Blossom
9f93125afe
docs: hyphenate compound modifiers in tagline ( #1578 )
2026-05-20 17:35:33 -07:00
白日梦主义
3991117d27
fix(acl): normalize trailing dot in domain matches ( #1574 )
...
* fix(acl): normalize trailing dot in domain matches
The ACL like
```yaml
- reject(example.com)
- reject(suffix:blocked.test)
- reject(*.wild.test)
```
can be easily bypass through by adding a dot to the domain like
example.com.:443
Signed-off-by: Cherrling <me@cherr.cc>
* fix(acl): trim all trailing dots and add tests
Use strings.TrimRight instead of strings.TrimSuffix so domains with
multiple trailing dots (e.g. example.com..) are also normalized and
cannot bypass ACL rules. Add test coverage for trailing-dot handling
on exact, wildcard and suffix domain rules, as well as for trailing
dots in rule patterns.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
---------
Signed-off-by: Cherrling <me@cherr.cc>
Co-authored-by: Toby <tobyxdd@gmail.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-16 14:06:04 -07:00
prudhvi
0e2b37ad6c
Reuse 32KB buffers in copyBufferLog with sync.Pool ( #1572 )
...
* Bolt: Reuse 32KB buffers in copyBufferLog with sync.Pool
Delete .jules directory
* Add benchmark test for copyBufferLog function
2026-05-15 22:19:36 -07:00
白日梦主义
6dc0f3f792
fix: prefix match in DNS https ( #1573 )
...
Signed-off-by: Cherrling <me@cherr.cc>
2026-05-15 16:37:19 -07:00
白日梦主义
d34dc40eff
fix(outbounds): reject invalid port values ( #1569 )
2026-05-15 16:24:47 -07:00
Toby
64c3963856
fix(realm): client should accept punch packets from any source address
2026-05-10 10:13:49 -07:00
Toby
2639b064b8
fix: add "sniGuard: disable" to cert command output
2026-05-10 01:06:05 -07:00
Toby
97a341690a
chore: log server address on connect, log realm peer address candidates
2026-05-09 13:24:13 -07:00
Toby
c1868d5c14
feat(realm): STUN on connect
2026-05-08 19:13:20 -07:00
Toby
891b7ad7cf
fix(hyperbole): android build
2026-05-08 16:26:15 -07:00
Toby
93f68c526b
feat: Hysteria Realms ( #1560 )
...
* feat(wip): hysteria realms
* feat: port prediction for punching symmetric NAT
* feat: add "cert" subcommand for easy self signed cert generation
* refactor: update address scheme from "hysteria2+realm" to just "realm"
* fix: give up on realm register fatal errors
* chore: update formatting (gofumpt)
* perf: realm proxy UDP methods on PunchPacketConn so quic-go and obfs keep DF/PMTU and buffer sizing
* feat: add support for local UDP source port config in realm addresses
* doc: README for realm pkg
2026-05-08 14:16:21 -07:00
Toby
ed4127abca
ci: bump action versions
2026-05-05 17:08:54 -07:00
Toby
99ad91c58a
fix: avoid mutating PSK backing storage in salamander obfs
2026-04-26 13:57:19 -07:00
Toby
3bbc0e198a
ci: update actions version & bump go to 1.26
2026-04-25 17:31:19 -07:00
Toby
697203f49d
feat: omit datagram TP
2026-04-25 17:07:05 -07:00
Lenar Khannanov
fca7ece7b2
fix(app): invalid priority in output hook when setting redirect with nft ( #1551 )
...
* fix(app): invalid priority in output hook when setting redirect with nft
Server startup fails with nftables before v1.0.9, as it doesn't support
dstnat mnemonic in the output hook. Work around this by using the raw
number (-100) as recommended by Florian Westphal [1].
1. https://bugzilla.netfilter.org/show_bug.cgi?id=1694#c1
* chore(app): use "-100" instead of "dstnat" for both chains
---------
Co-authored-by: Toby <tobyxdd@gmail.com>
2026-04-22 13:46:59 -07:00
Toby
6476d21c59
feat: client & server use quic.Transport ( #1550 )
2026-04-21 14:02:37 -07:00
Toby
5647de5b87
ci: add code format check
2026-04-18 11:48:29 -07:00
白日梦主义
1b6636afe6
fix: repair the oom problem when enable sniff ( #1547 )
2026-04-18 11:33:00 -07:00
Theodore Chang
996612d6b7
Add nftables to Dockerfile for firewall rules ( #1543 )
2026-04-02 12:44:13 -07:00
Toby
25a2530ac7
fix: add -w flag to iptables commands and env var for firewall backend
2026-03-30 12:21:04 -07:00
Toby
724e469f70
Merge pull request #1540 from TLCFEM/bugfix-add-iptables
...
Add iptables to Dockerfile dependencies
2026-03-29 22:30:35 -07:00
Toby
d08b493ff9
fix: quic-go congestion datagram size panic issue
2026-03-29 22:16:13 -07:00
Theodore Chang
4bb6d0111b
Add iptables to Dockerfile dependencies
2026-03-30 04:15:17 +02:00
Toby
d25251e374
Merge pull request #1538 from apernet/ci/test
...
ci: test workflow
2026-03-29 15:05:40 -07:00
Toby
9e363c93c4
fix: update requirements.txt 2
2026-03-29 15:03:43 -07:00
Toby
7b866a81e4
fix: update requirements.txt
2026-03-29 14:59:11 -07:00
Toby
2c46b2cdba
fix: go test command
2026-03-29 14:54:12 -07:00
Toby
14500fdb40
ci: test workflow
2026-03-29 14:52:14 -07:00
Toby
d425068a41
Merge pull request #1537 from apernet/feat/udphop-rand
...
feat: port hopping random interval
2026-03-29 14:00:46 -07:00
Toby
6ef838d2c8
feat: port hopping random interval
2026-03-29 14:00:12 -07:00
Toby
82d9935c85
Merge pull request #1536 from apernet/feat/udphop-server
...
feat: server side UDP port range listening (nftables/iptables)
2026-03-29 13:24:08 -07:00
Toby
5fd6d4d887
feat: server side UDP port range listening (nftables/iptables)
2026-03-29 11:47:09 -07:00
Toby
97f91ab774
Merge pull request #1535 from apernet/ci/bump-actions-ver
...
ci: bump download-artifact/upload-artifact versions
2026-03-29 10:30:33 -07:00
Toby
9778a05264
ci: bump download-artifact/upload-artifact versions
2026-03-29 10:30:01 -07:00
Toby
8059de329c
Merge pull request #1534 from apernet/feat/bbr-profiles
...
feat: add configurable congestion modes and BBR profiles
2026-03-29 10:08:02 -07:00
Toby
b3f2193f10
feat: add configurable congestion modes and BBR profiles
2026-03-28 13:11:17 -07:00
Toby
a00368f9e3
Merge pull request #1533 from apernet/dev/bbr-scale
...
fix: BBR scale window for datagram size
2026-03-27 18:31:15 -07:00
Toby
61c75a260f
fix: BBR scale window for datagram size
2026-03-27 18:13:57 -07:00
Toby
3c9dd620ad
Merge pull request #1459 from latecrown/xforwarded
...
Add an option to enable XForwarded headers
2026-03-19 13:50:45 -07:00
tobyxdd
4063551f79
chore: rename to xForwarded
2026-03-19 13:49:40 -07:00
Toby
0060e496ce
Merge pull request #1521 from apernet/dev/better-speedtest
...
feat: time-based speed test
2026-02-22 19:21:27 -08:00
tobyxdd
5252803b35
feat: time-based speed test
2026-02-21 17:42:43 -08:00
Toby
ceee7f9577
Merge pull request #1501 from shabbywu/refactor/app-client
...
refactor: initialize a Viper instance to replace with the global singleton
2026-02-21 17:15:43 -08:00
tobyxdd
18960685d3
Merge remote-tracking branch 'origin/master' into refactor/app-client
2026-02-21 17:14:47 -08:00
tobyxdd
dd913426c5
chore: code tweaks
2026-02-21 17:07:28 -08:00
tobyxdd
ea2e858c06
chore: bump cobra & viper versions
2026-02-21 17:03:34 -08:00
Hari
617372193c
Merge pull request #1519 from apernet/fix/stream-dispatcher-tcp-request-frame
...
fix: consume TCP request frame type with StreamDispatcher
2026-02-18 10:21:26 +08:00
Hari
6da70e80aa
fix: consume TCP request frame type with StreamDispatcher
2026-02-18 10:18:52 +08:00
Toby
cd2f0a7bec
Merge pull request #1518 from apernet/dev/fix-go-mod
...
fix: apernet/quic-go go mod tag ref
2026-02-17 12:17:02 -08:00
