|
|
@@ -2,10 +2,128 @@
|
|
|
icon: material/alert-decagram
|
|
|
---
|
|
|
|
|
|
+### 1.10.0
|
|
|
+
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+Important changes since 1.9:
|
|
|
+
|
|
|
+* Introducing auto-redirect **1**
|
|
|
+* Add AdGuard DNS Filter support **2**
|
|
|
+* TUN address fields are merged **3**
|
|
|
+* Add custom options for `auto-route` and `auto-redirect` **4**
|
|
|
+* Drop support for go1.18 and go1.19 **5**
|
|
|
+* Add tailing comma support in JSON configuration
|
|
|
+* Improve sniffers **6**
|
|
|
+* Add new `inline` rule-set type **7**
|
|
|
+* Add access control options for Clash API **8**
|
|
|
+* Add `rule_set_ip_cidr_accept_empty` DNS address filter rule item **9**
|
|
|
+* Add auto reload support for local rule-set
|
|
|
+* Update fsnotify usages **10**
|
|
|
+* Add IP address support for `rule-set match` command
|
|
|
+* Add `rule-set decompile` command
|
|
|
+* Add `process_path_regex` rule item
|
|
|
+* Update uTLS to v1.6.7 **11**
|
|
|
+* Optimize memory usages of rule-sets **12**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+The new auto-redirect feature allows TUN to automatically
|
|
|
+configure connection redirection to improve proxy performance.
|
|
|
+
|
|
|
+When auto-redirect is enabled, new route address set options will allow you to
|
|
|
+automatically configure destination IP CIDR rules from a specified rule set to the firewall.
|
|
|
+
|
|
|
+Specified or unspecified destinations will bypass the sing-box routes to get better performance
|
|
|
+(for example, keep hardware offloading of direct traffics on the router).
|
|
|
+
|
|
|
+See [TUN](/configuration/inbound/tun).
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+The new feature allows you to use AdGuard DNS Filter lists in a sing-box without AdGuard Home.
|
|
|
+
|
|
|
+See [AdGuard DNS Filter](/configuration/rule-set/adguard/).
|
|
|
+
|
|
|
+**3**:
|
|
|
+
|
|
|
+See [Migration](/migration/#tun-address-fields-are-merged).
|
|
|
+
|
|
|
+**4**:
|
|
|
+
|
|
|
+See [iproute2_table_index](/configuration/inbound/tun/#iproute2_table_index),
|
|
|
+[iproute2_rule_index](/configuration/inbound/tun/#iproute2_rule_index),
|
|
|
+[auto_redirect_input_mark](/configuration/inbound/tun/#auto_redirect_input_mark) and
|
|
|
+[auto_redirect_output_mark](/configuration/inbound/tun/#auto_redirect_output_mark).
|
|
|
+
|
|
|
+**5**:
|
|
|
+
|
|
|
+Due to maintenance difficulties, sing-box 1.10.0 requires at least Go 1.20 to compile.
|
|
|
+
|
|
|
+**6**:
|
|
|
+
|
|
|
+BitTorrent, DTLS, RDP, SSH sniffers are added.
|
|
|
+
|
|
|
+Now the QUIC sniffer can correctly extract the server name from Chromium requests and
|
|
|
+can identify common QUIC clients, including
|
|
|
+Chromium, Safari, Firefox, quic-go (including uquic disguised as Chrome).
|
|
|
+
|
|
|
+**7**:
|
|
|
+
|
|
|
+The new [rule-set](/configuration/rule-set/) type inline (which also becomes the default type)
|
|
|
+allows you to write headless rules directly without creating a rule-set file.
|
|
|
+
|
|
|
+**8**:
|
|
|
+
|
|
|
+With the new access control options, not only can you allow Clash dashboards
|
|
|
+to access the Clash API on your local network,
|
|
|
+you can also manually limit the websites that can access the API instead of allowing everyone.
|
|
|
+
|
|
|
+See [Clash API](/configuration/experimental/clash-api/).
|
|
|
+
|
|
|
+**9**:
|
|
|
+
|
|
|
+See [DNS Rule](/configuration/dns/rule/#rule_set_ip_cidr_accept_empty).
|
|
|
+
|
|
|
+**10**:
|
|
|
+
|
|
|
+sing-box now uses fsnotify correctly and will not cancel watching
|
|
|
+if the target file is deleted or recreated via rename (e.g. `mv`).
|
|
|
+
|
|
|
+This affects all path options that support reload, including
|
|
|
+`tls.certificate_path`, `tls.key_path`, `tls.ech.key_path` and `rule_set.path`.
|
|
|
+
|
|
|
+**11**:
|
|
|
+
|
|
|
+Some legacy chrome fingerprints have been removed and will fallback to chrome,
|
|
|
+see [utls](/configuration/shared/tls#utls).
|
|
|
+
|
|
|
+**12**:
|
|
|
+
|
|
|
+See [Source Format](/configuration/rule-set/source-format/#version).
|
|
|
+
|
|
|
### 1.9.7
|
|
|
|
|
|
* Fixes and improvements
|
|
|
|
|
|
+#### 1.10.0-beta.11
|
|
|
+
|
|
|
+* Update uTLS to v1.6.7 **1**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Some legacy chrome fingerprints have been removed and will fallback to chrome,
|
|
|
+see [utls](/configuration/shared/tls#utls).
|
|
|
+
|
|
|
+#### 1.10.0-beta.10
|
|
|
+
|
|
|
+* Add `process_path_regex` rule item
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+_The macOS standalone versions of sing-box (>=1.9.5/<1.10.0-beta.11) now silently fail and require manual granting of
|
|
|
+the **Full Disk Access** permission to system extension to start, probably due to Apple's changed security policy. We
|
|
|
+will prompt users about this in feature versions._
|
|
|
+
|
|
|
### 1.9.6
|
|
|
|
|
|
* Fixes and improvements
|
|
|
@@ -27,11 +145,41 @@ icon: material/alert-decagram
|
|
|
|
|
|
See [Migration](/migration/#bundle-identifier-updates-in-apple-platform-clients).
|
|
|
|
|
|
-We are still working on getting all sing-box apps back on the App Store.
|
|
|
-
|
|
|
-This work is expected to be completed within a week
|
|
|
+We are still working on getting all sing-box apps back on the App Store, which should be completed within a week
|
|
|
(SFI on the App Store and others on TestFlight are already available).
|
|
|
|
|
|
+#### 1.10.0-beta.8
|
|
|
+
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+_With the help of a netizen, we are in the process of getting sing-box apps back on the App Store, which should be
|
|
|
+completed within a month (TestFlight is already available)._
|
|
|
+
|
|
|
+#### 1.10.0-beta.7
|
|
|
+
|
|
|
+* Update quic-go to v0.47.0
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-beta.6
|
|
|
+
|
|
|
+* Add RDP sniffer
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-beta.5
|
|
|
+
|
|
|
+* Add PNA support for [Clash API](/configuration/experimental/clash-api/)
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-beta.3
|
|
|
+
|
|
|
+* Add SSH sniffer
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-beta.2
|
|
|
+
|
|
|
+* Build with go1.23
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
### 1.9.4
|
|
|
|
|
|
* Update quic-go to v0.46.0
|
|
|
@@ -52,18 +200,219 @@ sing-box apps on Apple platforms are temporarily unavailable for download or upd
|
|
|
If your company or organization is willing to help us return to the App Store,
|
|
|
please [contact us](mailto:[email protected])._
|
|
|
|
|
|
+#### 1.10.0-alpha.29
|
|
|
+
|
|
|
+* Update quic-go to v0.46.0
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-alpha.25
|
|
|
+
|
|
|
+* Add AdGuard DNS Filter support **1**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+The new feature allows you to use AdGuard DNS Filter lists in a sing-box without AdGuard Home.
|
|
|
+
|
|
|
+See [AdGuard DNS Filter](/configuration/rule-set/adguard/).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.23
|
|
|
+
|
|
|
+* Add Chromium support for QUIC sniffer
|
|
|
+* Add client type detect support for QUIC sniffer **1**
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Now the QUIC sniffer can correctly extract the server name from Chromium requests and
|
|
|
+can identify common QUIC clients, including
|
|
|
+Chromium, Safari, Firefox, quic-go (including uquic disguised as Chrome).
|
|
|
+
|
|
|
+See [Protocol Sniff](/configuration/route/sniff/) and [Route Rule](/configuration/route/rule/#client).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.22
|
|
|
+
|
|
|
+* Optimize memory usages of rule-sets **1**
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+See [Source Format](/configuration/rule-set/source-format/#version).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.20
|
|
|
+
|
|
|
+* Add DTLS sniffer
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-alpha.19
|
|
|
+
|
|
|
+* Add `rule-set decompile` command
|
|
|
+* Add IP address support for `rule-set match` command
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-alpha.18
|
|
|
+
|
|
|
+* Add new `inline` rule-set type **1**
|
|
|
+* Add auto reload support for local rule-set
|
|
|
+* Update fsnotify usages **2**
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+The new [rule-set](/configuration/rule-set/) type inline (which also becomes the default type)
|
|
|
+allows you to write headless rules directly without creating a rule-set file.
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+sing-box now uses fsnotify correctly and will not cancel watching
|
|
|
+if the target file is deleted or recreated via rename (e.g. `mv`).
|
|
|
+
|
|
|
+This affects all path options that support reload, including
|
|
|
+`tls.certificate_path`, `tls.key_path`, `tls.ech.key_path` and `rule_set.path`.
|
|
|
+
|
|
|
+#### 1.10.0-alpha.17
|
|
|
+
|
|
|
+* Some chaotic changes **1**
|
|
|
+* `rule_set_ipcidr_match_source` rule items are renamed **2**
|
|
|
+* Add `rule_set_ip_cidr_accept_empty` DNS address filter rule item **3**
|
|
|
+* Update quic-go to v0.45.1
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Something may be broken, please actively report problems with this version.
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+`rule_set_ipcidr_match_source` route and DNS rule items are renamed to
|
|
|
+`rule_set_ip_cidr_match_source` and will be remove in sing-box 1.11.0.
|
|
|
+
|
|
|
+**3**:
|
|
|
+
|
|
|
+See [DNS Rule](/configuration/dns/rule/#rule_set_ip_cidr_accept_empty).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.16
|
|
|
+
|
|
|
+* Add custom options for `auto-route` and `auto-redirect` **1**
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+See [iproute2_table_index](/configuration/inbound/tun/#iproute2_table_index),
|
|
|
+[iproute2_rule_index](/configuration/inbound/tun/#iproute2_rule_index),
|
|
|
+[auto_redirect_input_mark](/configuration/inbound/tun/#auto_redirect_input_mark) and
|
|
|
+[auto_redirect_output_mark](/configuration/inbound/tun/#auto_redirect_output_mark).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.13
|
|
|
+
|
|
|
+* TUN address fields are merged **1**
|
|
|
+* Add route address set support for auto-redirect **2**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+See [Migration](/migration/#tun-address-fields-are-merged).
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+The new feature will allow you to configure the destination IP CIDR rules
|
|
|
+in the specified rule-sets to the firewall automatically.
|
|
|
+
|
|
|
+Specified or unspecified destinations will bypass the sing-box routes to get better performance
|
|
|
+(for example, keep hardware offloading of direct traffics on the router).
|
|
|
+
|
|
|
+See [route_address_set](/configuration/inbound/tun/#route_address_set)
|
|
|
+and [route_exclude_address_set](/configuration/inbound/tun/#route_exclude_address_set).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.12
|
|
|
+
|
|
|
+* Fix auto-redirect not configuring nftables forward chain correctly
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
### 1.9.3
|
|
|
|
|
|
* Fixes and improvements
|
|
|
|
|
|
+#### 1.10.0-alpha.10
|
|
|
+
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
### 1.9.2
|
|
|
|
|
|
* Fixes and improvements
|
|
|
|
|
|
+#### 1.10.0-alpha.8
|
|
|
+
|
|
|
+* Drop support for go1.18 and go1.19 **1**
|
|
|
+* Update quic-go to v0.45.0
|
|
|
+* Update Hysteria2 BBR congestion control
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Due to maintenance difficulties, sing-box 1.10.0 requires at least Go 1.20 to compile.
|
|
|
+
|
|
|
### 1.9.1
|
|
|
|
|
|
* Fixes and improvements
|
|
|
|
|
|
+#### 1.10.0-alpha.7
|
|
|
+
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+#### 1.10.0-alpha.5
|
|
|
+
|
|
|
+* Improve auto-redirect **1**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+nftables support and DNS hijacking has been added.
|
|
|
+
|
|
|
+Tun inbounds with `auto_route` and `auto_redirect` now works as expected on routers **without intervention**.
|
|
|
+
|
|
|
+#### 1.10.0-alpha.4
|
|
|
+
|
|
|
+* Fix auto-redirect **1**
|
|
|
+* Improve auto-route on linux **2**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Tun inbounds with `auto_route` and `auto_redirect` now works as expected on routers.
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+Tun inbounds with `auto_route` and `strict_route` now works as expected on routers and servers,
|
|
|
+but the usages of [exclude_interface](/configuration/inbound/tun/#exclude_interface) need to be updated.
|
|
|
+
|
|
|
+#### 1.10.0-alpha.2
|
|
|
+
|
|
|
+* Move auto-redirect to Tun **1**
|
|
|
+* Fixes and improvements
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+Linux support are added.
|
|
|
+
|
|
|
+See [Tun](/configuration/inbound/tun/#auto_redirect).
|
|
|
+
|
|
|
+#### 1.10.0-alpha.1
|
|
|
+
|
|
|
+* Add tailing comma support in JSON configuration
|
|
|
+* Add simple auto-redirect for Android **1**
|
|
|
+* Add BitTorrent sniffer **2**
|
|
|
+
|
|
|
+**1**:
|
|
|
+
|
|
|
+It allows you to use redirect inbound in the sing-box Android client
|
|
|
+and automatically configures IPv4 TCP redirection via su.
|
|
|
+
|
|
|
+This may alleviate the symptoms of some OCD patients who think that
|
|
|
+redirect can effectively save power compared to the system HTTP Proxy.
|
|
|
+
|
|
|
+See [Redirect](/configuration/inbound/redirect/).
|
|
|
+
|
|
|
+**2**:
|
|
|
+
|
|
|
+See [Protocol Sniff](/configuration/route/sniff/).
|
|
|
+
|
|
|
### 1.9.0
|
|
|
|
|
|
* Fixes and improvements
|
世界