Aether v1.8.0
Aether is a user-space proxy client. It tunnels traffic out of a filtered network and exposes a local SOCKS5 proxy on 127.0.0.1:1819. Point a browser, terminal, or system proxy at that address and your traffic leaves through the tunnel.
What's new in v1.8.0:
Fixes
- Gool no longer crashes. Picking it brought the app down as soon as either tunnel or the SOCKS server stopped, and reconnecting after that never came back up. Reported and fixed by @amir-reza-bijandi in #91.
- A WireGuard tunnel stayed down if one of its tasks panicked, because the shared lock was left poisoned and every other task then failed on it.
- Setting
AETHER_WG_RECONNECT_SECSorAETHER_MASQUE_RECONNECT_SECSto 0 reconnected in a tight loop instead of using the default delay. - An upstream SOCKS5 proxy could answer the greeting with "no authentication" and Aether would carry on without ever sending the username and password it was configured with. It now treats that as a failure, and checks the version byte on the password reply.
- The HTTP proxy read request headers one byte per syscall, up to 16384 of them for a single request.
Changes
- The SOCKS5 and HTTP listeners now warn when they are bound to an address other than loopback. Neither asks clients for authentication, so anyone who can reach that address can use the tunnel.
- Dependencies moved up to boringtun 0.7, rand 0.10, toml 1 and tokio 1.53. This drops ring 0.16, which is no longer maintained and carries RUSTSEC-2025-0009.
- x25519-dalek and curve25519-dalek are off release candidates and on stable releases.
Every archive ships with a matching .sha256 file, and SHA256SUMS.txt lists them all.
See README.md and the Docs directory for install steps, transport selection, obfuscation profiles, and the full environment-variable reference.
What's Changed
- fix(gool): stop polling the task that ended the tunnel by @amir-reza-bijandi in #91
New Contributors
- @amir-reza-bijandi made their first contribution in #91
Full Changelog: v1.7.0...v1.8.0