v3.2.0

v3.2.0 (Pre-release)

This is an experimental release that test the stability of the followings

• Plugin forwarding API
• New dpcore concurrent settings
• New webmin embed web resources router

This version also updated some of the dark theme color scheme and optimized a bit of the code architecture that has been designed back in the days when Zoraxy is less complex. Now the webmin panel should load much faster compare to previous versions with an improved dpcore that can better handle concurrent load with up to 256 max concurrent connections per host.

The homepage also got a bit update as well to support multi-language with a better color scheme.

Change Log

• Removed GAN and moved to plugin
• Added upnp port forwarder plugin
• Added loopback detection to whitelist
• Optimized embed web resources router implementation
• Completed plugin prototype interface
• Updated dpcore concurrent implementation
• Merged traffic log update
• Updated homepage
• Fixed memory leak on netstat
• Fixed and updated minor dark theme color pallets

v3.1.9

v3.1.9

This release fixes a few bugs and introduce a new plugin system prototype. Currently it only support Utilities type plugins (i.e. plugins that do not manage routing), but in the coming versions I will be adding in more routing capabilities to the plugin interface where custom route-able modules like custom ACME manager and scripting controlled routing rules can be implemented by 3rd parities developers.

You can find some of the utilities plugin example in the example folder.

Deprecate Notice

ZeroTier / Global Area Network controller will be moved to plugin in v3.2.x release (Things you might not know: I got quite some users complaining they don't use zerotier and asking for a way to remove it). Please remember to backup all your GAN assigned devices name before migrating to the ztnc plugin. The ztnc plugin works the same as the original Global Area Network tab but with a "disable" button in the plugin menu where you can unload it if needed.

Change Log

• Fixed netstat underflow bug
• Fixed origin picker cookie bug
• Added prototype plugin system
• Added plugin examples
• Added notice for build-in Zerotier network controller deprecation (and will be moved to plugins)
• Added country code display for quickban list

v3.1.8

v3.1.8

This releases fixes the docker ssh bug as well as a few minor improvements including exposing the dpcore timeout value to the UI.
If you want to further increase the concurrent connection counts to your upstream server, you can also change such setting under HTTP Proxy Rule > Upstreams > Max Concurrent Connections.

Note: The bandwidth between your gateway and upstream servers are fixed. More concurrent connection doesn't directly translate to faster proxy speed. As this setting is really use-case dependent, you can keep it as default if you do not what value to use.

Change Log

• Exposed timeout value from dpcore to UI
• Added active load balancing (if uptime monitor is enabled on that rule)
• Re-factorized io stats and remove dependencies over wmic (by @eyerrock )
• Removed SMTP input validation
• Fixed sticky session bug
• Fixed passive load balancer bug
• Fixed dockerfile bug (by @PassiveLemon )

v3.1.7

v3.1.7

This release updated the dark theme color palettes to make it less dark. New updates include details viewing for uptime monitor and a few minor features. @adoolaard also introduced a new tag system for managing HTTP proxy rules in #509

Change Log

• Merged and added new tagging system for HTTP Proxy rules
• Added inline editing for redirection rules
• Added uptime monitor status dot detail info (now clickable)
• Added close connection support to port 80 listener
• Optimized port collision check on startup
• Optimized dark theme color scheme (Free consultation by 3S Design studio)
• Fixed capital letter rule unable to delete bug
• Fixed docker statistic not save bug by @PassiveLemon

v3.1.6

v3.1.6

This is a quick patch version of v3.1.5 for Proxmox websocket. This version also introduced the new toggle for uptime monitor per HTTP proxy rule, suitable for NAS and low power devices which will enter sleep mode when there are no incoming requests.

Change Log

• Exposed log file, sys.uuid and static web server path to start flag (customizable conf and sys.db path is still wip)
• Optimized connection close implementation
• Added toggle for uptime monitor
• Added optional copy HTTP custom headers to websocket connection

v3.1.5

v3.1.5

This version introduce the new architecture for future SSO implementation, the authentication provider settings. With the first PR in place (authelia), you can now use Authelia to replace basic auth on your preferred proxy host names.

This release also include a new default site options to close the connection without responding (or just send empty response in TLS mode, as SNI header sniffer already processed the request and can't be closed directly). A slightly different alternative to nginx's 444 response.

Another cool feature is that this version of Zoraxy introduced an external geoIP database mode where you can place the required csv file under conf/geodb/geoipv4.csv (and geoipv6.csv) to use your own table. You can also use the new flag -update_geoip to start zoraxy in automatic geodb update mode, pull the two files from cdn and exit. Suitable for those who want to setup and forget their zoraxy instance to keep their access list up-to-date.

Notes: This version ship with an internal config updater where it will upgrade your config to the v3.1.5 format. Please remember to backup your config (from v3.1.4) before drop-in replacing the executable with v3.1.5.

Change Log

• Fixed hostname case sensitive bug
• Fixed ACME table too wide css bug
• Fixed HSTS toggle button bug
• Fixed slow GeoIP resolve mode concurrent r/w bug
• Added close connection as default site option
• Added experimental authelia support
• Added custom header support to websocket
• Added levelDB as database implementation (not currently used)
• Added external GeoIP db loading support
• Restructured a lot of modules

v3.1.4

Updates v3.1.4

This version mainly improve on user experience with the introduction of the new dark theme mode and more automatic sniffing logic. As seen there are a lot of users exposing their webmin interface to the internet, the robots.txt file is introduce to prevent search engine bot from indexing the webmin panel.

Notes for Docker Users

ZeroTier configuration data is no longer stored in /var/lib/zerotier-one/ and is now included in the Zoraxy configuration directory /opt/zoraxy/config/zerotier/. If you still have a ZeroTier configuration mounted in the original location, you shouldn't experience breaking changes, however this is now an unsupported configuration and is recommended to move the configuration data.

Notes for Dark Theme

The dark theme feature is done using CSS override. If you encounter any wired issue in dark theme mode including "text is hard to see" or "color is too close between two sections", please consider reporting them as a UX bug.

Change Log

• Added Dark Theme Mode
• Added an auto sniffer for self-signed certificates.
• Added robots.txt to the project.
• Introduced an EU wrapper in the front-end for automatic registration of 26 countries.
• Moved all hard-coded values to a dedicated def.go file.
• Fixed a panic issue occurring on unsupported platform exits.
• Integrated fixes for SSH proxy and Docker snippet updates.
• Changed the default listening port to 443 and enable TLS by default
• Optimized GeoIP database slow-search mode CPU usage

v3.1.3

v3.1.3

This release fixed a critical security bug in the WebSSH module. The rest of the code base is identical to v3.1.2.

Change Log

• Fixed CVE-2024-52010

v3.1.2

v3.1.2

This updates primarily improved user experience for new users and fixed minor bugs in previous releases.

Change Log

• Added auto start port 80 listener on acme certificate generator
• Added polling interval and propagation timeout option in ACME module
• Added support for custom header variables
• Added support for X-Remote-User
• Added port scanner
• Optimized code base for stream proxy and config file storage
• Removed sorting on cert list
• Fixed request certificate button bug
• Fixed cert auto renew logic
• Fixed unable to remove new stream proxy bug
• Fixed many other minor bugs
• Added more code to SSO system (disabled in release)

v3.1.1r3

v3.1.1r3

This version is a patch release for the docker image of Zoraxy v3.1.1. The following binaries are identical to the v3.1.1r2 release. If you are using the executable version of Zoraxy v3.1.1, you can optionally skip this release / update.

Change log

• Fixed docker image for Zoraxy v3.1.1r2 by @PassiveLemon

Remarks

See here for more details.