v5.18.0

Features

• Hysteria2: Add Hysteria2 Protocol by @JimmyHuang454 in #2721
  • New Hysteria2 Proxy Protocol was added, with documents updated: v5 CN v4 CN
  • New Hysteria2 Transport Protocol was added, with documents updated: v5 CN v4 CN
• Add AllowInsecureIfPinnedPeerCertificate option to tls security in #3141
  • CN EN Documents have been updated.
• Add tls certChainHash command
  • Document have been updated (link shown above).
• feat: add support for socket activation by @ruihe774 in #3133
• Add pprof flag for debugging by @sunshineplan in #3067

Fixes

• Some fixes about Hysteria 2 by @dyhkwong in #3147

Chore

• Chore: bump golang.org/x/crypto from 0.26.0 to 0.27.0 by @dependabot in #3144
• Chore: bump github.com/jhump/protoreflect from 1.16.0 to 1.17.0 by @dependabot in #3143
• Chore: bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #3142
• Chore: bump google.golang.org/grpc from 1.65.0 to 1.66.0 by @dependabot in #3132

New Contributors

• @ruihe774 made their first contribution in #3133
• @sunshineplan made their first contribution in #3067
• @JimmyHuang454 made their first contribution in #2721

Full Changelog: v5.17.1...v5.18.0

v5.17.1

Features

• Add timeout for http request roundtripper in #2996
• Fix ss2022 auth reader size overflow by @dyhkwong in #2998
• Add pie build mode to all binary builds by in #2997
• Support "services" root config in cfgv4 by @Vigilans in #3006
• feat: packet_encoding for config v4 by @mkmark in #3083
• feat: add MPTCP support by @AkinoKaede in #3109
• Add (Experimental) Meyka Building Blocks to request Transport in #3120

Fixes

• Fix HTTP2 proxy client with uTLS by @dyhkwong in #3102
• routing/balancer: fix fallbackTag missing on leastping balancer by @povsister in #3101
• Fix transportcommon.ListenWithSecuritySettings by @dyhkwong in #3103
• Always use a DNS Message ID of 0 for DoH and DoQ by @dyhkwong in #3024
• Fix DNS servers with same tag wrongly merged by @Vigilans in #3005
• fix: use sync.Map in request transpot's packet conn server

Chore

• style: remove random trailing spaces by @unknowndevQwQ in #3123
• Chore: bump github.com/miekg/dns from 1.1.59 to 1.1.62 by @dependabot in #3116
• Chore: bump github.com/quic-go/quic-go from 0.43.0 to 0.46.0 by @dependabot in #3108
• Chore: bump github.com/refraction-networking/utls from 1.6.5 to 1.6.7 by @dependabot in #3074
• Chore: bump golang.org/x/sys from 0.19.0 to 0.24.0 by @dependabot in #3110
• Chore: bump golang.org/x/net from 0.24.0 to 0.28.0 by @dependabot in #3106
• Chore: bump google.golang.org/grpc from 1.63.2 to 1.65.0 by @dependabot in #3070
• Chore: bump google.golang.org/protobuf from 1.34.0 to 1.34.2 by @dependabot in #3045
• Chore: bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 by @dependabot in #3048
• Chore: bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.0 by @dependabot in #3046
• Chore: bump github.com/pion/dtls/v2 from 2.2.7 to 2.2.12 by @dependabot in #3127
• Chore: bump github.com/pion/transport/v2 from 2.2.5 to 2.2.10 by @dependabot in #3124
• Chore: bump github.com/adrg/xdg from 0.4.0 to 0.5.0 by @dependabot in #3125
• Chore: bump github.com/go-chi/chi/v5 from 5.0.12 to 5.1.0 by @dependabot in #3126

New Contributors

• @povsister made their first contribution in #3101
• @unknowndevQwQ made their first contribution in #3123

Full Changelog: v5.16.1...v5.17.1

v5.17.0

Features

• Add timeout for http request roundtripper in #2996
• Fix ss2022 auth reader size overflow by @dyhkwong in #2998
• Add pie build mode to all binary builds by in #2997
• Support "services" root config in cfgv4 by @Vigilans in #3006
• feat: packet_encoding for config v4 by @mkmark in #3083
• feat: add MPTCP support by @AkinoKaede in #3109
• Add (Experimental) Meyka Building Blocks to request Transport in #3120

Fixes

• Fix HTTP2 proxy client with uTLS by @dyhkwong in #3102
• routing/balancer: fix fallbackTag missing on leastping balancer by @povsister in #3101
• Fix transportcommon.ListenWithSecuritySettings by @dyhkwong in #3103
• Always use a DNS Message ID of 0 for DoH and DoQ by @dyhkwong in #3024
• Fix DNS servers with same tag wrongly merged by @Vigilans in #3005

Chore

• style: remove random trailing spaces by @unknowndevQwQ in #3123
• Chore: bump github.com/miekg/dns from 1.1.59 to 1.1.62 by @dependabot in #3116
• Chore: bump github.com/quic-go/quic-go from 0.43.0 to 0.46.0 by @dependabot in #3108
• Chore: bump github.com/refraction-networking/utls from 1.6.5 to 1.6.7 by @dependabot in #3074
• Chore: bump golang.org/x/sys from 0.19.0 to 0.24.0 by @dependabot in #3110
• Chore: bump golang.org/x/net from 0.24.0 to 0.28.0 by @dependabot in #3106
• Chore: bump google.golang.org/grpc from 1.63.2 to 1.65.0 by @dependabot in #3070
• Chore: bump google.golang.org/protobuf from 1.34.0 to 1.34.2 by @dependabot in #3045
• Chore: bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 by @dependabot in #3048
• Chore: bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.0 by @dependabot in #3046
• Chore: bump github.com/pion/dtls/v2 from 2.2.7 to 2.2.12 by @dependabot in #3127
• Chore: bump github.com/pion/transport/v2 from 2.2.5 to 2.2.10 by @dependabot in #3124
• Chore: bump github.com/adrg/xdg from 0.4.0 to 0.5.0 by @dependabot in #3125
• Chore: bump github.com/go-chi/chi/v5 from 5.0.12 to 5.1.0 by @dependabot in #3126

New Contributors

• @povsister made their first contribution in #3101
• @unknowndevQwQ made their first contribution in #3123

Full Changelog: v5.16.1...v5.17.0

v5.16.1

Chore

• Add Keep-Alive to removed headers in RemoveHopByHopHeaders in #2983
• Chore: bump github.com/miekg/dns from 1.1.58 to 1.1.59 by @dependabot in #2980
• Chore: bump github.com/refraction-networking/utls from 1.6.3 to 1.6.4 by @dependabot in #2969
• Chore: bump github.com/jhump/protoreflect from 1.15.6 to 1.16.0 by @dependabot in #2968
• Chore: bump google.golang.org/grpc from 1.62.1 to 1.63.2 by @dependabot in #2967
• Chore: bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #2964
• Chore: bump lukechampine.com/blake3 from 1.2.1 to 1.2.2 by @dependabot in #2963
• Chore: bump github.com/go-playground/validator/v10 from 10.19.0 to 10.20.0 by @dependabot in #2991
• Chore: bump google.golang.org/protobuf from 1.33.1-0.20240408130810-98873a205002 to 1.34.0 by @dependabot in #2990
• Chore: bump github.com/quic-go/quic-go from 0.42.0 to 0.43.0 by @dependabot in #2989
• Chore: bump github.com/refraction-networking/utls from 1.6.4 to 1.6.5 by @dependabot in #2993
• Chore: bump lukechampine.com/blake3 from 1.2.2 to 1.3.0 by @dependabot in #2992
• Chore: bump github.com/pion/transport/v2 from 2.2.4 to 2.2.5 by @dependabot in #2988
• Chore: bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #2962

Full Changelog: v5.15.3...v5.16.1

v5.16.0

Chore

• Add Keep-Alive to removed headers in RemoveHopByHopHeaders in #2983
• Chore: bump github.com/miekg/dns from 1.1.58 to 1.1.59 by @dependabot in #2980
• Chore: bump github.com/refraction-networking/utls from 1.6.3 to 1.6.4 by @dependabot in #2969
• Chore: bump github.com/jhump/protoreflect from 1.15.6 to 1.16.0 by @dependabot in #2968
• Chore: bump google.golang.org/grpc from 1.62.1 to 1.63.2 by @dependabot in #2967
• Chore: bump golang.org/x/net from 0.22.0 to 0.24.0 by @dependabot in #2964
• Chore: bump lukechampine.com/blake3 from 1.2.1 to 1.2.2 by @dependabot in #2963
• Chore: bump github.com/go-playground/validator/v10 from 10.19.0 to 10.20.0 by @dependabot in #2991
• Chore: bump google.golang.org/protobuf from 1.33.1-0.20240408130810-98873a205002 to 1.34.0 by @dependabot in #2990
• Chore: bump github.com/quic-go/quic-go from 0.42.0 to 0.43.0 by @dependabot in #2989
• Chore: bump github.com/refraction-networking/utls from 1.6.4 to 1.6.5 by @dependabot in #2993
• Chore: bump lukechampine.com/blake3 from 1.2.2 to 1.3.0 by @dependabot in #2992
• Chore: bump github.com/pion/transport/v2 from 2.2.4 to 2.2.5 by @dependabot in #2988
• Chore: bump golang.org/x/sync from 0.6.0 to 0.7.0 by @dependabot in #2962

Full Changelog: v5.15.3...v5.16.0

v5.15.3

New Features

• feat: RandomStrategy AliveOnly by @mkmark in #2850
• Improve container image tags and timestamp by @Qusic in #2757
• Add delay_auth_write to Socks5 Client Advanced Config in #2933
• Add MaxMin TLS version support in TLS Setting by in #2925

Fixes

• fix(conf): add Windows support for Unix Domain Socket by @yin1999 in #2826
• Add GeoDomain to DNS Nameserver in JSONv5 by @karelrooted in #2711
• fix multiarch buildah command by @Qusic in #2943

Chore

• Chore: bump golang.org/x/crypto from 0.17.0 to 0.21.0 by @dependabot in #2914
• Allow setting permission on CopyFile helper in #2921
• Fix unsafe math rand usage in #2926
• Chore: bump github.com/miekg/dns from 1.1.57 to 1.1.58 by @dependabot in #2916
• Chore: bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #2928
• Chore: bump github.com/go-playground/validator/v10 from 10.16.0 to 10.19.0 by @dependabot in #2927
• Chore: bump google.golang.org/grpc from 1.59.0 to 1.62.1 by @dependabot in #2917
• Chore: bump golang.org/x/net from 0.19.0 to 0.22.0 by @dependabot in #2915
• Chore: bump github.com/refraction-networking/utls from 1.5.4 to 1.6.3 by @dependabot in #2899
• Chore: bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.12 by @dependabot in #2894
• Chore: bump github.com/jhump/protoreflect from 1.15.3 to 1.15.6 by @dependabot in #2871
• Add support to allow tls=0 in vmess:// subscription in #2930
• Chore: bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2938

New Contributors

• @mkmark made their first contribution in #2850
• @karelrooted made their first contribution in #2711
• @Qusic made their first contribution in #2757

Full Changelog: v5.14.1...v5.15.3

v5.15.1

New Features

• feat: RandomStrategy AliveOnly by @mkmark in #2850
• Improve container image tags and timestamp by @Qusic in #2757
• Add delay_auth_write to Socks5 Client Advanced Config in #2933
• Add MaxMin TLS version support in TLS Setting by in #2925

Fixes

• fix(conf): add Windows support for Unix Domain Socket by @yin1999 in #2826
• Add GeoDomain to DNS Nameserver in JSONv5 by @karelrooted in #2711

Chore

• Chore: bump golang.org/x/crypto from 0.17.0 to 0.21.0 by @dependabot in #2914
• Allow setting permission on CopyFile helper in #2921
• Fix unsafe math rand usage in #2926
• Chore: bump github.com/miekg/dns from 1.1.57 to 1.1.58 by @dependabot in #2916
• Chore: bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #2928
• Chore: bump github.com/go-playground/validator/v10 from 10.16.0 to 10.19.0 by @dependabot in #2927
• Chore: bump google.golang.org/grpc from 1.59.0 to 1.62.1 by @dependabot in #2917
• Chore: bump golang.org/x/net from 0.19.0 to 0.22.0 by @dependabot in #2915
• Chore: bump github.com/refraction-networking/utls from 1.5.4 to 1.6.3 by @dependabot in #2899
• Chore: bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.12 by @dependabot in #2894
• Chore: bump github.com/jhump/protoreflect from 1.15.3 to 1.15.6 by @dependabot in #2871
• Add support to allow tls=0 in vmess:// subscription in #2930

New Contributors

• @mkmark made their first contribution in #2850
• @karelrooted made their first contribution in #2711
• @Qusic made their first contribution in #2757

Full Changelog: v5.14.1...v5.15.1

v5.15.0

New Features

• feat: RandomStrategy AliveOnly by @mkmark in #2850
• Improve container image tags and timestamp by @Qusic in #2757

Fixes

• fix(conf): add Windows support for Unix Domain Socket by @yin1999 in #2826
• Add GeoDomain to DNS Nameserver in JSONv5 by @karelrooted in #2711

Chore

• Chore: bump golang.org/x/crypto from 0.17.0 to 0.21.0 by @dependabot in #2914
• Allow setting permission on CopyFile helper in #2921
• Add MaxMin TLS version support in TLS Setting by in #2925
• Fix unsafe math rand usage in #2926
• Chore: bump github.com/miekg/dns from 1.1.57 to 1.1.58 by @dependabot in #2916
• Chore: bump github.com/golang/protobuf from 1.5.3 to 1.5.4 by @dependabot in #2928
• Chore: bump github.com/go-playground/validator/v10 from 10.16.0 to 10.19.0 by @dependabot in #2927
• Chore: bump google.golang.org/grpc from 1.59.0 to 1.62.1 by @dependabot in #2917
• Chore: bump golang.org/x/net from 0.19.0 to 0.22.0 by @dependabot in #2915
• Chore: bump github.com/refraction-networking/utls from 1.5.4 to 1.6.3 by @dependabot in #2899
• Chore: bump github.com/go-chi/chi/v5 from 5.0.10 to 5.0.12 by @dependabot in #2894
• Chore: bump github.com/jhump/protoreflect from 1.15.3 to 1.15.6 by @dependabot in #2871
• Add support to allow tls=0 in vmess:// subscription in #2930

New Contributors

• @mkmark made their first contribution in #2850
• @karelrooted made their first contribution in #2711
• @Qusic made their first contribution in #2757

Full Changelog: v5.14.1...v5.15.0

v5.14.1

Security Update

• Fixed an encrypted traffic's malleable vulnerability that allow integrity corruption by an attacker with a privileged network position to silently drop segments of traffic from an encrypted traffic stream. Thanks Ellis Fenske for reporting this vulnerability.

-----> ⚠️ Important Message ⚠️<-----

This update includes security fix recommended for all users.

-----> ⚠️ 重要消息 ⚠️<-----

本更新含适用于所有用户的安全更新。

Chore

• Chore: bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @dependabot in #2847
• Chore: bump github.com/quic-go/quic-go from 0.40.0 to 0.41.0 by @dependabot in #2856

v5.14.0 User Preview

Security Update

• Fixed an encrypted traffic's malleable vulnerability that allow integrity corruption by an attacker with a privileged network position to silently drop segments of traffic from an encrypted traffic stream. Thanks Ellis Fenske for reporting this vulnerability.

-----> ⚠️ Important Message ⚠️<-----

This update includes security fix recommended for all users.

-----> ⚠️ 重要消息 ⚠️<-----

本更新含适用于所有用户的安全更新。