (Apple tvOS) Import profile from iPhone/iPad
-
-#### Service
-
-SFI/SFM/SFT allows you to run sing-box through NetworkExtension with Application Extension or System Extension.
-
-#### TUN
-
-SFI/SFM/SFT provides an unprivileged TUN implementation through NetworkExtension.
-
-| TUN inbound option            | Available | Note              |
-|-------------------------------|-----------|-------------------|
-| `interface_name`              | ✖️        | Managed by Darwin |
-| `inet4_address`               | ✔️        | /                 |
-| `inet6_address`               | ✔️        | /                 |
-| `mtu`                         | ✔️        | /                 |
-| `auto_route`                  | ✔️        | /                 |
-| `strict_route`                | ✖️        | Not implemented   |
-| `inet4_route_address`         | ✔️        | /                 |
-| `inet6_route_address`         | ✔️        | /                 |
-| `inet4_route_exclude_address` | ✔️        | /                 |
-| `inet6_route_exclude_address` | ✔️        | /                 |
-| `endpoint_independent_nat`    | ✔️        | /                 |
-| `stack`                       | ✔️        | /                 |
-| `include_interface`           | ✖️        | Not implemented   |
-| `exclude_interface`           | ✖️        | Not implemented   |
-| `include_uid`                 | ✖️        | Not implemented   |
-| `exclude_uid`                 | ✖️        | Not implemented   |
-| `include_android_user`        | ✖️        | Not implemented   |
-| `include_package`             | ✖️        | Not implemented   |
-| `exclude_package`             | ✖️        | Not implemented   |
-| `platform`                    | ✔️        | /                 |
-
-### Chore
-
-* Crash logs is located in `Settings` -> `View Service Log`
@@ -1,18 +0,0 @@
-# :material-apple: sing-box for Apple platforms
-
-SFI/SFM/SFT allows users to manage and run local or remote sing-box configuration files, and provides
-platform-specific function implementation, such as TUN transparent proxy implementation.
-
-## :material-graph: Requirements
-
-* iOS 15.0+ / macOS 13.0+ / Apple tvOS 17.0+
-* An Apple account outside of mainland China
-
-## :material-download: Download
-
-* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
-* [TestFlight (Beta)](https://testflight.apple.com/join/AcqO44FH)
-
-## :material-source-repository: Source code
-
-* [Github](https://github.com/SagerNet/sing-box-for-apple)
@@ -1,59 +0,0 @@
-# :material-pencil-ruler: General
-
-Describes and explains the functions implemented uniformly by sing-box graphical clients.
-
-### Profile
-
-Profile describes a sing-box configuration file and its state.
-
-#### Local
-
-* Local Profile represents a local sing-box configuration with minimal state
-* The graphical client must provide an editor to modify configuration content
-
-#### iCloud (on iOS and macOS)
-
-* iCloud Profile represents a remote sing-box configuration with iCloud as the update source
-* The configuration file is stored in the sing-box folder under iCloud
-* The graphical client must provide an editor to modify configuration content
-
-#### Remote
-
-* Remote Profile represents a remote sing-box configuration with a URL as the update source.
-* The graphical client should provide a configuration content viewer
-* The graphical client must implement automatic profile update (default interval is 60 minutes) and HTTP Basic
-  authorization.
-
-At the same time, the graphical client must provide support for importing remote profiles
-through a specific URL Scheme. The URL is defined as follows:
-
-```
-sing-box://import-remote-profile?url=urlEncodedURL#urlEncodedName
-```
-
-### Dashboard
-
-While the sing-box service is running, the graphical client should provide a Dashboard interface to manage the service.
-
-#### Status
-
-Dashboard should display status information such as memory, connection, and traffic.
-
-#### Mode
-
-Dashboard should provide a Mode selector for switching when the configuration uses at least two `clash_mode` values.
-
-#### Groups
-
-When the configuration includes group outbounds (specifically, Selector or URLTest),
-the dashboard should provide a Group selector for status display or switching.
-
-### Chore
-
-#### Core
-
-Graphical clients should provide a Core region:
-
-* Display the current sing-box version
-* Provides a button to clean the working directory
-* Provides a memory limiter switch
@@ -1,13 +0,0 @@
-# :material-cellphone-link: Graphical Clients
-
-Maintained by Project S to provide a unified experience and platform-specific functionality.
-
-| Platform                              | Client                                  |
-|---------------------------------------|-----------------------------------------|
-| :material-android: Android            | [sing-box for Android](./android)       |
-| :material-apple: iOS/macOS/Apple tvOS | [sing-box for Apple platforms](./apple) |
-| TODO                                  | /                                       |
-
-Some third-party projects that claim to use sing-box or use sing-box as a selling point are not listed here. The core
-motivation of the maintainers of such projects is to acquire more users, and even though they provide friendly VPN
-client features, the code is usually of poor quality and contains ads.
@@ -1,12 +0,0 @@
-# :material-cellphone-link: 图形界面客户端
-
-由 Project S 维护，提供统一的体验与平台特定的功能。
-
-| 平台                                    | 客户端                                     |
-|---------------------------------------|-----------------------------------------|
-| :material-android: Android            | [sing-box for Android](./android)       |
-| :material-apple: iOS/macOS/Apple tvOS | [sing-box for Apple platforms](./apple) |
-| TODO                                  | /                                       |
-
-此处没有列出一些声称使用或以 sing-box 为卖点的第三方项目。此类项目维护者的动机是获得更多用户，即使它们提供友好的商业
-VPN 客户端功能， 但代码质量很差且包含广告。
@@ -1,4 +0,0 @@
-# :material-security: Privacy policy
-
-sing-box and official graphics clients do not collect or share personal data,
-and the data generated by the software is always on your device.
@@ -49,7 +49,7 @@ The address of the dns server.

 !!! warning ""

-    QUIC and HTTP3 transport is not included by default, see [Installation](./#installation).
+    QUIC and HTTP3 transport is not included by default, see [Installation](/#installation).

 !!! info ""

@@ -57,7 +57,7 @@ The address of the dns server.

 !!! warning ""

-    DHCP transport is not included by default, see [Installation](./#installation).
+    DHCP transport is not included by default, see [Installation](/#installation).

 | RCode             | Description           | 
 |-------------------|-----------------------|
@@ -46,7 +46,7 @@

 !!! error ""

-    Clash API is not included by default, see [Installation](./#installation).
+    Clash API is not included by default, see [Installation](/#installation).

 #### external_controller

@@ -112,7 +112,7 @@ If not empty, `store_selected` will use a separate store keyed by it.

 !!! error ""

-    V2Ray API is not included by default, see [Installation](./#installation).
+    V2Ray API is not included by default, see [Installation](/#installation).

 #### listen

@@ -31,7 +31,7 @@

 !!! warning ""

-    QUIC, which is required by hysteria is not included by default, see [Installation](./#installation).
+    QUIC, which is required by hysteria is not included by default, see [Installation](/#installation).

 ### Listen Fields

@@ -4,8 +4,8 @@
 {
  "type": "hysteria2",
  "tag": "hy2-in",
-  ...
-  // Listen Fields
+  
+  ... // Listen Fields

  "up_mbps": 100,
  "down_mbps": 100,
@@ -28,14 +28,7 @@

 !!! warning ""

-    QUIC, which is required by Hysteria2 is not included by default, see [Installation](./#installation).
-
-!!! warning "Difference from official Hysteria2"
-
-    The official program supports an authentication method called **userpass**,
-    which essentially uses a combination of `<username>:<password>` as the actual password,
-    while sing-box does not provide this alias.
-    To use sing-box with the official program, you need to fill in that combination as the actual password.
+    QUIC, which is required by Hysteria2 is not included by default, see [Installation](/#installation).

 ### Listen Fields

@@ -4,8 +4,8 @@
 {
  "type": "hysteria2",
  "tag": "hy2-in",
-  ...
-  // 监听字段
+  
+  ... // 监听字段

  "up_mbps": 100,
  "down_mbps": 100,
@@ -30,12 +30,6 @@

    默认安装不包含被 Hysteria2 依赖的 QUIC，参阅 [安装](/zh/#_2)。

-!!! warning "与官方 Hysteria2 的区别"
-
-    官方程序支持一种名为 **userpass** 的验证方式，
-    本质上上是将用户名与密码的组合 `<username>:<password>` 作为实际上的密码，而 sing-box 不提供此别名。
-    要将 sing-box 与官方程序一起使用， 您需要填写该组合作为实际密码。
-
 ### 监听字段

 参阅 [监听字段](/zh/configuration/shared/listen/)。
@@ -20,7 +20,7 @@

 !!! warning ""

-    HTTP3 transport is not included by default, see [Installation](./#installation).
+    HTTP3 transport is not included by default, see [Installation](/#installation).

 ### Listen Fields

@@ -24,7 +24,7 @@

 !!! warning ""

-    QUIC, which is required by TUIC is not included by default, see [Installation](./#installation).
+    QUIC, which is required by TUIC is not included by default, see [Installation](/#installation).

 ### Listen Fields

@@ -171,7 +171,7 @@ TCP/IP stack.

 !!! warning ""

-    gVisor and LWIP stacks is not included by default, see [Installation](./#installation).
+    gVisor and LWIP stacks is not included by default, see [Installation](/#installation).

 #### include_interface

@@ -26,7 +26,7 @@

 !!! warning ""

-    QUIC, which is required by hysteria is not included by default, see [Installation](./#installation).
+    QUIC, which is required by hysteria is not included by default, see [Installation](/#installation).

 ### Fields

@@ -24,15 +24,7 @@

 !!! warning ""

-    QUIC, which is required by Hysteria2 is not included by default, see [Installation](./#installation).
-
-!!! warning "Difference from official Hysteria2"
-
-    The official Hysteria2 supports an authentication method called **userpass**,
-    which essentially uses a combination of `<username>:<password>` as the actual password,
-    while sing-box does not provide this alias.
-    If you are planning to use sing-box with the official program,
-    please note that you will need to fill the combination as the password.
+    QUIC, which is required by Hysteria2 is not included by default, see [Installation](/#installation).

 ### Fields

@@ -26,12 +26,6 @@

    默认安装不包含被 Hysteria2 依赖的 QUIC，参阅 [安装](/zh/#_2)。

-!!! warning "与官方 Hysteria2 的区别"
-
-    官方程序支持一种名为 **userpass** 的验证方式，
-    本质上上是将用户名与密码的组合 `<username>:<password>` 作为实际上的密码，而 sing-box 不提供此别名。
-    要将 sing-box 与官方程序一起使用， 您需要填写该组合作为实际密码。
-
 ### 字段

 #### server
@@ -25,7 +25,7 @@

 !!! warning ""

-    ShadowsocksR is not included by default, see [Installation](./#installation).
+    ShadowsocksR is not included by default, see [Installation](/#installation).

 ### Fields

@@ -18,7 +18,7 @@

 !!! info ""

-    Embedded tor is not included by default, see [Installation](./#installation).
+    Embedded tor is not included by default, see [Installation](/#installation).

 ### Fields

@@ -23,7 +23,7 @@

 !!! warning ""

-    QUIC, which is required by TUIC is not included by default, see [Installation](./#installation).
+    QUIC, which is required by TUIC is not included by default, see [Installation](/#installation).

 ### Fields

@@ -38,11 +38,11 @@

 !!! warning ""

-    WireGuard is not included by default, see [Installation](./#installation).
+    WireGuard is not included by default, see [Installation](/#installation).

 !!! warning ""

-    gVisor, which is required by the unprivileged WireGuard is not included by default, see [Installation](./#installation).
+    gVisor, which is required by the unprivileged WireGuard is not included by default, see [Installation](/#installation).

 ### Fields

@@ -28,7 +28,7 @@

 #### final

-默认出站标签。如果为空，将使用第一个可用于对应协议的出站。
+默认出站标签。如果未空，将使用第一个可用于对应协议的出站。

 #### auto_detect_interface

@@ -66,4 +66,4 @@

 默认为出站连接设置路由标记。

-如果设置了 `outbound.routing_mark` 设置，则不生效。
+如果设置了 `outbound.routing_mark` 设置，则不生效。
@@ -201,7 +201,7 @@ The path to the server private key, in PEM format.

 !!! warning ""

-    uTLS is not included by default, see [Installation](./#installation).
+    uTLS is not included by default, see [Installation](/#installation).

 !!! note ""

@@ -228,7 +228,7 @@ Chrome fingerprint will be used if empty.

 !!! warning ""

-    ECH is not included by default, see [Installation](./#installation).
+    ECH is not included by default, see [Installation](/#installation).

 ECH (Encrypted Client Hello) is a TLS extension that allows a client to encrypt the first part of its ClientHello
 message.
@@ -280,7 +280,7 @@ If empty, load from DNS will be attempted.

 !!! warning ""

-    ACME is not included by default, see [Installation](./#installation).
+    ACME is not included by default, see [Installation](/#installation).

 #### domain

@@ -359,11 +359,11 @@ See [DNS01 Challenge Fields](/configuration/shared/dns01_challenge) for details.

 !!! warning ""

-    reality server is not included by default, see [Installation](./#installation).
+    reality server is not included by default, see [Installation](/#installation).

 !!! warning ""

-    uTLS, which is required by reality client is not included by default, see [Installation](./#installation).
+    uTLS, which is required by reality client is not included by default, see [Installation](/#installation).

 #### handshake

@@ -131,7 +131,7 @@ It needs to be consistent with the server.

 !!! warning ""

-    QUIC is not included by default, see [Installation](./#installation).
+    QUIC is not included by default, see [Installation](/#installation).

 !!! warning "Difference from v2ray-core"

@@ -142,7 +142,7 @@ It needs to be consistent with the server.

 !!! note ""

-    standard gRPC has good compatibility but poor performance and is not included by default, see [Installation](./#installation).
+    standard gRPC has good compatibility but poor performance and is not included by default, see [Installation](/#installation).

 ```json
 {
@@ -0,0 +1,50 @@
+# Development environment
+
+#### For the documentation
+
+##### Setup
+
+You need to configure python3 and pip first.
+
+```shell
+pip install mkdocs-material mkdocs-static-i18n
+```
+
+##### Run the site locally
+
+```shell
+mkdocs serve
+```
+
+or
+
+```shell
+python3 -m mkdocs serve
+```
+
+#### For the project
+
+By default you have the latest Go installed (currently 1.19), and added `GOPATH/bin` to the PATH environment variable.
+
+##### Setup
+
+```shell
+make fmt_insalll
+make lint_install
+```
+
+This installs the formatting and lint tools, which can be used via `make fmt` and `make lint`.
+
+For ProtoBuffer changes, you also need `make proto_install` and `make proto`.
+
+##### Build binary to the project directory
+
+```shell
+make
+```
+
+##### Install binary to GOPATH/bin
+
+```shell
+make install
+```
@@ -0,0 +1,17 @@
+# Contributing to sing-box
+
+An introduction to contributing to the sing-box project.
+
+The sing-box project welcomes, and depends, on contributions from developers and users in the open source community.
+Contributions can be made in a number of ways, a few examples are:
+
+* Code patches via pull requests
+* Documentation improvements
+* Bug reports and patch reviews
+
+### Reporting an Issue?
+
+Please follow
+the [issue template](https://github.com/SagerNet/sing-box/issues/new?assignees=&labels=&template=bug_report.yml) to
+submit bugs. Always include **FULL** log content, especially if you don't understand the code that generates it.
+
@@ -0,0 +1,67 @@
+The sing-box uses the following projects which also need to be maintained:
+
+#### sing
+
+Link: [GitHub repository](https://github.com/SagerNet/sing)
+
+As a base tool library, there are no dependencies other than `golang.org/x/sys`.
+
+#### sing-dns
+
+Link: [GitHub repository](https://github.com/SagerNet/sing-dns)
+
+Handles DNS lookups and caching.
+
+#### sing-tun
+
+Link: [GitHub repository](https://github.com/SagerNet/sing-tun)
+
+Handle Tun traffic forwarding, configure routing, monitor network and routing.
+
+This library needs to periodically update its dependency gVisor (according to tags), including checking for changes to
+the used parts of the code and updating its usage. If you are involved in maintenance, you also need to check that if it
+works or contains memory leaks.
+
+#### sing-shadowsocks
+
+Link: [GitHub repository](https://github.com/SagerNet/sing-shadowsocks)
+
+Provides Shadowsocks client and server
+
+#### sing-vmess
+
+Link: [GitHub repository](https://github.com/SagerNet/sing-vmess)
+
+Provides VMess client and server
+
+#### netlink
+
+Link: [GitHub repository](https://github.com/SagerNet/netlink)
+
+Fork of `vishvananda/netlink`, with some rule fixes.
+
+The library needs to be updated with the upstream.
+
+#### quic-go
+
+Link: [GitHub repository](https://github.com/SagerNet/quic-go)
+
+Fork of `lucas-clemente/quic-go`  and `HyNetwork/quic-go`, contains quic flow control and other fixes used by Hysteria.
+
+Since the author of Hysteria does not follow the upstream updates in time, and the provided fork needs to use replace,
+we need to do this.
+
+The library needs to be updated with the upstream.
+
+#### smux
+
+Link: [GitHub repository](https://github.com/SagerNet/smux)
+
+Fork of `xtaci/smux`
+
+Modify the code to support the writev it uses internally and unify the buffer pool, which prevents it from allocating
+64k buffers for per connection and improves performance.
+
+Upstream doesn't seem to be updated anymore, maybe a replacement is needed.
+
+Note: while yamux is still actively maintained and better known, it seems to be less performant.
@@ -1,6 +1,4 @@
-# :material-delete-alert: Deprecated Feature List
-
-### 1.6.0
+# Deprecated Feature List

 The following features will be marked deprecated in 1.5.0 and removed entirely in 1.6.0.

@@ -1,13 +0,0 @@
-# :material-delete-alert: 废弃功能列表
-
-### 1.6.0
-
-下列功能已在 1.5.0 中标记为已弃用，并在 1.6.0 中完全删除。
-
-#### ShadowsocksR
-
-ShadowsocksR 支持从未默认启用，自从常用的黑产代理销售面板停止使用该协议，继续维护它是没有意义的。
-
-#### Proxy Protocol
-
-Proxy Protocol 支持由 Pull Request 添加，存在问题且仅由 HTTP 多路复用器（如 nginx）的后端使用，具有侵入性，对于代理目的毫无意义。
@@ -0,0 +1,52 @@
+```json
+{
+  "dns": {
+    "rules": [
+      {
+        "domain": [
+          "clash.razord.top",
+          "yacd.haishan.me"
+        ],
+        "server": "local"
+      },
+      {
+        "clash_mode": "direct",
+        "server": "local"
+      }
+    ]
+  },
+  "outbounds": [
+    {
+      "type": "selector",
+      "tag": "default",
+      "outbounds": [
+        "proxy-a",
+        "proxy-b"
+      ]
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "clash_mode": "direct",
+        "outbound": "direct"
+      },
+      {
+        "domain": [
+          "clash.razord.top",
+          "yacd.haishan.me"
+        ],
+        "outbound": "direct"
+      }
+    ],
+    "final": "default"
+  },
+  "experimental": {
+    "clash_api": {
+      "external_controller": "127.0.0.1:9090",
+      "store_selected": true
+    }
+  }
+}
+
+```
@@ -0,0 +1,65 @@
+#### Sniff Mode
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true // required
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "direct"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "outbound": "dns-out"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
+
+#### Port Mode
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true // not required
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "direct"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "port": 53,
+        "outbound": "dns-out"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
@@ -0,0 +1,65 @@
+#### 探测模式
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true // 必须
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "direct"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "outbound": "dns-out"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
+
+#### 端口模式
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true // 非必须
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "direct"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "port": 53,
+        "outbound": "dns-out"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
@@ -0,0 +1,106 @@
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "tag": "google",
+        "address": "tls://8.8.8.8"
+      },
+      {
+        "tag": "local",
+        "address": "223.5.5.5",
+        "detour": "direct"
+      },
+      {
+        "tag": "remote",
+        "address": "fakeip"
+      },
+      {
+        "tag": "block",
+        "address": "rcode://success"
+      }
+    ],
+    "rules": [
+      {
+        "geosite": "category-ads-all",
+        "server": "block",
+        "disable_cache": true
+      },
+      {
+        "outbound": "any",
+        "server": "local"
+      },
+      {
+        "geosite": "cn",
+        "server": "local"
+      },
+      {
+        "query_type": [
+          "A",
+          "AAAA"
+        ],
+        "server": "remote"
+      }
+    ],
+    "fakeip": {
+      "enabled": true,
+      "inet4_range": "198.18.0.0/15",
+      "inet6_range": "fc00::/18"
+    },
+    "independent_cache": true,
+    "strategy": "ipv4_only"
+  },
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true,
+      "domain_strategy": "ipv4_only" // remove this line if you want to resolve the domain remotely (if the server is not sing-box, UDP may not work due to wrong behavior).
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "tag": "proxy",
+      "server": "mydomain.com",
+      "server_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    },
+    {
+      "type": "direct",
+      "tag": "direct"
+    },
+    {
+      "type": "block",
+      "tag": "block"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "outbound": "dns-out"
+      },
+      {
+        "geosite": "cn",
+        "geoip": [
+          "private",
+          "cn"
+        ],
+        "outbound": "direct"
+      },
+      {
+        "geosite": "category-ads-all",
+        "outbound": "block"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
@@ -0,0 +1,106 @@
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "tag": "google",
+        "address": "tls://8.8.8.8"
+      },
+      {
+        "tag": "local",
+        "address": "223.5.5.5",
+        "detour": "direct"
+      },
+      {
+        "tag": "remote",
+        "address": "fakeip"
+      },
+      {
+        "tag": "block",
+        "address": "rcode://success"
+      }
+    ],
+    "rules": [
+      {
+        "geosite": "category-ads-all",
+        "server": "block",
+        "disable_cache": true
+      },
+      {
+        "outbound": "any",
+        "server": "local"
+      },
+      {
+        "geosite": "cn",
+        "server": "local"
+      },
+      {
+        "query_type": [
+          "A",
+          "AAAA"
+        ],
+        "server": "remote"
+      }
+    ],
+    "fakeip": {
+      "enabled": true,
+      "inet4_range": "198.18.0.0/15",
+      "inet6_range": "fc00::/18"
+    },
+    "independent_cache": true,
+    "strategy": "ipv4_only"
+  },
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "sniff": true,
+      "domain_strategy": "ipv4_only" // 如果您想在远程解析域，删除此行 (如果服务器程序不为 sing-box，可能由于错误的行为导致 UDP 无法使用)。
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "tag": "proxy",
+      "server": "mydomain.com",
+      "server_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    },
+    {
+      "type": "direct",
+      "tag": "direct"
+    },
+    {
+      "type": "block",
+      "tag": "block"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "outbound": "dns-out"
+      },
+      {
+        "geosite": "cn",
+        "geoip": [
+          "private",
+          "cn"
+        ],
+        "outbound": "direct"
+      },
+      {
+        "geosite": "category-ads-all",
+        "outbound": "block"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
@@ -0,0 +1,11 @@
+# Examples
+
+Configuration examples for sing-box.
+
+* [Linux Server Installation](./linux-server-installation)
+* [Tun](./tun)
+* [DNS Hijack](./dns-hijack.md)
+* [Shadowsocks](./shadowsocks)
+* [ShadowTLS](./shadowtls)
+* [Clash API](./clash-api)
+* [FakeIP](./fakeip)
@@ -0,0 +1,11 @@
+# 示例
+
+sing-box 的配置示例。
+
+* [Linux 服务器安装](./linux-server-installation)
+* [Tun](./tun)
+* [DNS 劫持](./dns-hijack.md)
+* [Shadowsocks](./shadowsocks)
+* [ShadowTLS](./shadowtls)
+* [Clash API](./clash-api)
+* [FakeIP](./fakeip)
@@ -0,0 +1,38 @@
+#### Requirements
+
+* Linux & Systemd
+* Git
+* C compiler environment
+
+#### Install
+
+```shell
+git clone -b main https://github.com/SagerNet/sing-box
+cd sing-box
+./release/local/install_go.sh # skip if you have golang already installed
+./release/local/install.sh
+```
+
+Edit configuration file in `/usr/local/etc/sing-box/config.json`
+
+```shell
+./release/local/enable.sh
+```
+
+#### Update
+
+```shell
+./release/local/update.sh
+```
+
+#### Other commands
+
+| Operation | Command                                       |
+|-----------|-----------------------------------------------|
+| Start     | `sudo systemctl start sing-box`               |
+| Stop      | `sudo systemctl stop sing-box`                |
+| Kill      | `sudo systemctl kill sing-box`                |
+| Restart   | `sudo systemctl restart sing-box`             |
+| Logs      | `sudo journalctl -u sing-box --output cat -e` |
+| New Logs  | `sudo journalctl -u sing-box --output cat -f` |
+| Uninstall | `./release/local/uninstall.sh`                |
@@ -0,0 +1,38 @@
+#### 依赖
+
+* Linux & Systemd
+* Git
+* C 编译器环境
+
+#### 安装
+
+```shell
+git clone -b main https://github.com/SagerNet/sing-box
+cd sing-box
+./release/local/install_go.sh # 如果已安装 golang 则跳过
+./release/local/install.sh
+```
+
+编辑配置文件 `/usr/local/etc/sing-box/config.json`
+
+```shell
+./release/local/enable.sh
+```
+
+#### 更新
+
+```shell
+./release/local/update.sh
+```
+
+#### 其他命令
+
+| 操作   | 命令                                            |
+|------|-----------------------------------------------|
+| 启动   | `sudo systemctl start sing-box`               |
+| 停止   | `sudo systemctl stop sing-box`                |
+| 强制停止 | `sudo systemctl kill sing-box`                |
+| 重启   | `sudo systemctl restart sing-box`             |
+| 查看日志 | `sudo journalctl -u sing-box --output cat -e` |
+| 实时日志 | `sudo journalctl -u sing-box --output cat -f` |
+| 卸载   | `./release/local/uninstall.sh`                |
@@ -0,0 +1,163 @@
+# Shadowsocks
+
+!!! warning ""
+
+    For censorship bypass usage in China, we recommend using UDP over TCP and disabling UDP on the server.
+
+## Single User
+
+#### Server
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "shadowsocks",
+      "listen": "::",
+      "listen_port": 8080,
+      "network": "tcp",
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    }
+  ]
+}
+```
+
+#### Client
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "mixed",
+      "listen": "::",
+      "listen_port": 2080
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "server": "127.0.0.1",
+      "server_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg==",
+      "udp_over_tcp": true
+    }
+  ]
+}
+
+```
+
+## Multiple Users
+
+#### Server
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "shadowsocks",
+      "listen": "::",
+      "listen_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg==",
+      "users": [
+        {
+          "name": "sekai",
+          "password": "BXYxVUXJ9NgF7c7KPLQjkg=="
+        }
+      ]
+    }
+  ]
+}
+```
+
+#### Client
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "mixed",
+      "listen": "::",
+      "listen_port": 2080
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "server": "127.0.0.1",
+      "server_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg==:BXYxVUXJ9NgF7c7KPLQjkg=="
+    }
+  ]
+}
+
+```
+
+## Relay
+
+#### Server
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "shadowsocks",
+      "listen": "::",
+      "listen_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    }
+  ]
+}
+```
+
+#### Relay
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "shadowsocks",
+      "listen": "::",
+      "listen_port": 8081,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "BXYxVUXJ9NgF7c7KPLQjkg==",
+      "destinations": [
+        {
+          "name": "my_server",
+          "password": "8JCsPssfgS8tiRwiMlhARg==",
+          "server": "127.0.0.1",
+          "server_port": 8080
+        }
+      ]
+    }
+  ]
+}
+```
+
+#### Client
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "mixed",
+      "listen": "::",
+      "listen_port": 2080
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "server": "127.0.0.1",
+      "server_port": 8081,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg==:BXYxVUXJ9NgF7c7KPLQjkg=="
+    }
+  ]
+}
+
+```
@@ -0,0 +1,70 @@
+#### Server
+
+```json
+{
+  "inbounds": [
+    {
+      "type": "shadowtls",
+      "listen": "::",
+      "listen_port": 4443,
+      "version": 3,
+      "users": [
+        {
+          "name": "sekai",
+          "password": "8JCsPssfgS8tiRwiMlhARg=="
+        }
+      ],
+      "handshake": {
+        "server": "google.com",
+        "server_port": 443
+      },
+      "detour": "shadowsocks-in"
+    },
+    {
+      "type": "shadowsocks",
+      "tag": "shadowsocks-in",
+      "listen": "127.0.0.1",
+      "network": "tcp",
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    }
+  ]
+}
+```
+
+#### Client
+
+```json
+{
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg==",
+      "detour": "shadowtls-out",
+      "multiplex": {
+        "enabled": true,
+        "max_connections": 4,
+        "min_streams": 4
+      }
+      // or "udp_over_tcp": true
+    },
+    {
+      "type": "shadowtls",
+      "tag": "shadowtls-out",
+      "server": "127.0.0.1",
+      "server_port": 4443,
+      "version": 3,
+      "password": "8JCsPssfgS8tiRwiMlhARg==",
+      "tls": {
+        "enabled": true,
+        "server_name": "google.com",
+        "utls": {
+          "enabled": true,
+          "fingerprint": "chrome"
+        }
+      }
+    }
+  ]
+}
+```
@@ -0,0 +1,89 @@
+```json
+{
+  "dns": {
+    "servers": [
+      {
+        "tag": "google",
+        "address": "tls://8.8.8.8"
+      },
+      {
+        "tag": "local",
+        "address": "223.5.5.5",
+        "detour": "direct"
+      },
+      {
+        "tag": "block",
+        "address": "rcode://success"
+      }
+    ],
+    "rules": [
+      {
+        "geosite": "category-ads-all",
+        "server": "block",
+        "disable_cache": true
+      },
+      {
+        "outbound": "any",
+        "server": "local"
+      },
+      {
+        "geosite": "cn",
+        "server": "local"
+      }
+    ],
+    "strategy": "ipv4_only"
+  },
+  "inbounds": [
+    {
+      "type": "tun",
+      "inet4_address": "172.19.0.1/30",
+      "auto_route": true,
+      "strict_route": false,
+      "sniff": true
+    }
+  ],
+  "outbounds": [
+    {
+      "type": "shadowsocks",
+      "tag": "proxy",
+      "server": "mydomain.com",
+      "server_port": 8080,
+      "method": "2022-blake3-aes-128-gcm",
+      "password": "8JCsPssfgS8tiRwiMlhARg=="
+    },
+    {
+      "type": "direct",
+      "tag": "direct"
+    },
+    {
+      "type": "block",
+      "tag": "block"
+    },
+    {
+      "type": "dns",
+      "tag": "dns-out"
+    }
+  ],
+  "route": {
+    "rules": [
+      {
+        "protocol": "dns",
+        "outbound": "dns-out"
+      },
+      {
+        "geosite": "cn",
+        "geoip": [
+          "private",
+          "cn"
+        ],
+        "outbound": "direct"
+      },
+      {
+        "geosite": "category-ads-all",
+        "outbound": "block"
+      }
+    ],
+    "auto_detect_interface": true
+  }
+}
+```
@@ -0,0 +1,19 @@
+# FakeIP
+
+FakeIP refers to a type of behavior in a program that simultaneously hijacks both DNS and connection requests. It
+responds to DNS requests with virtual results and restores mapping when accepting connections.
+
+#### Advantage
+
+*
+
+#### Limitation
+
+* Its mechanism breaks applications that depend on returning correct remote addresses.
+* Only A and AAAA (IP) requests are supported, which may break applications that rely on other requests.
+
+#### Recommendation
+
+* Enable `dns.independent_cache` unless you always resolve FakeIP domains remotely.
+* If using tun, make sure FakeIP ranges is included in the tun's routes.
+* Enable `experimental.clash_api.store_fakeip` to persist FakeIP records, or use `dns.rules.rewrite_ttl` to avoid losing records after program restart in DNS cached environments.
@@ -0,0 +1,18 @@
+# FakeIP
+
+FakeIP 是指同时劫持 DNS 和连接请求的程序中的一种行为。它通过虚拟结果响应 DNS 请求，在接受连接时恢复映射。
+
+#### 优点
+
+*
+
+#### 限制
+
+* 它的机制会破坏依赖于返回正确远程地址的应用程序。
+* 仅支持 A 和 AAAA（IP）请求，这可能会破坏依赖于其他请求的应用程序。
+
+#### 建议
+
+* 启用 `dns.independent_cache` 除非您始终远程解析 FakeIP 域。
+* 如果使用 tun，请确保 tun 路由中包含 FakeIP 地址范围。
+* 启用 `experimental.clash_api.store_fakeip` 以持久化 FakeIP 记录，或者使用 `dns.rules.rewrite_ttl` 避免程序重启后在 DNS 被缓存的环境中丢失记录。
@@ -0,0 +1,58 @@
+# Frequently Asked Questions (FAQ)
+
+## Design
+
+#### Why does sing-box not have feature X?
+
+Every program contains novel features and omits someone's favorite feature. sing-box is designed with an eye to the
+needs of performance, lightweight, usability, modularity, and code quality. Your favorite feature may be missing because
+it doesn't fit, because it compromises performance or design clarity, or because it's a bad idea.
+
+If it bothers you that sing-box is missing feature X, please forgive us and investigate the features that sing-box does
+have. You might find that they compensate in interesting ways for the lack of X.
+
+#### Naive outbound
+
+NaïveProxy's main function is chromium's network stack, and it makes no sense to implement only its transport protocol.
+
+#### Protocol combinations
+
+The "underlying transport" in v2ray-core is actually a combination of a number of proprietary protocols and uses the
+names of their upstream protocols, resulting in a great deal of Linguistic corruption.
+
+For example, Trojan with v2ray's proprietary gRPC protocol, called Trojan gRPC by the v2ray community, is not actually a
+protocol and has no role outside of abusing CDNs.
+
+## Tun
+
+#### What is tun?
+
+tun is a virtual network device in unix systems, and in windows there is wintun developed by WireGuard as an
+alternative. The tun module of sing-box includes traffic processing, automatic routing, and network device listening,
+and is mainly used as a transparent proxy.
+
+#### How is it different from system proxy?
+
+System proxy usually only supports TCP and is not accepted by all applications, but tun can handle all traffic.
+
+#### How is it different from traditional transparent proxy?
+
+They are usually only supported under Linux and require manipulation of firewalls like iptables, while tun only modifies
+the routing table.
+
+The tproxy UDP is considered to have poor performance due to the need to create a new connection every write back in
+v2ray and clash, but it is optimized in sing-box so you can still use it if needed.
+
+#### How does it handle DNS?
+
+In traditional transparent proxies, it is usually necessary to manually hijack port 53 to the DNS proxy server, while
+tun is more flexible.
+
+sing-box's `auto_route` will hijack all DNS requests except on [macOS and Android](./known-issues#dns).
+
+You need to manually configure how to handle tun hijacked DNS traffic, see [Hijack DNS](/examples/dns-hijack).
+
+#### Why I can't use it with other local proxies (e.g. via socks)?
+
+Tun will hijack all traffic, including other proxy applications. In order to make tun work with other applications, you
+need to create an inbound to proxy traffic from other applications or make them bypass the route.
@@ -0,0 +1,50 @@
+# 常见问题
+
+## 设计
+
+#### 为什么 sing-box 没有功能 X？
+
+每个程序都包含新颖的功能并省略了某人最喜欢的功能。 sing-box 的设计着眼于高性能、轻量、可用性、模块化和代码质量的需求。
+您最喜欢的功能可能会丢失，因为它不适合，因为它会影响性能或设计清晰度，或者因为它是一个坏主意。
+
+如果 sing-box 缺少功能 X 让您感到困扰，请原谅我们并调查 sing-box 确实有的功能。 您可能会发现它们以有趣的方式弥补了 X 的缺失。
+
+#### Naive 出站
+
+NaïveProxy 的主要功能是 chromium 的网络栈，仅实现它的传输协议是舍本逐末的。
+
+#### 协议组合
+
+v2ray-core 中的 "底层传输协议" 实际上是一些专有协议的组合，并使用其上游协议的名称，造成了大量的语言腐败。
+
+例如，v2ray 社区将 v2ray 专有的 gRPC 协议称为 Trojan gRPC，其实并不是一个 协议，在滥用 CDN 之外没有任何作用。
+
+## Tun
+
+#### 什么是 tun？
+
+tun 是 unix 系统中的虚拟网络设备，在 windows 中有 WireGuard 开发的 wintun 作为替代。
+sing-box 的 tun 模块包括流量处理、自动路由和网络设备监听，并主要用作透明代理。
+
+#### 它与系统代理有什么不同？
+
+系统代理通常只支持 TCP，且不被所有应用程序接受，但 tun 可以处理所有流量。
+
+#### 它与传统的透明代理有什么不同？
+
+它们通常仅支持 Linux，并且需要操作防火墙像 iptables，而 tun 仅修改路由表。
+
+tproxy UDP 被认为性能很差，因为在 v2ray 和 clash 中每次回写都需要创建一个新连接，但 sing-box 进行了优化，因此您仍然可以在需要时使用它。
+
+#### 它如何处理 DNS？
+
+在传统的透明代理中，通常需要手动劫持 53 端口到 DNS 代理服务器，而 tun 更灵活。
+
+sing-box 的 `auto_route` 将劫持所有 DNS 请求，除了 [特殊情况](./known-issues#dns)。
+
+您需要手动配置以处理 tun 劫持的 DNS 流量，请参阅 [DNS劫持](/zh/examples/dns-hijack)。
+
+#### 为什么我不能将它与其他本地代理一起使用（例如通过 socks）？
+
+tun 将劫持所有流量，包括其他代理应用程序。
+为了使 tun 与其他应用程序一起工作，您需要创建入站以代理来自其他程序的流量或让它们绕过路由。
@@ -0,0 +1,20 @@
+#### DNS
+
+##### on macOS
+
+`auto-route` cannot automatically hijack DNS requests sent to the LAN, so it's need to manually set DNS to servers on
+the public internet.
+
+##### on Android
+
+`auto-route` cannot automatically hijack DNS requests when Android's `Private DNS` enabled or `strict_route` disabled.
+
+#### System proxy
+
+##### on Linux
+
+Usually only browsers and GNOME applications accept GNOME proxy settings.
+
+##### on Android
+
+With the system proxy enabled, some applications will error out (usually from China).
@@ -0,0 +1,19 @@
+#### DNS
+
+##### macOS
+
+`auto-route` 无法自动劫持发往局域网的 DNS 请求，需要手动设置位于公网的 DNS 服务器。
+
+##### Android
+
+`auto-route` 无法自动劫持 DNS 请求如果 `私人 DNS` 开启或 `strict_route` 禁用。
+
+#### 系统代理
+
+##### Linux
+
+通常只有浏览器和 GNOME 应用程序接受 GNOME 代理设置。
+
+##### Android
+
+启用系统代理后，某些应用程序会出错（通常来自中国）。
@@ -0,0 +1,121 @@
+#### Server
+
+| Feature                                                    | v2ray-core | clash |
+|------------------------------------------------------------|------------|-------|
+| Direct inbound                                             | ✔          | X     |
+| SOCKS4a inbound                                            | ✔          | X     |
+| Mixed (http/socks) inbound                                 | X          | ✔     |
+| Shadowsocks AEAD 2022 single-user/multi-user/relay inbound | X          | X     |
+| VMess/Trojan inbound                                       | ✔          | X     |
+| Naive/Hysteria inbound                                     | X          | X     |
+| Resolve incoming domain names using custom policy          | X          | X     |
+| Set system proxy on Windows/Linux/macOS/Android            | X          | X     |
+| TLS certificate auto reload                                | X          | X     |
+| TLS ACME certificate issuer                                | X          | X     |
+
+#### Client
+
+| Feature                                                | v2ray-core                         | clash    |
+|--------------------------------------------------------|------------------------------------|----------|
+| Set upstream client (proxy chain)                      | TCP only, and has poor performance | TCP only |
+| Bind to network interface                              | Linux only                         | ✔        |
+| Custom dns strategy for resolving server address       | X                                  | X        |
+| Fast fallback (RFC 6555) support for connect to server | X                                  | X        |
+| SOCKS4/4a outbound                                     | added by me                        | X        |
+| Shadowsocks AEAD 2022 outbound                         | X                                  | X        |
+| Shadowsocks UDP over TCP                               | X                                  | X        |
+| Multiplex (smux/yamux)                                 | mux.cool                           | X        |
+| Tor/WireGuard/Hysteria outbound                        | X                                  | X        |
+| Selector outbound and Clash API                        | X                                  | ✔        |
+
+#### Sniffing
+
+| Protocol         | v2ray-core  | clash-premium |
+|------------------|-------------|---------------|
+| HTTP Host        | ✔           | X             |
+| QUIC ClientHello | added by me | added by me   |
+| STUN             | X           | X             |
+
+| Feature                                 | v2ray-core                | clash-premium |
+|-----------------------------------------|---------------------------|---------------|
+| For routing only                        | added by me               | X             |
+| No performance impact (like TCP splice) | no general splice support | X             |
+| Set separately for each server          | ✔                         | X             |
+
+#### Routing
+
+| Feature                    | v2ray-core | clash-premium |
+|----------------------------|------------|---------------|
+| Auto detect interface      | X          | tun only      |
+| Set default interface name | X          | tun only      |
+| Set default firewall mark  | X          | X             |
+
+#### Routing Rule
+
+| Rule                 | v2ray-core                 | clash |
+|----------------------|----------------------------|-------|
+| Inbound              | ✔                          | X     |
+| IP Version           | X                          | X     |
+| User from inbound    | vmess and shadowsocks only | X     |
+| Sniffed protocol     | ✔                          | X     |
+| GeoSite              | ✔                          | X     |
+| Process name         | X                          | ✔     |
+| Android package name | X                          | X     |
+| Linux user/user id   | X                          | X     |
+| Invert rule          | X                          | X     |
+| Logical rule         | X                          | X     |
+
+#### DNS
+
+| Feature                            | v2ray-core  | clash |
+|------------------------------------|-------------|-------|
+| DNS proxy                          | A/AAAA only | ✔     |
+| DNS cache                          | A/AAAA only | X     |
+| DNS routing                        | X           | X     |
+| DNS Over QUIC                      | ✔           | X     |
+| DNS Over HTTP3                     | X           | X     |
+| Fake dns response with custom code | X           | X     |
+
+#### Tun
+
+| Feature                                   | clash-premium |
+|-------------------------------------------|---------------|
+| Full IPv6 support                         | X             |
+| Auto route on Linux/Windows/macOS/Android | ✔             |
+| Embed windows driver                      | X             |
+| Custom address/mtu                        | X             |
+| Limit uid (Linux) in routing              | X             |
+| Limit android user in routing             | X             |
+| Limit android package in routing          | X             |
+
+#### Memory usage
+
+| GeoSite code      | sing-box | v2ray-core |
+|-------------------|----------|------------|
+| cn                | 17.8M    | 140.3M     |
+| cn (Loyalsoldier) | 74.3M    | 246.7M     |
+
+#### Benchmark
+
+##### Shadowsocks
+
+| /                                  |   none    | aes-128-gcm | 2022-blake3-aes-128-gcm |
+|------------------------------------|:---------:|:-----------:|:-----------------------:|
+| v2ray-core (5.0.7)                 | 13.0 Gbps |  5.02 Gbps  |            /            |
+| shadowsocks-rust (v1.15.0-alpha.5) | 10.7 Gbps |      /      |        9.36 Gbps        |
+| sing-box                           | 29.0 Gbps |      /      |        11.8 Gbps        |
+
+##### VMess
+
+| /                  |    TCP    |   HTTP    |  H2 TLS   | WebSocket TLS | gRPC TLS  |
+|--------------------|:---------:|:---------:|:---------:|:-------------:|:---------:|
+| v2ray-core (5.1.0) | 7.86 GBps | 2.86 Gbps | 1.83 Gbps |   2.36 Gbps   | 2.43 Gbps |
+| sing-box           | 7.96 Gbps | 8.09 Gbps | 6.11 Gbps |   8.02 Gbps   | 6.35 Gbps |
+
+#### License
+
+| /          | License                           |
+|------------|-----------------------------------|
+| sing-box   | GPLv3 or later (Full open-source) |
+| v2ray-core | MIT (Full open-source)            |
+| clash      | GPLv3                             |
@@ -2,7 +2,7 @@
 description: Welcome to the wiki page for the sing-box project.
 ---

-# :material-home: Home
+# Home

 Welcome to the wiki page for the sing-box project.

@@ -2,7 +2,7 @@
 description: 欢迎来到该 sing-box 项目的文档页。
 ---

-# :material-home: 开始
+# 开始

 欢迎来到该 sing-box 项目的文档页。

@@ -1,59 +0,0 @@
-# :material-file-code: Build from source
-
-## :material-graph: Requirements
-
-Before sing-box 1.4.0:
-
-* Go 1.18.5 - 1.20.x
-
-Since sing-box 1.4.0:
-
-* Go 1.18.5 - ~
-* Go 1.20.0 - ~ if `with_quic` tag enabled
-
-You can download and install Go from: https://go.dev/doc/install, latest version is recommended.
-
-## :material-fast-forward: Simple Build
-
-```bash
-make
-```
-
-Or build and install binary to `GOBIN`:
-
-```bash
-make install
-```
-
-## :material-cog: Custom Build
-
-```bash
-TAGS="tag_a tag_b" make
-```
-
-or
-
-```bash
-go build -tags "tag_a tag_b" ./cmd/sing-box
-```
-
-## :material-folder-settings: Build Tags
-
-| Build Tag                          | Enabled by default | Description                                                                                                                                                                                                                                                                                                                |
-|------------------------------------|--------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| `with_quic`                        | ✔                  | Build with QUIC support, see [QUIC and HTTP3 DNS transports](/configuration/dns/server), [Naive inbound](/configuration/inbound/naive), [Hysteria Inbound](/configuration/inbound/hysteria), [Hysteria Outbound](/configuration/outbound/hysteria) and [V2Ray Transport#QUIC](/configuration/shared/v2ray-transport#quic). |
-| `with_grpc`                        | ✖️                 | Build with standard gRPC support, see [V2Ray Transport#gRPC](/configuration/shared/v2ray-transport#grpc).                                                                                                                                                                                                                  |
-| `with_dhcp`                        | ✔                  | Build with DHCP support, see [DHCP DNS transport](/configuration/dns/server).                                                                                                                                                                                                                                              |
-| `with_wireguard`                   | ✔                  | Build with WireGuard support, see [WireGuard outbound](/configuration/outbound/wireguard).                                                                                                                                                                                                                                 |
-| `with_ech`                         | ✔                  | Build with TLS ECH extension support for TLS outbound, see [TLS](/configuration/shared/tls#ech).                                                                                                                                                                                                                           |
-| `with_utls`                        | ✔                  | Build with [uTLS](https://github.com/refraction-networking/utls) support for TLS outbound, see [TLS](/configuration/shared/tls#utls).                                                                                                                                                                                      |
-| `with_reality_server`              | ✔                  | Build with reality TLS server support,  see [TLS](/configuration/shared/tls).                                                                                                                                                                                                                                              |
-| `with_acme`                        | ✔                  | Build with ACME TLS certificate issuer support, see [TLS](/configuration/shared/tls).                                                                                                                                                                                                                                      |
-| `with_clash_api`                   | ✔                  | Build with Clash API support, see [Experimental](/configuration/experimental#clash-api-fields).                                                                                                                                                                                                                            |
-| `with_v2ray_api`                   | ✖️                 | Build with V2Ray API support, see [Experimental](/configuration/experimental#v2ray-api-fields).                                                                                                                                                                                                                            |
-| `with_gvisor`                      | ✔                  | Build with gVisor support, see [Tun inbound](/configuration/inbound/tun#stack) and [WireGuard outbound](/configuration/outbound/wireguard#system_interface).                                                                                                                                                               |
-| `with_embedded_tor` (CGO required) | ✖️                 | Build with embedded Tor support, see [Tor outbound](/configuration/outbound/tor).                                                                                                                                                                                                                                          |
-| `with_lwip` (CGO required)         | ✖️                 | Build with LWIP Tun stack support, see [Tun inbound](/configuration/inbound/tun#stack).                                                                                                                                                                                                                                    |
-
-
-It is not recommended to change the default build tag list unless you really know what you are adding.
@@ -0,0 +1,23 @@
+# SFA
+
+Experimental Android client for sing-box.
+
+#### Requirements
+
+* Android 5.0+
+
+#### Download
+
+* [Play Store](https://play.google.com/store/apps/details?id=io.nekohasekai.sfa)
+* [Github Releases](https://github.com/SagerNet/sing-box/releases)
+
+#### Note
+
+* User Agent in remote profile request is `SFA/$version ($version_code; sing-box $sing_box_version)`
+* The working directory is located at `/sdcard/Android/data/io.nekohasekai.sfa/files` (External files directory)
+* Crash logs is located in `$working_directory/stderr.log`
+
+#### Privacy policy
+
+* SFA did not collect or share personal data.
+* The data generated by the software is always on your device.
@@ -0,0 +1,23 @@
+# SFA
+
+实验性的 Android sing-box 客户端。
+
+#### 要求
+
+* Android 5.0+
+
+#### 下载
+
+* [AppCenter](https://install.appcenter.ms/users/nekohasekai/apps/sfa/distribution_groups/publictest)
+* [Github Releases](https://github.com/SagerNet/sing-box/releases)
+
+#### 注意事项
+
+* 远程配置文件请求中的 User Agent 为 `SFA/$version ($version_code; sing-box $sing_box_version)`
+* 工作目录位于 `/sdcard/Android/data/io.nekohasekai.sfa/files` (外部文件目录)
+* 崩溃日志位于 `$working_directory/stderr.log`
+
+#### 隐私政策
+
+* SFA 不收集或共享个人数据。
+* 软件生成的数据始终在您的设备上。
@@ -0,0 +1,23 @@
+# SFI
+
+Experimental iOS client for sing-box.
+
+#### Requirements
+
+* iOS 15.0+
+* An Apple account outside of mainland China
+
+#### Download
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### Note
+
+* User Agent in remote profile request is `SFI/$version ($version_code; sing-box $sing_box_version)`
+* Crash logs is located in `Settings` -> `View Service Log`
+
+#### Privacy policy
+
+* SFI did not collect or share personal data.
+* The data generated by the software is always on your device.
@@ -0,0 +1,23 @@
+# SFI
+
+实验性的 iOS sing-box 客户端。
+
+#### 要求
+
+* iOS 15.0+
+* 一个非中国大陆地区的 Apple 账号
+
+#### 下载
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### 注意事项
+
+* 远程配置文件请求中的 User Agent 为 `SFI/$version ($version_code; sing-box $sing_box_version)`
+* 崩溃日志位于 `Settings` -> `View Service Log`
+
+#### 隐私政策
+
+* SFI 不收集或共享个人数据。
+* 软件生成的数据始终在您的设备上。
@@ -0,0 +1,29 @@
+# SFM
+
+Experimental macOS client for sing-box.
+
+#### Requirements
+
+* macOS 13.0+
+* An Apple account outside of mainland China (App Store Version)
+
+#### Download (App Store Version)
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### Download (Independent Version)
+
+* [GitHub Release](https://github.com/SagerNet/sing-box/releases/latest)
+* Homebrew (Cask): `brew install sfm`
+* Homebrew (Tap): `brew tap sagernet/sing-box && brew install sagernet/sing-box/sfm`
+
+#### Note
+
+* User Agent in remote profile request is `SFM/$version ($version_code; sing-box $sing_box_version)`
+* Crash logs is located in `Settings` -> `View Service Log`
+
+#### Privacy policy
+
+* SFM did not collect or share personal data.
+* The data generated by the software is always on your device.
@@ -0,0 +1,29 @@
+# SFM
+
+实验性的 macOS sing-box 客户端。
+
+#### 要求
+
+* macOS 13.0+
+* 一个非中国大陆地区的 Apple 账号 (商店版本)
+
+#### 下载 (商店版本)
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### 下载 (独立版本)
+
+* [GitHub Release](https://github.com/SagerNet/sing-box/releases/latest)
+* Homebrew (Cask): `brew install sfm`
+* Homebrew (Tap): `brew tap sagernet/sing-box && brew install sagernet/sing-box/sfm`
+
+#### 注意事项
+
+* 远程配置文件请求中的 User Agent 为 `SFM/$version ($version_code; sing-box $sing_box_version)`
+* 崩溃日志位于 `Settings` -> `View Service Log`
+
+#### 隐私政策
+
+* SFM 不收集或共享个人数据。
+* 软件生成的数据始终在您的设备上。
@@ -0,0 +1,30 @@
+# SFT
+
+Experimental Apple tvOS client for sing-box.
+
+#### Requirements
+
+* tvOS 17.0+
+
+#### Download
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### Features
+
+Full functionality, except for:
+
+* Only remote configuration files can be created manually
+* You need to update SFI to the latest version to import profiles from iPhone/iPad
+* No iCloud profile support
+
+#### Note
+
+* User Agent in remote profile request is `SFT/$version ($version_code; sing-box $sing_box_version)`
+* Crash logs is located in `Settings` -> `View Service Log`
+
+#### Privacy policy
+
+* SFT did not collect or share personal data.
+* The data generated by the software is always on your device.
@@ -0,0 +1,31 @@
+# SFI
+
+实验性的 Apple tvOS sing-box 客户端。
+
+#### 要求
+
+* tvOS 17.0+
+* 一个非中国大陆地区的 Apple 账号
+
+#### 下载
+
+* [AppStore](https://apps.apple.com/us/app/sing-box/id6451272673)
+* [TestFlight](https://testflight.apple.com/join/AcqO44FH)
+
+#### 特性
+
+完整的功能，除了：
+
+* 只能手动创建远程配置文件
+* 您需要将 SFI 更新到最新版本才能从 iPhone/iPad 导入配置文件
+* 没有 iCloud 配置文件支持
+
+#### 注意事项
+
+* 远程配置文件请求中的 User Agent 为 `SFT/$version ($version_code; sing-box $sing_box_version)`
+* 崩溃日志位于 `Settings` -> `View Service Log`
+
+#### 隐私政策
+
+* SFT 不收集或共享个人数据。
+* 软件生成的数据始终在您的设备上。
@@ -0,0 +1,25 @@
+# Specification
+
+## Profile
+
+Profile defines a sing-box configuration with metadata in a GUI client.
+
+## Profile Types
+
+### Local
+
+Create a empty configuration or import from a local file.
+
+### iCloud (on Apple platforms)
+
+Create a new configuration or use an existing configuration on iCloud. 
+
+### Remote
+
+Use a remote URL as the configuration source, with HTTP basic authentication and automatic update support.
+
+#### URL specification
+
+```
+sing-box://import-remote-profile?url=urlEncodedURL#urlEncodedName
+```
@@ -1,27 +0,0 @@
-# :material-docker: Docker
-
-## :material-console: Command
-
-```bash
-docker run -d \
-  -v /etc/sing-box:/etc/sing-box/ \
-  --name=sing-box \
-  --restart=always \
-  ghcr.io/sagernet/sing-box \
-  -D /var/lib/sing-box \
-  -C /etc/sing-box/ run
-```
-
-## :material-box-shadow: Compose
-
-```yaml
-version: "3.8"
-services:
-  sing-box:
-    image: ghcr.io/sagernet/sing-box
-    container_name: sing-box
-    restart: always
-    volumes:
-      - /etc/sing-box:/etc/sing-box/
-    command: -D /var/lib/sing-box -C /etc/sing-box/ run
-```
@@ -0,0 +1,50 @@
+# Install from source
+
+## Requirements
+
+Before sing-box 1.4.0:
+
+* Go 1.18.5 - 1.20.x
+
+Since sing-box 1.4.0:
+
+* Go 1.18.5 - ~
+* Go 1.20.0 - ~ if `with_quic` tag enabled
+
+## Installation
+
+```bash
+go install -v github.com/sagernet/sing-box/cmd/sing-box@latest
+```
+
+Install with options:
+
+```bash
+go install -v -tags with_quic,with_wireguard github.com/sagernet/sing-box/cmd/sing-box@latest
+```
+
+| Build Tag                          | Description                                                                                                                                                                                                                                                                                                                |
+|------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `with_quic`                        | Build with QUIC support, see [QUIC and HTTP3 DNS transports](/configuration/dns/server), [Naive inbound](/configuration/inbound/naive), [Hysteria Inbound](/configuration/inbound/hysteria), [Hysteria Outbound](/configuration/outbound/hysteria) and [V2Ray Transport#QUIC](/configuration/shared/v2ray-transport#quic). |
+| `with_grpc`                        | Build with standard gRPC support, see [V2Ray Transport#gRPC](/configuration/shared/v2ray-transport#grpc).                                                                                                                                                                                                                  |
+| `with_dhcp`                        | Build with DHCP support, see [DHCP DNS transport](/configuration/dns/server).                                                                                                                                                                                                                                              |
+| `with_wireguard`                   | Build with WireGuard support, see [WireGuard outbound](/configuration/outbound/wireguard).                                                                                                                                                                                                                                 |
+| `with_shadowsocksr`                | Build with ShadowsocksR support, see [ShadowsocksR outbound](/configuration/outbound/shadowsocksr).                                                                                                                                                                                                                        |
+| `with_ech`                         | Build with TLS ECH extension support for TLS outbound, see [TLS](/configuration/shared/tls#ech).                                                                                                                                                                                                                           |
+| `with_utls`                        | Build with [uTLS](https://github.com/refraction-networking/utls) support for TLS outbound, see [TLS](/configuration/shared/tls#utls).                                                                                                                                                                                      |
+| `with_reality_server`              | Build with reality TLS server support,  see [TLS](/configuration/shared/tls).                                                                                                                                                                                                                                              |
+| `with_acme`                        | Build with ACME TLS certificate issuer support, see [TLS](/configuration/shared/tls).                                                                                                                                                                                                                                      |
+| `with_clash_api`                   | Build with Clash API support, see [Experimental](/configuration/experimental#clash-api-fields).                                                                                                                                                                                                                            |
+| `with_v2ray_api`                   | Build with V2Ray API support, see [Experimental](/configuration/experimental#v2ray-api-fields).                                                                                                                                                                                                                            |
+| `with_gvisor`                      | Build with gVisor support, see [Tun inbound](/configuration/inbound/tun#stack) and [WireGuard outbound](/configuration/outbound/wireguard#system_interface).                                                                                                                                                               |
+| `with_embedded_tor` (CGO required) | Build with embedded Tor support, see [Tor outbound](/configuration/outbound/tor).                                                                                                                                                                                                                                          |
+| `with_lwip` (CGO required)         | Build with LWIP Tun stack support, see [Tun inbound](/configuration/inbound/tun#stack).                                                                                                                                                                                                                                    |
+
+The binary is built under $GOPATH/bin
+
+```bash
+sing-box version
+```
+
+It is also recommended to use systemd to manage sing-box service,
+see [Linux server installation example](/examples/linux-server-installation).
@@ -0,0 +1,39 @@
+# 从源代码安装
+
+sing-box 需要 Golang **1.18.5** 或更高版本。
+
+```bash
+go install -v github.com/sagernet/sing-box/cmd/sing-box@latest
+```
+
+自定义安装：
+
+```bash
+go install -v -tags with_clash_api github.com/sagernet/sing-box/cmd/sing-box@latest
+```
+
+| 构建标志                         | 描述                                                                                                                                                                                                                                                                      |
+|------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| `with_quic`                  | 启用 QUIC 支持，参阅 [QUIC 和 HTTP3 DNS 传输层](/configuration/dns/server)，[Naive 入站](/configuration/inbound/naive)，[Hysteria 入站](/configuration/inbound/hysteria)，[Hysteria 出站](/configuration/outbound/hysteria) 和 [V2Ray 传输层#QUIC](/configuration/shared/v2ray-transport#quic)。 |
+| `with_grpc`                  | 启用标准 gRPC 支持，参阅 [V2Ray 传输层#gRPC](/configuration/shared/v2ray-transport#grpc)。                                                                                                                                                                                           |
+| `with_dhcp`                  | 启用 DHCP 支持，参阅 [DHCP DNS 传输层](/configuration/dns/server)。                                                                                                                                                                                                                |
+| `with_wireguard`             | 启用 WireGuard 支持，参阅 [WireGuard 出站](/configuration/outbound/wireguard)。                                                                                                                                                                                                   |
+| `with_shadowsocksr`          | 启用 ShadowsocksR 支持，参阅 [ShadowsocksR 出站](/configuration/outbound/shadowsocksr)。                                                                                                                                                                                          |
+| `with_ech`                   | 启用 TLS ECH 扩展支持，参阅 [TLS](/configuration/shared/tls#ech)。                                                                                                                                                                                                                |
+| `with_utls`                  | 启用 [uTLS](https://github.com/refraction-networking/utls) 支持，参阅 [TLS](/configuration/shared/tls#utls)。                                                                                                                                                                   |
+| `with_reality_server`        | 启用 reality TLS 服务器支持，参阅 [TLS](/configuration/shared/tls)。                                                                                                                                                                                                               |
+| `with_acme`                  | 启用 ACME TLS 证书签发支持，参阅 [TLS](/configuration/shared/tls)。                                                                                                                                                                                                                 |
+| `with_clash_api`             | 启用 Clash API 支持，参阅 [实验性](/configuration/experimental#clash-api-fields)。                                                                                                                                                                                                 |
+| `with_v2ray_api`             | 启用 V2Ray API 支持，参阅 [实验性](/configuration/experimental#v2ray-api-fields)。                                                                                                                                                                                                 |
+| `with_gvisor`                | 启用 gVisor 支持，参阅 [Tun 入站](/configuration/inbound/tun#stack) 和 [WireGuard 出站](/configuration/outbound/wireguard#system_interface)。                                                                                                                                        |
+| `with_embedded_tor` (需要 CGO) | 启用 嵌入式 Tor 支持，参阅 [Tor 出站](/configuration/outbound/tor)。                                                                                                                                                                                                                 |
+| `with_lwip` (需要 CGO)         | 启用 LWIP Tun 栈支持，参阅 [Tun 入站](/configuration/inbound/tun#stack)。                                                                                                                                                                                                          |
+
+二进制文件将被构建在 `$GOPATH/bin` 下。
+
+```bash
+sing-box version
+```
+
+同时推荐使用 systemd 来管理 sing-box 服务器实例。
+参阅 [Linux 服务器安装示例](/examples/linux-server-installation)。
@@ -1,62 +0,0 @@
-# :material-package: Package Manager
-
-## :material-download-box: Manual Installation
-
-=== ":material-debian: Debian / DEB"
-
-    ```bash
-    bash <(curl -fsSL https://sing-box.app/deb-install.sh)
-    ```
-
-=== ":material-redhat: Redhat / RPM"
-
-    ```bash
-    bash <(curl -fsSL https://sing-box.app/rpm-install.sh)
-    ```
-
-=== ":simple-archlinux: Archlinux / PKG"
-
-    ```bash
-    bash <(curl -fsSL https://sing-box.app/arch-install.sh)
-    ```
-
-## :material-book-lock-open: Managed Installation
-
-=== ":material-linux: Linux"
-
-    | Type     | Platform           | Link                | Command                      | Actively maintained |
-    |----------|--------------------|---------------------|------------------------------|---------------------|
-    | AUR      | (Linux) Arch Linux | [sing-box][aur] ᴬᵁᴿ | `? -S sing-box`              | :material-check:    |
-    | nixpkgs  | (Linux) NixOS      | [sing-box][nixpkgs] | `nix-env -iA nixos.sing-box` | :material-check:    |
-    | Homebrew | macOS / Linux      | [sing-box][brew]    | `brew install sing-box`      | :material-check:    |
-    | Alpine   | (Linux) Alpine     | [sing-box][alpine]  | `apk add sing-box`           | :material-alert:    |
-
-=== ":material-apple: macOS"
-
-    | Type     | Platform      | Link             | Command                 | Actively maintained |
-    |----------|---------------|------------------|-------------------------|---------------------|
-    | Homebrew | macOS / Linux | [sing-box][brew] | `brew install sing-box` | :material-check:    |
-
-=== ":material-microsoft-windows: Windows"
-
-    | Type       | Platform           | Link                | Command                      | Actively maintained |
-    |------------|--------------------|---------------------|------------------------------|---------------------|
-    | Scoop      | Windows            | [sing-box][scoop]   | `scoop install sing-box`     | :material-check:    |
-    | Chocolatey | Windows            | [sing-box][choco]   | `choco install sing-box`     | :material-check:    |
-    | winget     | Windows            | [sing-box][winget]  | `winget install sing-box`    | :material-alert:    |
-
-=== ":material-android: Android"
-
-    | Type       | Platform           | Link                | Command                      | Actively maintained |
-    |------------|--------------------|---------------------|------------------------------|---------------------|
-    | Termux     | Android            | [sing-box][termux]  | `pkg add sing-box`           | :material-check:    |
-
-
-[alpine]: https://pkgs.alpinelinux.org/packages?name=sing-box
-[aur]: https://aur.archlinux.org/packages/sing-box
-[nixpkgs]: https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/tools/networking/sing-box/default.nix
-[termux]: https://github.com/termux/termux-packages/tree/master/packages/sing-box
-[brew]: https://formulae.brew.sh/formula/sing-box
-[choco]: https://chocolatey.org/packages/sing-box
-[scoop]: https://github.com/ScoopInstaller/Main/blob/master/bucket/sing-box.json
-[winget]: https://github.com/microsoft/winget-pkgs/tree/master/manifests/s/SagerNet/sing-box
@@ -0,0 +1,7 @@
+# Android
+
+## Termux
+
+```shell
+pkg add sing-box
+```
@@ -0,0 +1,14 @@
+# macOS
+
+## Homebrew (core)
+
+```shell
+brew install sing-box
+```
+
+## Homebrew (Tap)
+
+```shell
+brew tap sagernet/sing-box
+brew install sagernet/sing-box/sing-box
+```
@@ -0,0 +1,13 @@
+# Windows
+
+## Chocolatey
+
+```shell
+choco install sing-box
+```
+
+## winget
+
+```shell
+winget install sing-box
+```
@@ -1,22 +0,0 @@
-#!/bin/bash
-
-set -e -o pipefail
-
-ARCH_RAW=$(uname -m)
-case "${ARCH_RAW}" in
-    'x86_64')    ARCH='amd64';;
-    'x86' | 'i686' | 'i386')     ARCH='386';;
-    'aarch64' | 'arm64') ARCH='arm64';;
-    'armv7l')   ARCH='armv7';;
-    's390x')    ARCH='s390x';;
-    *)          echo "Unsupported architecture: ${ARCH_RAW}"; exit 1;;
-esac
-
-VERSION=$(curl -s https://api.github.com/repos/SagerNet/sing-box/releases/latest \
-    | grep tag_name \
-    | cut -d ":" -f2 \
-    | sed 's/\"//g;s/\,//g;s/\ //g;s/v//')
-
-curl -Lo sing-box.pkg.tar.zst "https://github.com/SagerNet/sing-box/releases/download/v${VERSION}/sing-box_${VERSION}_linux_${ARCH}.pkg.tar.zst"
-sudo pacman -U sing-box.pkg.tar.zst
-rm sing-box.pkg.tar.zst
@@ -1,23 +0,0 @@
-#!/bin/bash
-
-set -e -o pipefail
-
-ARCH_RAW=$(uname -m)
-case "${ARCH_RAW}" in
-    'x86_64')    ARCH='amd64';;
-    'x86' | 'i686' | 'i386')     ARCH='386';;
-    'aarch64' | 'arm64') ARCH='arm64';;
-    'armv7l')   ARCH='armv7';;
-    's390x')    ARCH='s390x';;
-    *)          echo "Unsupported architecture: ${ARCH_RAW}"; exit 1;;
-esac
-
-VERSION=$(curl -s https://api.github.com/repos/SagerNet/sing-box/releases/latest \
-    | grep tag_name \
-    | cut -d ":" -f2 \
-    | sed 's/\"//g;s/\,//g;s/\ //g;s/v//')
-
-curl -Lo sing-box.deb "https://github.com/SagerNet/sing-box/releases/download/v${VERSION}/sing-box_${VERSION}_linux_${ARCH}.deb"
-sudo dpkg -i sing-box.deb
-rm sing-box.deb
-
@@ -1,22 +0,0 @@
-#!/bin/bash
-
-set -e -o pipefail
-
-ARCH_RAW=$(uname -m)
-case "${ARCH_RAW}" in
-    'x86_64')    ARCH='amd64';;
-    'x86' | 'i686' | 'i386')     ARCH='386';;
-    'aarch64' | 'arm64') ARCH='arm64';;
-    'armv7l')   ARCH='armv7';;
-    's390x')    ARCH='s390x';;
-    *)          echo "Unsupported architecture: ${ARCH_RAW}"; exit 1;;
-esac
-
-VERSION=$(curl -s https://api.github.com/repos/SagerNet/sing-box/releases/latest \
-    | grep tag_name \
-    | cut -d ":" -f2 \
-    | sed 's/\"//g;s/\,//g;s/\ //g;s/v//')
-
-curl -Lo sing-box.rpm "https://github.com/SagerNet/sing-box/releases/download/v${VERSION}/sing-box_${VERSION}_linux_${ARCH}.rpm"
-sudo rpm -i sing-box.rpm
-rm sing-box.rpm
@@ -1,207 +0,0 @@
-# :material-lightning-bolt: Hysteria 2
-
-The most popular Chinese-made simple protocol based on QUIC, the selling point is Brutal,
-a congestion control algorithm that can resist packet loss by manually specifying the required rate by the user.
-
-!!! warning
-
-    Even though GFW rarely blocks UDP-based proxies, such protocols actually have far more characteristics than TCP based proxies.
-
-| Specification                                                             | Binary Characteristics | Active Detect Hiddenness |
-|---------------------------------------------------------------------------|------------------------|--------------------------|
-| [hysteria.network](https://v2.hysteria.network/docs/developers/Protocol/) | :material-alert:       | :material-check:         |
-
-## :material-text-box-check: Password Generator
-
-| Generate Password          | Action                                        |
-|----------------------------|-----------------------------------------------|
-| <code id="password"><code> | <button onclick="generate()">Refresh</button> |
-
-<script>
-    function generate() {
-        const array = new Uint8Array(16);
-        window.crypto.getRandomValues(array);
-        document.getElementById("password").textContent = btoa(String.fromCharCode.apply(null, array));
-    }
-    generate();
-</script>
-
-## :material-alert: Difference from official Hysteria
-
-The official program supports an authentication method called **userpass**,
-which essentially uses a combination of `<username>:<password>` as the actual password,
-while sing-box does not provide this alias.
-To use sing-box with the official program, you need to fill in that combination as the actual password.
-
-## :material-server: Server Example
-
-!!! info ""
-
-    Replace `up_mbps` and `down_mbps` values with the actual bandwidth of your server.
-
-=== ":material-harddisk: With local certificate"
-    
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "hysteria2",
-          "listen": "::",
-          "listen_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "users": [
-            {
-              "name": "sekai",
-              "password": "<password>"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "key_path": "/path/to/key.pem",
-            "certificate_path": "/path/to/certificate.pem"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-auto-fix: With ACME"
-
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "hysteria2",
-          "listen": "::",
-          "listen_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "users": [
-            {
-              "name": "sekai",
-              "password": "<password>"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org"
-            }
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-cloud: With ACME and Cloudflare API"
-
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "hysteria2",
-          "listen": "::",
-          "listen_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "users": [
-            {
-              "name": "sekai",
-              "password": "<password>"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org",
-              "dns01_challenge": {
-                "provider": "cloudflare",
-                "api_token": "my_token"
-              }
-            }
-          }
-        }
-      ]
-    }
-    ```
-
-## :material-cellphone-link: Client Example
-
-!!! info ""
-
-    Replace `up_mbps` and `down_mbps` values with the actual bandwidth of your client.
-
-=== ":material-web-check: With valid certificate"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "hysteria2",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "password": "<password>",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-check: With self-sign certificate"
-
-    !!! info "Tip"
-        
-        Use `sing-box merge` command to merge configuration and certificate into one file.
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "hysteria2",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "password": "<password>",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "certificate_path": "/path/to/certificate.pem"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-alert: Ignore certificate verification"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "hysteria2",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "up_mbps": 100,
-          "down_mbps": 100,
-          "password": "<password>",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "insecure": true
-          }
-        }
-      ]
-    }
-    ```
@@ -1,123 +0,0 @@
-# :material-send: Shadowsocks
-
-As the most well-known Chinese-made proxy protocol,
-Shadowsocks exists in multiple versions,
-but only AEAD 2022 ciphers TCP with multiplexing is recommended.
-
-| Ciphers        | Specification                                              | Cryptographic Security | Binary Characteristics | Active Detect Hiddenness |
-|----------------|------------------------------------------------------------|------------------------|------------------------|--------------------------|
-| Stream Ciphers | [shadowsocks.org](https://shadowsocks.org/doc/stream.html) | :material-alert:       | :material-alert:       | :material-alert:         |
-| AEAD           | [shadowsocks.org](https://shadowsocks.org/doc/aead.html)   | :material-check:       | :material-alert:       | :material-alert:         |
-| AEAD 2022      | [shadowsocks.org](https://shadowsocks.org/doc/sip022.html) | :material-check:       | :material-check:       | :material-help:          |
-
-## :material-text-box-check: Password Generator
-
-
-| For `2022-blake3-aes-128-gcm` cipher | For other ciphers             | Action                                        |
-|--------------------------------------|-------------------------------|-----------------------------------------------|
-| <code id="password_16"><code>        | <code id="password_32"><code> | <button onclick="generate()">Refresh</button> |
-
-<script>
-    function generatePassword(element, length) {
-        const array = new Uint8Array(length);
-        window.crypto.getRandomValues(array);
-        document.getElementById(element).textContent = btoa(String.fromCharCode.apply(null, array));
-    }
-    function generate() {
-      generatePassword("password_16", 16);
-      generatePassword("password_32", 32);
-    }
-    generate();
-</script>
-
-## :material-server: Server Example
-
-!!! info ""
-
-    Password of cipher `2022-blake3-aes-128-gcm` can be generated by command `sing-box generate rand 16 --base64`
-
-=== ":material-account: Single-user"
-
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "shadowsocks",
-          "listen": "::",
-          "listen_port": 8080,
-          "network": "tcp",
-          "method": "2022-blake3-aes-128-gcm",
-          "password": "<password>",
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-account-multiple: Multi-user"
-
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "shadowsocks",
-          "listen": "::",
-          "listen_port": 8080,
-          "network": "tcp",
-          "method": "2022-blake3-aes-128-gcm",
-          "password": "<server_password>",
-          "users": [
-            {
-              "name": "sekai",
-              "password": "<user_password>"
-            }
-          ],
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-## :material-cellphone-link: Client Example
-
-=== ":material-account: Single-user"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "shadowsocks",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "method": "2022-blake3-aes-128-gcm",
-          "password": "<pasword>",
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-account-multiple: Multi-user"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "shadowsocks",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "method": "2022-blake3-aes-128-gcm",
-          "password": "<server_pasword>:<user_password>",
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
@@ -1,210 +0,0 @@
-# :material-horse: Trojan
-
-As the most commonly used TLS proxy made in China, Trojan can be used in various combinations,
-but only the combination of uTLS and multiplexing is recommended.
-
-| Protocol and implementation combination | Specification                                                        | Binary Characteristics | Active Detect Hiddenness |
-|-----------------------------------------|----------------------------------------------------------------------|------------------------|--------------------------|
-| Origin / trojan-gfw                     | [trojan-gfw.github.io](https://trojan-gfw.github.io/trojan/protocol) | :material-check:       | :material-check:         |
-| Basic Go implementation                 | /                                                                    | :material-alert:       | :material-check:         |
-| with privates transport by V2Ray        | No formal definition                                                 | :material-alert:       | :material-alert:         |
-| with uTLS enabled                       | No formal definition                                                 | :material-help:        | :material-check:         |                             
-
-## :material-text-box-check: Password Generator
-
-| Generate Password          | Action                                        |
-|----------------------------|-----------------------------------------------|
-| <code id="password"><code> | <button onclick="generate()">Refresh</button> |
-
-<script>
-    function generate() {
-        const array = new Uint8Array(16);
-        window.crypto.getRandomValues(array);
-        document.getElementById("password").textContent = btoa(String.fromCharCode.apply(null, array));
-    }
-    generate();
-</script>
-
-## :material-server: Server Example
-
-=== ":material-harddisk: With local certificate"
-
-    ```json
-    {
-      "inbounds": [
-        {
-          "type": "trojan",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "example",
-              "password": "password"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "key_path": "/path/to/key.pem",
-            "certificate_path": "/path/to/certificate.pem"
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-auto-fix: With ACME"
-
-    ```json
-    {
-      "inbounds": [
-        {
-          "type": "trojan",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "example",
-              "password": "password"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org"
-            }
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-cloud: With ACME and Cloudflare API"
-
-    ```json
-    {
-      "inbounds": [
-        {
-          "type": "trojan",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "example",
-              "password": "password"
-            }
-          ],
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org",
-              "dns01_challenge": {
-                "provider": "cloudflare",
-                "api_token": "my_token"
-              }
-            }
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-## :material-cellphone-link: Client Example
-
-=== ":material-web-check: With valid certificate"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "trojan",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "password": "password",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "utls": {
-              "enabled": true,
-              "fingerprint": "firefox"
-            }
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-check: With self-sign certificate"
-
-    !!! info "Tip"
-        
-        Use `sing-box merge` command to merge configuration and certificate into one file.
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "trojan",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "password": "password",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "certificate_path": "/path/to/certificate.pem",
-            "utls": {
-              "enabled": true,
-              "fingerprint": "firefox"
-            }
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-alert: Ignore certificate verification"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "trojan",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "password": "password",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "insecure": true,
-            "utls": {
-              "enabled": true,
-              "fingerprint": "firefox"
-            }
-          },
-          "multiplex": {
-            "enabled": true
-          }
-        }
-      ]
-    }
-    ```
-
@@ -1,204 +0,0 @@
-# :material-alpha-t-box: TUIC
-
-A recently popular Chinese-made simple protocol based on QUIC, the selling point is the BBR congestion control algorithm.
-
-!!! warning
-
-    Even though GFW rarely blocks UDP-based proxies, such protocols actually have far more characteristics than TCP based proxies.
-
-| Specification                                             | Binary Characteristics | Active Detect Hiddenness |
-|-----------------------------------------------------------|------------------------|--------------------------|
-| [Github](https://github.com/EAimTY/tuic/blob/dev/SPEC.md) | :material-alert:       | :material-check:         | 
-
-## Password Generator
-
-| Generated UUID         | Generated  Password        | Action                                        |
-|------------------------|----------------------------|-----------------------------------------------|
-| <code id="uuid"><code> | <code id="password"><code> | <button onclick="generate()">Refresh</button> |
-
-<script>
-    function generateUUID() {
-        const uuid = 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
-            let r = Math.random() * 16 | 0,
-            v = c === 'x' ? r : (r & 0x3 | 0x8);
-            return v.toString(16);
-        });
-        document.getElementById("uuid").textContent = uuid;
-    }
-    function generatePassword() {
-        const array = new Uint8Array(16);
-        window.crypto.getRandomValues(array);
-        document.getElementById("password").textContent = btoa(String.fromCharCode.apply(null, array));
-    }
-    function generate() {
-        generateUUID();
-        generatePassword();
-    }
-    generate();
-</script>
-
-## :material-server: Server Example
-
-=== ":material-harddisk: With local certificate"
-
-    ```json
-     {
-      "inbounds": [
-        {
-          "type": "tuic",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "sekai",
-              "uuid": "<uuid>",
-              "password": "<password>"
-            }
-          ],
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "key_path": "/path/to/key.pem",
-            "certificate_path": "/path/to/certificate.pem"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-auto-fix: With ACME"
-
-    ```json
-    {
-      "inbounds": [
-        {
-          "type": "tuic",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "sekai",
-              "uuid": "<uuid>",
-              "password": "<password>"
-            }
-          ],
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org"
-            }
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-cloud: With ACME and Cloudflare API"
-
-    ```json
-    {
-      "inbounds": [
-        {
-          "type": "tuic",
-          "listen": "::",
-          "listen_port": 8080,
-          "users": [
-            {
-              "name": "sekai",
-              "uuid": "<uuid>",
-              "password": "<password>"
-            }
-          ],
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "acme": {
-              "domain": "example.org",
-              "email": "admin@example.org",
-              "dns01_challenge": {
-                "provider": "cloudflare",
-                "api_token": "my_token"
-              }
-            }
-          }
-        }
-      ]
-    }
-    ```
-
-## :material-cellphone-link: Client Example
-
-=== ":material-web-check: With valid certificate"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "tuic",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "uuid": "<uuid>",
-          "password": "<password>",
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-check: With self-sign certificate"
-
-    !!! info "Tip"
-        
-        Use `sing-box merge` command to merge configuration and certificate into one file.
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "tuic",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "uuid": "<uuid>",
-          "password": "<password>",
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "certificate_path": "/path/to/certificate.pem"
-          }
-        }
-      ]
-    }
-    ```
-
-=== ":material-alert: Ignore certificate verification"
-
-    ```json
-    {
-      "outbounds": [
-        {
-          "type": "tuic",
-          "server": "127.0.0.1",
-          "server_port": 8080,
-          "uuid": "<uuid>",
-          "password": "<password>",
-          "congestion_control": "bbr",
-          "tls": {
-            "enabled": true,
-            "server_name": "example.org",
-            "insecure": true
-          }
-        }
-      ]
-    }
-    ```
-
@@ -1,79 +0,0 @@
-# :material-cellphone-link: Client
-
-## :material-ray-start: Introduction
-
-For a long time, the modern usage and principles of proxy clients
-for graphical operating systems have not been clearly described.
-However, we can categorize them into three types:
-system proxy, firewall redirection, and virtual interface.
-
-## :material-web-refresh: System Proxy
-
-Almost all graphical environments support system-level proxies,
-which are essentially ordinary HTTP proxies that only support TCP.
-
-| Operating System / Desktop Environment       | System Proxy                         | Application Support |
-|:---------------------------------------------|:-------------------------------------|:--------------------|
-| Windows                                      | :material-check:                     | :material-check:    |
-| macOS                                        | :material-check:                     | :material-check:    |
-| GNOME/KDE                                    | :material-check:                     | :material-check:    |
-| Android                                      | ROOT or adb (permission) is required | :material-check:    |
-| Android/iOS (with sing-box graphical client) | via `tun.platform.http_proxy`        | :material-check:    |
-
-As one of the most well-known proxy methods, it has many shortcomings:
-many TCP clients that are not based on HTTP do not check and use the system proxy.
-Moreover, UDP and ICMP traffics bypass the proxy.
-
-```mermaid
-flowchart LR
-    dns[DNS query] -- Is HTTP request? --> proxy[HTTP proxy]
-    dns --> leak[Leak]
-    tcp[TCP connection] -- Is HTTP request? --> proxy
-    tcp -- Check and use HTTP CONNECT? --> proxy
-    tcp --> leak
-    udp[UDP packet] --> leak
-```
-
-## :material-wall-fire: Firewall Redirection
-
-This type of usage typically relies on the firewall or hook interface provided by the operating system,
-such as Windows’ WFP, Linux’s redirect, TProxy and eBPF, and macOS’s pf.
-Although it is intrusive and cumbersome to configure,
-it remains popular within the community of amateur proxy open source projects like V2Ray,
-due to the low technical requirements it imposes on the software.
-
-## :material-expansion-card: Virtual Interface
-
-All L2/L3 proxies (seriously defined VPNs, such as OpenVPN, WireGuard) are based on virtual network interfaces,
-which is also the only way for all L4 proxies to work as VPNs on mobile platforms like Android, iOS.
-
-The sing-box inherits and develops clash-premium’s TUN inbound (L3 to L4 conversion)
-as the most reasonable method for performing transparent proxying.
-
-```mermaid
-flowchart TB
-    packet[IP Packet]
-    packet --> windows[Windows / macOS]
-    packet --> linux[Linux]
-    tun[TUN interface]
-    windows -. route .-> tun
-    linux -. iproute2 route/rule .-> tun
-    tun --> gvisor[gVisor TUN stack]
-    tun --> system[system TUN stack]
-    assemble([L3 to L4 assemble])
-    gvisor --> assemble
-    system --> assemble
-    assemble --> conn[TCP and UDP connections]
-    conn --> router[sing-box Router]
-    router --> direct[Direct outbound]
-    router -->  proxy[Proxy outbounds]
-    router -- DNS hijack --> dns_out[DNS outbound]
-    dns_out --> dns_router[DNS router]
-    dns_router --> router
-    direct --> adi([auto detect interface])
-    proxy --> adi
-    adi --> default[Default network interface in the system]
-    default --> destination[Destination server]
-    default --> proxy_server[Proxy server]
-    proxy_server --> destination
-```
@@ -1,6 +0,0 @@
-# :material-server: Server
-
-To use sing-box as a proxy protocol server, you pretty much only need to configure the inbound for that protocol.
-
-The Proxy Protocol menu below contains descriptions and configuration examples
-of recommended protocols for bypassing GFW.
@@ -1,66 +0,0 @@
-# :material-expansion-card: TUN
-
-## :material-text-box: Definition
-
-Refers to TUNnel, a virtual network device supported by the kernel.
-It’s also used in sing-box to denote the extensive functionality surrounding TUN inbound:
-including traffic assembly, automatic routing, and network and default interface monitoring.
-
-The following flow chart describes the minimal TUN-based transparent proxy process in sing-box:
-
-``` mermaid
-flowchart LR
-    subgraph inbound [Inbound]
-        direction TB
-        packet[IP Packet]
-        packet --> windows[Windows / macOS]
-        packet --> linux[Linux]
-        tun[TUN interface]
-        windows -. route .-> tun
-        linux -. iproute2 route/rule .-> tun
-        tun --> gvisor[gVisor TUN stack]
-        tun --> system[system TUN stack]
-        assemble([L3 to L4 assemble])
-        gvisor --> assemble
-        system --> assemble
-        assemble --> conn[TCP and UDP connections]
-        conn --> router[sing-box Router]
-    end
-
-    subgraph outbound [Outbound]
-        direction TB
-        direct[Direct outbound]
-        proxy[Proxy outbounds]
-        direct --> adi([auto detect interface])
-        proxy --> adi
-        adi --> default[Default network interface in the system]
-        default --> destination[Destination server]
-        default --> proxy_server[Proxy server]
-        proxy_server --> destination
-    end
-
-    inbound --> outbound
-```
-
-## :material-help-box: How to
-
-A basic TUN-based transparent proxy configuration file includes: an TUN inbound, `route.auto_detect_interface`, like:
-
-```json
-{
-  "inbounds": [
-    {
-      "type": "tun",
-      "inet4_address": "172.19.0.1/30",
-      "inet6_address": "fdfe:dcba:9876::1/126",
-      "auto_route": true,
-      "strict_route": true
-    }
-  ],
-  "route": {
-    "auto_detect_interface": true
-  }
-}
-```
-
-TODO: finish this wiki
@@ -1,9 +1,4 @@
-# :material-forum: Support
-
-| Channel                       | Link                                        |
-|:------------------------------|:--------------------------------------------|
-| Community                     | https://community.sagernet.org              |
-| Github Issues                 | https://github.com/SagerNet/sing-box/issues |
-| Telegram notification channel | https://t.me/yapnc                          |
-| Telegram user group           | https://t.me/yapug                          |
-| Email                         | contact@sagernet.org                        |
+Github Issue: [Issues · SagerNet/sing-box](https://github.com/SagerNet/sing-box/issues)  
+Telegram Notification channel: [@yapnc](https://t.me/yapnc)  
+Telegram User group: [@yapug](https://t.me/yapug)  
+Email: [contact@sagernet.org](mailto:contact@sagernet.org)
@@ -1,10 +1,4 @@
-# :material-forum: 支持
-
-| 通道            | 链接                                          |
-|:--------------|:--------------------------------------------|
-| 社区            | https://community.sagernet.org              |
-| Github Issues | https://github.com/SagerNet/sing-box/issues |
-| Telegram 通知频道 | https://t.me/yapnc                          |
-| Telegram 用户组  | https://t.me/yapug                          |
-| 邮件            | contact@sagernet.org                        |
-
+Github 工单: [Issues · SagerNet/sing-box](https://github.com/SagerNet/sing-box/issues)  
+Telegram 通知频道: [@yapnc](https://t.me/yapnc)  
+Telegram 用户组: [@yapug](https://t.me/yapug)  
+Email: [contact@sagernet.org](mailto:contact@sagernet.org)
@@ -2,6 +2,7 @@ package clashapi

 import (
 	"context"
+	"fmt"
 	"net/http"
 	"sort"
 	"strconv"
@@ -175,7 +176,7 @@ func updateProxy(w http.ResponseWriter, r *http.Request) {

 	if !selector.SelectOutbound(req.Name) {
 		render.Status(r, http.StatusBadRequest)
-		render.JSON(w, r, newError("Selector update error: not found"))
+		render.JSON(w, r, newError(fmt.Sprintf("Selector update error: not found")))
 		return
 	}

@@ -17,8 +17,8 @@ import (
 	"os"
 	"strconv"
 	"sync"
-	"time"

+	C "github.com/sagernet/sing-box/constant"
 	"github.com/sagernet/sing/common"
 	"github.com/sagernet/sing/common/bufio"
 	E "github.com/sagernet/sing/common/exceptions"
@@ -69,7 +69,7 @@ type httpClient struct {

 func NewHTTPClient() HTTPClient {
 	client := new(httpClient)
-	client.client.Timeout = 15 * time.Second
+	client.client.Timeout = C.TCPTimeout
 	client.client.Transport = &client.transport
 	client.transport.TLSClientConfig = &client.tls
 	client.transport.DisableKeepAlives = true
@@ -151,9 +151,6 @@ type httpRequest struct {

 func (r *httpRequest) SetURL(link string) (err error) {
 	r.request.URL, err = url.Parse(link)
-	if err != nil {
-		return
-	}
 	if r.request.URL.User != nil {
 		user := r.request.URL.User.Username()
 		password, _ := r.request.URL.User.Password()
@@ -2,6 +2,7 @@ package platform

 import (
 	"context"
+	"io"
 	"net/netip"

 	"github.com/sagernet/sing-box/adapter"
@@ -24,6 +25,7 @@ type Interface interface {
 	UnderNetworkExtension() bool
 	ClearDNSCache()
 	process.Searcher
+	io.Writer
 }

 type NetworkInterface struct {
@@ -3,7 +3,6 @@ package libbox
 import (
 	"context"
 	"net/netip"
-	"runtime"
 	runtimeDebug "runtime/debug"
 	"syscall"

@@ -13,7 +12,6 @@ import (
 	"github.com/sagernet/sing-box/common/urltest"
 	"github.com/sagernet/sing-box/experimental/libbox/internal/procfs"
 	"github.com/sagernet/sing-box/experimental/libbox/platform"
-	"github.com/sagernet/sing-box/log"
 	"github.com/sagernet/sing-box/option"
 	"github.com/sagernet/sing-tun"
 	"github.com/sagernet/sing/common"
@@ -46,12 +44,10 @@ func NewService(configContent string, platformInterface PlatformInterface) (*Box
 	ctx = service.ContextWithPtr(ctx, urlTestHistoryStorage)
 	pauseManager := pause.NewDefaultManager(ctx)
 	ctx = pause.ContextWithManager(ctx, pauseManager)
-	platformWrapper := &platformInterfaceWrapper{iif: platformInterface, useProcFS: platformInterface.UseProcFS()}
 	instance, err := box.New(box.Options{
 		Context:           ctx,
 		Options:           options,
-		PlatformInterface: platformWrapper,
-		PlatformLogWriter: platformWrapper,
+		PlatformInterface: &platformInterfaceWrapper{iif: platformInterface, useProcFS: platformInterface.UseProcFS()},
 	})
 	if err != nil {
 		cancel()
@@ -87,10 +83,7 @@ func (s *BoxService) Wake() {
 	_ = s.instance.Router().ResetNetwork()
 }

-var (
-	_ platform.Interface = (*platformInterfaceWrapper)(nil)
-	_ log.PlatformWriter = (*platformInterfaceWrapper)(nil)
-)
+var _ platform.Interface = (*platformInterfaceWrapper)(nil)

 type platformInterfaceWrapper struct {
 	iif       PlatformInterface
@@ -142,6 +135,11 @@ func (w *platformInterfaceWrapper) OpenTun(options *tun.Options, platformOptions
 	return tun.New(*options)
 }

+func (w *platformInterfaceWrapper) Write(p []byte) (n int, err error) {
+	w.iif.WriteLog(string(p))
+	return len(p), nil
+}
+
 func (w *platformInterfaceWrapper) FindProcessInfo(ctx context.Context, network string, source netip.AddrPort, destination netip.AddrPort) (*process.Info, error) {
 	var uid int32
 	if w.useProcFS {
@@ -209,11 +207,3 @@ func (w *platformInterfaceWrapper) UnderNetworkExtension() bool {
 func (w *platformInterfaceWrapper) ClearDNSCache() {
 	w.iif.ClearDNSCache()
 }
-
-func (w *platformInterfaceWrapper) DisableColors() bool {
-	return runtime.GOOS != "android"
-}
-
-func (w *platformInterfaceWrapper) WriteMessage(level log.Level, message string) {
-	w.iif.WriteLog(message)
-}
@@ -13,12 +13,6 @@ import (
 // Requires gRPC-Go v1.32.0 or later.
 const _ = grpc.SupportPackageIsVersion7

-const (
-	StatsService_GetStats_FullMethodName    = "/experimental.v2rayapi.StatsService/GetStats"
-	StatsService_QueryStats_FullMethodName  = "/experimental.v2rayapi.StatsService/QueryStats"
-	StatsService_GetSysStats_FullMethodName = "/experimental.v2rayapi.StatsService/GetSysStats"
-)
-
 // StatsServiceClient is the client API for StatsService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
@@ -38,7 +32,7 @@ func NewStatsServiceClient(cc grpc.ClientConnInterface) StatsServiceClient {

 func (c *statsServiceClient) GetStats(ctx context.Context, in *GetStatsRequest, opts ...grpc.CallOption) (*GetStatsResponse, error) {
 	out := new(GetStatsResponse)
-	err := c.cc.Invoke(ctx, StatsService_GetStats_FullMethodName, in, out, opts...)
+	err := c.cc.Invoke(ctx, "/experimental.v2rayapi.StatsService/GetStats", in, out, opts...)
 	if err != nil {
 		return nil, err
 	}
@@ -47,7 +41,7 @@ func (c *statsServiceClient) GetStats(ctx context.Context, in *GetStatsRequest,

 func (c *statsServiceClient) QueryStats(ctx context.Context, in *QueryStatsRequest, opts ...grpc.CallOption) (*QueryStatsResponse, error) {
 	out := new(QueryStatsResponse)
-	err := c.cc.Invoke(ctx, StatsService_QueryStats_FullMethodName, in, out, opts...)
+	err := c.cc.Invoke(ctx, "/experimental.v2rayapi.StatsService/QueryStats", in, out, opts...)
 	if err != nil {
 		return nil, err
 	}
@@ -56,7 +50,7 @@ func (c *statsServiceClient) QueryStats(ctx context.Context, in *QueryStatsReque

 func (c *statsServiceClient) GetSysStats(ctx context.Context, in *SysStatsRequest, opts ...grpc.CallOption) (*SysStatsResponse, error) {
 	out := new(SysStatsResponse)
-	err := c.cc.Invoke(ctx, StatsService_GetSysStats_FullMethodName, in, out, opts...)
+	err := c.cc.Invoke(ctx, "/experimental.v2rayapi.StatsService/GetSysStats", in, out, opts...)
 	if err != nil {
 		return nil, err
 	}
@@ -110,7 +104,7 @@ func _StatsService_GetStats_Handler(srv interface{}, ctx context.Context, dec fu
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: StatsService_GetStats_FullMethodName,
+		FullMethod: "/experimental.v2rayapi.StatsService/GetStats",
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
 		return srv.(StatsServiceServer).GetStats(ctx, req.(*GetStatsRequest))
@@ -128,7 +122,7 @@ func _StatsService_QueryStats_Handler(srv interface{}, ctx context.Context, dec
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: StatsService_QueryStats_FullMethodName,
+		FullMethod: "/experimental.v2rayapi.StatsService/QueryStats",
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
 		return srv.(StatsServiceServer).QueryStats(ctx, req.(*QueryStatsRequest))
@@ -146,7 +140,7 @@ func _StatsService_GetSysStats_Handler(srv interface{}, ctx context.Context, dec
 	}
 	info := &grpc.UnaryServerInfo{
 		Server:     srv,
-		FullMethod: StatsService_GetSysStats_FullMethodName,
+		FullMethod: "/experimental.v2rayapi.StatsService/GetSysStats",
 	}
 	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
 		return srv.(StatsServiceServer).GetSysStats(ctx, req.(*SysStatsRequest))
@@ -24,16 +24,16 @@ require (
 	github.com/sagernet/cloudflare-tls v0.0.0-20230829051644-4a68352d0c4a
 	github.com/sagernet/gomobile v0.0.0-20230915142329-c6740b6d2950
 	github.com/sagernet/gvisor v0.0.0-20230930141345-5fef6f2e17ab
-	github.com/sagernet/quic-go v0.40.0
+	github.com/sagernet/quic-go v0.0.0-20231008035953-32727fef9460
 	github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691
-	github.com/sagernet/sing v0.2.18-0.20231108041402-4fbbd193203c
-	github.com/sagernet/sing-dns v0.1.11-0.20231116102430-5a2133f5d358
-	github.com/sagernet/sing-mux v0.1.5-0.20231109075101-6b086ed6bb07
-	github.com/sagernet/sing-quic v0.1.4-0.20231114135334-e2a6aab55cca
+	github.com/sagernet/sing v0.2.18-0.20231105080609-f4910823a651
+	github.com/sagernet/sing-dns v0.1.10
+	github.com/sagernet/sing-mux v0.1.4-0.20231106145412-8912fc890007
+	github.com/sagernet/sing-quic v0.1.3
 	github.com/sagernet/sing-shadowsocks v0.2.5
 	github.com/sagernet/sing-shadowsocks2 v0.1.4
 	github.com/sagernet/sing-shadowtls v0.1.4
-	github.com/sagernet/sing-tun v0.1.20-0.20231116102736-3fa4ee409a9d
+	github.com/sagernet/sing-tun v0.1.20-0.20231107065341-98f8b1d7efae
 	github.com/sagernet/sing-vmess v0.1.8
 	github.com/sagernet/smux v0.0.0-20230312102458-337ec2a5af37
 	github.com/sagernet/tfo-go v0.0.0-20230816093905-5a5c285d44a6
@@ -44,8 +44,8 @@ require (
 	github.com/stretchr/testify v1.8.4
 	go.uber.org/zap v1.26.0
 	go4.org/netipx v0.0.0-20230824141953-6213f710f925
-	golang.org/x/crypto v0.15.0
-	golang.org/x/net v0.18.0
+	golang.org/x/crypto v0.14.0
+	golang.org/x/net v0.17.0
 	golang.org/x/sys v0.14.0
 	golang.zx2c4.com/wireguard/wgctrl v0.0.0-20230429144221-925a1e7659e6
 	google.golang.org/grpc v1.59.0
@@ -65,7 +65,7 @@ require (
 	github.com/gobwas/pool v0.2.1 // indirect
 	github.com/golang/protobuf v1.5.3 // indirect
 	github.com/google/btree v1.1.2 // indirect
-	github.com/google/pprof v0.0.0-20231101202521-4ca4178f5c7a // indirect
+	github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 // indirect
 	github.com/hashicorp/yamux v0.1.1 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/josharian/native v1.1.0 // indirect
@@ -73,11 +73,11 @@ require (
 	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
 	github.com/libdns/libdns v0.2.1 // indirect
 	github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e // indirect
-	github.com/onsi/ginkgo/v2 v2.9.7 // indirect
+	github.com/onsi/ginkgo/v2 v2.9.5 // indirect
 	github.com/pierrec/lz4/v4 v4.1.14 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/quic-go/qpack v0.4.0 // indirect
-	github.com/quic-go/qtls-go1-20 v0.4.1 // indirect
+	github.com/quic-go/qtls-go1-20 v0.3.4 // indirect
 	github.com/sagernet/go-tun2socks v1.16.12-0.20220818015926-16cb67876a61 // indirect
 	github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97 // indirect
 	github.com/scjalliance/comshim v0.0.0-20230315213746-5e51f40bd3b9 // indirect
@@ -86,11 +86,11 @@ require (
 	github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 // indirect
 	github.com/zeebo/blake3 v0.2.3 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa // indirect
-	golang.org/x/mod v0.14.0 // indirect
-	golang.org/x/text v0.14.0 // indirect
+	golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect
+	golang.org/x/mod v0.13.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
 	golang.org/x/time v0.3.0 // indirect
-	golang.org/x/tools v0.15.0 // indirect
+	golang.org/x/tools v0.14.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20230822172742-b8732ec3820d // indirect
 	gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
@@ -6,6 +6,9 @@ github.com/andybalholm/brotli v1.0.5 h1:8uQZIdzKmjc/iuPu7O2ioW48L81FgatrcpfFmiq/
 github.com/andybalholm/brotli v1.0.5/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig=
 github.com/caddyserver/certmagic v0.19.2 h1:HZd1AKLx4592MalEGQS39DKs2ZOAJCEM/xYPMQ2/ui0=
 github.com/caddyserver/certmagic v0.19.2/go.mod h1:fsL01NomQ6N+kE2j37ZCnig2MFosG+MIO4ztnmG/zz8=
+github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
+github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
+github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
 github.com/cloudflare/circl v1.3.6 h1:/xbKIqSHbZXHwkhbrhrt2YOHIwYJlXH94E3tI/gDlUg=
 github.com/cloudflare/circl v1.3.6/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
 github.com/cpuguy83/go-md2man/v2 v2.0.3/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
@@ -41,10 +44,11 @@ github.com/google/btree v1.1.2 h1:xf4v41cLI2Z6FxbKm+8Bu+m8ifhj15JuZ9sa0jZCMUU=
 github.com/google/btree v1.1.2/go.mod h1:qOPhT0dTNdNzV6Z/lhRX0YXUafgPLFUh+gZMl761Gm4=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
-github.com/google/pprof v0.0.0-20231101202521-4ca4178f5c7a h1:fEBsGL/sjAuJrgah5XqmmYsTLzJp/TO9Lhy39gkverk=
-github.com/google/pprof v0.0.0-20231101202521-4ca4178f5c7a/go.mod h1:czg5+yv1E0ZGTi6S6vVK1mke0fV+FaUhNGcd6VRS9Ik=
+github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38 h1:yAJXTCF9TqKcTiHJAE8dj7HMvPfh66eeA2JYW7eFpSE=
+github.com/google/pprof v0.0.0-20210407192527-94a9f03dee38/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE=
 github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ=
+github.com/ianlancetaylor/demangle v0.0.0-20200824232613-28f6c0f3b639/go.mod h1:aSSvb/t6k1mPoxDqO4vJh6VOCGPwU4O0C2/Eqndh1Sc=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/insomniacslk/dhcp v0.0.0-20231016090811-6a2c8fbdcc1c h1:PgxFEySCI41sH0mB7/2XswdXbUykQsRUGod8Rn+NubM=
@@ -76,9 +80,9 @@ github.com/miekg/dns v1.1.56 h1:5imZaSeoRNvpM9SzWNhEcP9QliKiz20/dA2QabIGVnE=
 github.com/miekg/dns v1.1.56/go.mod h1:cRm6Oo2C8TY9ZS/TqsSrseAcncm74lfK5G+ikN2SWWY=
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e h1:fD57ERR4JtEqsWbfPhv4DMiApHyliiK5xCTNVSPiaAs=
 github.com/niemeyer/pretty v0.0.0-20200227124842-a10e7caefd8e/go.mod h1:zD1mROLANZcx1PVRCS0qkT7pwLkGfwJo4zjcN/Tysno=
-github.com/onsi/ginkgo/v2 v2.9.7 h1:06xGQy5www2oN160RtEZoTvnP2sPhEfePYmCDc2szss=
-github.com/onsi/ginkgo/v2 v2.9.7/go.mod h1:cxrmXWykAwTwhQsJOPfdIDiJ+l2RYq7U8hFU+M/1uw0=
-github.com/onsi/gomega v1.27.7 h1:fVih9JD6ogIiHUN6ePK7HJidyEDpWGVB5mzM7cWNXoU=
+github.com/onsi/ginkgo/v2 v2.9.5 h1:+6Hr4uxzP4XIUyAkg61dWBw8lb/gc4/X5luuxN/EC+Q=
+github.com/onsi/ginkgo/v2 v2.9.5/go.mod h1:tvAoo1QUJwNEU2ITftXTpR7R1RbCzoZUOs3RonqW57k=
+github.com/onsi/gomega v1.27.6 h1:ENqfyGeS5AX/rlXDd/ETokDz93u0YufY1Pgxuy/PvWE=
 github.com/ooni/go-libtor v1.1.8 h1:Wo3V3DVTxl5vZdxtQakqYP+DAHx7pPtAFSl1bnAa08w=
 github.com/ooni/go-libtor v1.1.8/go.mod h1:q1YyLwRD9GeMyeerVvwc0vJ2YgwDLTp2bdVcrh/JXyI=
 github.com/oschwald/maxminddb-golang v1.12.0 h1:9FnTOD0YOhP7DGxGsq4glzpGy5+w7pq50AS6wALUMYs=
@@ -89,8 +93,8 @@ github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZb
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
 github.com/quic-go/qpack v0.4.0 h1:Cr9BXA1sQS2SmDUWjSofMPNKmvF6IiIfDRmgU0w1ZCo=
 github.com/quic-go/qpack v0.4.0/go.mod h1:UZVnYIfi5GRk+zI9UMaCPsmZ2xKJP7XBUvVyT1Knj9A=
-github.com/quic-go/qtls-go1-20 v0.4.1 h1:D33340mCNDAIKBqXuAvexTNMUByrYmFYVfKfDN5nfFs=
-github.com/quic-go/qtls-go1-20 v0.4.1/go.mod h1:X9Nh97ZL80Z+bX/gUXMbipO6OxdiDi58b/fMC9mAL+k=
+github.com/quic-go/qtls-go1-20 v0.3.4 h1:MfFAPULvst4yoMgY9QmtpYmfij/em7O8UUi+bNVm7Cg=
+github.com/quic-go/qtls-go1-20 v0.3.4/go.mod h1:X9Nh97ZL80Z+bX/gUXMbipO6OxdiDi58b/fMC9mAL+k=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/sagernet/bbolt v0.0.0-20231014093535-ea5cb2fe9f0a h1:+NkI2670SQpQWvkkD2QgdTuzQG263YZ+2emfpeyGqW0=
 github.com/sagernet/bbolt v0.0.0-20231014093535-ea5cb2fe9f0a/go.mod h1:63s7jpZqcDAIpj8oI/1v4Izok+npJOHACFCU6+huCkM=
@@ -104,28 +108,28 @@ github.com/sagernet/gvisor v0.0.0-20230930141345-5fef6f2e17ab h1:u+xQoi/Yc6bNUvT
 github.com/sagernet/gvisor v0.0.0-20230930141345-5fef6f2e17ab/go.mod h1:3akUhSHSVtLuJaYcW5JPepUraBOW06Ibz2HKwaK5rOk=
 github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97 h1:iL5gZI3uFp0X6EslacyapiRz7LLSJyr4RajF/BhMVyE=
 github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97/go.mod h1:xLnfdiJbSp8rNqYEdIW/6eDO4mVoogml14Bh2hSiFpM=
-github.com/sagernet/quic-go v0.40.0 h1:DvQNPb72lzvNQDe9tcUyHTw8eRv6PLtM2mNYmdlzUMo=
-github.com/sagernet/quic-go v0.40.0/go.mod h1:VqtdhlbkeeG5Okhb3eDMb/9o0EoglReHunNT9ukrJAI=
+github.com/sagernet/quic-go v0.0.0-20231008035953-32727fef9460 h1:dAe4OIJAtE0nHOzTHhAReQteh3+sa63rvXbuIpbeOTY=
+github.com/sagernet/quic-go v0.0.0-20231008035953-32727fef9460/go.mod h1:uJGpmJCOcMQqMlHKc3P1Vz6uygmpz4bPeVIoOhdVQnM=
 github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691 h1:5Th31OC6yj8byLGkEnIYp6grlXfo1QYUfiYFGjewIdc=
 github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691/go.mod h1:B8lp4WkQ1PwNnrVMM6KyuFR20pU8jYBD+A4EhJovEXU=
 github.com/sagernet/sing v0.0.0-20220817130738-ce854cda8522/go.mod h1:QVsS5L/ZA2Q5UhQwLrn0Trw+msNd/NPGEhBKR/ioWiY=
 github.com/sagernet/sing v0.1.8/go.mod h1:jt1w2u7lJQFFSGLiRrRIs5YWmx4kAPfWuOejuDW9qMk=
-github.com/sagernet/sing v0.2.18-0.20231108041402-4fbbd193203c h1:uask61Pxc3nGqsOSjqnBKrwfODWRoEa80lXm04LNk0E=
-github.com/sagernet/sing v0.2.18-0.20231108041402-4fbbd193203c/go.mod h1:OL6k2F0vHmEzXz2KW19qQzu172FDgSbUSODylighuVo=
-github.com/sagernet/sing-dns v0.1.11-0.20231116102430-5a2133f5d358 h1:psJQg/KXVQTupFFR1liaCAucW+NwCDhe1oYfkmz8EJ8=
-github.com/sagernet/sing-dns v0.1.11-0.20231116102430-5a2133f5d358/go.mod h1:vtUimtf7Nq9EdvD5WTpfCr69KL1M7bcgOVKiYBiAY/c=
-github.com/sagernet/sing-mux v0.1.5-0.20231109075101-6b086ed6bb07 h1:ncKb5tVOsCQgCsv6UpsA0jinbNb5OQ5GMPJlyQP3EHM=
-github.com/sagernet/sing-mux v0.1.5-0.20231109075101-6b086ed6bb07/go.mod h1:u/MZf32xPG8jEKe3t+xUV67EBnKtDtCaPhsJQOQGUYU=
-github.com/sagernet/sing-quic v0.1.4-0.20231114135334-e2a6aab55cca h1:wGQhe7D8Y4D3lPK8Obtv4IQAvnkEKMMu8Uv/BiYpyWc=
-github.com/sagernet/sing-quic v0.1.4-0.20231114135334-e2a6aab55cca/go.mod h1:B6OgRz+qLn3N1114dcZVExkdarArtsAX2MgWJIfB72c=
+github.com/sagernet/sing v0.2.18-0.20231105080609-f4910823a651 h1:Mf2AaTaFY8Iig5REVLQKfXYjEwV/JR0uuoDQDs4EOME=
+github.com/sagernet/sing v0.2.18-0.20231105080609-f4910823a651/go.mod h1:OL6k2F0vHmEzXz2KW19qQzu172FDgSbUSODylighuVo=
+github.com/sagernet/sing-dns v0.1.10 h1:iIU7nRBlUYj+fF2TaktGIvRiTFFrHwSMedLQsvlTZCI=
+github.com/sagernet/sing-dns v0.1.10/go.mod h1:vtUimtf7Nq9EdvD5WTpfCr69KL1M7bcgOVKiYBiAY/c=
+github.com/sagernet/sing-mux v0.1.4-0.20231106145412-8912fc890007 h1:Y5Nk/BenBi0iHwvcbRNYZYLmOBBlvqcyx2y1lFkraA0=
+github.com/sagernet/sing-mux v0.1.4-0.20231106145412-8912fc890007/go.mod h1:wGeIeiiFLx4HUM5LAg65wrNZ/X1muOimqK0PEhNbPi0=
+github.com/sagernet/sing-quic v0.1.3 h1:YfSPGQdlE6YspjPSlQJaVH333leFiYQM8JX7TumsWQs=
+github.com/sagernet/sing-quic v0.1.3/go.mod h1:wvGU7MYih+cpJV2VrrpSGyjZIFSmUyqzawzmDyqeWJA=
 github.com/sagernet/sing-shadowsocks v0.2.5 h1:qxIttos4xu6ii7MTVJYA8EFQR7Q3KG6xMqmLJIFtBaY=
 github.com/sagernet/sing-shadowsocks v0.2.5/go.mod h1:MGWGkcU2xW2G2mfArT9/QqpVLOGU+dBaahZCtPHdt7A=
 github.com/sagernet/sing-shadowsocks2 v0.1.4 h1:vht2M8t3m5DTgXR2j24KbYOygG5aOp+MUhpQnAux728=
 github.com/sagernet/sing-shadowsocks2 v0.1.4/go.mod h1:Mgdee99NxxNd5Zld3ixIs18yVs4x2dI2VTDDE1N14Wc=
 github.com/sagernet/sing-shadowtls v0.1.4 h1:aTgBSJEgnumzFenPvc+kbD9/W0PywzWevnVpEx6Tw3k=
 github.com/sagernet/sing-shadowtls v0.1.4/go.mod h1:F8NBgsY5YN2beQavdgdm1DPlhaKQlaL6lpDdcBglGK4=
-github.com/sagernet/sing-tun v0.1.20-0.20231116102736-3fa4ee409a9d h1:FlCho4lZEMC6N6dThTVd2rOkWPW0iTqgy7YEAboeyps=
-github.com/sagernet/sing-tun v0.1.20-0.20231116102736-3fa4ee409a9d/go.mod h1:B1y93eY/4pNklxrstVGFrDrH4dUZAiZFBQ4MFn6HJXA=
+github.com/sagernet/sing-tun v0.1.20-0.20231107065341-98f8b1d7efae h1:rmpYHmaVs7dh20/TGHlmFbz6qlKCWftKMjt15AqT104=
+github.com/sagernet/sing-tun v0.1.20-0.20231107065341-98f8b1d7efae/go.mod h1:kN9m94o4LSan0iRiZfpTuJPF7oLyy65dyGZX4doqnco=
 github.com/sagernet/sing-vmess v0.1.8 h1:XVWad1RpTy9b5tPxdm5MCU8cGfrTGdR8qCq6HV2aCNc=
 github.com/sagernet/sing-vmess v0.1.8/go.mod h1:vhx32UNzTDUkNwOyIjcZQohre1CaytquC5mPplId8uA=
 github.com/sagernet/smux v0.0.0-20230312102458-337ec2a5af37 h1:HuE6xSwco/Xed8ajZ+coeYLmioq0Qp1/Z2zczFaV8as=
@@ -169,18 +173,19 @@ go4.org/netipx v0.0.0-20230824141953-6213f710f925 h1:eeQDDVKFkx0g4Hyy8pHgmZaK0Eq
 go4.org/netipx v0.0.0-20230824141953-6213f710f925/go.mod h1:PLyyIXexvUFg3Owu6p/WfdlivPbZJsZdgWZlrGope/Y=
 golang.org/x/crypto v0.0.0-20190404164418-38d8ce5564a5/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE=
 golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a/go.mod h1:P+XmwS30IXTQdn5tA2iutPOUgjI07+tq3H3K9MVA1s8=
-golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
-golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
-golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa h1:FRnLl4eNAQl8hwxVVC17teOw8kdjVDVAiFMtgUdTSRQ=
-golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa/go.mod h1:zk2irFbV9DP96SEBUUAy67IdHUaZuSnrz1n472HUCLE=
-golang.org/x/mod v0.14.0 h1:dGoOF9QVLYng8IHTm7BAyWqCqSheQ5pYWGhzW00YJr0=
-golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
+golang.org/x/crypto v0.14.0 h1:wBqGXzWJW6m1XrIKlAH0Hs1JJ7+9KBwnIO8v66Q9cHc=
+golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
+golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI=
+golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo=
+golang.org/x/mod v0.13.0 h1:I/DsJXRlw/8l/0c24sM9yb0T4z9liZTduXvdAWYiysY=
+golang.org/x/mod v0.13.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
-golang.org/x/net v0.18.0 h1:mIYleuAkSbHh0tCv7RvjL3F6ZVbLjq4+R7zbOn3Kokg=
-golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
-golang.org/x/sync v0.5.0 h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=
+golang.org/x/net v0.17.0 h1:pVaXccu2ozPjCXewfr1S7xza/zcXTity9cCdXQYSjIM=
+golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
+golang.org/x/sync v0.4.0 h1:zxkM55ReGkDlKSM+Fu41A+zmbZuaPVbGMzvvdUPznYQ=
 golang.org/x/sys v0.0.0-20190403152447-81d4e9dc473e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191204072324-ce4227a45e2e/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200217220822-9197077df867/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -192,16 +197,16 @@ golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
-golang.org/x/term v0.14.0 h1:LGK9IlZ8T9jvdy6cTdfKUCltatMFOehAQo9SRC46UQ8=
+golang.org/x/term v0.13.0 h1:bb+I9cTfFazGW51MZqBVmZy7+JEJMouUHTUSKVQLBek=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
-golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
+golang.org/x/text v0.13.0 h1:ablQoSUd0tRdKxZewP80B+BaqeKJuVhuRxj/dkrun3k=
+golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/time v0.3.0 h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=
 golang.org/x/time v0.3.0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.15.0 h1:zdAyfUGbYmuVokhzVmghFl2ZJh5QhcfebBgmVPFYA+8=
-golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
+golang.org/x/tools v0.14.0 h1:jvNa2pY0M4r62jkRQ6RwEZZyPcymeL9XZMLBbV7U2nc=
+golang.org/x/tools v0.14.0/go.mod h1:uYBEerGOWcJyEORxN+Ek8+TT266gXkNlHdJBwexUsBg=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.zx2c4.com/wireguard/wgctrl v0.0.0-20230429144221-925a1e7659e6 h1:CawjfCvYQH2OU3/TnxLx97WDSUDRABfT18pCOYwc2GE=
 golang.zx2c4.com/wireguard/wgctrl v0.0.0-20230429144221-925a1e7659e6/go.mod h1:3rxYc4HtVcSG9gVaTs2GEBdehh+sYPOwKtyUWEOTb80=
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
世界	c34556759c	documentation: Bump version	2023-11-07 15:04:09 +08:00
世界	d2b6fb905f	Migrate multiplex and UoT server to inbound & Add tcp-brutal support for multiplex	2023-11-07 15:03:30 +08:00
世界	93ba2cc739	Add support for v2ray http upgrade transport	2023-11-07 15:03:30 +08:00
世界	402d71e0cb	Add exclude route support for tun	2023-11-07 15:03:30 +08:00
世界	db81340199	Add udp_disable_domain_unmapping inbound listen option	2023-11-07 15:03:30 +08:00
世界	0f1cc1afc7	Migrate to gobwas/ws	2023-11-07 15:03:29 +08:00