9dd029ae52
Fix all compilation errors and suppress all warnings across workspace
2026-06-13 02:30:57 +03:00
8749f12026
Fix CLI setup permissions, enforce global debug tracing, and fix GUI silent startup crash
2026-06-13 01:25:54 +03:00
2b0d85b530
Remove built-in DNS server and owndns features
2026-06-10 22:52:35 +03:00
6bf7b06b43
Remove stealth_port entirely and integrate fallback into UoT HTTP handler
2026-06-10 02:26:13 +03:00
de48cd91a0
feat: implement wintun dynamic downloading, add missing driver frontend modal, fix background logging and UAC helper issues
2026-06-09 01:01:36 +03:00
578e951b0d
fix(client): fix compilation error on linux due to server_ip_str
2026-06-07 21:03:52 +03:00
d0b79bd4b5
feat: implement built-in DNS server, adblock and dns leak prevention
2026-06-07 19:55:42 +03:00
332c714b61
Refactor: Phase 1 and 2 - Async architecture, JNI fixes, SmolTCP data races, and Tunnel optimizations
2026-06-03 02:06:06 +03:00
9d8f61fda5
fix: rename WindowsProxyGuard to SystemProxyGuard in bridge.rs
2026-06-02 23:01:45 +03:00
fb0dbf9da1
feat: linux auto-sudo and tauri system tray background mode
2026-06-02 22:58:04 +03:00
5e4fd2be02
feat(linux): implement SystemProxyGuard with GNOME/KDE support and headless proxy prompt
2026-05-31 21:01:28 +03:00
eef8869731
feat(cli): add --import, --proxy-env, interactive link prompt, and TUN safety guard for Linux
2026-05-31 20:53:54 +03:00
2fbdd4578d
feat: user configured MTU automatically subtracts 48 for overhead compensation
2026-05-30 22:24:08 +03:00
c9fad99144
fix: resolve deadlock, multiplexing backpressure, and LTE fragmentation issues
2026-05-30 22:21:12 +03:00
8771f17371
fix(client): resolve borrow after move error in bridge.rs and clean up warnings
2026-05-30 22:09:23 +03:00
ad66bccba5
fix(client): send immediate Ping on connection to avoid 60s delay in UI
2026-05-30 22:07:22 +03:00
37719a3fac
fix(client): flush stale proxy_rx messages on background reconnect to prevent UDP burst drops on mobile networks
2026-05-30 21:55:33 +03:00
ae8f5f28ca
Fix UDP IPv4-mapped IPv6 address matching bug and completely remove tun2socks
2026-05-30 21:14:29 +03:00
2a294c5fbc
fix(client): make Android TUN read loop resilient to EINTR, don't abort tunnel on transient read errors
2026-05-30 02:35:14 +03:00
60b5d565e8
fix(client): stabilize UDP sessions - prevent crashes on transient recv errors in udp_nat and proxy
2026-05-30 02:12:15 +03:00
3a39f19b45
fix(client): fix async closure compilation error in udp_nat.rs
2026-05-30 02:03:56 +03:00
f3f2cf1c17
fix(client): bind SOCKS5 UDP socket to IPv6 properly, and fix 100% CPU spin in Android TUN reader
2026-05-30 02:01:31 +03:00
3fd53686f8
fix(client): correctly parse ATYP in SOCKS5 UDP ASSOCIATE response to fix DNS/UDP on IPv6 networks
2026-05-30 01:52:25 +03:00
7e3b2e6633
fix(client): prevent TUN read loop from crashing on invalid IP packets (fixes LTE MTU/CLAT issues)
2026-05-30 01:42:18 +03:00
b9a95708c9
fix(xhttp): rewrite RealityStream buffering to prevent packet drops and data loss
2026-05-30 01:10:29 +03:00
cecd2756a0
fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI
2026-05-30 00:54:46 +03:00
af4a16e809
fix(android): protect xhttp TCP socket from VPN routing loop
...
When using xhttp (UoT) mode on Android, the underlying TcpStream was
not protected with VpnService.protect(fd). This caused the TCP connection
to be routed back into the TUN interface, creating an infinite routing
loop and failing the connection immediately.
Added Android-specific socket protection to the TcpStream in connect_xhttp.
This fixes xhttp/UoT mode on mobile networks.
2026-05-29 17:27:50 +03:00
ec333470aa
fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile
...
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.
Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
drain client CCS from raw stream before wrapping in RealityStream
2026-05-29 16:21:59 +03:00
ede54d3d0d
feat: implement custom Reality protocol with ChaCha20Poly1305 and X25519
2026-05-29 15:00:17 +03:00
ffa54cb5d7
feat: implement optional WSS framing for DPI bypass & extract framing logic
2026-05-29 13:59:59 +03:00
bc0f739cee
chore: reduce client and server logging verbosity for outbound datagrams and relays
2026-05-29 00:37:08 +03:00
4975073e3f
feat: implement split-tunneling bypass for TCP/UDP and native UDP NAT
2026-05-29 00:06:11 +03:00
2ac66bec42
Fix Speedtest disconnects and Discord WebRTC
2026-05-28 19:25:06 +03:00
7fba4b8aa0
fix(client): prefer IPv6 on Android to support NAT64 mobile networks
2026-05-28 18:51:30 +03:00
af19c52ac9
Fix Windows TUN NLA delays, UI timer, and Android UDP DNS resolution
2026-05-28 18:19:01 +03:00
ac5031fd95
Fix Windows TUN routing loop for SIM modems (0.0.0.0 NextHop)
2026-05-28 16:40:49 +03:00
1e7f562f81
Fix frontend ignoring tunnel errors & fix blocking wintun routines
2026-05-28 16:32:59 +03:00
7f0afab42a
Fix STUN bug, improve DNS in TUN, fix config gen, add GHA for clients
2026-05-28 14:39:42 +03:00
2c46750687
fix: remove DNS interception on server, fix TUN routing on Windows and Linux
...
- ostp-server/relay.rs: remove DNS port 53 interception — DNS queries
now pass through to the actual DNS server as regular TCP connections
- ostp-client/native_handler.rs (Windows): add explicit gateway/32 route
via real interface BEFORE setting default route via TUN to prevent loop
- ostp-client/native_handler.rs (Linux): properly detect real gateway and
add default route via TUN with metric 10 after server IP exclusion
- Remove redundant extra DNS host routes from Windows setup script
2026-05-28 12:30:06 +03:00
a20e74154e
fix(client): proxy UDP DNS over TCP via local socks5
2026-05-28 01:39:20 +03:00
839a364cac
fix(client): resolve server domain to IP before starting TUN to prevent DNS deadlock on reconnects
2026-05-28 01:09:10 +03:00
f69f194923
feat: Built-in DNS Server with AdBlock and DoH proxy
2026-05-27 22:23:06 +03:00
36a325997c
fix(server): generate correct public IP for client configs instead of 0.0.0.0
2026-05-27 18:17:11 +03:00
8ab49b84e9
feat: migrate TUN tunnel to native in-process smoltcp and refactor Android JNI layer
2026-05-27 00:17:19 +03:00
51875dba87
perf: increase backpressure limit to 16384 and reduce retransmit tick to 10ms for multi-gigabit speeds
2026-05-26 23:21:33 +03:00
abcb8999ce
fix: integrate BBR cwnd for bufferbloat and relax mobile timeouts
2026-05-26 20:54:30 +03:00
87540166f6
gui, flutter: use server rtt for ping display
2026-05-25 23:00:52 +03:00
9e50984549
Fix linux format args, proxy config fields, and unused warnings
2026-05-24 23:03:50 +03:00
3e511f1fc5
Implement XTLS-Reality masquerade for UoT/TCP and fix MTU/config settings
2026-05-24 22:49:51 +03:00
ef242bf6f4
feat(client): add linux headless warnings for TUN mode and sysproxy instructions
2026-05-21 22:31:02 +03:00
ospab