SB Gateway 1.6.45

Changes

• Managed GeoIP rules now share immutable, content-addressed binary Xray assets
  instead of repeating large inline CIDR lists. Existing country rules migrate
  automatically; portable IPv4/IPv6 packs remain available to DNS and RouterOS.
• GeoIP publication validates and persists assets before replacing a database.
  Hot routing updates preserve established connections and selector overrides.
  Failed updates roll back to the last confirmed version.
• Obsolete GeoIP files are cleaned after confirmation. Active, startup,
  last-known-good, Apply and rollback references remain protected; incomplete
  retention documents cannot trigger deletion. Recovery archives include the
  required database files.
• RouterOS memory-high and memory-max are independently editable, with
  restart confirmation and actual readback. Ordinary Apply and image updates
  preserve these settings.
• Includes the startup/readiness, upload-cache, selector-history and exchange-card
  corrections from the 1.6.45 release candidates.

No new Go memory cap, reduced connection buffer or forced periodic garbage
collection was introduced. URLTest and priority settings, installation defaults
and Xray 26.9.30 are unchanged.

See GeoIP Assets, Memory Budget, and
Security for operational details and audit limitations.

ARM64 Archive

sb-gateway-1.6.45-linux-arm64.tar, 110,390,784 bytes; SHA256:

6d3286b4a3c8b0aa7a8b9053b45b8432b368779cc8641be04186b86b5ad14e8a

Known Limitations

• Binary dependency audit findings and eight high-severity npm build-tool
  findings remain open. This release does not claim a clean dependency audit;
  npm/Node are not included in the running container.
• Intermittent mass-outage and Apply failures still need extended investigation.
• Long-term memory profiling and broader physical-router Apply, database refresh
  and failover coverage remain outstanding. No universal memory or recovery-time
  guarantee is made.