d4c7cd02fd
MITM freedom RAW TLS: Allow "fromMitm" to be written at any position in verifyPeerCertInNames, Add checking for alpn "fromMitm"
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2643340434
2025-02-08 12:11:25 +00:00
c6a31f457c
MITM: Allow using local received SNI in the outgoing serverName & verifyPeerCertInNames
...
https://github.com/XTLS/Xray-core/issues/4348#issuecomment-2637370175
Local received SNI was sent by browser/app.
In freedom RAW's `tlsSettings`, set `"serverName": "fromMitm"` to forward it to the real website.
In freedom RAW's `tlsSettings`, set `"verifyPeerCertInNames": ["fromMitm"]` to use all possible names to verify the certificate.
2025-02-06 07:37:30 +00:00
2522cfd7be
DNS DoH: Add h2c Remote mode (with TLS serverNameToVerify)
...
https://github.com/XTLS/Xray-core/issues/4313#issuecomment-2609339864
Applies https://github.com/refraction-networking/utls/pull/161
Closes https://github.com/XTLS/Xray-core/issues/4313
2025-01-25 10:51:44 +00:00
ca9a902213
XHTTP server: Add scStreamUpServerSecs, enabled by default ( #4306 )
...
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11682833
2025-01-19 13:32:07 +00:00
2f52aa7ed8
Freedom noises: Support RawURLEncoding for "base64"
...
In case we want to share `noises` via sharing link.
2025-01-02 09:45:46 +00:00
ca50c9cbe6
Freedom noises: Support "hex" as type & packet ( #4239 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-01-02 09:17:03 +00:00
33186ca5e6
Freedom noises: Change legacy variable name ( #4238 )
...
Closes https://github.com/XTLS/Xray-core/issues/4237
2025-01-02 08:21:32 +00:00
0658c9545b
Freedom config: Fix noises delay ( #4233 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2025-01-01 11:49:08 +00:00
480eac7235
Config: Correctly marshal Int32Range to JSON ( #4234 )
...
Fixes https://github.com/XTLS/libXray/issues/62
2025-01-01 10:29:34 +00:00
5af90684c4
Inbounds config: Add mixed as an alias of socks
...
https://github.com/XTLS/Xray-core/pull/3682#issuecomment-2292600144
2024-12-31 11:55:16 +00:00
369d8944cf
Sockopt config: Add penetrate for XHTTP U-D-S, Remove tcpNoDelay
...
Now `sockopt` can be shared via `extra`, and be replaced with upload's forcibly.
Closes https://github.com/XTLS/Xray-core/issues/4227
2024-12-31 11:10:17 +00:00
4ce65fc74c
XHTTP XMUX: cMaxLifetimeMs -> hMaxReusableSecs, Refactor default values
...
"xmux": {
"maxConcurrency": "16-32",
"maxConnections": 0,
"cMaxReuseTimes": 0,
"hMaxRequestTimes": "600-900",
"hMaxReusableSecs": "1800-3000",
"hKeepAlivePeriod": 0
}
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11685057
2024-12-31 10:00:19 +00:00
ff4331a7a8
XHTTP XMUX: Increase the default value for cMaxReuseTimes
...
"64-128" -> "256-512"
2024-12-28 08:20:59 +00:00
b287d6419b
chore: use errors.New to replace fmt.Errorf with no parameters ( #4204 )
...
Signed-off-by: RiceChuan <lc582041246@gmail.com >
2024-12-24 00:17:00 -05:00
96fb680d45
REALITY, TLS config: Set "chrome" as the default fingerprint
...
Other VLESS implementations should follow this change.
2024-12-17 11:02:51 +00:00
5836afc41f
WebSocket config: Fix headers ( #4177 )
...
Fixes https://github.com/XTLS/Xray-core/issues/4176
2024-12-17 08:53:16 +00:00
73e0d4a666
XHTTP XMUX: Add hMaxRequestTimes and hKeepAlivePeriod ( #4163 )
...
Fixes https://github.com/XTLS/Xray-core/discussions/4113#discussioncomment-11492833
2024-12-15 05:43:10 +00:00
8cd9a74376
XHTTP client: Refactor "packet-up" mode, chasing "stream-up" ( #4150 )
...
* Add wroteRequest (waiting for new quic-go)
* Use XTLS/quic-go instead
* Client doesn't need `scMaxConcurrentPosts` anymore
* GotConn is available in H3
* `scMaxConcurrentPosts` -> `scMaxBufferedPosts` (server only, 30 by default)
Fixes https://github.com/XTLS/Xray-core/issues/4100
2024-12-11 14:05:39 +00:00
a2b773135a
XHTTP, WS, HU: Forbid "host" in headers, read serverName instead ( #4142 )
...
WebSocket's config files should be updated ASAP.
2024-12-11 00:58:14 +00:00
ae62a0fb52
Transport: Remove HTTP
...
Migrated to XHTTP "stream-one" mode.
2024-12-02 09:56:16 +00:00
4f6f12616c
WebSocket config: Add heartbeatPeriod for client & server ( #4065 )
...
https://github.com/XTLS/Xray-core/pull/4065#issuecomment-2502627154
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-29 02:08:08 +00:00
c87cf8ff52
XHTTP config: Add keepAlivePeriod for client ( #4075 )
...
Closes https://github.com/XTLS/Xray-core/issues/4053
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-29 02:05:11 +00:00
f7bd98b13c
XHTTP: Add "stream-one" mode for client & server ( #4071 )
...
""Breaking"": Client uses "stream-one" mode by default when using **REALITY** ("stream-up" if "downloadSettings" exists)
2024-11-27 20:19:18 +00:00
817fa72874
XHTTP client: Add gRPC header to "stream-up" mode by default ( #4042 )
...
""Breaking"": Client uses "stream-up" mode by default when using **TLS H2** or REALITY
2024-11-21 05:45:49 +00:00
55e045d098
Config: Correctly marshal Address to JSON ( #4021 )
2024-11-19 03:18:47 +00:00
ec1fd008c4
Chore: Refactor infra/conf.TestToCidrList() ( #4017 )
2024-11-14 11:04:17 -05:00
83ae38497b
Chore: Drop dead code in test ( #4012 )
2024-11-13 10:41:54 -05:00
571777483b
TLS: Add CurvePreferences (to enable kyber768) ( #3991 )
...
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-11-11 04:21:28 +00:00
bd0841a75b
XHTTP config: Add "extra" for sharing extra fields ( #4000 )
2024-11-11 02:50:39 +00:00
83bab5dd90
Chore: Run gofmt ( #3990 )
2024-11-09 11:16:11 +00:00
bc4bf3d38f
XHTTP: Add "stream-up" mode for client & server ( #3994 )
2024-11-09 11:05:41 +00:00
71cfea8aae
Chore: Fix some spelling errors ( #3976 )
2024-11-06 10:42:43 -05:00
2c72864935
API: Add user online stats ( #3637 )
...
* add statsUserOnline bool to policy
* add OnlineMap struct to stats
* apply UserOnline functionality to dispatcher
* add statsonline api command
* fix comments
* Update app/stats/online_map.go
Co-authored-by: mmmray <142015632+mmmray@users.noreply.github.com >
* improve AddIP
* regenerate pb
---------
Co-authored-by: mmmray <142015632+mmmray@users.noreply.github.com >
2024-11-03 08:44:15 -05:00
85a1c33709
API: Add new Get Inbound User ( #3644 )
...
* Add GetInboundUser in proto
* Add get user logic for all existing inbounds
* Add inbounduser command
* Add option to get all users
* Fix shadowsocks2022 config
* Fix init users in shadowsocks2022
* Fix copy
* Add inbound user count command
This api costs much less than get inbound user, could be useful in some case
* Update from latest main
2024-11-03 00:25:23 -04:00
b30e05d1bc
XHTTP: The real upload / download splitting ( #3955 )
...
* SplitHTTP client: Add real upload / download splitting
* Transport: Add XHTTP as an alias of SplitHTTP
* XHTTP config: Use `downloadSettings` instead
2024-10-31 07:31:19 +00:00
e733148c0b
REALITY: Unblock SplitHTTP transport ( #3816 )
...
https://github.com/XTLS/Xray-core/pull/3816#issuecomment-2445694775
2024-10-30 02:31:05 +00:00
e4939dc1db
Config: Prefer newer alias (REALITY target, RAW)
2024-10-18 02:18:06 +00:00
8809cbda81
Transport: Remove GUN (an alias of gRPC)
2024-10-18 01:17:13 +00:00
9bdf72d658
WireGuard config: Replace kernelMode with noKernelTun
...
https://github.com/XTLS/Xray-core/pull/3871#issuecomment-2420770309
2024-10-18 00:10:09 +00:00
897521defd
XMUX: Change to non-infinity-reuse default values ( #3919 )
2024-10-16 03:47:41 +00:00
82bd5f3046
Refactor: Use struct Int32Range widely ( #3867 )
...
https://github.com/XTLS/Xray-core/pull/3867#issuecomment-2412847316
2024-10-15 04:12:17 +00:00
19f3f709b2
WireGuard kernelTun: Check Capabilities instead of checking UID ( #3871 )
...
https://github.com/XTLS/Xray-core/pull/3871#issuecomment-2412820323
---------
Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com >
2024-10-15 03:30:29 +00:00
75729ce779
REALITY config: Add target as an alias of dest
...
https://t.me/projectXtls/364
2024-10-05 00:13:46 +00:00
697156f6f6
SplitHTTP Config: Add capability to parse int in string format ( #3855 )
...
“100” → 100
“-1” → -1
“” → 0
2024-09-29 03:10:42 +08:00
d8485bd5af
Transport: Add RAW as an alias of TCP ( #3852 )
2024-09-28 05:25:59 +00:00
3632e83faa
Transport: Add HTTP3 to HTTP ( #3819 )
2024-09-26 01:29:41 +00:00
7086d286be
Remove legacy code ( #3838 )
...
* Add feature migration notice
* Remove legacy code of transport processing
* Clear legacy proto field
* Fix missing
* Unify protocolname
* Test remove
* Supressor
* Weird code
* Remove errorgen related comments
2024-09-23 11:28:19 -04:00
93cff1a576
Xmux: Value of 0 is treated the same as no value ( #3835 )
...
It turns out that some panels like to set `"xmux": {"maxConnections": 0,
"maxConcurrency": 0}`, and of course that fails now. To make their job
easier, let's treat `0` the same as not setting the parameter.
Again, I don't like that xray's defaults are hardcoded all over the
place. I would have liked a different default value for Xmux in a future
version, but it actually can't be done in practice because everybody
just copypastes the defaults from the docs into their own sourcecode
(and sometimes changes them silently to their own idea of a good
default)
2024-09-19 11:20:12 -04:00
57a41f3b4b
Config: Remove more legacy fields ( #3817 )
2024-09-19 01:05:59 +00:00
f406b2dee0
SplitHTTP client: Fix xmux config deserialization ( #3827 )
2024-09-19 00:45:39 +00:00
