dan9i10/xray-core
1
0
Fork 0
mirror of https://github.com/XTLS/Xray-core.git synced 2026-05-08 14:13:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,703 Commits 65 Branches 125 Tags
6a909b2507643fe6761ca82b25713907b577ec65
Commit Graph

141 Commits

Author SHA1 Message Date
LjhAUMEM
6a909b2507 Proxy: Add Hysteria 2 inbound & transport (supports listening port range, Salamander finalmask) (#5679) 
https://github.com/XTLS/Xray-core/pull/5679#issuecomment-3888548778

Closes https://github.com/XTLS/Xray-core/issues/5605
 2026-02-12 14:56:06 +00:00
风扇滑翔翼
74c726ff62 Commands: Print CA cert's SHA256 in tls ping (#5644) 
And https://github.com/XTLS/Xray-core/issues/5642#issuecomment-3840806246

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-02-03 21:03:48 +00:00
LjhAUMEM
25d16914ff Finalmask: Add XICMP (relies mKCP/QUIC or WireGuard) (#5633) 
https://t.me/projectXtls/1473
 2026-02-02 09:12:42 +00:00
Dmitrii Makhno
a6ec3b6e70 XHTTP transport: Fix "auto" mode with REALITY (#5638) 
Fixes https://github.com/XTLS/Xray-core/issues/5635

BTW, fixes https://github.com/XTLS/Xray-core/issues/5631
 2026-02-02 08:07:45 +00:00
LjhAUMEM
c180c5980c Finalmask: Add XDNS (relies mKCP, like DNSTT), header-*, mkcp-* (#5560) 
And https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3825430761
 2026-01-31 13:53:19 +00:00
Dmitrii Makhno
5b849d51a9 XHTTP transport: New options for bypassing CDN's detection (#5414) 
Usage: https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3770071786

Closes https://github.com/XTLS/Xray-core/issues/4346

---------

Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
 2026-01-31 13:34:13 +00:00
风扇滑翔翼
afcfdbca70 Commands: Print leaf cert's SHA256 in tls ping (#5628) 
And https://github.com/XTLS/Xray-core/pull/5628#issuecomment-3828445442

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-31 13:11:36 +00:00
RPRX
2c92339f95 TLS config: allowInsecure->pinnedPeerCertSha256; verifyPeerCertInNames->verifyPeerCertByName 
And use `,` as the separator instead of `~`/array

https://github.com/XTLS/Xray-core/pull/5567#issuecomment-3766081805
https://t.me/projectXtls/1464
https://t.me/projectXtls/1465
https://t.me/projectXtls/1466
https://github.com/XTLS/Xray-core/pull/5625#issuecomment-3824855736
 2026-01-31 09:32:51 +00:00
LjhAUMEM
f1aee0b7c5 Hysteria transport: Support range & random for interval in udphop as well (#5603) 
https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3794621260
 2026-01-25 18:28:51 +00:00
𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇
cd8aab9544 common/errors/feature_errors.go: Add PrintNonRemovalDeprecatedFeatureWarning() (#5567) 
And https://github.com/XTLS/Xray-core/pull/5567#issuecomment-3765466219

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-23 15:45:20 +00:00
RPRX
5836f36f69 Config: Add Warning for deprecated features (allowInsecure, Shadowsocks, VMess, Trojan, VLESS without flow) 
Accelerate!
 2026-01-18 04:17:25 +00:00
LjhAUMEM
cfc78b3ac1 Hysteria transport: Add congestion config (""/"reno"/"bbr"/"brutal"/"force-brutal") (#5549) 
Closes https://github.com/XTLS/Xray-core/issues/5546
 2026-01-17 13:29:50 +00:00
LjhAUMEM
649e989fa2 Hysteria: Fix transport's "udphop without salamander" dialing issue; Require "version": 2 in outbound's settings as well (#5537) 
Updated example: https://github.com/XTLS/Xray-core/pull/5508#issue-3795798712
 2026-01-14 10:42:07 +00:00
LjhAUMEM
92ada2dd1d Proxy: Add Hysteria outbound & transport (version 2, udphop) and Salamander udpmask (#5508) 
https://github.com/XTLS/Xray-core/issues/3547#issuecomment-3549896520
https://github.com/XTLS/Xray-core/issues/2635#issuecomment-3570871754
 2026-01-13 13:31:51 +00:00
风扇滑翔翼
0ca13452b8 TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 (#5154) 
Usage: https://github.com/XTLS/Xray-core/pull/5507

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2026-01-09 00:11:24 +00:00
RPRX
2969a189e6 Sockopt config: Add trustedXForwardedFor (for XHTTP, WS, HU inbounds) (#5331) 
Fixes https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3404979909
 2025-11-23 01:09:49 +00:00
RPRX
1a32d18c16 REALITY config: Return error when short id is too long (#5276) 
Closes https://github.com/XTLS/Xray-core/issues/5273

---------

Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
 2025-11-19 03:25:32 +00:00
RPRX
9cc7907234 XHTTP client: Change default maxConcurrency to 1 for speed testing 
https://t.me/projectXray/4386271
 2025-10-14 23:33:06 +00:00
风扇滑翔翼
7cbf5b004c TLS ECH client: echForceQuery "full" / "half" / "none" (default) (#4973) 
https://github.com/XTLS/Xray-core/pull/4971#issuecomment-3148113203
 2025-08-03 10:15:42 +00:00
patterniha
a02723e63f TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and echSockopt; Fix some issues (#4949) 
Completes https://github.com/XTLS/Xray-core/pull/3813
 2025-08-02 16:05:00 +00:00
风扇滑翔翼
b2829219a0 TLS ECH client: Add echForceQuery config (#4947) 
https://github.com/XTLS/Xray-core/pull/4947#issuecomment-3124359776
 2025-08-01 11:25:15 +00:00
风扇滑翔翼
fb7a9d8d61 TLS client & server: Support Encrypted Client Hello (ECH) (#3813) 
b9a72a4a26

---------

Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com>
 2025-07-26 08:47:27 +00:00
RPRX
5f93ff6c3a REALITY config: mldsa65Seed and privateKey can not be the same value 
Otherwise the point of using ML-DSA-65 is lost.
 2025-07-26 08:36:58 +00:00
RPRX
31b508d372 REALITY config: Convert mldsa65Seed to its private key later 2025-07-24 01:31:07 +00:00
风扇滑翔翼
955a569181 REALITY config: Allow mldsa65 fields to be empty (#4924) 2025-07-24 01:15:48 +00:00
RPRX
446315cf1f REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions (#4915) 
00881f6740
 2025-07-23 02:29:11 +00:00
xqzr
abd551e9f7 VLESS fallbacks: dest defaults to "127.0.0.1" -> "localhost" (#4840) 
https://github.com/XTLS/Xray-examples/issues/234#issuecomment-3091319391
 2025-07-19 00:47:43 +00:00
Meow
18ab291e0c REALITY: Add rate limiting to fallback handling via token bucket (#4553) 
https://github.com/XTLS/REALITY/pull/12
 2025-06-08 13:43:55 +00:00
patterniha
97fdcb4228 New feature: Happy Eyeballs (RFC 8305) (#4667) 
Closes https://github.com/XTLS/Xray-core/issues/4473
 2025-06-07 13:20:06 +00:00
风扇滑翔翼
5f3ae64f0c Sockopt: Allow customSockopt work for Windows & Darwin (#4576) 
* Sockopt: Add custom sockopt on Windows & Darwin

* fix windows udp by the way

* use resolved addr

https://github.com/XTLS/Xray-core/pull/4504#issuecomment-2769153797
 2025-04-18 02:30:47 +00:00
patterniha
2d3210e4b8 Env: Add XRAY_LOCATION_CERT variable (#4536) 
https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941

Fixes https://github.com/XTLS/Xray-core/issues/4531

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2025-03-24 13:02:35 +00:00
风扇滑翔翼
b585b26f29 Sockopt: Fix Windows UDP interface bind; Allow customSockopt work for UDP (#4504) 2025-03-21 10:48:46 +00:00
RPRX
dde0a4f272 REALITY config: Add password as an alias of publicKey 
https://github.com/XTLS/Xray-core/issues/4458#issuecomment-2696181682
 2025-03-04 05:29:03 +00:00
j3l11234
b9cb93d3c2 Sockopt: Add addressPortStrategy (query SRV or TXT) (#4416) 
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
 2025-03-02 13:07:55 +00:00
RPRX
d4c7cd02fd MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in verifyPeerCertInNames, Add checking for alpn "fromMitm" 
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
 2025-02-08 12:11:25 +00:00
RPRX
c6a31f457c MITM: Allow using local received SNI in the outgoing serverName & verifyPeerCertInNames 
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175

Local received SNI was sent by browser/app.

In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.

In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
 2025-02-06 07:37:30 +00:00
RPRX
2522cfd7be DNS DoH: Add h2c Remote mode (with TLS serverNameToVerify) 
https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864

Applies https://github.com/refraction-networking/utls/pull/161

Closes https://github.com/XTLS/Xray-core/issues/4313
 2025-01-25 10:51:44 +00:00
RPRX
ca9a902213 XHTTP server: Add scStreamUpServerSecs, enabled by default (#4306) 
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11682833
 2025-01-19 13:32:07 +00:00
RPRX
369d8944cf Sockopt config: Add penetrate for XHTTP U-D-S, Remove tcpNoDelay 
Now `sockopt` can be shared via `extra`, and be replaced with upload's forcibly.

Closes https://github.com/XTLS/Xray-core/issues/4227
 2024-12-31 11:10:17 +00:00
RPRX
4ce65fc74c XHTTP XMUX: cMaxLifetimeMs -> hMaxReusableSecs, Refactor default values 
"xmux": {
    "maxConcurrency": "16-32",
    "maxConnections": 0,
    "cMaxReuseTimes": 0,
    "hMaxRequestTimes": "600-900",
    "hMaxReusableSecs": "1800-3000",
    "hKeepAlivePeriod": 0
}

Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11685057
 2024-12-31 10:00:19 +00:00
RPRX
ff4331a7a8 XHTTP XMUX: Increase the default value for cMaxReuseTimes 
"64-128" -> "256-512"
 2024-12-28 08:20:59 +00:00
RPRX
96fb680d45 REALITY, TLS config: Set "chrome" as the default fingerprint 
Other VLESS implementations should follow this change.
 2024-12-17 11:02:51 +00:00
珐琅彩山水佩奇童车游春马蹄杯
5836afc41f WebSocket config: Fix headers (#4177) 
Fixes https://github.com/XTLS/Xray-core/issues/4176
 2024-12-17 08:53:16 +00:00
RPRX
73e0d4a666 XHTTP XMUX: Add hMaxRequestTimes and hKeepAlivePeriod (#4163) 
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11492833
 2024-12-15 05:43:10 +00:00
RPRX
8cd9a74376 XHTTP client: Refactor "packet-up" mode, chasing "stream-up" (#4150) 
* Add wroteRequest (waiting for new quic-go)

* Use XTLS/quic-go instead

* Client doesn't need `scMaxConcurrentPosts` anymore

* GotConn is available in H3

* `scMaxConcurrentPosts` -> `scMaxBufferedPosts` (server only, 30 by default)

Fixes https://github.com/XTLS/Xray-core/issues/4100
 2024-12-11 14:05:39 +00:00
RPRX
a2b773135a XHTTP, WS, HU: Forbid "host" in headers, read serverName instead (#4142) 
WebSocket's config files should be updated ASAP.
 2024-12-11 00:58:14 +00:00
RPRX
ae62a0fb52 Transport: Remove HTTP 
Migrated to XHTTP "stream-one" mode.
 2024-12-02 09:56:16 +00:00
hr567
4f6f12616c WebSocket config: Add heartbeatPeriod for client & server (#4065) 
https://github.com/XTLS/Xray-core/pull/4065#issuecomment-2502627154

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2024-11-29 02:08:08 +00:00
风扇滑翔翼
c87cf8ff52 XHTTP config: Add keepAlivePeriod for client (#4075) 
Closes https://github.com/XTLS/Xray-core/issues/4053

---------

Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>
 2024-11-29 02:05:11 +00:00
RPRX
f7bd98b13c XHTTP: Add "stream-one" mode for client & server (#4071) 
""Breaking"": Client uses "stream-one" mode by default when using **REALITY** ("stream-up" if "downloadSettings" exists)
 2024-11-27 20:19:18 +00:00