Compare commits

..

24 Commits

Author SHA1 Message Date
世界
52167f5b94 documentation: Bump version 2024-04-23 23:41:37 +08:00
世界
22bb6a86e3 documentation: Update DNS manual 2024-04-23 23:40:37 +08:00
世界
5a6e0b6541 Add rule-set match command 2024-04-23 23:40:37 +08:00
世界
6ef266200f Add bypass_domain and search_domain platform HTTP proxy options 2024-04-23 23:40:37 +08:00
世界
61bab03fd3 Update gVisor to 20240212.0-65-g71212d503 2024-04-23 23:40:36 +08:00
世界
bc201898eb Update quic-go to v0.42.0 2024-04-23 23:40:36 +08:00
世界
3538205423 Fixed order for Clash modes 2024-04-23 23:40:36 +08:00
气息
ee0e1c9149 Fix DNS exchange index
Signed-off-by: 气息 <qdshizh@gmail.com>
2024-04-23 23:40:36 +08:00
PuerNya
53788a3521 Always disable cache for fake-ip DNS transport if independent_cache disabled 2024-04-23 23:40:36 +08:00
世界
0615f8f7d1 Fix missing rule_set_ipcidr_match_source item in DNS rules 2024-04-23 23:40:36 +08:00
世界
99a1ebd972 Improve DNS truncate behavior 2024-04-23 23:40:36 +08:00
世界
57b6f2aba8 Fix DNS fallthrough incorrectly 2024-04-23 23:40:35 +08:00
世界
eba3ed6f4a Add rejected DNS response cache support 2024-04-23 23:40:35 +08:00
世界
5797bec874 Add support for client-subnet DNS options 2024-04-23 23:40:35 +08:00
世界
f2df8affa8 Add address filter support for DNS rules 2024-04-23 23:40:35 +08:00
世界
889256ecca Fix timezone for Android and iOS 2024-04-23 23:40:22 +08:00
世界
4b1159bb3a Improve loopback detector 2024-04-23 23:40:22 +08:00
世界
2f2f3a368f Remove unused fakeip packet conn 2024-04-23 23:40:22 +08:00
世界
dae0e7eb76 Set the default TCP keep alive period 2024-04-23 23:40:22 +08:00
世界
95ea91bc31 Migrate ntp service to library 2024-04-23 23:40:22 +08:00
世界
de92f4ce89 Handle Windows power events 2024-04-23 23:40:22 +08:00
世界
1d028272b8 Improve domain suffix match behavior
For historical reasons, sing-box's `domain_suffix` rule matches literal prefixes instead of the same as other projects.

This change modifies the behavior of `domain_suffix`: If the rule value is prefixed with `.`,
the behavior is unchanged, otherwise it matches `(domain|.+\.domain)` instead.
2024-04-23 23:40:10 +08:00
世界
d6bab4386c Remove PROCESS_NAME_NATIVE dwFlag in process query output
The `process_path` rule of sing-box is inherited from Clash,
the original code uses the local system's path format (e.g. `\Device\HarddiskVolume1\folder\program.exe`),
but when the device has multiple disks, the HarddiskVolume serial number is not stable.

This change make QueryFullProcessImageNameW output a Win32 path (such as `C:\folder\program.exe`),
which will disrupt the existing `process_path` use cases in Windows.
2024-04-23 14:43:06 +08:00
世界
33d332db62 badtls: Support uTLS and TLS ECH for read waiter 2024-04-23 14:43:06 +08:00
7 changed files with 11 additions and 35 deletions

View File

@@ -33,5 +33,5 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
FURY_TOKEN: ${{ secrets.FURY_TOKEN }}
NFPM_KEY_PATH: ${{ env.HOME }}/.gnupg/sagernet.key
NFPM_KEY_PATH: ${{ env.Home }}/.gnupg/sagernet.key
NFPM_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}

View File

@@ -32,20 +32,14 @@ func NewDefault(router adapter.Router, options option.DialerOptions) (*DefaultDi
var dialer net.Dialer
var listener net.ListenConfig
if options.BindInterface != "" {
var interfaceFinder control.InterfaceFinder
if router != nil {
interfaceFinder = router.InterfaceFinder()
} else {
interfaceFinder = control.NewDefaultInterfaceFinder()
}
bindFunc := control.BindToInterface(interfaceFinder, options.BindInterface, -1)
bindFunc := control.BindToInterface(router.InterfaceFinder(), options.BindInterface, -1)
dialer.Control = control.Append(dialer.Control, bindFunc)
listener.Control = control.Append(listener.Control, bindFunc)
} else if router != nil && router.AutoDetectInterface() {
} else if router.AutoDetectInterface() {
bindFunc := router.AutoDetectInterfaceFunc()
dialer.Control = control.Append(dialer.Control, bindFunc)
listener.Control = control.Append(listener.Control, bindFunc)
} else if router != nil && router.DefaultInterface() != "" {
} else if router.DefaultInterface() != "" {
bindFunc := control.BindToInterface(router.InterfaceFinder(), router.DefaultInterface(), -1)
dialer.Control = control.Append(dialer.Control, bindFunc)
listener.Control = control.Append(listener.Control, bindFunc)
@@ -53,7 +47,7 @@ func NewDefault(router adapter.Router, options option.DialerOptions) (*DefaultDi
if options.RoutingMark != 0 {
dialer.Control = control.Append(dialer.Control, control.RoutingMark(options.RoutingMark))
listener.Control = control.Append(listener.Control, control.RoutingMark(options.RoutingMark))
} else if router != nil && router.DefaultMark() != 0 {
} else if router.DefaultMark() != 0 {
dialer.Control = control.Append(dialer.Control, control.RoutingMark(router.DefaultMark()))
listener.Control = control.Append(listener.Control, control.RoutingMark(router.DefaultMark()))
}

View File

@@ -13,9 +13,6 @@ func New(router adapter.Router, options option.DialerOptions) (N.Dialer, error)
if options.IsWireGuardListener {
return NewDefault(router, options)
}
if router == nil {
return NewDefault(nil, options)
}
var (
dialer N.Dialer
err error

View File

@@ -2,20 +2,6 @@
icon: material/alert-decagram
---
#### 1.9.0-rc.12
* Fixes and improvements
#### 1.8.12
* Now we have official APT and DNF repositories **1**
* Fix packet MTU for QUIC protocols
* Fixes and improvements
**1**:
Including stable and beta versions, see https://sing-box.sagernet.org/installation/package-manager/
#### 1.9.0-rc.11
* Fixes and improvements

View File

@@ -15,12 +15,11 @@ platform-specific function implementation, such as TUN transparent proxy impleme
## :material-download: Download
* [App Store](https://apps.apple.com/us/app/sing-box/id6451272673)
* ~~TestFlight (Beta)~~
* ~~[TestFlight (Beta)](https://testflight.apple.com/join/AcqO44FH)~~
TestFlight quota is only available to [sponsors](https://github.com/sponsors/nekohasekai)
(one-time sponsorships are accepted).
Once you donate, you can get an invitation by sending us your Apple ID [via email](mailto:contact@sagernet.org),
or join our Telegram group for sponsors from [@yet_another_sponsor_bot](https://t.me/yet_another_sponsor_bot).
_Our Testflight distribution has been temporarily blocked by Apple (possibly due to too many beta versions)
and you cannot join the test, install or update the sing-box beta app right now.
Please wait patiently for processing._
## :material-file-download: Download (macOS standalone version)

View File

@@ -147,7 +147,7 @@ Enforce strict routing rules when `auto_route` is enabled:
* Let unsupported network unreachable
* Route all connections to tun
It prevents address leaks and makes DNS hijacking work on Android.
It prevents address leaks and makes DNS hijacking work on Android, but your device will not be accessible by others.
*In Windows*:

View File

@@ -147,7 +147,7 @@ tun 接口的 IPv6 前缀。
* 让不支持的网络无法到达
* 将所有连接路由到 tun
它可以防止地址泄漏,并使 DNS 劫持在 Android 上工作。
它可以防止地址泄漏,并使 DNS 劫持在 Android 上工作,但你的设备将无法其他设备被访问
*在 Windows 中*: