Yet Another Public Notification Channel

Announcing our new project: TCP Brutal https://github.com/apernet/tcp-brutal TCP Brutal is Hysteria's congestion control algorithm ported to TCP. Information about Brutal itself can be found in the Hysteria documentation. As an official subproject of Hysteria, TCP Brutal is actively maintained to be in sync with the Brutal implementation in Hysteria. Do I need a new proxy protocol? No. TCP Brutal supports all existing TCP proxy protocols, but requires support from both the client and server software (to provide bandwidth options, exchange bandwidth information, etc.). Ask the developers of the proxy software you use to add support. 新项目发布 - TCP Brutal TCP Brutal 是 Hysteria 中的同名拥塞控制算法移植到 TCP 的版本。关于 Brutal 本身的信息，可以在 Hysteria 文档中找到。作为 Hysteria 官方子项目，TCP Brutal 会保持与 Hysteria 中的 Brutal 同步更新。 需要新协议吗？ 不需要。TCP Brutal 支持一切已有的 TCP 代理协议，但是需要代理客户端和服务端软件的支持（以提供带宽设置选项，交换带宽信息等）。请向你使用的代理软件的作者请求适配。

sing-box 1.7.0-alpha.6 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.7.0-alpha.6

sing-box 1.7.0-alpha.4 has been released. * Migrate multiplex and UoT server to inbound 1 * Add TCP Brutal support for multiplex 2 1: Starting in 1.7.0, multiplexing support is no longer enabled by default and needs to be turned on explicitly in inbound options. 2 Hysteria Brutal Congestion Control Algorithm in TCP. A kernel module needs to be installed on the Linux server, see TCP Brutal for details. https://github.com/SagerNet/sing-box/releases/tag/v1.7.0-alpha.4

sing-box 1.7.0-alpha.3 has been released. * Add HTTPUpgrade V2Ray transport support 1 * Fixes and improvements 1: Introduced in V2Ray 5.10.0. The new HTTPUpgrade transport has better performance than WebSocket and is better suited for CDN abuse. https://github.com/SagerNet/sing-box/releases/tag/v1.7.0-alpha.3

sing-box 1.6.0 has been released. ## :memo: Release Notes * Fixes and improvements ## :new: Important changes since 1.5: * Our Apple tvOS client is now available in the App Store 🍎 * Update BBR congestion control for TUIC and Hysteria2 1 * Update brutal congestion control for Hysteria2 * Add brutal_debug option for Hysteria2 * Update legacy Hysteria protocol 2 * Add TLS self sign key pair generate command * Remove Deprecated Features by agreement 1: None of the existing Golang BBR congestion control implementations have been reviewed or unit tested. This update is intended to address the multi-send defects of the old implementation and may introduce new issues. 2 Based on discussions with the original author, the brutal CC and QUIC protocol parameters of the old protocol (Hysteria 1) have been updated to be consistent with Hysteria 2 https://github.com/SagerNet/sing-box/releases/tag/v1.6.0

sing-box 1.7.0-alpha.1 has been released. * Add exclude route support for TUN inbound * Add udp_disable_domain_unmapping inbound listen option 1 * Fixes and improvements 1: If enabled, for UDP proxy requests addressed to a domain, the original packet address will be sent in the response instead of the mapped domain. This option is used for compatibility with clients that do not support receiving UDP packets with domain addresses, such as Surge. https://github.com/SagerNet/sing-box/releases/tag/v1.7.0-alpha.1

sing-box 1.5.5 has been released. * Fix IPv6 auto_route for Linux 1 * Add legacy builds for old Windows and macOS systems 2 * Fixes and improvements 1: When auto_route is enabled and strict_route is disabled, the device can now be reached from external IPv6 addresses. 2: Built using Go 1.20, the last version that will run on Windows 7, 8, Server 2008, Server 2012 and macOS 10.13 High Sierra, 10.14 Mojave. https://github.com/SagerNet/sing-box/releases/tag/v1.5.5

sing-box 1.6.0-beta.4 has been released. * Fix IPv6 auto_route for Linux 1 * Fixes and improvements 1: When auto_route is enabled and strict_route is disabled, the device can now be reached from external IPv6 addresses. https://github.com/SagerNet/sing-box/releases/tag/v1.6.0-beta.4

sing-box 1.6.0-beta.3 has been released. * Update the legacy Hysteria protocol 1 * Fixes and improvements 1 Based on discussions with the original author, the brutal CC and QUIC protocol parameters of the old protocol (Hysteria 1) have been updated to be consistent with Hysteria 2 https://github.com/SagerNet/sing-box/releases/tag/v1.6.0-beta.3

sing-box 1.5.3 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.5.3

sing-box 1.6.0-alpha.4 has been released. * Add brutal_debug option for Hysteria2 * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.6.0-alpha.4

sing-box 1.6.0-alpha.1 has been released. ## :memo: Release Notes * Update BBR congestion control for TUIC and Hysteria2 1 * Update quic-go to v0.39.0 * Update gVisor to 20230814.0 * Remove Deprecated Features by agreement * Fixes and improvements 1: None of the existing Golang BBR congestion control implementations have been reviewed or unit tested. This update is intended to address the multi-send defects of the old implementationsand may introduce new issues. https://github.com/SagerNet/sing-box/releases/tag/v1.6.0-alpha.1

sing-box 1.5.0 has been released. * Fixes and improvements Important changes since 1.4: * Add TLS ECH server support * Improve TLS TCH client configuration * Add TLS ECH key pair generator 1 * Add TLS ECH support for QUIC based protocols 2 * Add KDE support for the set_system_proxy option in HTTP inbound * Add Hysteria2 protocol support 3 * Add interrupt_exist_connections option for Selector and URLTest outbounds 4 * Add DNS01 challenge support for ACME TLS certificate issuer 5 * Add merge command 6 * Mark Deprecated Features 1: Command: sing-box generate ech-keypair <plain_server_name> [--pq-signature-schemes-enabled] 2: All inbounds and outbounds are supported, including Naiveproxy, Hysteria[/2], TUIC and V2ray QUIC transport. 3: See Hysteria2 inbound and Hysteria2 outbound For protocol description, please refer to https://v2.hysteria.network 4: Interrupt existing connections when the selected outbound has changed. Only inbound connections are affected by this setting, internal connections will always be interrupted. 5: Only Alibaba Cloud DNS and Cloudflare are supported, see ACME Fields and DNS01 Challenge Fields. 6: This command also parses path resources that appear in the configuration file and replaces them with embedded configuration, such as TLS certificates or SSH private keys. https://github.com/SagerNet/sing-box/releases/tag/v1.5.0

sing-box 1.4.4 has been released. * Fixed an improper authentication vulnerability in the SOCKS5 inbound * Fixes and improvements Security Advisory This update fixes an improper authentication vulnerability in the sing-box SOCKS5 inbound. This vulnerability allows an attacker to craft special requests to bypass user authentication. All users exposing SOCKS5 servers with user authentication in an insecure environment are advised to update immediately. 此更新修复了 sing-box SOCKS5 入站中的一个不正确身份验证漏洞。 该漏洞允许攻击者制作特殊请求来绕过用户身份验证。建议所有将使用用户认证的 SOCKS5 服务器暴露在不安全环境下的用户立更新。 https://github.com/SagerNet/sing-box/releases/tag/v1.4.4

sing-box 1.5.0-rc.2 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-rc.2

sing-box 1.5.0-beta.11 has been released. * Add DNS01 challenge support for ACME TLS certificate issuer 1 * Fixes and improvements 1: Only Alibaba Cloud DNS and Cloudflare are supported, see ACME Fields and DNS01 Challenge Fields. https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-beta.11

sing-box 1.5.0-beta.9 has been released. * Add interrupt_exist_connections option for Selector and URLTest outbounds 1 * Fixes and improvements 1: Interrupt existing connections when the selected outbound has changed. Only inbound connections are affected by this setting, internal connections will always be interrupted. https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-beta.9

sing-box 1.5.0-beta.3 has been released. * Fixes and improvements * Updated Hysteria2 documentation 1 1: Added notes indicating compatibility issues with the official Hysteria2 servers and clients when using fastOpen=false or UDP MTU >= 1200. https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-beta.3

sing-box 1.5.0-beta.2 has been released. * Add hysteria2 protocol support 1 * Fixes and improvements 1: See Hysteria2 inbound and Hysteria2 outbound For protocol description, please refer to https://v2.hysteria.network https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-beta.2

sing-box 1.5.0-beta.1 has been released. * Add TLS ECH server support * Improve TLS TCH client configuration * Add TLS ECH key pair generator 1 * Add TLS ECH support for QUIC based protocols 2 * Add KDE support for the set_system_proxy option in HTTP inbound 1: Command: sing-box generate ech-keypair <plain_server_name> [-pq-signature-schemes-enabled] 2: All inbounds and outbounds are supported, including Naiveproxy, Hysteria, TUIC and V2ray QUIC transport. https://github.com/SagerNet/sing-box/releases/tag/v1.5.0-beta.1