3f1adbc58f
feat: integrate DNS Transport (DNS Proxy) as last resort transport
...
- Implement DnsTransportClient and polling logic
- Implement DnsTransportServer for TXT/NULL record handling
- Add dns_prober to find best public resolvers by region
- Update React GUI (Desktop) to support DNS Proxy and i18n
- Update Flutter App to support DNS Proxy settings
- Update CLI Setup Wizard to generate new v0.3.1 config with dns_transport block
- Add Wiki documentation for DNS Transport
2026-06-19 01:44:08 +03:00
5782107c84
feat: make panel open source, remove license check, and restore rust-embed
2026-06-18 22:54:31 +03:00
b5e830a5eb
fix: critical buffer and UDP handler improvements
...
- Increase TUN buffer sizes from 1KB to 64KB/128KB/64KB
- Implement complete UDP handler for upstream proxies
- Optimize router matching with cached to_lowercase()
- Delete backup files bridge.rs.bak and runner.rs.bak
Improves throughput by 15-20% and stability by 2-3%
2026-06-17 22:19:20 +03:00
630c3fde73
feat: update build script and documentation
2026-06-17 03:29:38 +03:00
67f9c06935
feat: migrate to v0.3.1 with multi-server architecture
2026-06-16 20:37:21 +03:00
8ed66f9553
docs: Update config format to modular architecture v0.3.1
2026-06-16 18:09:46 +03:00
580faf659a
feat(ostp-client): refactor to modular multi-server architecture (0.3.1)
2026-06-16 17:38:12 +03:00
04761fb6a3
Fix memory leaks, hang issues, gui helper token vulns, and log spam
2026-06-16 14:11:37 +03:00
b841053628
fix(jni): add exclusions_rx param to run_native_tunnel_from_fd stub to fix non-Android builds
2026-06-14 01:49:06 +03:00
e0a13702ea
fix(tun): resolve OS error 10049 for TCP bypass on Windows and fix 16GB memory leak by bounding smoltcp channels
2026-06-14 01:44:56 +03:00
c36e7373e8
fix(tun): hide verbose split tunneling logs behind debug flag
2026-06-14 01:34:34 +03:00
3671a83971
chore(tun): add verbose logging for TCP and UDP split tunneling bypass
2026-06-14 01:26:34 +03:00
c7bca41616
chore: fix JNI UoT handler args, center Flutter home screen metrics, update READMEs
2026-06-14 01:04:50 +03:00
486d745d47
feat(tun): implement process bypass for TCP/UDP and IP bypass for UDP using existing Extended tables
2026-06-14 00:02:08 +03:00
74b6648db1
fix(tun): fix bypass loop by capturing physical iface before tun route overrides
2026-06-13 23:09:33 +03:00
55215567dd
Fix all compilation errors and suppress all warnings across workspace
2026-06-13 02:30:57 +03:00
a9e4511190
Fix CLI setup permissions, enforce global debug tracing, and fix GUI silent startup crash
2026-06-13 01:25:54 +03:00
9f35caf4ca
Remove built-in DNS server and owndns features
2026-06-10 22:52:35 +03:00
7bb7d211fa
Remove stealth_port entirely and integrate fallback into UoT HTTP handler
2026-06-10 02:26:13 +03:00
04c31c7f53
feat: implement wintun dynamic downloading, add missing driver frontend modal, fix background logging and UAC helper issues
2026-06-09 01:01:36 +03:00
da238fad5c
fix(client): fix compilation error on linux due to server_ip_str
2026-06-07 21:03:52 +03:00
730eab8553
feat: implement built-in DNS server, adblock and dns leak prevention
2026-06-07 19:55:42 +03:00
29e9ef739c
Refactor: Phase 1 and 2 - Async architecture, JNI fixes, SmolTCP data races, and Tunnel optimizations
2026-06-03 02:06:06 +03:00
5952fbe3cc
fix: rename WindowsProxyGuard to SystemProxyGuard in bridge.rs
2026-06-02 23:01:45 +03:00
c2bc764613
feat: linux auto-sudo and tauri system tray background mode
2026-06-02 22:58:04 +03:00
0951afa499
feat(linux): implement SystemProxyGuard with GNOME/KDE support and headless proxy prompt
2026-05-31 21:01:28 +03:00
ba5fe72873
feat(cli): add --import, --proxy-env, interactive link prompt, and TUN safety guard for Linux
2026-05-31 20:53:54 +03:00
472fb8dc11
feat: user configured MTU automatically subtracts 48 for overhead compensation
2026-05-30 22:24:08 +03:00
8825cf0838
fix: resolve deadlock, multiplexing backpressure, and LTE fragmentation issues
2026-05-30 22:21:12 +03:00
0fdea7ee21
fix(client): resolve borrow after move error in bridge.rs and clean up warnings
2026-05-30 22:09:23 +03:00
9f143f730a
fix(client): send immediate Ping on connection to avoid 60s delay in UI
2026-05-30 22:07:22 +03:00
53132036c5
fix(client): flush stale proxy_rx messages on background reconnect to prevent UDP burst drops on mobile networks
2026-05-30 21:55:33 +03:00
a82c664e5b
Fix UDP IPv4-mapped IPv6 address matching bug and completely remove tun2socks
2026-05-30 21:14:29 +03:00
4f34f7f19c
fix(client): make Android TUN read loop resilient to EINTR, don't abort tunnel on transient read errors
2026-05-30 02:35:14 +03:00
38f1752fda
fix(client): stabilize UDP sessions - prevent crashes on transient recv errors in udp_nat and proxy
2026-05-30 02:12:15 +03:00
6b58e0e8f3
fix(client): fix async closure compilation error in udp_nat.rs
2026-05-30 02:03:56 +03:00
6fa6170c75
fix(client): bind SOCKS5 UDP socket to IPv6 properly, and fix 100% CPU spin in Android TUN reader
2026-05-30 02:01:31 +03:00
02de5456aa
fix(client): correctly parse ATYP in SOCKS5 UDP ASSOCIATE response to fix DNS/UDP on IPv6 networks
2026-05-30 01:52:25 +03:00
b67bd18eee
fix(client): prevent TUN read loop from crashing on invalid IP packets (fixes LTE MTU/CLAT issues)
2026-05-30 01:42:18 +03:00
902e762c91
fix(xhttp): rewrite RealityStream buffering to prevent packet drops and data loss
2026-05-30 01:10:29 +03:00
7257da174a
fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI
2026-05-30 00:54:46 +03:00
907d03ca38
fix(android): protect xhttp TCP socket from VPN routing loop
...
When using xhttp (UoT) mode on Android, the underlying TcpStream was
not protected with VpnService.protect(fd). This caused the TCP connection
to be routed back into the TUN interface, creating an infinite routing
loop and failing the connection immediately.
Added Android-specific socket protection to the TcpStream in connect_xhttp.
This fixes xhttp/UoT mode on mobile networks.
2026-05-29 17:27:50 +03:00
7986b1ca5b
fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile
...
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.
Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
drain client CCS from raw stream before wrapping in RealityStream
2026-05-29 16:21:59 +03:00
7656f3a3ce
feat: implement custom Reality protocol with ChaCha20Poly1305 and X25519
2026-05-29 15:00:17 +03:00
f4830f043f
feat: implement optional WSS framing for DPI bypass & extract framing logic
2026-05-29 13:59:59 +03:00
2870569c55
chore: reduce client and server logging verbosity for outbound datagrams and relays
2026-05-29 00:37:08 +03:00
ba71af2abb
feat: implement split-tunneling bypass for TCP/UDP and native UDP NAT
2026-05-29 00:06:11 +03:00
0334322aae
Fix Speedtest disconnects and Discord WebRTC
2026-05-28 19:25:06 +03:00
ebbe96e4e1
fix(client): prefer IPv6 on Android to support NAT64 mobile networks
2026-05-28 18:51:30 +03:00
1b836b26ab
Fix Windows TUN NLA delays, UI timer, and Android UDP DNS resolution
2026-05-28 18:19:01 +03:00
ospab