Bump version

documentation: Bump version
documentation: Add manuel for mitigating tunnelvision attacks
2026-09-25 17:21:34 +00:00 · 2024-05-25 11:30:43 +08:00 · 2024-05-23 14:57:45 +08:00 · 2024-05-23 14:57:27 +08:00 · 2024-05-23 14:57:26 +08:00 · 2024-05-23 14:57:26 +08:00
5 changed files with 86 additions and 19 deletions
@@ -2,10 +2,77 @@
 icon: material/alert-decagram
 ---

-#### 1.9.0-rc.19
+### 1.9.0

 * Fixes and improvements

+Important changes since 1.8:
+
+* `domain_suffix` behavior update **1**
+* `process_path` format update on Windows **2**
+* Add address filter DNS rule items **3**
+* Add support for `client-subnet` DNS options **4**
+* Add rejected DNS response cache support **5**
+* Add `bypass_domain` and `search_domain` platform HTTP proxy options **6**
+* Fix missing `rule_set_ipcidr_match_source` item in DNS rules **7**
+* Handle Windows power events
+* Always disable cache for fake-ip DNS transport if `dns.independent_cache` disabled
+* Improve DNS truncate behavior
+* Update Hysteria protocol
+* Update quic-go to v0.43.1
+* Update gVisor to 20240422.0
+* Mitigating TunnelVision attacks **8**
+
+**1**:
+
+See [Migration](/migration/#domain_suffix-behavior-update).
+
+**2**:
+
+See [Migration](/migration/#process_path-format-update-on-windows).
+
+**3**:
+
+The new DNS feature allows you to more precisely bypass Chinese websites via **DNS leaks**. Do not use plain local DNS
+if using this method.
+
+See [Address Filter Fields](/configuration/dns/rule#address-filter-fields).
+
+[Client example](/manual/proxy/client#traffic-bypass-usage-for-chinese-users) updated.
+
+**4**:
+
+See [DNS](/configuration/dns), [DNS Server](/configuration/dns/server) and [DNS Rules](/configuration/dns/rule).
+
+Since this feature makes the scenario mentioned in `alpha.1` no longer leak DNS requests,
+the [Client example](/manual/proxy/client#traffic-bypass-usage-for-chinese-users) has been updated.
+
+**5**:
+
+The new feature allows you to cache the check results of
+[Address filter DNS rule items](/configuration/dns/rule/#address-filter-fields) until expiration.
+
+**6**:
+
+See [TUN](/configuration/inbound/tun) inbound.
+
+**7**:
+
+See [DNS Rule](/configuration/dns/rule/).
+
+**8**:
+
+See [TunnelVision](/manual/misc/tunnelvision).
+
+#### 1.9.0-rc.22
+
+* Fixes and improvements
+
+#### 1.9.0-rc.20
+
+* Prioritize `*_route_address` in linux auto-route
+* Fix `*_route_address` in darwin auto-route
+
 #### 1.8.14

 * Fix hysteria2 panic
@@ -231,7 +298,7 @@ See [Address Filter Fields](/configuration/dns/rule#address-filter-fields).

 * Fixes and improvements

-#### 1.8.0
+### 1.8.0

 * Fixes and improvements

@@ -522,7 +589,7 @@ New commands manage GeoIP, Geosite and rule set resources, and help you migrate

 Logical rules in route rules, DNS rules, and the new headless rule now allow nesting of logical rules.

-#### 1.7.0
+### 1.7.0

 * Fixes and improvements

@@ -682,7 +749,7 @@ Introduced in V2Ray 5.10.0.

 The new HTTPUpgrade transport has better performance than WebSocket and is better suited for CDN abuse.

-#### 1.6.0
+### 1.6.0

 * Fixes and improvements

@@ -861,7 +928,7 @@ introduce new issues.
 None of the existing Golang BBR congestion control implementations have been reviewed or unit tested.
 This update is intended to address the multi-send defects of the old implementation and may introduce new issues.

-#### 1.5.0
+### 1.5.0

 * Fixes and improvements

@@ -1055,7 +1122,7 @@ All inbounds and outbounds are supported, including `Naiveproxy`, `Hysteria`, `T

 * Fixes and improvements

-#### 1.4.0
+### 1.4.0

 * Fix bugs and update dependencies

@@ -1197,7 +1264,7 @@ The old testflight link and app are no longer valid.

 * Fixes and improvements

-#### 1.3.0
+### 1.3.0

 * Fix bugs and update dependencies

@@ -1389,7 +1456,7 @@ to `domain` rule.
 * Flush DNS cache for macOS when tun start/close
 * Fix tun's DNS hijacking compatibility with systemd-resolved

-#### 1.2.0
+### 1.2.0

 * Fix bugs and update dependencies

@@ -26,14 +26,14 @@ require (
 	github.com/sagernet/gvisor v0.0.0-20240428053021-e691de28565f
 	github.com/sagernet/quic-go v0.43.1-beta.1
 	github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691
-	github.com/sagernet/sing v0.4.0-beta.19
+	github.com/sagernet/sing v0.4.0-beta.20
 	github.com/sagernet/sing-dns v0.2.0-beta.18
 	github.com/sagernet/sing-mux v0.2.0
 	github.com/sagernet/sing-quic v0.2.0-beta.5
 	github.com/sagernet/sing-shadowsocks v0.2.6
 	github.com/sagernet/sing-shadowsocks2 v0.2.0
 	github.com/sagernet/sing-shadowtls v0.1.4
-	github.com/sagernet/sing-tun v0.3.0-beta.2
+	github.com/sagernet/sing-tun v0.3.0-beta.6
 	github.com/sagernet/sing-vmess v0.1.8
 	github.com/sagernet/smux v0.0.0-20231208180855-7041f6ea79e7
 	github.com/sagernet/tfo-go v0.0.0-20231209031829-7b5343ac1dc6
@@ -78,7 +78,7 @@ require (
 	github.com/pmezard/go-difflib v1.0.0 // indirect
 	github.com/quic-go/qpack v0.4.0 // indirect
 	github.com/quic-go/qtls-go1-20 v0.4.1 // indirect
-	github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97 // indirect
+	github.com/sagernet/netlink v0.0.0-20240523065131-45e60152f9ba // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/u-root/uio v0.0.0-20230220225925-ffce2a382923 // indirect
 	github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 // indirect
@@ -99,15 +99,15 @@ github.com/sagernet/gomobile v0.1.3 h1:ohjIb1Ou2+1558PnZour3od69suSuvkdSVOlO1tC4
 github.com/sagernet/gomobile v0.1.3/go.mod h1:Pqq2+ZVvs10U7xK+UwJgwYWUykewi8H6vlslAO73n9E=
 github.com/sagernet/gvisor v0.0.0-20240428053021-e691de28565f h1:NkhuupzH5ch7b/Y/6ZHJWrnNLoiNnSJaow6DPb8VW2I=
 github.com/sagernet/gvisor v0.0.0-20240428053021-e691de28565f/go.mod h1:KXmw+ouSJNOsuRpg4wgwwCQuunrGz4yoAqQjsLjc6N0=
-github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97 h1:iL5gZI3uFp0X6EslacyapiRz7LLSJyr4RajF/BhMVyE=
-github.com/sagernet/netlink v0.0.0-20220905062125-8043b4a9aa97/go.mod h1:xLnfdiJbSp8rNqYEdIW/6eDO4mVoogml14Bh2hSiFpM=
+github.com/sagernet/netlink v0.0.0-20240523065131-45e60152f9ba h1:EY5AS7CCtfmARNv2zXUOrsEMPFDGYxaw65JzA2p51Vk=
+github.com/sagernet/netlink v0.0.0-20240523065131-45e60152f9ba/go.mod h1:xLnfdiJbSp8rNqYEdIW/6eDO4mVoogml14Bh2hSiFpM=
 github.com/sagernet/quic-go v0.43.1-beta.1 h1:alizUjpvWYcz08dBCQsULOd+1xu0o7UtlyYf6SLbRNg=
 github.com/sagernet/quic-go v0.43.1-beta.1/go.mod h1:BkrQYeop7Jx3hN3TW8/76CXcdhYiNPyYEBL/BVJ1ifc=
 github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691 h1:5Th31OC6yj8byLGkEnIYp6grlXfo1QYUfiYFGjewIdc=
 github.com/sagernet/reality v0.0.0-20230406110435-ee17307e7691/go.mod h1:B8lp4WkQ1PwNnrVMM6KyuFR20pU8jYBD+A4EhJovEXU=
 github.com/sagernet/sing v0.2.18/go.mod h1:OL6k2F0vHmEzXz2KW19qQzu172FDgSbUSODylighuVo=
-github.com/sagernet/sing v0.4.0-beta.19 h1:Kzh2f6eaxt09S+bEL8F4Bgy03qkNf+4Tt8g7/5lxp/o=
-github.com/sagernet/sing v0.4.0-beta.19/go.mod h1:PFQKbElc2Pke7faBLv8oEba5ehtKO21Ho+TkYemTI3Y=
+github.com/sagernet/sing v0.4.0-beta.20 h1:8rEepj4LMcR0Wd389fJIziv/jr3MBtX5qXBHsfxJ+dY=
+github.com/sagernet/sing v0.4.0-beta.20/go.mod h1:PFQKbElc2Pke7faBLv8oEba5ehtKO21Ho+TkYemTI3Y=
 github.com/sagernet/sing-dns v0.2.0-beta.18 h1:6vzXZThRdA7YUzBOpSbUT48XRumtl/KIpIHFSOP0za8=
 github.com/sagernet/sing-dns v0.2.0-beta.18/go.mod h1:k/dmFcQpg6+m08gC1yQBy+13+QkuLqpKr4bIreq4U24=
 github.com/sagernet/sing-mux v0.2.0 h1:4C+vd8HztJCWNYfufvgL49xaOoOHXty2+EAjnzN3IYo=
@@ -120,8 +120,8 @@ github.com/sagernet/sing-shadowsocks2 v0.2.0 h1:wpZNs6wKnR7mh1wV9OHwOyUr21VkS3wK
 github.com/sagernet/sing-shadowsocks2 v0.2.0/go.mod h1:RnXS0lExcDAovvDeniJ4IKa2IuChrdipolPYWBv9hWQ=
 github.com/sagernet/sing-shadowtls v0.1.4 h1:aTgBSJEgnumzFenPvc+kbD9/W0PywzWevnVpEx6Tw3k=
 github.com/sagernet/sing-shadowtls v0.1.4/go.mod h1:F8NBgsY5YN2beQavdgdm1DPlhaKQlaL6lpDdcBglGK4=
-github.com/sagernet/sing-tun v0.3.0-beta.2 h1:sfeHWnBTKGpFUjXpT+O/JEwFP8oVAo3M0Xx94ghesjU=
-github.com/sagernet/sing-tun v0.3.0-beta.2/go.mod h1:xPaOkQhngPMILx+/9DMLCFl4vSxUU2tMnCPSlf05HLo=
+github.com/sagernet/sing-tun v0.3.0-beta.6 h1:L11kMrM7UfUW0pzQiU66Fffh4o86KZc1SFGbkYi8Ma8=
+github.com/sagernet/sing-tun v0.3.0-beta.6/go.mod h1:DxLIyhjWU/HwGYoX0vNGg2c5QgTQIakphU1MuERR5tQ=
 github.com/sagernet/sing-vmess v0.1.8 h1:XVWad1RpTy9b5tPxdm5MCU8cGfrTGdR8qCq6HV2aCNc=
 github.com/sagernet/sing-vmess v0.1.8/go.mod h1:vhx32UNzTDUkNwOyIjcZQohre1CaytquC5mPplId8uA=
 github.com/sagernet/smux v0.0.0-20231208180855-7041f6ea79e7 h1:DImB4lELfQhplLTxeq2z31Fpv8CQqqrUwTbrIRumZqQ=
Author	SHA1	Message	Date
世界	5ff7006326	Bump version	2024-05-25 11:30:43 +08:00
世界	a89107ea9d	documentation: Bump version	2024-05-23 14:57:45 +08:00
世界	9ffdbba2ed	documentation: Add manuel for mitigating tunnelvision attacks	2024-05-23 14:57:27 +08:00
世界	65c71049ea	documentation: Update DNS manual	2024-05-23 14:57:26 +08:00
世界	7d4e6a7f4e	dialer: Allow nil router	2024-05-23 14:57:26 +08:00
世界	d612620c5d	Add `rule-set match` command	2024-05-23 14:57:26 +08:00
世界	8a9a77a438	Add `bypass_domain` and `search_domain` platform HTTP proxy options	2024-05-23 14:57:26 +08:00
世界	a2098c18e1	Handle `includeAllNetworks`	2024-05-23 14:57:26 +08:00
世界	cf2181dd3a	Update gVisor to 20240422.0	2024-05-23 14:57:15 +08:00
世界	5899e95ff1	Update quic-go to v0.43.1	2024-05-21 15:12:05 +08:00
世界	d7160c19cf	Fixed order for Clash modes	2024-05-21 15:12:05 +08:00
世界	da9e22b4e6	Add custom prefix support in EDNS0 client subnet options	2024-05-21 15:12:05 +08:00
气息and世界	0e120f8a44	Fix DNS exchange index Signed-off-by: 气息 <qdshizh@gmail.com>	2024-05-21 15:12:05 +08:00
dyhkwongand世界	d918863ac5	Always disable cache for fake-ip servers	2024-05-21 15:12:04 +08:00
PuerNyaand世界	2ae192305c	Always disable cache for fake-ip DNS transport if `independent_cache` disabled	2024-05-21 15:12:03 +08:00
世界	71d1879bd6	Fix missing `rule_set_ipcidr_match_source` item in DNS rules	2024-05-21 15:12:03 +08:00
世界	917514e09f	Improve DNS truncate behavior	2024-05-21 15:12:03 +08:00
世界	5327aeaea4	Fix DNS fallthrough incorrectly	2024-05-21 15:12:03 +08:00
世界	93ae3f7a1e	Add rejected DNS response cache support	2024-05-21 15:12:03 +08:00
世界	f24a2aed7d	Add support for `client-subnet` DNS options	2024-05-21 15:12:03 +08:00
世界	0517ceef76	Add address filter support for DNS rules	2024-05-21 15:12:02 +08:00
世界	830ea46932	Fix timezone for Android and iOS	2024-05-21 15:11:52 +08:00
世界	cd0fcd5ddc	Improve loopback detector	2024-05-21 15:11:52 +08:00
世界	003176f069	Remove unused fakeip packet conn	2024-05-21 15:11:52 +08:00
世界	71d92518c1	Set the default TCP keep alive period	2024-05-21 15:11:52 +08:00
世界	b5dcd6bf59	Migrate ntp service to library	2024-05-21 15:11:52 +08:00
世界	11c7b4a866	Handle Windows power events	2024-05-21 15:11:52 +08:00
世界	ee14135298	Improve domain suffix match behavior For historical reasons, sing-box's `domain_suffix` rule matches literal prefixes instead of the same as other projects. This change modifies the behavior of `domain_suffix`: If the rule value is prefixed with `.`, the behavior is unchanged, otherwise it matches `(domain\|.+\.domain)` instead.	2024-05-21 15:11:41 +08:00