v1.14.3

What's Changed

Configs example

REALITY is experimental support and may have compatibility issues

• feat: support set tun file-descriptor in config file by @wwqgtxx
• feat: Support Restls-V1 in Clash.Meta (#441) by @3andne
• feat: Update UoT protocol by @nekohasekai
• feat: Converter support REALITY share standard by @H1JK
• feat: REALITY use proxy servername by @H1JK
• feat: Support REALITY protocol by @H1JK
• feat: Support VLESS XTLS Vision (#406) by @H1JK
• feat: add sni field for tuic by @Skyxim
• feat: add upgrade api by @Larvan2
• feat: nameserver-policy support multiple keys by @Larvan2
• feta: add hosts support domain and mulitple ip (#439) by @Skyxim
• refactor: tcp dial (#412) by @Skyxim

Maintenance

• chore: Better REJECT conn by @H1JK
• chore: Chore: adjust the loading order, and then load the resource at last by @Skyxim
• chore: Cleanup REALITY code by @H1JK
• chore: Generate UUID from fastrand by @H1JK
• chore: Improve REALITY handshake by @H1JK
• chore: Remove useless mutex in Vision by @H1JK
• chore: Update dependencies by @wwqgtxx
• chore: Vision padding upgrade by @H1JK
• chore: proxy-server-nameserver does not follow the nameserver-policy by @Skyxim
• chore: add /restart to restful api by @wwqgtxx
• chore: add comment by @Skyxim
• chore: add custom ca trust by @Skyxim
• chore: add early conn interface to decrease unneeded write by @wwqgtxx
• chore: add more utls fingerprints by @wwqgtxx
• chore: add pprof api, when log-level is debug by @Skyxim
• chore: add reality-grpc by @Larvan2
• chore: add release branch by @Larvan2
• chore: add sni of tuic in demo by @Skyxim
• chore: adjust error log by @Skyxim
• chore: adjust log by @Skyxim
• chore: adjust the configuration loading order by @Skyxim
• chore: adjust trust cert by @Skyxim
• chore: better REJECT process by @wwqgtxx
• chore: better TunnelStatus define by @wwqgtxx
• chore: better geodata shared by @wwqgtxx
• chore: better release notes by @Larvan2
• chore: better release notes by @kunish
• chore: better rename by @Larvan2
• chore: better restls by @wwqgtxx
• chore: better uuid using by @wwqgtxx
• chore: better windows bind error handle by @wwqgtxx
• chore: better workflow by @Larvan2
• chore: better workflow by @MetaCubeX
• chore: better workflow by @wwqgtxx
• chore: change default geo* url by @Larvan2
• chore: change internal tcp traffic type by @Skyxim
• chore: clean up code by @Larvan2
• chore: clean up code by @wwqgtxx
• chore: cleanup code by @wwqgtxx
• chore: cleanup dialer's code by @wwqgtxx
• chore: code cleanup by @wwqgtxx
• chore: disconnect when suspended by @Skyxim
• chore: do not apply padding for nonTLS packet with contentLen over 900 by @Larvan2
• chore: do not modify ALPN in utls by @Larvan2
• chore: exposure ipv6 wait time by @Skyxim
• chore: fix issues #440 by @Larvan2
• chore: format code by @Skyxim
• chore: keep existing connections by @Skyxim
• chore: move sing-tun's udpTimeout fix to there lib by @wwqgtxx
• chore: parse the allowInsecure field for the trojan uri scheme by @MetaCubeX
• chore: push latest alpha core to MetaCubeX/AlphaBinary by @Larvan2
• chore: rename delete.yml by @Larvan2
• chore: reset tunName in macos when it isn't startWith "utun" by @wwqgtxx
• chore: Simplify VLESS handshake lock by @H1JK
• chore: set prerelease notes timezone of release create time to Asia/Shanghai by @kunish
• chore: shadowsocks listener support the "udp" setting by @wwqgtxx
• chore: share the same geodata in different rule by @wwqgtxx
• chore: skip restart when update error by @Larvan2
• chore: support TFO for outbounds by @wwqgtxx
• chore: try to fix slice out of bound. by @Larvan2
• chore: Update flake.nix (#452) by @yaoshiu
• chore: update for testing the updater by @Larvan2
• chore: update quic-go by @wwqgtxx
• chore: update quic-go to release unused buffer when error by @wwqgtxx
• chore: update readme by @Larvan2
• chore: update utls library by @wwqgtxx
• chore: update xray-core version by @Larvan2
• chore: use early conn to support real ws 0-rtt by @wwqgtxx
• chore: use fastrand to replace math/rand by @wwqgtxx
• chore: use inner for upgrade core by @Larvan2
• chore: using sing-shadowtls to support shadowtls v1/2/3 by @wwqgtxx
• chore: wireguard using internal dialer by @wwqgtxx

BUG & Fix

• fix: ALPN not applied in uTLS/REALITY by @H1JK
• fix: Adjust the timing of subscription information acquisition by @Skyxim
• fix: Converter REALITY security type by @H1JK
• fix: Filter slice index out of bounds by @H1JK
• fix: REALITY with gRPC transport by @H1JK
• fix: SA4001 for net.UDPAddr copy by @wwqgtxx
• fix: SA4001 for netDialer copy by @wwqgtxx
• fix: The default interface is actually configured incorrectly by @Skyxim
• fix: ToLower first by @Larvan2
• fix: Vision disable filter for non-TLS connections by @H1JK
• fix: Vision filter Client Hello by @H1JK
• fix: Vision filter TLS 1.2 by @H1JK
• fix: Vision filter TLS 1.2 by @wwqgtxx
• fix: add "dns resolve failed" error in dialer by @wwqgtxx
• fix: add version of shadow-tls plugin in docs/config.yaml by @wwqgtxx
• fix: add xtls-rprx-vision server version warning to user by @wwqgtxx
• fix: checkTunName mistake by @wwqgtxx
• fix: dial panic by @Skyxim
• fix: dialer dual stack panic by @Skyxim
• fix: dns resolve in dialer by @wwqgtxx
• fix: dns resolver by @wwqgtxx
• fix: don't return a non-nil interface containing nil pointer by @wwqgtxx
• fix: dual stack serial dial by @Skyxim
• fix: ensure peekMutex is locked before handleSocket by @wwqgtxx
• fix: ensure restart api return ok by @wwqgtxx
• fix: ensure wireguard inner use dialer with DefaultResolver by @wwqgtxx
• fix: geosite of nameserver-policy cannot be loaded correctly by @MetaCubeX
• fix: global-client-fingerprint is now work by @Larvan2
• fix: golang1.19 can't compile by @wwqgtxx
• fix: handle no IP address by @Skyxim
• fix: incorrect time to set interface name by @Skyxim
• fix: inner http use host of address by @Skyxim
• fix: ip version prefer not working by @Skyxim
• fix: let quic-go works on outbound's packetConn by @wwqgtxx
• fix: load-balance's touch not effected by @wwqgtxx
• fix: loadbalance panic by @wwqgtxx
• fix: log typo by @MetaCubeX
• fix: optimize health check by @Skyxim
• fix: peek not work with some inbound by @wwqgtxx
• fix: rand ip error and clash remove loopback ip by @Skyxim
• fix: reject's dial warning by @wwqgtxx
• fix: replace self define "connect timeout" to os.ErrDeadlineExceeded by @wwqgtxx
• fix: sing-vmess listener‘s "cipher: message authentication failed" by @wwqgtxx
• fix: sing_tun apply udpTimeout when using gvisor stack by @wwqgtxx
• fix: strategyRoundRobin not begin with zero by @wwqgtxx
• fix: tproxy listener cannot listen udp by @Skyxim
• fix: tuic missing routing mark by @wwqgtxx
• fix: tuic relay tuic by @wwqgtxx
• fix: tuic server close with error message by @wwqgtxx
• fix: tuic server set authentication timeout after quic handshake complete by @wwqgtxx
• fix: tuic udp native mode can't relay packetSize>1200 by @wwqgtxx
• fix: tunnel's inboundTFO missing by @wwqgtxx
• fix: udp loopback show "The requested address is not valid in its context." by @wwqgtxx
• fix: unmap 4in6 address in dialer and wireguard by @wwqgtxx
• fix: uot client's WriteTo mistake by @wwqgtxx
• fix: upgrade backup by @Larvan2
• fix: vless NeedHandshake mistake by @wwqgtxx

New Contributors

• @3andne made their first contribution in #441
• @yaoshiu made their first contribution in #452

Full Changelog: v1.14.2...v1.14.3