Proto commits in XTLS/Xray-core

These commits are when the Protocol Buffers files have changed: (only the last 100 relevant commits are shown)

Commit:a3c6cc6
Author:LjhAUMEM
Committer:GitHub

XDNS finalmask: Default values for `types`; `name`->`names`; `type`+`addr`->`addrs` (#7090) https://github.com/XTLS/Xray-core/pull/7090#issuecomment-5989883544 https://github.com/XTLS/Xray-core/pull/7090#issuecomment-5988755551 https://github.com/XTLS/Xray-core/pull/7089#issuecomment-5987266008

The documentation is generated from this commit.

Commit:6cd6c61
Author:Meo597

Merge commit 'b26a91de4f3294e26a0ad0a970b81a386a41f789' into lua

Commit:2440f53
Author:Meo597

feat(router): add Lua scripting for routing script

Commit:1f30491
Author:patterniha
Committer:RPRX

TUN inbound: Add `autoSystemWfpBlockLeak` on Windows (blocks "dns" and "misconfigtun" IPv4/IPv6 traffic leaks outside the TUN); Rename `autoSystemDNS` to `autoSystemDnsToGateway` on Linux (and change some behaviors) (#6853) https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5899791359 https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5901287980 https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5903680113 https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904123488 https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5904647772 https://github.com/XTLS/Xray-core/pull/6853#issuecomment-5905047424 Fixes https://github.com/XTLS/Xray-core/issues/6454#issuecomment-5863800676 --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Commit:1c225a8
Author:patterniha

TUN inbound: Make `autoSystemWfpBlockLeak` a list of the leaks to block autoSystemWfpBlockLeak now takes ["dns", "misconfig"] instead of true: "dns" keeps DNS inside the TUN, and "misconfig" blocks an IP version that no route leads to the TUN, the leak of a configuration that routes only one of them. Either can be used alone, e.g. ["dns"] to block DNS leaks while an IP version stays out of the TUN on purpose. Unknown values are rejected. The config field becomes a repeated string with the same number; it was never released. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Commit:e51b3c3
Author:Cluvex
Committer:GitHub

Noise finalmask: `type` supports "exp" (#6862) https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859092964 https://github.com/XTLS/Xray-core/pull/6844#issuecomment-5859855674 https://github.com/XTLS/Xray-core/pull/6862#issuecomment-5897471145

Commit:4ec4fb8
Author:patterniha

TUN inbound: Rename to `autoSystemWfpBlockLeak` and `autoSystemDnsToGateway` autoSystemWFP becomes autoSystemWfpBlockLeak, saying that the WFP filters block leaks, and autoSystemDNS becomes autoSystemDnsToGateway, saying where it points the system DNS, so that pointing the system DNS at the gateway on Windows later would fit the same name. Their config fields keep their numbers; neither was released. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Commit:63de613
Author:patterniha

TUN inbound: Rename `strictRoute` to `autoSystemWFP` It only turns on the Windows Filtering Platform filters, along with Xray resolving its own lookups while they restrict DNS, so it is named after what it sets up in the system, like autoSystemRoutingTable and autoSystemDNS. The config field becomes auto_system_wfp, with the same number; strictRoute was never released. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Commit:fc8f8a4
Author:LjhAUMEM
Committer:GitHub

XDNS finalmask: Refactor and new parameters (#6718) https://github.com/XTLS/Xray-core/pull/6718#issuecomment-5894987590 Fixes https://github.com/XTLS/Xray-core/issues/6692

Commit:eb29a4e
Author:patterniha

TUN inbound: Make `strictRoute` false by default Like sing-box's strict_route, strictRoute is now false by default, so the Windows Filtering Platform filters are only added when it is set to true (together with autoSystemRoutingTable). With unset meaning false, strict_route becomes a plain bool field. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Commit:2db099b
Author:patterniha

TUN inbound: Block DNS and IPv6 leaks outside the TUN on Windows; Add `strictRoute` Windows sends name queries to the DNS servers of all interfaces, and a resolver on the local network (e.g. 192.168.1.1 from DHCP) is reached through its more specific LAN route instead of the TUN, so DNS leaks past it. IPv6 bypasses a TUN that cannot carry it. With autoSystemRoutingTable set, the Windows TUN now adds Windows Filtering Platform filters, all in one transaction and in a dynamic session, so that they are removed when Xray exits, even if it crashes: - DNS (port 53) only goes through the TUN, in both directions: its local address, and the interface it leaves or arrives by, must be the TUN's. - IPv6 is blocked in both directions when the TUN has no IPv6 address or no IPv6 route, except loopback, neighbor and multicast listener discovery, and DHCPv6. - Xray's own traffic is exempt: its connections out with a hard permit, which Windows Firewall rules do not override (like sing-box's strict_route), connections to its inbounds with an ordinary one. If the filters cannot be added, the TUN does not start on Windows 10 and later (only a warning on 7/8). The new `strictRoute` option (true by default) turns them off. Also on Windows: - A warning for `dns` servers outside gateway and autoSystemRoutingTable, as queries to them cannot go through the TUN and are blocked. - While DNS is restricted and autoOutboundsInterface is in use, Xray resolves the names it would ask Windows for itself (Go's resolver on its own sockets). Those lookups and the `localhost` DNS server skip the TUN's DNS servers, unless another interface uses them too, instead of looping back into the TUN. - The DNS cache is flushed when the TUN starts and stops, and DNS registration is turned off on the TUN (through netsh before Windows 10 1809). - Close no longer panics when registering the route or interface change callbacks failed. The README's Windows section describes all of it. Tested on Windows 11, elevated, amd64 and 386: the filters, DNS arriving through a real Wintun adapter and blocked outside it, the IPv6 block, Windows Firewall rules, and a real Xray run. Windows 7/8 and Windows 10 before 1809 are untested. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Commit:47a2c2f
Author:youugiuhiuh
Committer:GitHub

TUN inbound: Add `autoSystemDNS` on Linux (to TUN's `gateway`) (#6773) https://github.com/XTLS/Xray-core/issues/6454#issuecomment-4931311976 https://github.com/XTLS/Xray-core/pull/6773#issuecomment-5755516423 https://github.com/XTLS/Xray-core/pull/6807#issuecomment-5807844210

Commit:7a01883
Author:Cluvex
Committer:GitHub

Proxy: Add MASQUE inbound (IETF CONNECT-IP server, RFC 9484) (#6844) Completes https://github.com/XTLS/Xray-core/pull/6807 and https://github.com/XTLS/Xray-core/pull/6810

Commit:235843c
Author:Meo597

feat(dns): add Lua scripting for DNS queries

Commit:7d3e44f
Author:Esko Mobius
Committer:GitHub

Proxy: Add MASQUE outbound & transport (IETF CONNECT-IP, RFC 9484) (#6807) Closes https://github.com/XTLS/Xray-core/issues/5495#issuecomment-3710683679

Commit:05921d1
Author:copilot-swe-agent[bot]
Committer:GitHub

Implement lean "system" TCP/IP stack backend for TUN inbound Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:efc9e6d
Author:LjhAUMEM
Committer:RPRX

WireGuard outbound: Remove `remoteDNS`' "local" mode and `domainStrategy` (#6771) https://github.com/XTLS/Xray-core/issues/6567#issuecomment-5660953757 https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751826982 https://github.com/XTLS/Xray-core/pull/6771#issuecomment-5751831637

Commit:8267cf9
Author:LjhAUMEM
Committer:GitHub

Transport: Refactor to be based on Finalmask's dialer & listener (#6754) https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5645958010 https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5720818254 https://github.com/XTLS/Xray-core/pull/6754#issuecomment-5751585906

Commit:dcdfc57
Author:Risaro
Committer:GitHub

XDRIVE transport: Add the Google Drive and "template" backend (#6748) https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3849778103 https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3851839033 https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627294204 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5660444946 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5719209642 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:3461c51
Author:RPRX
Committer:GitHub

XDRIVE transport: The universal remote-storage/any-service-based proxy, ignoring IP whitelists (#5645) https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3796734827 https://github.com/XTLS/Xray-core/pull/5581#issuecomment-3797134147 https://github.com/XTLS/Xray-core/pull/5645#issuecomment-3899873945 https://github.com/XTLS/Xray-core/pull/6745#issuecomment-5627420177 https://github.com/XTLS/Xray-core/pull/6748#issuecomment-5740443122 --------- Co-authored-by: Risaro <62798663+Risaro@users.noreply.github.com>

Commit:1165fe8
Author:𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇

Clean up and make a reference Clean the sing-* based Shadowsocks 2022 with related remnants, making a "clean" state reference

Commit:18a1b50
Author:LjhAUMEM
Committer:GitHub

Finalmask: Make "udpHop" a new UDP mask (#6327) https://github.com/XTLS/Xray-core/pull/6327#issuecomment-5592421364 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:3e2f040
Author:Meow
Committer:GitHub

Direct/Freedom outbound: Better Compatibility (#6058) Fixes https://github.com/XTLS/Xray-core/issues/6393

Commit:01a034b
Author:风扇滑翔翼
Committer:GitHub

Blackhole outbound: Add customizable response data support (#6713) https://github.com/XTLS/Xray-core/pull/6711#issuecomment-5508683394 --------- Co-authored-by: Raaad1on <djilyawhite@gmail.com>

Commit:f49d8b8
Author:Fangliding

Clear code & add custom

Commit:9bce006
Author:Meo597

Merge commit 'cd4ce973e9f6ef3a7acf9a7030927b4143f9ea47' into finalrules

Commit:ada99a4
Author:LjhAUMEM
Committer:GitHub

Hysteria: Upgrade to official v2.12.2 (#6565) https://github.com/XTLS/Xray-core/pull/6565#issuecomment-5202554275 Fixes https://github.com/XTLS/Xray-core/issues/6408 Fixes https://github.com/XTLS/Xray-core/issues/6598 ...

Commit:c7e569b
Author:LjhAUMEM
Committer:GitHub

WireGuard outbound: Add `remoteDNS` & honor TTL (#6620) Closes https://github.com/XTLS/Xray-core/pull/6569#issuecomment-5263789755 Fixes https://github.com/XTLS/Xray-core/issues/6567#issuecomment-5150957597 --------- Co-authored-by: LagPixelLOL <2282688304@qq.com>

Commit:a12801c
Author:fanymagnet
Committer:GitHub

Routing: Add `localOS` that directly matches `runtime.GOOS` (#6553) https://github.com/XTLS/Xray-core/pull/6553#issuecomment-5262686006

Commit:6ab123b
Author:Sparrow
Committer:GitHub

XMC finalmask: Add default directional padding/keep-alive packets, matching Minecraft 26.1.2 login/join/etc traffic shapes (#6487) https://github.com/XTLS/Xray-core/pull/6487#issuecomment-5092235757 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>

Commit:1d8eb81
Author:Jasper344612
Committer:GitHub

TUN inbound: Add `desc` config for Windows ("Wintun" by default) (#6486) https://github.com/XTLS/Xray-docs-next/pull/872#issuecomment-4936055488

Commit:3538757
Author:Exclude0122
Committer:GitHub

Finalmask: Add XMC (TCP, Minecraft) (#6210) https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4573680059 https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4582554889 https://github.com/XTLS/Xray-core/pull/6210#issuecomment-4937008835

Commit:a659344
Author:Meo597

Merge commit 'd7fa2076c3e5401173bf9b58f7b07f9aa5174443' into finalrules

Commit:d7fa207
Author:Katana
Committer:GitHub

Xray-core: Forbid unencrypted outbounds on public Internet for VLESS and Trojan; Remove "none/zero/plain" for VMess and Shadowsocks (#6303) https://github.com/XTLS/Xray-core/pull/5640#issuecomment-4611416512 https://github.com/XTLS/Xray-core/pull/6303#issuecomment-4668055274 --------- Co-authored-by: Meow <197331664+Meo597@users.noreply.github.com>

Commit:36b7589
Author:Meo597

Merge commit '65f6f0a43b814b2980740e119aa96f1adcb82e9a' into finalrules

Commit:a2f6a4b
Author:Meo597

remove proxySettings

Commit:345c76f
Author:bitwiresys
Committer:GitHub

WireGuard inbound: Support dynamic peer management (#6360) https://github.com/XTLS/Xray-core/pull/6360#issuecomment-4780311547 Closes https://github.com/XTLS/Xray-core/issues/6314 --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

Commit:567500c
Author:patterniha
Committer:RPRX

Fragment finalmask: Add `lengths` and `delays` (#6334) Usage: https://github.com/XTLS/Xray-core/pull/6334#issue-4685556394 Behavior: https://github.com/XTLS/Xray-core/pull/6334#issuecomment-4751547750 --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

Commit:676212c
Author:Fangliding
Committer:Fangliding

Refine proto usage

Commit:c815c2f
Author:j2rong4cn
Committer:GitHub

Loopback outbound: Add `sniffing` (#6326) Example: https://github.com/XTLS/Xray-core/pull/6326#issue-4659701786

Commit:9fa107c
Author:Fangliding

Feat: Add mTLS

Commit:8626311
Author:LjhAUMEM
Committer:RPRX

WireGuard proxy: Refactor (#6287) And https://github.com/XTLS/Xray-core/pull/6303#issuecomment-4669158076 Fixes https://github.com/XTLS/Xray-core/issues/6257

Commit:1b8d07f
Author:Fangliding

Refactor tls cert hot reload

Commit:e10347b
Author:风扇滑翔翼
Committer:GitHub

XHTTP transport: Add `sessionIDTable` and `sessionIDLength`; Rename `session*` to `sessionID*` (#6258) https://github.com/XTLS/Xray-core/pull/6258#issuecomment-4658534046 https://github.com/XTLS/Xray-core/pull/6253#issuecomment-4657704004 https://github.com/XTLS/Xray-core/pull/6251#issuecomment-4612756220 Usage: https://github.com/XTLS/Xray-core/pull/6258#issue-4580617110 Closes https://github.com/XTLS/Xray-core/issues/6264 --------- Co-authored-by: XXcipherX <knazevvv6514@gmail.com>

Commit:bbcf2c4
Author:Fangliding

Rename

Commit:95e9816
Author:𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇
Committer:GitHub

Chore: Limit sing* dependencies to shadowsocks_2022 only (#6286) https://github.com/XTLS/Xray-core/pull/6286#issuecomment-4658968225

Commit:2f121bd
Author:Fangliding
Committer:Fangliding

Custom sessionID

Commit:55956f8
Author:𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇
Committer:GitHub

TLS config: Remove some deprecated fields (#6226) https://t.me/projectXtls/1490 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:cb8cd04
Author:j2rong4cn
Committer:GitHub

DNS outbound: Replace "reject" with "return" (`rCode` is 0 by default) (#6214) https://github.com/XTLS/Xray-core/pull/6214#issuecomment-4587988752 Example: https://github.com/XTLS/Xray-core/pull/6214#issue-4553786283 --------- Co-authored-by: Meo597 <197331664+Meo597@users.noreply.github.com>

Commit:aba2272
Author:LjhAUMEM
Committer:RPRX

Finalmask: Add mkcp-legacy (UDP) to replace mkcp-* and legacy header-* (#6201) https://github.com/XTLS/Xray-core/pull/6193#issuecomment-4543737699 https://github.com/XTLS/Xray-core/pull/6201#issuecomment-4574213827 Example: https://github.com/XTLS/Xray-core/pull/6201#issue-4525483699

Commit:2b42699
Author:LjhAUMEM
Committer:GitHub

XICMP finalmask: Refactor & Speed up; Add multi `ips` and `dgram` mode (client) (#6168) https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4198514120 https://github.com/XTLS/Xray-core/pull/6168#issuecomment-4571606666 https://github.com/XTLS/Xray-core/pull/6168#issuecomment-4573294637 Example: https://github.com/XTLS/Xray-core/pull/6168#issue-4484980927 Closes https://github.com/XTLS/Xray-core/discussions/5879

Commit:66a8100
Author:LjhAUMEM
Committer:RPRX

Salamander finalmask: Support `packetSize` (Gecko in Hysteria v2.9.2) (#6198) And some other refinements https://github.com/XTLS/Xray-core/pull/6198#issuecomment-4567438813 Example: https://github.com/XTLS/Xray-core/pull/6198#issue-4522226670

Commit:3630369
Author:LjhAUMEM
Committer:GitHub

Finalmask: Add Realm (UDP hole punching in Hysteria v2.9.1) (#6137) https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4446406536 https://github.com/XTLS/Xray-core/pull/6137#issuecomment-4469822775 Example: https://github.com/XTLS/Xray-core/pull/6137#issue-4454013510

Commit:1cd7d25
Author:LjhAUMEM
Committer:GitHub

header-custom finalmask: Remove headerConnMode headerReadAddrAware interface (#6193) https://github.com/XTLS/Xray-core/pull/5920#issuecomment-4253108964 https://github.com/XTLS/Xray-core/pull/6193#issuecomment-4531875088

Commit:1dbafe6
Author:Meow
Committer:RPRX

Config: Rename `network`/`address`/`port` in Tunnel inbound and DNS outbound (#6084) https://github.com/XTLS/Xray-core/pull/6083#issuecomment-4387702965 https://github.com/XTLS/Xray-core/pull/6084#issuecomment-4395333530

Commit:c42deab
Author:Meow
Committer:RPRX

Config: Rename inbounds' `clients`/`accounts` to `users` (#6083) https://github.com/XTLS/Xray-core/pull/6055#issuecomment-4363896372 https://github.com/XTLS/Xray-core/pull/6082#issuecomment-4384523482

Commit:756a2d1
Author:LjhAUMEM
Committer:GitHub

Hysteria client: Fix `sendThrough` (#6063) And fixes https://github.com/XTLS/Xray-core/issues/6046

Commit:958eb9e
Author:Meow
Committer:GitHub

Direct/Freedom outbound: Add `blockDelay` to `finalRules` (30~90s by default) (#6060) Document: https://xtls.github.io/config/outbounds/freedom.html#finalruleobject https://github.com/XTLS/Xray-core/pull/6058#issuecomment-4363489838 https://github.com/XTLS/Xray-core/pull/6058#issuecomment-4363522836 https://github.com/XTLS/Xray-core/pull/6060#issuecomment-4363675060 https://github.com/XTLS/Xray-core/pull/6060#issuecomment-4364587508

Commit:1fc6850
Author:风扇滑翔翼
Committer:GitHub

TLS ECH: Remove `echForceQuery` (ECH is forced now if configured) (#6032) https://github.com/XTLS/Xray-core/pull/5887#issuecomment-4184701517

Commit:4e87f59
Author:Meow
Committer:RPRX

Direct/Freedom outbound: Add `finalRules` (matches `network`, `port` and `ip`, then `action`) with default safe policies (#6027) Document: https://xtls.github.io/config/outbounds/freedom.html#finalruleobject https://github.com/XTLS/Xray-core/pull/6027#issuecomment-4335790980 https://github.com/XTLS/Xray-core/pull/6027#issuecomment-4336309055 https://github.com/XTLS/Xray-core/pull/6027#issuecomment-4338269638 Closes https://github.com/XTLS/Xray-core/issues/6018#issuecomment-4329273637 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:4e81927
Author:Fangliding

Origin ech query design

Commit:8939657
Author:copilot-swe-agent[bot]
Committer:GitHub

refactor: drop socket proto browser_dialer and remove dialer init locks Agent-Logs-Url: https://github.com/XTLS/Xray-core/sessions/b6b773ed-3d59-4a25-b688-8032a496a8de Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:c2116bb
Author:copilot-swe-agent[bot]
Committer:GitHub

feat: add browserDialer under sockopt and wire transports Agent-Logs-Url: https://github.com/XTLS/Xray-core/sessions/56665ec5-84ea-4bc3-a812-2e699e0e880d Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:3bc24a3
Author:Meow
Committer:GitHub

Geodata: Support automatically updating .dat files and hot reloading (#5992) https://github.com/XTLS/Xray-core/pull/5992#issuecomment-4320551920 Usage: https://github.com/XTLS/Xray-core/pull/5992#issuecomment-4291168039

Commit:d1db1d6
Author:Meow
Committer:GitHub

DNS outbound: Add `rules` (matches `qtype` and `domain`, then `action`) (#5981) https://github.com/XTLS/Xray-core/pull/5981#issuecomment-4279809648 Example: https://github.com/XTLS/Xray-core/pull/5981#issuecomment-4283200236 Closes https://github.com/XTLS/Xray-core/issues/5218

Commit:31ab22c
Author:Meow
Committer:GitHub

Geodata: Support reversed CIDR rules in IP rules (#5951) https://github.com/XTLS/Xray-core/pull/5947#issuecomment-4258063215 https://github.com/XTLS/Xray-core/pull/5951#issuecomment-4260093653

Commit:310b764
Author:Meow
Committer:GitHub

Direct/Freedom outbound: Add `ipsBlocked` (supports IP, CIDR, "geoip:", "ext:") and apply a default safe policy (#5947) https://github.com/XTLS/Xray-core/pull/5892#issuecomment-4254056911 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>

Commit:05e259c
Author:Иван
Committer:GitHub

header-custom finalmask: Add UDP standalone handshake mode (#5945) https://github.com/XTLS/Xray-core/commit/175502d8079aa5a151242ed911d01a1b90b98b28

Commit:175502d
Author:Иван
Committer:GitHub

header-custom finalmask: Add programmable handshake templates and runtime core (#5920) https://github.com/XTLS/Xray-core/pull/5920#issuecomment-4252579201 https://github.com/XTLS/Xray-core/pull/5920#issuecomment-4231698135 https://t.me/projectXtls/1829 https://t.me/projectXtls/1640

Commit:6780045
Author:Boris Korzun
Committer:GitHub

TUN inbound: Add FreeBSD support (#5891) And reverts "refactor `mtu` to support setting IPv4/v6 separately" https://github.com/XTLS/Xray-core/pull/5891#issuecomment-4245677624 And fixes `autoOutboundsInterface` on Windows https://github.com/XTLS/Xray-core/pull/5887#issuecomment-4251719900 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

Commit:7094f8d
Author:LjhAUMEM
Committer:GitHub

mKCP transport: Add `cwndMultiplier`; Apply unaggressive strategy by default (#5890) https://github.com/XTLS/Xray-core/issues/4846#issuecomment-4150329444 https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4184774915 https://github.com/XTLS/Xray-core/pull/5890#issuecomment-4240052251

Commit:d342361
Author:Meow
Committer:GitHub

Sniffing: Add `ipsExcluded` (supports IP, CIDR, "geoip:", "ext:") (#5929) https://github.com/XTLS/Xray-core/pull/5927#issuecomment-4238197075 https://github.com/XTLS/Xray-core/pull/5929#issuecomment-4238550443

Commit:f17fabf
Author:Meow
Committer:GitHub

Sniffing: `domainsExcluded` supports "geosite:" (#5927) https://github.com/XTLS/Xray-core/pull/5927#issuecomment-4238238050 https://github.com/XTLS/Xray-core/pull/5927#issuecomment-4238119874

Commit:82624bc
Author:Meow
Committer:GitHub

Xray-core: Refactor geodata (#5814) https://github.com/XTLS/Xray-core/issues/4422#issuecomment-3533007890 Breaking changes https://github.com/XTLS/Xray-core/pull/5569 Reverts https://github.com/XTLS/Xray-core/pull/5505 Closes https://github.com/XTLS/Xray-core/pull/643

Commit:806b8dc
Author:LjhAUMEM
Committer:GitHub

TUN inbound: Add `gateway`, `dns`, `autoSystemRoutingTable`, `autoOutboundsInterface` for Windows (#5887) And refactor `mtu` to support setting IPv4/v6 separately Example: https://github.com/XTLS/Xray-core/pull/5887#issue-4198837696

Commit:1642fdf
Author:Nikita Nemirovsky
Committer:GitHub

XDNS finalmask: Support `resolvers` (client) and `domains` (server) instead of `domain` (#5872) https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4192730898 Example: https://github.com/XTLS/Xray-core/pull/5872#issuecomment-4196172391 --------- Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

Commit:a91a88c
Author:Yury Kastov
Committer:GitHub

API & Commands: Add GetUsersStatsRequest(); Improve `api statsonlineiplist` (#5776) https://github.com/XTLS/Xray-core/pull/5776#issuecomment-4230007504

Commit:3f608b3
Author:LjhAUMEM
Committer:GitHub

Finalmask `quicParams`: Add `bbrProfile` ("conservative" / "standard" (default) / "aggressive") (#5869) And Update github.com/apernet/quic-go to 20260330051153

Commit:b53ae0a
Author:Fangliding
Committer:Fangliding

h2c

Commit:14524cc
Author:LjhAUMEM
Committer:GitHub

Finalmask: Add `randRange` to "noise" (UDP), as the same as "header-custom"'s (TCP & UDP) (#5850) https://github.com/XTLS/Xray-core/pull/5812

Commit:755f0a1
Author:Copilot
Committer:GitHub

VLESS Reverse Proxy: Add "sniffing" to outbound's "reverse" (which is actually an inbound) (#5837) Closes https://github.com/XTLS/Xray-core/issues/5662 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:06dc4cf
Author:LjhAUMEM
Committer:GitHub

Finalmask: Refactor header conns to avoid multiple-copy; Add `randRange` to "header-custom" (TCP & UDP) (#5812) https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016760602 https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4052921628

Commit:0321cdd
Author:LjhAUMEM
Committer:GitHub

Hysteria & XHTTP/3: Unified Finalmask's `quicParams` to set `congestion`, `brutalUp`, `brutalDown`, `udpHop` (`ports` & `interval`), etc. (#5772) https://github.com/XTLS/Xray-core/pull/5772#issuecomment-4023006179

Commit:acb06e8
Author:saba-futai
Committer:GitHub

Finalmask: Add Sudoku (TCP & UDP) (#5685) https://github.com/SUDOKU-ASCII/sudoku/issues/23#issuecomment-3859972396

Commit:a204873
Author:LjhAUMEM
Committer:GitHub

Finalmask: Add header-custom (TCP & UDP), fragment (TCP), noise (UDP); Support dialer-proxy, XHTTP/3; Fix XDNS, XICMP potential panic (#5657) https://github.com/XTLS/Xray-core/pull/5657#issuecomment-4016609446

Commit:5138ffc
Author:Жора Змейкин
Committer:GitHub

XHTTP transport: Add "bbr" (default) and "force-brutal" congestion control for H3 (#5711) https://github.com/XTLS/Xray-core/pull/5711#issuecomment-3984037632

Commit:0ac13bd
Author:26X23
Committer:GitHub

XHTTP transport: Bugfixes for obfuscations (#5720) https://github.com/XTLS/Xray-core/pull/5720#issuecomment-4016290343

Commit:78fc286
Author:Yury Kastov
Committer:GitHub

Routing: Add `webhook` to `rules` (#5722) https://github.com/XTLS/Xray-core/pull/5722#issuecomment-3953836108

Commit:b33fde2
Author:Fangliding
Committer:Fangliding

Add brutal

Commit:a0bf239
Author:Fangliding
Committer:Fangliding

Add maxReuseTimes

Commit:6a909b2
Author:LjhAUMEM
Committer:GitHub

Proxy: Add Hysteria 2 inbound & transport (supports listening port range, Salamander finalmask) (#5679) https://github.com/XTLS/Xray-core/pull/5679#issuecomment-3888548778 Closes https://github.com/XTLS/Xray-core/issues/5605

Commit:8898a24
Author:copilot-swe-agent[bot]

Add local filesystem-based XDRIVE implementation Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:bf7b6bd
Author:RPRX

xdrive

Commit:74c726f
Author:风扇滑翔翼
Committer:GitHub

Commands: Print CA cert's SHA256 in `tls ping` (#5644) And https://github.com/XTLS/Xray-core/issues/5642#issuecomment-3840806246 --------- Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

Commit:25d1691
Author:LjhAUMEM
Committer:RPRX

Finalmask: Add XICMP (relies mKCP/QUIC or WireGuard) (#5633) https://t.me/projectXtls/1473

Commit:c180c59
Author:LjhAUMEM
Committer:GitHub

Finalmask: Add XDNS (relies mKCP, like DNSTT), header-*, mkcp-* (#5560) And https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3825430761

Commit:5b849d5
Author:Dmitrii Makhno
Committer:GitHub

XHTTP transport: New options for bypassing CDN's detection (#5414) Usage: https://github.com/XTLS/Xray-core/pull/5414#issuecomment-3770071786 Closes https://github.com/XTLS/Xray-core/issues/4346 --------- Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>

Commit:2c92339
Author:RPRX
Committer:RPRX

TLS config: `allowInsecure`->`pinnedPeerCertSha256`; `verifyPeerCertInNames`->`verifyPeerCertByName` And use `,` as the separator instead of `~`/array https://github.com/XTLS/Xray-core/pull/5567#issuecomment-3766081805 https://t.me/projectXtls/1464 https://t.me/projectXtls/1465 https://t.me/projectXtls/1466 https://github.com/XTLS/Xray-core/pull/5625#issuecomment-3824855736

Commit:f1aee0b
Author:LjhAUMEM
Committer:GitHub

Hysteria transport: Support range & random for `interval` in `udphop` as well (#5603) https://github.com/XTLS/Xray-core/pull/5560#issuecomment-3794621260

Commit:59dc2ce
Author:MouMeng
Committer:GitHub

API: Add ListRule() for routing (#5569) https://github.com/XTLS/Xray-core/pull/5569#issuecomment-3766310407