ospab
2c6b5a7ce2
docs: update docs for v0.3.1, add FAQ, remove ostp-control mentions
2026-06-18 02:25:21 +03:00
ospab
774d926bf9
chore: bump version to 0.3.3 and add auto-version bumping script to GHA
2026-06-18 02:02:58 +03:00
ospab
d91d5de440
fix: ostp-gui security and stability improvements
...
- Add IPC encryption using ChaCha20Poly1305
- Reduce helper connection timeout from 60s to 15s
- Replace unwrap() with proper error handling in helper connection
- Encrypt all messages between GUI and helper with derived key
- Add ipc_crypto module for secure communication
- Properly decode/encode encrypted messages in IPC loop
2026-06-17 22:24:37 +03:00
ospab
e4e054e75a
chore: version updates and build script tweaks
2026-06-17 19:38:29 +03:00
ospab
630c3fde73
feat: update build script and documentation
2026-06-17 03:29:38 +03:00
ospab
67f9c06935
feat: migrate to v0.3.1 with multi-server architecture
2026-06-16 20:37:21 +03:00
ospab
04761fb6a3
Fix memory leaks, hang issues, gui helper token vulns, and log spam
2026-06-16 14:11:37 +03:00
ospab
b841053628
fix(jni): add exclusions_rx param to run_native_tunnel_from_fd stub to fix non-Android builds
2026-06-14 01:49:06 +03:00
ospab
486d745d47
feat(tun): implement process bypass for TCP/UDP and IP bypass for UDP using existing Extended tables
2026-06-14 00:02:08 +03:00
ospab
74b6648db1
fix(tun): fix bypass loop by capturing physical iface before tun route overrides
2026-06-13 23:09:33 +03:00
ospab
4543fa82f8
fix(split-tunnel): hot-reload exclusions into running proxy tunnel without reconnect
2026-06-13 22:30:01 +03:00
ospab
83ba39e59a
feat(gui): split tunneling — tag-chip UI, process picker with live process list
2026-06-13 02:55:28 +03:00
ospab
55215567dd
Fix all compilation errors and suppress all warnings across workspace
2026-06-13 02:30:57 +03:00
ospab
2a24ac34d0
Remove Reality/XTLS from all UI components and TSX pages (Dashboard, Settings, Tools)
2026-06-13 02:19:53 +03:00
ospab
3c54aba63f
Remove Reality/XTLS UI from ostp-gui, ostp-flutter, ostp-control
2026-06-13 01:57:20 +03:00
ospab
a9e4511190
Fix CLI setup permissions, enforce global debug tracing, and fix GUI silent startup crash
2026-06-13 01:25:54 +03:00
ospab
9f35caf4ca
Remove built-in DNS server and owndns features
2026-06-10 22:52:35 +03:00
ospab
7bb7d211fa
Remove stealth_port entirely and integrate fallback into UoT HTTP handler
2026-06-10 02:26:13 +03:00
ospab
04c31c7f53
feat: implement wintun dynamic downloading, add missing driver frontend modal, fix background logging and UAC helper issues
2026-06-09 01:01:36 +03:00
ospab
730eab8553
feat: implement built-in DNS server, adblock and dns leak prevention
2026-06-07 19:55:42 +03:00
ospab
29e9ef739c
Refactor: Phase 1 and 2 - Async architecture, JNI fixes, SmolTCP data races, and Tunnel optimizations
2026-06-03 02:06:06 +03:00
ospab
ca9dd9ec06
fix(gui): remove tun stack selection, default to ostp; fix(flutter): add missing ic_launcher_background.xml for icon build
2026-06-02 23:27:04 +03:00
ospab
f9e272d6bf
chore: apply icon variant 2 (infinity tunnel) to tauri and flutter
2026-06-02 23:12:47 +03:00
ospab
ee539ea4a6
fix(gui): add tray-icon feature and missing Emitter import
2026-06-02 23:05:32 +03:00
ospab
c2bc764613
feat: linux auto-sudo and tauri system tray background mode
2026-06-02 22:58:04 +03:00
ospab
a82c664e5b
Fix UDP IPv4-mapped IPv6 address matching bug and completely remove tun2socks
2026-05-30 21:14:29 +03:00
ospab
7257da174a
fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI
2026-05-30 00:54:46 +03:00
ospab
907d03ca38
fix(android): protect xhttp TCP socket from VPN routing loop
...
When using xhttp (UoT) mode on Android, the underlying TcpStream was
not protected with VpnService.protect(fd). This caused the TCP connection
to be routed back into the TUN interface, creating an infinite routing
loop and failing the connection immediately.
Added Android-specific socket protection to the TcpStream in connect_xhttp.
This fixes xhttp/UoT mode on mobile networks.
2026-05-29 17:27:50 +03:00
ospab
7986b1ca5b
fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile
...
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.
Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
drain client CCS from raw stream before wrapping in RealityStream
2026-05-29 16:21:59 +03:00
ospab
f4830f043f
feat: implement optional WSS framing for DPI bypass & extract framing logic
2026-05-29 13:59:59 +03:00
ospab
8cfb7e9c17
docs: add CONTRIBUTING guide in English and Russian, link in README
2026-05-29 00:25:40 +03:00
ospab
ba71af2abb
feat: implement split-tunneling bypass for TCP/UDP and native UDP NAT
2026-05-29 00:06:11 +03:00
ospab
cb797c42d0
Add 'Use Built-in' DNS button in GUI
2026-05-28 19:31:06 +03:00
ospab
1b836b26ab
Fix Windows TUN NLA delays, UI timer, and Android UDP DNS resolution
2026-05-28 18:19:01 +03:00
ospab
5fa957830c
Fix frontend ignoring tunnel errors & fix blocking wintun routines
2026-05-28 16:32:59 +03:00
ospab
3c687aad46
Fix Tauri RealityConfig init
2026-05-28 15:30:48 +03:00
ospab
aeba340405
Upgrade Flutter to 3.41.6 in CI to support Kotlin DSL
2026-05-28 15:19:06 +03:00
ospab
33145febbb
Fix Tauri build args, split Android into matrix, track flutter/gui, update docs and contacts
2026-05-28 15:01:41 +03:00
ospab
9ac0908c1e
fix(server): generate correct public IP for client configs instead of 0.0.0.0
2026-05-27 18:17:11 +03:00
ospab
cba7be4b75
Implement config management API, token generation, and update wiki
2026-05-26 19:33:45 +03:00
ospab
2228faa550
android: foreground service, wakelock, persistent notification, quick settings tile; gui: separate ping metric with color coding
2026-05-26 16:19:14 +03:00
ospab
fffb67fbde
gui: add build:dist script for packing all windows binaries
2026-05-26 13:25:40 +03:00
ospab
77c0701695
gui: fix helper lookup path for dev workspace
2026-05-25 23:16:24 +03:00
ospab
87540166f6
gui, flutter: use server rtt for ping display
2026-05-25 23:00:52 +03:00
ospab
164c36ed3e
gui: fix compilation errors (update config mappings)
2026-05-25 22:53:06 +03:00
ospab
c3b80eb12c
gui: add multiplexing and translate reality fields
2026-05-25 22:45:31 +03:00
ospab
270cd91d71
Update flutter and gui apps to support XTLS-Reality and UoT config parameters
2026-05-24 22:55:07 +03:00
ospab
a5a0a17cfd
feat: add transport and mtu fields to gui
2026-05-21 02:59:01 +03:00
ospab
ee14a60348
feat: GUI v2 redesign + CI/CD speedup
...
GUI (ostp-gui):
- Complete HTML rewrite: orbit rings, server badge, metrics bar, peek-key
- CSS design system v2: ambient blobs, glassmorphism card, richer token set
orbit animation (connected/connecting states), breathing power button,
modern toggle component with thumb, toast variants (ok/error/default)
- main.js: clean state machine, server badge, TUN/SOCKS5 mode label,
peek-key toggle, toast variants, import link, uptime counter
CI/CD (.github/workflows/release.yml):
- Replaced swatinem/rust-cache with actions/cache@v4 (per-target key)
- Cache cross binary: skip reinstall on cache hit (~3 min saved per job)
- Cache tauri-cli binary: skip reinstall on cache hit (~2 min saved per GUI job)
- Added npm cache (cache-dependency-path: ostp-gui/package-lock.json)
- Removed redundant pre-flight cargo check step (duplicates build step)
- Cleaned up packaging scripts (inline vars, smaller surface area)
2026-05-17 22:13:03 +03:00
ospab
c82ec93ea7
fix: declare and grant custom Tauri v2 command permissions for GUI
2026-05-17 18:59:44 +03:00