LjhAUMEM
92ada2dd1d
Proxy: Add Hysteria outbound & transport (version 2, udphop) and Salamander udpmask ( #5508 )
...
https://github.com/XTLS/Xray-core/issues/3547#issuecomment-3549896520
https://github.com/XTLS/Xray-core/issues/2635#issuecomment-3570871754
2026-01-13 13:31:51 +00:00
风扇滑翔翼
0ca13452b8
TLS config: Add pinnedPeerCertSha256; Remove pinnedPeerCertificateChainSha256 and pinnedPeerCertificatePublicKeySha256 ( #5154 )
...
Usage: https://github.com/XTLS/Xray-core/pull/5507
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2026-01-09 00:11:24 +00:00
RPRX
2969a189e6
Sockopt config: Add trustedXForwardedFor (for XHTTP, WS, HU inbounds) ( #5331 )
...
Fixes https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3404979909
2025-11-23 01:09:49 +00:00
RPRX
1a32d18c16
REALITY config: Return error when short id is too long ( #5276 )
...
Closes https://github.com/XTLS/Xray-core/issues/5273
---------
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-11-19 03:25:32 +00:00
RPRX
9cc7907234
XHTTP client: Change default maxConcurrency to 1 for speed testing
...
https://t.me/projectXray/4386271
2025-10-14 23:33:06 +00:00
风扇滑翔翼
7cbf5b004c
TLS ECH client: echForceQuery "full" / "half" / "none" (default) ( #4973 )
...
https://github.com/XTLS/Xray-core/pull/4971#issuecomment-3148113203
2025-08-03 10:15:42 +00:00
patterniha
a02723e63f
TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and echSockopt; Fix some issues ( #4949 )
...
Completes https://github.com/XTLS/Xray-core/pull/3813
2025-08-02 16:05:00 +00:00
风扇滑翔翼
b2829219a0
TLS ECH client: Add echForceQuery config ( #4947 )
...
https://github.com/XTLS/Xray-core/pull/4947#issuecomment-3124359776
2025-08-01 11:25:15 +00:00
风扇滑翔翼
fb7a9d8d61
TLS client & server: Support Encrypted Client Hello (ECH) ( #3813 )
...
b9a72a4a26
---------
Co-authored-by: yuhan6665 <1588741+yuhan6665@users.noreply.github.com >
2025-07-26 08:47:27 +00:00
RPRX
5f93ff6c3a
REALITY config: mldsa65Seed and privateKey can not be the same value
...
Otherwise the point of using ML-DSA-65 is lost.
2025-07-26 08:36:58 +00:00
RPRX
31b508d372
REALITY config: Convert mldsa65Seed to its private key later
2025-07-24 01:31:07 +00:00
风扇滑翔翼
955a569181
REALITY config: Allow mldsa65 fields to be empty ( #4924 )
2025-07-24 01:15:48 +00:00
RPRX
446315cf1f
REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions ( #4915 )
...
00881f6740
2025-07-23 02:29:11 +00:00
xqzr
abd551e9f7
VLESS fallbacks: dest defaults to "127.0.0.1" -> "localhost" ( #4840 )
...
https://github.com/XTLS/Xray-examples/issues/234#issuecomment-3091319391
2025-07-19 00:47:43 +00:00
Meow
18ab291e0c
REALITY: Add rate limiting to fallback handling via token bucket ( #4553 )
...
https://github.com/XTLS/REALITY/pull/12
2025-06-08 13:43:55 +00:00
patterniha
97fdcb4228
New feature: Happy Eyeballs (RFC 8305) ( #4667 )
...
Closes https://github.com/XTLS/Xray-core/issues/4473
2025-06-07 13:20:06 +00:00
风扇滑翔翼
5f3ae64f0c
Sockopt: Allow customSockopt work for Windows & Darwin ( #4576 )
...
* Sockopt: Add custom sockopt on Windows & Darwin
* fix windows udp by the way
* use resolved addr
https://github.com/XTLS/Xray-core/pull/4504#issuecomment-2769153797
2025-04-18 02:30:47 +00:00
patterniha
2d3210e4b8
Env: Add XRAY_LOCATION_CERT variable ( #4536 )
...
https://github.com/XTLS/Xray-core/issues/4531#issuecomment-2746155941
Fixes https://github.com/XTLS/Xray-core/issues/4531
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-03-24 13:02:35 +00:00
风扇滑翔翼
b585b26f29
Sockopt: Fix Windows UDP interface bind; Allow customSockopt work for UDP ( #4504 )
2025-03-21 10:48:46 +00:00
RPRX
dde0a4f272
REALITY config: Add password as an alias of publicKey
...
https://github.com/XTLS/Xray-core/issues/4458#issuecomment-2696181682
2025-03-04 05:29:03 +00:00
j3l11234
b9cb93d3c2
Sockopt: Add addressPortStrategy (query SRV or TXT) ( #4416 )
...
Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com >
2025-03-02 13:07:55 +00:00
RPRX
d4c7cd02fd
MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in verifyPeerCertInNames, Add checking for alpn "fromMitm"
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
2025-02-08 12:11:25 +00:00
RPRX
c6a31f457c
MITM: Allow using local received SNI in the outgoing serverName & verifyPeerCertInNames
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
RPRX
2522cfd7be
DNS DoH: Add h2c Remote mode (with TLS serverNameToVerify)
...
https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864
Applies https://github.com/refraction-networking/utls/pull/161
Closes https://github.com/XTLS/Xray-core/issues/4313
2025-01-25 10:51:44 +00:00
RPRX
ca9a902213
XHTTP server: Add scStreamUpServerSecs, enabled by default ( #4306 )
...
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11682833
2025-01-19 13:32:07 +00:00
RPRX
369d8944cf
Sockopt config: Add penetrate for XHTTP U-D-S, Remove tcpNoDelay
...
Now `sockopt` can be shared via `extra`, and be replaced with upload's forcibly.
Closes https://github.com/XTLS/Xray-core/issues/4227
2024-12-31 11:10:17 +00:00
RPRX
4ce65fc74c
XHTTP XMUX: cMaxLifetimeMs -> hMaxReusableSecs, Refactor default values
...
"xmux": {
"maxConcurrency": "16-32",
"maxConnections": 0,
"cMaxReuseTimes": 0,
"hMaxRequestTimes": "600-900",
"hMaxReusableSecs": "1800-3000",
"hKeepAlivePeriod": 0
}
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11685057
2024-12-31 10:00:19 +00:00
RPRX
ff4331a7a8
XHTTP XMUX: Increase the default value for cMaxReuseTimes
...
"64-128" -> "256-512"
2024-12-28 08:20:59 +00:00
RPRX
96fb680d45
REALITY, TLS config: Set "chrome" as the default fingerprint
...
Other VLESS implementations should follow this change.
2024-12-17 11:02:51 +00:00
珐琅彩山水佩奇童车游春马蹄杯
5836afc41f
WebSocket config: Fix headers ( #4177 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4176
2024-12-17 08:53:16 +00:00
RPRX
73e0d4a666
XHTTP XMUX: Add hMaxRequestTimes and hKeepAlivePeriod ( #4163 )
...
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11492833
2024-12-15 05:43:10 +00:00
RPRX
8cd9a74376
XHTTP client: Refactor "packet-up" mode, chasing "stream-up" ( #4150 )
...
* Add wroteRequest (waiting for new quic-go)
* Use XTLS/quic-go instead
* Client doesn't need `scMaxConcurrentPosts` anymore
* GotConn is available in H3
* `scMaxConcurrentPosts` -> `scMaxBufferedPosts` (server only, 30 by default)
Fixes https://github.com/XTLS/Xray-core/issues/4100
2024-12-11 14:05:39 +00:00
RPRX
a2b773135a
XHTTP, WS, HU: Forbid "host" in headers, read serverName instead ( #4142 )
...
WebSocket's config files should be updated ASAP.
2024-12-11 00:58:14 +00:00
RPRX
ae62a0fb52
Transport: Remove HTTP
...
Migrated to XHTTP "stream-one" mode.
2024-12-02 09:56:16 +00:00
hr567
4f6f12616c
WebSocket config: Add heartbeatPeriod for client & server ( #4065 )
...
https://github.com/XTLS/Xray-core/pull/4065#issuecomment-2502627154
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-29 02:08:08 +00:00
风扇滑翔翼
c87cf8ff52
XHTTP config: Add keepAlivePeriod for client ( #4075 )
...
Closes https://github.com/XTLS/Xray-core/issues/4053
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-29 02:05:11 +00:00
RPRX
f7bd98b13c
XHTTP: Add "stream-one" mode for client & server ( #4071 )
...
""Breaking"": Client uses "stream-one" mode by default when using **REALITY** ("stream-up" if "downloadSettings" exists)
2024-11-27 20:19:18 +00:00
RPRX
817fa72874
XHTTP client: Add gRPC header to "stream-up" mode by default ( #4042 )
...
""Breaking"": Client uses "stream-up" mode by default when using **TLS H2** or REALITY
2024-11-21 05:45:49 +00:00
风扇滑翔翼
571777483b
TLS: Add CurvePreferences (to enable kyber768) ( #3991 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-11 04:21:28 +00:00
RPRX
bd0841a75b
XHTTP config: Add "extra" for sharing extra fields ( #4000 )
2024-11-11 02:50:39 +00:00
RPRX
bc4bf3d38f
XHTTP: Add "stream-up" mode for client & server ( #3994 )
2024-11-09 11:05:41 +00:00
zonescape
71cfea8aae
Chore: Fix some spelling errors ( #3976 )
2024-11-06 10:42:43 -05:00
RPRX
b30e05d1bc
XHTTP: The real upload / download splitting ( #3955 )
...
* SplitHTTP client: Add real upload / download splitting
* Transport: Add XHTTP as an alias of SplitHTTP
* XHTTP config: Use `downloadSettings` instead
2024-10-31 07:31:19 +00:00
mmmray
e733148c0b
REALITY: Unblock SplitHTTP transport ( #3816 )
...
https://github.com/XTLS/Xray-core/pull/3816#issuecomment-2445694775
2024-10-30 02:31:05 +00:00
RPRX
e4939dc1db
Config: Prefer newer alias (REALITY target, RAW)
2024-10-18 02:18:06 +00:00
RPRX
8809cbda81
Transport: Remove GUN (an alias of gRPC)
2024-10-18 01:17:13 +00:00
RPRX
897521defd
XMUX: Change to non-infinity-reuse default values ( #3919 )
2024-10-16 03:47:41 +00:00
RPRX
75729ce779
REALITY config: Add target as an alias of dest
...
https://t.me/projectXtls/364
2024-10-05 00:13:46 +00:00
RPRX
d8485bd5af
Transport: Add RAW as an alias of TCP ( #3852 )
2024-09-28 05:25:59 +00:00
yuhan6665
3632e83faa
Transport: Add HTTP3 to HTTP ( #3819 )
2024-09-26 01:29:41 +00:00