Skip to content

Remove xray.cone.disabled env var#6110

Draft
Meo597 wants to merge 1 commit into
mainfrom
cone
Draft

Remove xray.cone.disabled env var#6110
Meo597 wants to merge 1 commit into
mainfrom
cone

Conversation

@Meo597

@Meo597 Meo597 commented May 10, 2026

Copy link
Copy Markdown
Collaborator

@Meo597

Meo597 commented May 10, 2026

Copy link
Copy Markdown
Collaborator Author

删的时候突然想到什么场景下会需要逐包路由避免绕路
BT？？

@RPRX

RPRX commented May 13, 2026

Copy link
Copy Markdown
Member

如果要留的话，有很多入站没实现非 cone 还得实现一下，我想一下

@RPRX

RPRX commented May 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

新版反向代理示例改到“特性详解”那里吧，标题“反向代理/内网穿透”，旧版反向代理文档加个链接到新页面

@RPRX

RPRX commented May 13, 2026

Copy link
Copy Markdown
Member

另外反向代理有哪些特性要根据 #5101 以及下面的留言都说清楚，比如 reverse tag 相同时的行为，禁止被用于正向代理等

Meo597 added a commit to XTLS/Xray-docs-next that referenced this pull request May 14, 2026
@Meo597
Update VLESS Reverse Proxy
f78fccb 
XTLS/Xray-core#6110 (comment)
XTLS/Xray-core#6110 (comment)
@Meo597

Meo597 commented May 14, 2026

Copy link
Copy Markdown
Collaborator Author

完事了，补了几个进阶示例
底下的留言东一句西一句的，我也不是完全理解所有，都放在结尾了
禁止用于正向代理配置说明里有提及，结尾也补了几句

Meo597 added a commit to XTLS/Xray-docs-next that referenced this pull request May 14, 2026
@Meo597
Update VLESS Reverse Proxy
0fe890e 
XTLS/Xray-core#6110 (comment)
XTLS/Xray-core#6110 (comment)
@RPRX

RPRX commented May 16, 2026

Copy link
Copy Markdown
Member

XHTTP、WebSocket 等基于 HTTP 的入站当前会默认读取 X-Forwarded-For。如果前面没有你自己信任的 HTTP 反向代理，这个头可以被客户端伪造，因此不要直接拿它做严格的安全判断，例如 IP 白名单、黑名单或审计归因。

@Meo597 这个问题已经解决了 #5101 (comment) #5331

@Meo597

Meo597 commented May 16, 2026

Copy link
Copy Markdown
Collaborator Author

sockopt.trustedXForwardedFor 一直没文档，补了下
最后那句说明改掉了

又补了个场景

Meo597 added a commit to XTLS/Xray-docs-next that referenced this pull request May 16, 2026
@Meo597
Update VLESS Reverse Proxy Again
d1b09ea 
XTLS/Xray-core#6110 (comment)
@RPRX

RPRX commented May 17, 2026

Copy link
Copy Markdown
Member

话说这个 sockopt.trustedXForwardedFor 要不要改成默认的？即那三个传输默认不读取 X-Forwarded-For 了

@Meo597

Meo597 commented May 17, 2026

Copy link
Copy Markdown
Collaborator Author

我昨天看这个 PR 的时候也想这个问题来着
len 0 直接不让读会更安全，肯定更好

但那么多套 cdn 的对于他们来说是 breaking change
如果需要用到 src 的话

这三个入站大多也会套个前置吧？

@Fangliding

Fangliding commented May 17, 2026

Copy link
Copy Markdown
Member

拉倒重来的话我是觉得 remoteip IsPrivate() 的话默认信不然不信
但是仍然会让CF User爆炸
哎面向CF编程

@Meo597

Meo597 commented May 17, 2026

Copy link
Copy Markdown
Collaborator Author

建议还是别动了
不然跟隔壁有啥区别

@RPRX

RPRX commented May 17, 2026

Copy link
Copy Markdown
Member

跟 allowInsecure 一样是一开始就有的设计问题，这个 X-Forwarded-For 一开始就该有条件地信任

现在相当于默认 "trustedXForwardedFor": ["X-Forwarded-For"]

@RPRX

RPRX commented May 17, 2026

Copy link
Copy Markdown
Member

@Meo597 要不在哪先加个合适的 warning 吧，以后再设成默认不信任 X-Forwarded-For

@mqk233

mqk233 commented May 17, 2026

Copy link
Copy Markdown

warning不是吓人的吗

@Meo597

Meo597 commented May 18, 2026

Copy link
Copy Markdown
Collaborator Author

ok 我找找看哪里合适

@Meo597 Meo597 mentioned this pull request May 18, 2026
Merged
RPRX pushed a commit that referenced this pull request May 23, 2026
@Meo597
Config: Warn when sockopt.trustedXForwardedFor is not set for XHTTP…
ab69985 
…/WS/HU inbounds (#6159)

#6110 (comment)

Usage: #5331 (comment)
Meo597 added a commit that referenced this pull request Jul 5, 2026
@Meo597
Squashed commit of the following:
474a30a 
commit 65f6f0a
Author: yiguodev <147401898+yiguodev@users.noreply.github.com>
Date:   Sat Jul 4 10:25:15 2026 +0800

    TUN inbound: Refine `gateway` and `autoSystemRoutingTable` on Linux (#6398)

    #6398 (comment)

commit 3263ae9
Author: Jasper344612 <282825138+Jasper344612@users.noreply.github.com>
Date:   Sat Jul 4 09:38:25 2026 +0800

    TUN inbound: Fix `autoOutboundsInterface` on Linux (#6413)

    Fixes #6412

commit 3dc8bf3
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Sat Jul 4 09:28:21 2026 +0800

    Hysteria inbound: Fix dynamic UUID not accepted (#6395)

    Fixes #6375 (comment)

commit 695e68e
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Jul 3 17:53:15 2026 +0000

    Bump github.com/pires/go-proxyproto from 0.12.0 to 0.14.0 (#6420)

    Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.12.0 to 0.14.0.
    - [Release notes](https://github.com/pires/go-proxyproto/releases)
    - [Commits](pires/go-proxyproto@v0.12.0...v0.14.0)

    ---
    updated-dependencies:
    - dependency-name: github.com/pires/go-proxyproto
      dependency-version: 0.14.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit dfdbcf8
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Jul 3 17:45:51 2026 +0000

    Bump github.com/klauspost/cpuid/v2 from 2.3.0 to 2.4.0 (#6417)

    Bumps [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) from 2.3.0 to 2.4.0.
    - [Release notes](https://github.com/klauspost/cpuid/releases)
    - [Commits](klauspost/cpuid@v2.3.0...v2.4.0)

    ---
    updated-dependencies:
    - dependency-name: github.com/klauspost/cpuid/v2
      dependency-version: 2.4.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit 2b828b7
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Jul 3 17:45:47 2026 +0000

    Bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#6415)

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.0.
    - [Release notes](https://github.com/grpc/grpc-go/releases)
    - [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

    ---
    updated-dependencies:
    - dependency-name: google.golang.org/grpc
      dependency-version: 1.82.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit 45cf289
Author: RPRX <63339210+RPRX@users.noreply.github.com>
Date:   Sat Jun 27 13:18:03 2026 +0000

    Xray-core v26.6.27

    Sponsor & Donation & NFTs: #3668
    Project X Channel: https://t.me/projectXtls

    Announcement of NFTs by Project X: #3633
    Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

    VLESS Post-Quantum Encryption: #5067
    VLESS NFT: https://opensea.io/collection/vless

    XHTTP: Beyond REALITY: #4113
    REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2

commit 18b85ad
Author: RPRX <63339210+RPRX@users.noreply.github.com>
Date:   Sat Jun 27 12:41:39 2026 +0000

    XHTTP client: Change default `maxConnections` to 6 for anti-RKN

    "xmux": {
        "maxConcurrency": 0,
        "maxConnections": "6",
        "cMaxReuseTimes": 0,
        "hMaxRequestTimes": "600-900",
        "hMaxReusableSecs": "1800-3000",
        "hKeepAlivePeriod": 0
    }

    Replaces 9cc7907 and 4ce65fc

    Closes #6376 (comment)

commit 452b719
Author: seally <70375705+nasralbek@users.noreply.github.com>
Date:   Sat Jun 27 17:04:58 2026 +0500

    Hysteria inbound: Support `routing`'s `vlessRoute` as well (#6375)

    #6375 (comment)

    ---------

    Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

commit 345c76f
Author: bitwiresys <46227999+bitwiresys@users.noreply.github.com>
Date:   Sat Jun 27 14:41:22 2026 +0300

    WireGuard inbound: Support dynamic peer management (#6360)

    #6360 (comment)

    Closes #6314

    ---------

    Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
    Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

commit f496437
Author: 迷途的猫 <xxntmctx@gmail.com>
Date:   Sat Jun 27 18:40:58 2026 +0800

    XHTTP server: Refactor upload_queue.go (#6372)

    #6372 (comment)

    ---------

    Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit b12bc50
Author: kokoro <89308518+kokoromagic@users.noreply.github.com>
Date:   Thu Jun 25 04:06:24 2026 +0700

    README.md: Add Magic_V2Ray to Magisk in Installation (#6355)

    #6355 (comment)

    ---------

    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit dda2b10
Author: yiguodev <147401898+yiguodev@users.noreply.github.com>
Date:   Wed Jun 24 20:00:22 2026 +0800

    TUN inbound: Add traffic counters; Metrics: Rely on instance (#6349)

    #6349 (comment)

commit 241aa38
Author: Jasper344612 <282825138+Jasper344612@users.noreply.github.com>
Date:   Wed Jun 24 19:06:00 2026 +0800

    TUN inbound: Support `autoSystemRoutingTable` and `autoOutboundsInterface` on macOS and Linux as well (#6366)

    #6366 (comment)

commit 7e7e820
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Wed Jun 24 18:49:05 2026 +0800

    Geodata: Apply uTLS Chrome fingerprint when downloading (#6371)

    Closes #6369

commit f9eb159
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Wed Jun 24 10:48:21 2026 +0000

    Bump actions/cache from 5 to 6 (#6368)

    Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.
    - [Release notes](https://github.com/actions/cache/releases)
    - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
    - [Commits](actions/cache@v5...v6)

    ---
    updated-dependencies:
    - dependency-name: actions/cache
      dependency-version: '6'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit ac04c44
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 23 19:48:17 2026 +0800

    DNS: Fix unexpected TTL clamp (#6363)

    Fixes #6359

commit e7e9254
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 23 19:37:21 2026 +0800

    TUN inbound: Avoid panic on nil RemoteAddr due to quickly closed connection (#6365)

    Fixes #6364 (comment)

    ---------

    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit fab4bcc
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Jun 23 10:34:07 2026 +0000

    Bump github.com/cloudflare/circl from 1.6.3 to 1.6.4 (#6362)

    Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.3 to 1.6.4.
    - [Release notes](https://github.com/cloudflare/circl/releases)
    - [Commits](cloudflare/circl@v1.6.3...v1.6.4)

    ---
    updated-dependencies:
    - dependency-name: github.com/cloudflare/circl
      dependency-version: 1.6.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit b99c3e5
Author: RPRX <63339210+RPRX@users.noreply.github.com>
Date:   Mon Jun 22 18:55:10 2026 +0000

    Xray-core v26.6.22

    Sponsor & Donation & NFTs: #3668
    Project X Channel: https://t.me/projectXtls

    Announcement of NFTs by Project X: #3633
    Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

    VLESS Post-Quantum Encryption: #5067
    VLESS NFT: https://opensea.io/collection/vless

    XHTTP: Beyond REALITY: #4113
    REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2

commit 583bb4a
Author: Omoeba <38597972+Omoeba@users.noreply.github.com>
Date:   Mon Jun 22 11:51:47 2026 -0700

    XHTTP server: Fix `scStreamUpServerSecs` when `xPaddingObfsMode` is true (#6343)

    #6343 (comment)

commit 9cd9382
Author: Жора Змейкин <48821354+Katze-942@users.noreply.github.com>
Date:   Mon Jun 22 21:29:23 2026 +0400

    TUN inbound: Support env `XRAY_TUN_FD` on Linux as well (#6338)

    #6338 (comment)

commit 567500c
Author: patterniha <71074308+patterniha@users.noreply.github.com>
Date:   Mon Jun 22 19:57:23 2026 +0330

    Fragment finalmask: Add `lengths` and `delays` (#6334)

    Usage: #6334 (comment)

    Behavior: #6334 (comment)

    ---------

    Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

commit 5aefcb4
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Mon Jun 22 16:05:47 2026 +0000

    Bump github.com/pion/stun/v3 from 3.1.5 to 3.1.6 (#6357)

    Bumps [github.com/pion/stun/v3](https://github.com/pion/stun) from 3.1.5 to 3.1.6.
    - [Release notes](https://github.com/pion/stun/releases)
    - [Commits](pion/stun@v3.1.5...v3.1.6)

    ---
    updated-dependencies:
    - dependency-name: github.com/pion/stun/v3
      dependency-version: 3.1.6
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit be8009c
Author: Meow <197331664+Meo597@users.noreply.github.com>
Date:   Fri Jun 19 20:02:27 2026 +0800

    Geodata: Cleanup unneeded matchers & `domain:` ignore case (#6342)

    Completes #6139

commit 8734774
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri Jun 19 11:23:41 2026 +0000

    Bump actions/checkout from 6 to 7 (#6344)

    Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@v6...v7)

    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-version: '7'
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit 1e036ce
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Fri Jun 19 07:55:11 2026 +0800

    XHTTP/3 client: Actively close underlying QUIC & UDP (#6332)

    Fixes #6328 (comment)

commit c815c2f
Author: j2rong4cn <36783515+j2rong4cn@users.noreply.github.com>
Date:   Fri Jun 19 07:17:01 2026 +0800

    Loopback outbound: Add `sniffing` (#6326)

    Example: #6326 (comment)

commit 986c512
Author: bytecategory <nettopology@proton.me>
Date:   Fri Jun 19 06:55:18 2026 +0800

    XHTTP client: Avoid panic when `host` is invalid (#6316)

    Fixes #6315

commit 711aea4
Author: Meow <197331664+Meo597@users.noreply.github.com>
Date:   Fri Jun 19 06:31:21 2026 +0800

    XHTTP & WS & HU & gRPC servers: Require `sockopt.trustedXForwardedFor` (#6309)

    #6258 (comment)

    Behavior: #6258 (comment)

    Replaces #6159

commit 6412738
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Wed Jun 17 22:27:26 2026 +0800

    Socks5 inbound: Fix issues in new UDP ASSOCIATE (#6325)

    #6325 (comment)

    Fixes #6323

    ---------

    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit ad2e4cb
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Wed Jun 17 21:59:19 2026 +0800

    Finalmask: Fix unexpected order and UDP's buf issue (#6331)

    XTLS/Xray-docs-next#866 (comment)

    And #6331 (comment)

    Fixes #6184 (comment)

commit 829d54d
Author: Hossin Asaadi <hossin.asaadi@gmail.com>
Date:   Tue Jun 16 22:49:35 2026 +0100

    Hysteria & XHTTP/3 clients: `udpHop` supports `dialerProxy` (#6320)

    #6320 (comment)

    Fixes #6320 (comment)

    ---------

    Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

commit 8626311
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Tue Jun 16 23:24:39 2026 +0800

    WireGuard proxy: Refactor (#6287)

    And #6303 (comment)

    Fixes #6257

commit d27b3e4
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Jun 16 11:45:27 2026 +0000

    Bump golang.org/x/net from 0.55.0 to 0.56.0 (#6310)

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.55.0 to 0.56.0.
    - [Commits](golang/net@v0.55.0...v0.56.0)

    ---
    updated-dependencies:
    - dependency-name: golang.org/x/net
      dependency-version: 0.56.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit da21a8f
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Wed Jun 10 04:53:55 2026 +0800

    TUN & WireGuard inbounds: Ignore b.UDP's domain when receiving it from outbound (#6285)

    Fixes #6279

commit e10347b
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 9 23:58:02 2026 +0800

    XHTTP transport: Add `sessionIDTable` and `sessionIDLength`; Rename `session*` to `sessionID*` (#6258)

    #6258 (comment)
    #6253 (comment)
    #6251 (comment)

    Usage: #6258 (comment)

    Closes #6264

    ---------

    Co-authored-by: XXcipherX <knazevvv6514@gmail.com>

commit 26a022c
Author: 𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 <26771058+KobeArthurScofield@users.noreply.github.com>
Date:   Tue Jun 9 20:08:38 2026 +0800

    GitHub Action CI, README.md: Refinements and add compliance contents (#6283)

    And #6283 (comment)

commit 95e9816
Author: 𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 <26771058+KobeArthurScofield@users.noreply.github.com>
Date:   Tue Jun 9 18:55:42 2026 +0800

    Chore: Limit sing* dependencies to shadowsocks_2022 only (#6286)

    #6286 (comment)

commit 3239d21
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 9 17:40:55 2026 +0800

    TUN inbound: `autoOutboundsInterface` bypasses loopback addresses (#6276)

    Fixes #6269

commit 06b4931
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 9 17:22:33 2026 +0800

    TUN inbound: Start TUN by AlwaysOnInboundHandler (#6275)

    Fixes #6274

commit 6189d2b
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Tue Jun 9 17:14:54 2026 +0800

    XICMP finalmask: Refine Linux sever (#6272)

    Fixes #6168

commit a0e9347
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Tue Jun 9 17:03:24 2026 +0800

    TLS ECH: Handle "h2c://" query correctly (#6261)

    Fixes #6259 (comment)

    ---------

    Co-authored-by: j2rong4cn <36783515+j2rong4cn@users.noreply.github.com>

commit 83cf229
Author: IconHHw <138437673+IconHHw@users.noreply.github.com>
Date:   Tue Jun 9 03:55:06 2026 +0800

    Salamander finalmask: Replace `math/rand` with `crypto/rand` in salt generation (#6228)

    And #6228 (comment)

    Fixes #6228 (comment)

commit 2249f8b
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Mon Jun 8 19:29:14 2026 +0000

    Bump github.com/pion/stun/v3 from 3.1.2 to 3.1.5 (#6291)

    Bumps [github.com/pion/stun/v3](https://github.com/pion/stun) from 3.1.2 to 3.1.5.
    - [Release notes](https://github.com/pion/stun/releases)
    - [Commits](pion/stun@v3.1.2...v3.1.5)

    ---
    updated-dependencies:
    - dependency-name: github.com/pion/stun/v3
      dependency-version: 3.1.5
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit fdb9b61
Author: lmlm <no_7seven@163.com>
Date:   Wed Jun 3 07:58:56 2026 +0800

    README.md: Add Hey to HarmonyOS in GUI Clients (#6244)

    https://github.com/popsiclelmlm/Hey/blob/main/entry/src/main/cpp/README.md

    ---------

    Co-authored-by: liumin01 <liumin01@roborock.com>

commit d792fba
Author: 𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 <26771058+KobeArthurScofield@users.noreply.github.com>
Date:   Wed Jun 3 07:40:17 2026 +0800

    GitHub Actions CI: Builders run only once in pull requests in the same repository (#6222)

    #6221 (comment)

    Completes #6090 (comment)

commit 55956f8
Author: 𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 <26771058+KobeArthurScofield@users.noreply.github.com>
Date:   Wed Jun 3 07:36:42 2026 +0800

    TLS config: Remove some deprecated fields (#6226)

    https://t.me/projectXtls/1490

    ---------

    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit 94ffd50
Author: RPRX <63339210+RPRX@users.noreply.github.com>
Date:   Mon Jun 1 02:11:09 2026 +0000

    Xray-core v26.6.1

    Sponsor & Donation & NFTs: #3668
    Project X Channel: https://t.me/projectXtls

    Announcement of NFTs by Project X: #3633
    Project X NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

    VLESS Post-Quantum Encryption: #5067
    VLESS NFT: https://opensea.io/collection/vless

    XHTTP: Beyond REALITY: #4113
    REALITY NFT: https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2

commit c4dfcd4
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Mon Jun 1 09:30:40 2026 +0800

    Burst observatory: Fix init check (#6221)

    #6106 (comment)

commit cb8cd04
Author: j2rong4cn <36783515+j2rong4cn@users.noreply.github.com>
Date:   Mon Jun 1 09:25:47 2026 +0800

    DNS outbound: Replace "reject" with "return" (`rCode` is 0 by default) (#6214)

    #6214 (comment)

    Example: #6214 (comment)

    ---------

    Co-authored-by: Meo597 <197331664+Meo597@users.noreply.github.com>

commit 455f6bc
Author: Davoyan <20373889+Davoyan@users.noreply.github.com>
Date:   Sat May 30 20:29:33 2026 +0300

    uTLS: Update `ModernFingerprints` map and `OtherFingerprints` map (#6181)

    Paying attention to #6181 (comment)

    And a real issue: #6181 (comment)

commit ba53861
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Sat May 30 17:30:23 2026 +0800

    Realm finalmask: Fix client punch peers (#6213)

    Fixes #6137

commit d43a808
Author: 𐲓𐳛𐳪𐳂𐳐 𐲀𐳢𐳦𐳫𐳢 𐲥𐳔𐳛𐳪𐳌𐳑𐳖𐳇 <26771058+KobeArthurScofield@users.noreply.github.com>
Date:   Fri May 29 23:04:59 2026 +0800

    GitHub Action CI: Add Go source file format check (#6090)

    #6057 (comment)

    And #6149 (comment)

commit ca4b156
Author: Jesus <75259437+Jolymmiles@users.noreply.github.com>
Date:   Fri May 29 15:59:24 2026 +0400

    Burst observatory: Fix time compare, cancel pending ping on instance close or new schedule started (#6106)

    #6106 (comment)

    ---------

    Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>

commit aba2272
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 19:48:22 2026 +0800

    Finalmask: Add mkcp-legacy (UDP) to replace mkcp-* and legacy header-* (#6201)

    #6193 (comment)

    #6201 (comment)

    Example: #6201 (comment)

commit 569459c
Author: Cocoon-Break <54054995+kuishou68@users.noreply.github.com>
Date:   Fri May 29 18:47:58 2026 +0800

    Sudoku finalmask: Harden UDP ReadFrom() against invalid packets (#6185)

    #6184 (comment)

    Fixes #6184

    ---------

    Co-authored-by: LjhAUMEM <llnu14702@gmail.com>

commit 2b42699
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 17:44:06 2026 +0800

    XICMP finalmask: Refactor & Speed up; Add multi `ips` and `dgram` mode (client) (#6168)

    #5872 (comment)
    #6168 (comment)
    #6168 (comment)

    Example: #6168 (comment)

    Closes #5879

commit 66a8100
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 16:36:45 2026 +0800

    Salamander finalmask: Support `packetSize` (Gecko in Hysteria v2.9.2) (#6198)

    And some other refinements

    #6198 (comment)

    Example: #6198 (comment)

commit 3630369
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 16:29:53 2026 +0800

    Finalmask: Add Realm (UDP hole punching in Hysteria v2.9.1) (#6137)

    #5657 (comment)

    #6137 (comment)

    Example: #6137 (comment)

commit 4dcf802
Author: Jason Fox <44783405+the-thirteenth-fox@users.noreply.github.com>
Date:   Thu May 28 23:15:38 2026 +0300

    README.md: Add flutter_vless to Xray Wrapper in Others (#6197)

    https://pub.dev/packages/flutter_vless

commit a2cec2e
Author: Meow <197331664+Meo597@users.noreply.github.com>
Date:   Fri May 29 04:06:32 2026 +0800

    DNS: Avoid panic on domain too long (#6207)

    Fixes #6204

commit 1cd7d25
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 03:44:16 2026 +0800

    header-custom finalmask: Remove headerConnMode headerReadAddrAware interface (#6193)

    #5920 (comment)

    #6193 (comment)

commit 09002ab
Author: LjhAUMEM <llnu14702@gmail.com>
Date:   Fri May 29 03:24:22 2026 +0800

    noise finalmask: Better `reset` (#6188)

    #6170

    Explanation: #5657 (comment)

commit cb206dd
Author: Kirill Livanov <13822441+kirilllivanov@users.noreply.github.com>
Date:   Thu May 28 21:27:08 2026 +0300

    DNS: Avoid passing domain to WriteTo func (#6163)

    #6163 (comment)

    ---------

    Co-authored-by: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>

commit fa466f8
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Thu May 28 18:20:27 2026 +0000

    Bump golang.org/x/net from 0.54.0 to 0.55.0 (#6192)

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.
    - [Commits](golang/net@v0.54.0...v0.55.0)

    ---
    updated-dependencies:
    - dependency-name: golang.org/x/net
      dependency-version: 0.55.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit e26f5e9
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Thu May 28 22:22:57 2026 +0800

    Socks5 server: More standard UDP ASSOCIATE (RFC 1928) (#6149)

    #6149 (comment)

    Fixes #6145 (comment)

    ---------

    Co-authored-by: RPRX <63339210+RPRX@users.noreply.github.com>

commit 787aa76
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Sun May 24 22:20:53 2026 +0800

    Hysteria server: `tls.WithNextProto("h3")` by default (#6186)

    Client: #6186 (comment)

commit d878fc8
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Sun May 24 20:50:02 2026 +0800

    SS2022 inbound: Fix potential panic when dispatching (#6162)

    #6162 (comment)

commit ee2b2c5
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Sun May 24 20:27:12 2026 +0800

    leastLoad balancer: Implement missing `tolerance` (#6156)

    Closes #6154

commit 81d993f
Author: Whale Choi <cj1369636717@gmail.com>
Date:   Sun May 24 20:19:00 2026 +0800

    README.md: Remove Xray4Magisk; Add AsteriskNG to Android in GUI Clients (#6153)

    #6153 (comment)

commit 4c38427
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Sun May 24 20:05:40 2026 +0800

    XHTTP client: Fix packet-up `OpenUsage` counting and H3 `keepAlivePeriod` parameter (#6140)

    Fixes #6140 (comment)

commit ab69985
Author: Meow <197331664+Meo597@users.noreply.github.com>
Date:   Sat May 23 21:50:01 2026 +0800

    Config: Warn when `sockopt.trustedXForwardedFor` is not set for XHTTP/WS/HU inbounds (#6159)

    #6110 (comment)

    Usage: #5331 (comment)

commit 56bb636
Author: 风扇滑翔翼 <Fangliding.fshxy@outlook.com>
Date:   Sat May 23 20:23:52 2026 +0800

    Geodata: Cleanup unneeded shared matchers (weakly referenced in map) (#6139)

    #6139 (comment)

commit 359a28f
Author: bytecategory <nettopology@proton.me>
Date:   Sat May 23 17:24:37 2026 +0800

    XDNS finalmask: Support AAAA & A (#6123)

    #6123 (comment)
    #6123 (comment)
    #6123 (comment)

    Example: #6123 (comment)

    Document: https://xtls.github.io/config/transports/finalmask.html#xdns

commit da9ba69
Author: Yury Kastov <9641779+kastov@users.noreply.github.com>
Date:   Fri May 22 22:49:19 2026 +0300

    Config: Support abstract unix sockets in remote loader (#6111)

    Replaces #5200

commit 5488b86
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri May 22 19:37:44 2026 +0000

    Bump google.golang.org/grpc from 1.81.0 to 1.81.1 (#6133)

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
    - [Release notes](https://github.com/grpc/grpc-go/releases)
    - [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

    ---
    updated-dependencies:
    - dependency-name: google.golang.org/grpc
      dependency-version: 1.81.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

commit a3c054a
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Fri May 22 19:37:25 2026 +0000

    Bump golang.org/x/net from 0.53.0 to 0.54.0 (#6113)

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.54.0.
    - [Commits](golang/net@v0.53.0...v0.54.0)

    ---
    updated-dependencies:
    - dependency-name: golang.org/x/net
      dependency-version: 0.54.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Meo597 Meo597 marked this pull request as draft July 7, 2026 18:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@Meo597 @RPRX @Fangliding @mqk233