Yet Another Public Notification Channel

sing-box 1.11.0-alpha.15 has been released. * Improve multi network dialing 1 * Fixes and improvements 1: New options allow you to configure the network strategy flexibly. See Dial Fields, Rule Action and Route. https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.15

sing-box 1.11.0-alpha.14 has been released. * Add multi network dialing 1 * Fixes and improvements 1: Similar to Surge's strategy. New options allow you to connect using multiple network interfaces, prefer or only use one type of interface, and configure a timeout to fallback to other interfaces. See Dial Fields, Rule Action and Route. https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.14

sing-box 1.11.0-alpha.13 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.13

sing-box 1.11.0-alpha.12 has been released. * Merge route options to route actions 1 * Add network_type, network_is_expensive and network_is_constrainted rule items 2 * Fixes and improvements 1: Route options in DNS route actions will no longer be considered deprecated, see DNS Route Action. Also, now udp_disable_domain_unmapping and udp_connect can also be configured in route action, see Route Action. 2: When using in graphical clients, new routing rule items allow you to match on network type (WIFI, cellular, etc.), whether the network is expensive, and whether Low Data Mode is enabled. See Route Rule, DNS Route Rule and Headless Rule. https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.12

sing-box 1.11.0-alpha.11 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.11

sing-box 1.11.0-alpha.10 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.10

sing-box 1.11.0-alpha.9 has been released. * Improve tun compatibility 1 * Fixes and improvements 1: When gvisor tun stack is enabled, even if the request passes routing, if the outbound connection establishment fails, the connection still does not need to be established and a TCP RST is replied. https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.9

sing-box 1.11.0-alpha.8 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.8

sing-box 1.11.0-alpha.7 has been released. * Introducing rule actions 1 1: New rule actions replace legacy inbound fields and special outbound fields, and can be used for pre-matching 2. See Rule, Rule Action, DNS Rule and DNS Rule Action. For migration, see Migrate legacy special outbounds to rule actions, Migrate legacy inbound fields to rule actions and Migrate legacy DNS route options to rule actions. 2: Similar to Surge's pre-matching. Specifically, the new rule actions allow you to reject connections with TCP RST (for TCP connections) and ICMP port unreachable (for UDP packets) before connection established to improve tun's compatibility. See Rule Action. https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.7

sing-box 1.11.0-alpha.6 has been released. * Update quic-go to v0.48.1 * Set gateway for tun correctly * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.6

sing-box 1.11.0-alpha.5 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.5

sing-box 1.11.0-alpha.4 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.4

sing-box 1.11.0-alpha.2 has been released. * Add warnings for usage of deprecated features * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.2

sing-box 1.11.0-alpha.1 has been released. * Update quic-go to v0.48.0 * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.1

sing-box 1.10.1 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.10.1

sing-box 1.10.0 has been released. * Introducing auto-redirect 1 * Add AdGuard DNS Filter support 2 * TUN address fields are merged 3 * Add custom options for auto-route and auto-redirect 4 * Drop support for go1.18 and go1.19 5 * Add tailing comma support in JSON configuration * Improve sniffers 6 * Add new inline rule-set type 7 * Add access control options for Clash API 8 * Add rule_set_ip_cidr_accept_empty DNS address filter rule item 9 * Add auto reload support for local rule-set * Update fsnotify usages 10 * Add IP address support for rule-set match command * Add rule-set decompile command * Add process_path_regex rule item * Update uTLS to v1.6.7 11 * Optimize memory usages of rule-sets 12 1: The new auto-redirect feature allows TUN to automatically configure connection redirection to improve proxy performance. When auto-redirect is enabled, new route address set options will allow you to automatically configure destination IP CIDR rules from a specified rule set to the firewall. Specified or unspecified destinations will bypass the sing-box routes to get better performance (for example, keep hardware offloading of direct traffics on the router). See TUN. 2: The new feature allows you to use AdGuard DNS Filter lists in a sing-box without AdGuard Home. See AdGuard DNS Filter. 3: See Migration. 4: See iproute2_table_index, iproute2_rule_index, auto_redirect_input_mark and auto_redirect_output_mark. 5: Due to maintenance difficulties, sing-box 1.10.0 requires at least Go 1.20 to compile. 6: BitTorrent, DTLS, RDP, SSH sniffers are added. Now the QUIC sniffer can correctly extract the server name from Chromium requests and can identify common QUIC clients, including Chromium, Safari, Firefox, quic-go (including uquic disguised as Chrome). 7: The new rule-set type inline (which also becomes the default type) allows you to write headless rules directly without creating a rule-set file. 8: With the new access control options, not only can you allow Clash dashboards to access the Clash API on your local network, you can also manually limit the websites that can access the API instead of allowing everyone. See Clash API. 9: See DNS Rule. 10: sing-box now uses fsnotify correctly and will not cancel watching if the target file is deleted or recreated via rename (e.g. mv). This affects all path options that support reload, including tls.certificate_path, tls.key_path, tls.ech.key_path and rule_set.path. 11: Some legacy chrome fingerprints have been removed and will fallback to chrome, see utls. 12: See Source Format. https://github.com/SagerNet/sing-box/releases/tag/v1.10.0

sing-box 1.10.0-rc.1 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-rc.1

sing-box 1.10.0-beta.12 has been released. * Add process_path_regex rule item * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.12

sing-box 1.9.7 has been released. * Fixes and improvements https://github.com/SagerNet/sing-box/releases/tag/v1.9.7

The macOS standalone versions of sing-box (1.9.5-1.9.6/1.10.0-beta*) now silently fail and require manual granting of the "Full Disk Access" permission to system extension to start, probably due to Apple's changed security policy. We will prompt users about this in the next version.