039bcc9af9
fix(resolver): fix IPv4/IPv6 fallback asymmetry, data race, and caller mutation bugs
...
Normalize Only/Prefer values (ip4→ipv4, ip6→ipv6) so downstream
comparisons match correctly. Fix asymmetric fallback where caller
network=ip6 fell through to IPv4 but ip4 didn't fall through to IPv6
— both branches now check hard constraints (server.Only || callerPref)
only, allowing soft Prefer to fall back. Fix data race on cache item.ts
by reading it inside RLock. Fix Store mutating caller's dns.Msg by
copying before TTL override. Add singleflight dedup, semaphore-bounded
async refresh, DNS rcode error checking, and bump EDNS0 UDPSize to
4096. Add 25 tests.
2026-05-25 21:44:58 +08:00
5a838a7d47
fix(dtls): upgrade pion/dtls v2.2.6 to v3.1.1 fixing CVE-2026-26014
...
Upgrade github.com/pion/dtls from v2.2.6 to v3.1.1 to fix nonce reuse
vulnerability in AES-GCM ciphers (GHSA-9f3f-wv7r-qc8r). Migrate from
deprecated Config-struct API to ListenWithOptions/ClientWithOptions
options-based API.
v2 Config fields mapped to v3 functional options:
- Certificates, InsecureSkipVerify, ExtendedMasterSecret, ServerName,
RootCAs, ClientCAs, ClientAuth, FlightInterval, MTU
ConnectContextMaker removed — no longer exists in v3; explicit
HandshakeContext(ctx) on *Conn is the replacement for timeout control.
2026-05-23 18:48:21 +08:00
3f73c82d00
fix(ss): address review findings for PR #96 — nil guards, resource leaks, dead code
...
- Bump go-shadowsocks2 to v0.1.3 (new API symbols)
- Return error instead of nil when Target() is empty in TCP handler
- Reset wbuf unconditionally on write error to prevent unbounded growth
- Add nil guard on targetAddr before WriteTo to prevent panic
- Remove duplicate NewClientConfig call and dead ClientConfig literal
- Remove unused noDelay metadata field
- Fix buffer-size guard to catch negative values (len(b)==0 → bufSize<=0)
- Add address context to parse/session error messages
2026-05-22 21:40:33 +08:00
70dee081a4
chore(deps): bump Go 1.26.3, update gosocks4/5, plugin, relay, tls-dissector
2026-05-21 22:59:12 +08:00
238a0b95b7
feat: upgrade core to v0.4.0, pass network to admission, add dial options
...
Upgrade github.com/go-gost/core from v0.3.3 to v0.4.0, adapting to
interface changes:
- Admit(ctx, network, addr, opts) now accepts a network parameter
- Router.Dial now accepts variadic chain.DialOption, forwarded to
the route's Dial call along with router-level options
- gRPC/HTTP admission plugins include the new Network field
Also fix two typos: ResoloverNodeOption -> ResolverNodeOption,
WithHostOpton -> WithHostOption.
2026-05-21 21:26:49 +08:00
07ca57055a
Bump google.golang.org/grpc from 1.67.1 to 1.79.3
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.67.1 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.1...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-21 21:37:46 +08:00
2acc669976
fix webtransport listener
2026-04-21 21:34:50 +08:00
254699e176
Bump github.com/quic-go/quic-go from 0.54.1 to 0.57.0
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.54.1 to 0.57.0.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.54.1...v0.57.0 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.57.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-21 19:42:58 +08:00
6389378610
Remove usage of ShadowConn for ssHandler and ssConnector ( #68 )
...
The new ss library has integrated the function of ShadowConn.
2025-12-29 16:22:42 +08:00
77eda4ce00
Bump golang.org/x/crypto from 0.40.0 to 0.45.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.40.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.40.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-22 22:33:55 +08:00
a280193dac
Bump github.com/go-gost/go-shadowsocks2 from 0.1.0 to 0.1.1
2025-11-22 22:33:24 +08:00
0c97db3c05
Adapt new shadowsocks library.
...
1. Modify ss/ssu handler and connector
2. Add users to metadata of ss and ssu handler
2025-11-11 12:37:33 +08:00
a0c46cec6e
Bump github.com/quic-go/quic-go from 0.53.0 to 0.54.1
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.53.0 to 0.54.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.53.0...v0.54.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.54.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-10-11 22:02:16 +08:00
c7d16962ec
add service option for plugin
2025-08-29 23:36:31 +08:00
f71351f5ef
add interface xnet.SrcAddr/DstAddr
2025-08-03 10:15:53 +08:00
35a049fb03
rename vtun to tungo
2025-07-26 16:17:04 +08:00
acae52ab89
add vtun listener and handler
2025-07-23 21:30:21 +08:00
97ed5080a6
service: reset tempDelay when retrying after accept error #52
2025-06-28 18:11:13 +08:00
3ec2f9d487
update quic
2025-06-25 21:06:23 +08:00
a71b9d79fd
Bump golang.org/x/net from 0.33.0 to 0.38.0 ( #50 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.33.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.33.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ginuerzh <ginuerzh@users.noreply.github.com >
2025-06-24 11:21:19 +08:00
9a380d3fd8
Bump golang.org/x/crypto from 0.31.0 to 0.35.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.31.0 to 0.35.0.
- [Commits](https://github.com/golang/crypto/compare/v0.31.0...v0.35.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.35.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-24 11:01:46 +08:00
2132268780
Bump golang.zx2c4.com/wireguard
2025-02-11 22:13:57 +08:00
08ad260606
add entrypoint for router handler
2025-02-08 23:07:54 +08:00
9cd03b6b59
update go.mod
2025-02-07 15:45:14 +08:00
bf36bdc680
update go.mod
2025-01-10 21:48:05 +08:00
e480039691
update go.mod
2025-01-08 23:12:56 +08:00
06d993023f
add traffic reset for stats
2024-12-24 20:11:22 +08:00
5206d1bd58
Bump golang.org/x/crypto from 0.30.0 to 0.31.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.30.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-16 19:09:33 +08:00
98f5a5f7eb
fix webtransport
2024-12-11 22:25:51 +08:00
8d962398ab
Bump github.com/quic-go/quic-go from 0.45.0 to 0.48.2
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.45.0 to 0.48.2.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.45.0...v0.48.2 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-12-11 21:57:24 +08:00
2e8a5d6f51
fix http keepalive for forwarding
2024-11-17 16:16:20 +08:00
c2aedbabd9
add routing rule for node
2024-11-15 20:28:47 +08:00
3db20563d2
add custom http response header for reverse proxy
2024-11-07 11:04:42 +08:00
f4d9a5f79b
tunnel: checking closed connector
2024-11-01 15:25:45 +08:00
d8126e8e30
update go.mod
2024-10-22 22:54:04 +08:00
27242d0b66
recorder: add input/output traffic stats for handler recorder object
2024-10-11 20:32:56 +08:00
8f994ab632
add handle options for sniffer
2024-10-10 22:49:56 +08:00
e22aa91571
add route for recorder
2024-09-24 20:20:15 +08:00
8934cb6b1c
add tls handshake for recorder
2024-09-20 21:26:21 +08:00
e37213ac01
add http body for handler recorder
2024-09-16 19:44:15 +08:00
69455ace9d
add handler recorder
2024-09-14 23:21:25 +08:00
31c482c649
add scope param for traffic limiter
2024-08-31 09:30:04 +08:00
3656ba9315
add http body rewrite for forward handler
2024-07-19 20:45:04 +08:00
59b99a5b44
v0.1.0
2024-07-08 22:44:29 +08:00
c1d0887a9b
add port range support for service
2024-07-08 22:38:21 +08:00
13c9e3ba97
Bump github.com/gin-contrib/cors from 1.5.0 to 1.6.0
...
Bumps [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/gin-contrib/cors/releases )
- [Changelog](https://github.com/gin-contrib/cors/blob/master/.goreleaser.yaml )
- [Commits](https://github.com/gin-contrib/cors/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-08 00:02:17 +08:00
22537ff0d2
mv observer/stats to core
2024-07-04 23:05:35 +08:00
b583e29a56
Bump github.com/go-gost/gosocks5 from 0.3.1 to 0.4.1
2024-07-04 09:34:35 +08:00
b99292bed8
add dialTimeout option for service
2024-06-25 20:40:38 +08:00
f9bfca76ed
fix netns for socks5 and relay handler
2024-06-24 21:18:04 +08:00
ginuerzh
dependabot[bot]
RMT