Commit Graph

396 Commits

Author SHA1 Message Date
ospab 0cb0561f64 CI/CD: release version v0.2.85 2026-06-07 20:44:28 +03:00
ospab da2dbe03cd fix(ui): resolve TypeScript compilation errors in ostp-control 2026-06-07 20:42:44 +03:00
ospab c075979c62 CI/CD: release version v0.2.84 2026-06-07 20:10:39 +03:00
ospab d0b79bd4b5 feat: implement built-in DNS server, adblock and dns leak prevention 2026-06-07 19:55:42 +03:00
ospab f798771a35 CI/CD: release version v0.2.83 2026-06-06 20:57:46 +03:00
ospab 46c5118849 CI/CD: release version v0.2.82 2026-06-03 19:52:21 +03:00
ospab eace175625 CI/CD: release version v0.2.81 2026-06-03 02:59:35 +03:00
ospab 27cd40db04 CI/CD: release version v0.2.80 2026-06-03 02:08:55 +03:00
ospab 332c714b61 Refactor: Phase 1 and 2 - Async architecture, JNI fixes, SmolTCP data races, and Tunnel optimizations 2026-06-03 02:06:06 +03:00
ospab eb5eac0dca CI/CD: release version v0.2.79 2026-06-03 01:19:25 +03:00
ospab 8ca3219ff9 CI/CD: release version v0.2.78 2026-06-03 01:02:10 +03:00
ospab 61aa883cbc fix(gui): remove tun stack selection, default to ostp; fix(flutter): add missing ic_launcher_background.xml for icon build 2026-06-02 23:27:04 +03:00
ospab 6c2417232a chore: apply icon variant 2 (infinity tunnel) to tauri and flutter 2026-06-02 23:12:47 +03:00
ospab ba9f2740b7 fix(gui): add tray-icon feature and missing Emitter import 2026-06-02 23:05:32 +03:00
ospab 9d8f61fda5 fix: rename WindowsProxyGuard to SystemProxyGuard in bridge.rs 2026-06-02 23:01:45 +03:00
ospab 6554b02397 ci: add linux and macos gui build matrices 2026-06-02 23:01:22 +03:00
ospab fb0dbf9da1 feat: linux auto-sudo and tauri system tray background mode 2026-06-02 22:58:04 +03:00
ospab 5e4fd2be02 feat(linux): implement SystemProxyGuard with GNOME/KDE support and headless proxy prompt 2026-05-31 21:01:28 +03:00
ospab eef8869731 feat(cli): add --import, --proxy-env, interactive link prompt, and TUN safety guard for Linux 2026-05-31 20:53:54 +03:00
ospab 5b3a9f2e14 fix(flutter): enforce MTU 1280 for Android TUN while passing 1140 to Rust core for TCP MSS clamping 2026-05-30 22:40:03 +03:00
ospab e96c4b6b40 fix: remove IPv6 from Android TUN to allow MTU < 1280 and prevent crashes 2026-05-30 22:31:24 +03:00
ospab 2fbdd4578d feat: user configured MTU automatically subtracts 48 for overhead compensation 2026-05-30 22:24:08 +03:00
ospab c9fad99144 fix: resolve deadlock, multiplexing backpressure, and LTE fragmentation issues 2026-05-30 22:21:12 +03:00
ospab 8771f17371 fix(client): resolve borrow after move error in bridge.rs and clean up warnings 2026-05-30 22:09:23 +03:00
ospab ad66bccba5 fix(client): send immediate Ping on connection to avoid 60s delay in UI 2026-05-30 22:07:22 +03:00
ospab 5100d75cf6 fix(client): remove IPv6 DNS servers from Android VPN to prevent DNS failures on IPv6-preferred LTE networks when server lacks IPv6 2026-05-30 22:05:11 +03:00
ospab 37719a3fac fix(client): flush stale proxy_rx messages on background reconnect to prevent UDP burst drops on mobile networks 2026-05-30 21:55:33 +03:00
ospab e90bfc7510 Patch netstack-smoltcp locally to fix catastrophic UDP tunnel stream crash on invalid packets 2026-05-30 21:34:31 +03:00
ospab a3266029d4 CI/CD: release version v0.2.77 2026-05-30 21:15:20 +03:00
ospab ae8f5f28ca Fix UDP IPv4-mapped IPv6 address matching bug and completely remove tun2socks 2026-05-30 21:14:29 +03:00
ospab 2a294c5fbc fix(client): make Android TUN read loop resilient to EINTR, don't abort tunnel on transient read errors 2026-05-30 02:35:14 +03:00
ospab bd38b5b279 CI/CD: release version v0.2.76 2026-05-30 02:13:29 +03:00
ospab 60b5d565e8 fix(client): stabilize UDP sessions - prevent crashes on transient recv errors in udp_nat and proxy 2026-05-30 02:12:15 +03:00
ospab 3a39f19b45 fix(client): fix async closure compilation error in udp_nat.rs 2026-05-30 02:03:56 +03:00
ospab f3f2cf1c17 fix(client): bind SOCKS5 UDP socket to IPv6 properly, and fix 100% CPU spin in Android TUN reader 2026-05-30 02:01:31 +03:00
ospab 3fd53686f8 fix(client): correctly parse ATYP in SOCKS5 UDP ASSOCIATE response to fix DNS/UDP on IPv6 networks 2026-05-30 01:52:25 +03:00
ospab 7e3b2e6633 fix(client): prevent TUN read loop from crashing on invalid IP packets (fixes LTE MTU/CLAT issues) 2026-05-30 01:42:18 +03:00
ospab 9edfb3cb3f CI/CD: release version v0.2.75 2026-05-30 01:40:52 +03:00
ospab 63b8707161 fix(build): remove ignored ostp-brain from Cargo.toml members to fix Github Actions 2026-05-30 01:33:34 +03:00
ospab 159abb4c24 CI/CD: release version v0.2.74 2026-05-30 01:14:33 +03:00
ospab b9a95708c9 fix(xhttp): rewrite RealityStream buffering to prevent packet drops and data loss 2026-05-30 01:10:29 +03:00
ospab cecd2756a0 fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI 2026-05-30 00:54:46 +03:00
ospab a786bd8691 CI/CD: release version v0.2.73 2026-05-29 17:37:33 +03:00
ospab 04841f1c8b feat(ui): decouple WSS from UoT and add standalone Reality toggle
Extracted the WSS toggle from the UoT stealth block to make it
accessible regardless of transport mode. Added a dedicated XTLS-Reality
toggle to avoid relying on empty/non-empty PBK strings to determine
the enabled state, allowing users to toggle Reality without wiping keys.
2026-05-29 17:36:31 +03:00
ospab 77951e800d CI/CD: release version v0.2.72 2026-05-29 17:29:06 +03:00
ospab af4a16e809 fix(android): protect xhttp TCP socket from VPN routing loop
When using xhttp (UoT) mode on Android, the underlying TcpStream was
not protected with VpnService.protect(fd). This caused the TCP connection
to be routed back into the TUN interface, creating an infinite routing
loop and failing the connection immediately.

Added Android-specific socket protection to the TcpStream in connect_xhttp.
This fixes xhttp/UoT mode on mobile networks.
2026-05-29 17:27:50 +03:00
ospab 59a9d5499d CI/CD: release version v0.2.71 2026-05-29 16:42:05 +03:00
ospab cde1035d80 fix(workspace): remove missing ostp-prober member from workspace 2026-05-29 16:41:34 +03:00
ospab 8d4b3a77a4 CI/CD: release version v0.2.70 2026-05-29 16:23:12 +03:00
ospab ec333470aa fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.

Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
  export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
  ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
  drain client CCS from raw stream before wrapping in RealityStream
2026-05-29 16:21:59 +03:00