ospab
/
ostp
mirror of https://github.com/ospab/ostp.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
378 Commits 2 Branches 170 Tags 131 MiB
Commit Graph

378 Commits

Author SHA1 Message Date
ospab eef8869731 feat(cli): add --import, --proxy-env, interactive link prompt, and TUN safety guard for Linux 2026-05-31 20:53:54 +03:00
ospab 5b3a9f2e14 fix(flutter): enforce MTU 1280 for Android TUN while passing 1140 to Rust core for TCP MSS clamping 2026-05-30 22:40:03 +03:00
ospab e96c4b6b40 fix: remove IPv6 from Android TUN to allow MTU < 1280 and prevent crashes 2026-05-30 22:31:24 +03:00
ospab 2fbdd4578d feat: user configured MTU automatically subtracts 48 for overhead compensation 2026-05-30 22:24:08 +03:00
ospab c9fad99144 fix: resolve deadlock, multiplexing backpressure, and LTE fragmentation issues 2026-05-30 22:21:12 +03:00
ospab 8771f17371 fix(client): resolve borrow after move error in bridge.rs and clean up warnings 2026-05-30 22:09:23 +03:00
ospab ad66bccba5 fix(client): send immediate Ping on connection to avoid 60s delay in UI 2026-05-30 22:07:22 +03:00
ospab 5100d75cf6 fix(client): remove IPv6 DNS servers from Android VPN to prevent DNS failures on IPv6-preferred LTE networks when server lacks IPv6 2026-05-30 22:05:11 +03:00
ospab 37719a3fac fix(client): flush stale proxy_rx messages on background reconnect to prevent UDP burst drops on mobile networks 2026-05-30 21:55:33 +03:00
ospab e90bfc7510 Patch netstack-smoltcp locally to fix catastrophic UDP tunnel stream crash on invalid packets 2026-05-30 21:34:31 +03:00
ospab a3266029d4 CI/CD: release version v0.2.77 2026-05-30 21:15:20 +03:00
ospab ae8f5f28ca Fix UDP IPv4-mapped IPv6 address matching bug and completely remove tun2socks 2026-05-30 21:14:29 +03:00
ospab 2a294c5fbc fix(client): make Android TUN read loop resilient to EINTR, don't abort tunnel on transient read errors 2026-05-30 02:35:14 +03:00
ospab bd38b5b279 CI/CD: release version v0.2.76 2026-05-30 02:13:29 +03:00
ospab 60b5d565e8 fix(client): stabilize UDP sessions - prevent crashes on transient recv errors in udp_nat and proxy 2026-05-30 02:12:15 +03:00
ospab 3a39f19b45 fix(client): fix async closure compilation error in udp_nat.rs 2026-05-30 02:03:56 +03:00
ospab f3f2cf1c17 fix(client): bind SOCKS5 UDP socket to IPv6 properly, and fix 100% CPU spin in Android TUN reader 2026-05-30 02:01:31 +03:00
ospab 3fd53686f8 fix(client): correctly parse ATYP in SOCKS5 UDP ASSOCIATE response to fix DNS/UDP on IPv6 networks 2026-05-30 01:52:25 +03:00
ospab 7e3b2e6633 fix(client): prevent TUN read loop from crashing on invalid IP packets (fixes LTE MTU/CLAT issues) 2026-05-30 01:42:18 +03:00
ospab 9edfb3cb3f CI/CD: release version v0.2.75 2026-05-30 01:40:52 +03:00
ospab 63b8707161 fix(build): remove ignored ostp-brain from Cargo.toml members to fix Github Actions 2026-05-30 01:33:34 +03:00
ospab 159abb4c24 CI/CD: release version v0.2.74 2026-05-30 01:14:33 +03:00
ospab b9a95708c9 fix(xhttp): rewrite RealityStream buffering to prevent packet drops and data loss 2026-05-30 01:10:29 +03:00
ospab cecd2756a0 fix(client/mobile): resolve fdsan crash and mobile network proxy issues, add auto config UI 2026-05-30 00:54:46 +03:00
ospab a786bd8691 CI/CD: release version v0.2.73 2026-05-29 17:37:33 +03:00
ospab 04841f1c8b feat(ui): decouple WSS from UoT and add standalone Reality toggle 
Extracted the WSS toggle from the UoT stealth block to make it
accessible regardless of transport mode. Added a dedicated XTLS-Reality
toggle to avoid relying on empty/non-empty PBK strings to determine
the enabled state, allowing users to toggle Reality without wiping keys.
 2026-05-29 17:36:31 +03:00
ospab 77951e800d CI/CD: release version v0.2.72 2026-05-29 17:29:06 +03:00
ospab af4a16e809 fix(android): protect xhttp TCP socket from VPN routing loop 
When using xhttp (UoT) mode on Android, the underlying TcpStream was
not protected with VpnService.protect(fd). This caused the TCP connection
to be routed back into the TUN interface, creating an infinite routing
loop and failing the connection immediately.

Added Android-specific socket protection to the TcpStream in connect_xhttp.
This fixes xhttp/UoT mode on mobile networks.
 2026-05-29 17:27:50 +03:00
ospab 59a9d5499d CI/CD: release version v0.2.71 2026-05-29 16:42:05 +03:00
ospab cde1035d80 fix(workspace): remove missing ostp-prober member from workspace 2026-05-29 16:41:34 +03:00
ospab 8d4b3a77a4 CI/CD: release version v0.2.70 2026-05-29 16:23:12 +03:00
ospab ec333470aa fix(reality): fix TLS 1.3 handshake causing 1KB DPI cutoff on mobile 
The core bug: server sent 5 TLS records in server_hello but client only
read the first one (ServerHello), then passed remaining bytes (CCS + fake
records) into RealityStream. RealityStream saw 0x14 (CCS) != 0x17 and
immediately returned an error, killing the connection.

Changes:
- reality.rs: append ChangeCipherSpec after ClientHello (RFC 8446 D.4)
  export REALITY_SERVER_HANDSHAKE_RECORDS=5 constant
- xhttp.rs: drain all 5 server handshake records before creating RealityStream
- uot.rs: rebuild server_hello as proper 5-record TLS 1.3 flight:
  ServerHello + CCS + fake EE (108B) + fake Cert (812B) + fake Fin (52B)
  drain client CCS from raw stream before wrapping in RealityStream
 2026-05-29 16:21:59 +03:00
ospab fe32703514 CI/CD: release version v0.2.69 2026-05-29 15:19:51 +03:00
ospab 7d025c119a docs: update obfuscation docs with XTLS-Reality 2026-05-29 15:02:39 +03:00
ospab ede54d3d0d feat: implement custom Reality protocol with ChaCha20Poly1305 and X25519 2026-05-29 15:00:17 +03:00
ospab ffa54cb5d7 feat: implement optional WSS framing for DPI bypass & extract framing logic 2026-05-29 13:59:59 +03:00
ospab bc0f739cee chore: reduce client and server logging verbosity for outbound datagrams and relays 2026-05-29 00:37:08 +03:00
ospab 73b3b4cc02 docs: add CONTRIBUTING guide in English and Russian, link in README 2026-05-29 00:25:40 +03:00
ospab 1141958759 CI/CD: release version v0.2.68 2026-05-29 00:18:47 +03:00
ospab 4975073e3f feat: implement split-tunneling bypass for TCP/UDP and native UDP NAT 2026-05-29 00:06:11 +03:00
ospab 61c6d0d10b CI/CD: release version v0.2.67 2026-05-28 23:18:21 +03:00
ospab 177787b29f CI/CD: release version v0.2.66 2026-05-28 19:43:56 +03:00
ospab 57d5715eb8 Fix E0728: cannot await inside or_else closure in relay.rs 2026-05-28 19:39:07 +03:00
ospab 1ea92b35cb CI/CD: release version v0.2.65 2026-05-28 19:33:33 +03:00
ospab b7911aabf0 Add 'Use Built-in' DNS button in GUI 2026-05-28 19:31:06 +03:00
ospab 2ac66bec42 Fix Speedtest disconnects and Discord WebRTC 2026-05-28 19:25:06 +03:00
ospab cbb0093dd5 Fix UDP over XHTTP and intercept 10.1.0.1 for panel.ostp 2026-05-28 19:13:39 +03:00
ospab 283885244b CI/CD: release version v0.2.64 2026-05-28 18:51:54 +03:00
ospab 7fba4b8aa0 fix(client): prefer IPv6 on Android to support NAT64 mobile networks 2026-05-28 18:51:30 +03:00
ospab eeabd3889b CI/CD: release version v0.2.63 2026-05-28 18:21:12 +03:00