CluvexStudio/Aether v2.0.0

on GitHub

Aether v2.0.0

Aether is a user-space proxy client. It tunnels traffic out of a filtered network and exposes a local SOCKS5 proxy on 127.0.0.1:1819. Point a browser, terminal, or system proxy at that address and your traffic leaves through the tunnel.

Tor is built in

• Three ways to use it. --tor carries Tor inside the tunnel, --tor-reverse dials the tunnel through Tor so WARP is reached from a Tor exit, and --tor-only is plain Tor on the usual proxy port.
• Bridges are fetched from bridgedb on their own, picked for the country you appear to be in. No CAPTCHA, nothing to paste in.
• The pluggable transports ship in the pt/ folder beside the binary, so obfs4, snowflake, webtunnel and meek work on a fresh machine. Transports already installed are found too, Tor Browser's included.
• A bridge only counts as working once a stream has actually opened through it. One that reports 100% but carries nothing is dropped, and the next is tried.
• --tor takes any transport, so --wg --tor has the WireGuard tunnel carry Tor with nothing in between.

New ways out

• MASQUE-in-MASQUE, --mim: two MASQUE hops, for an exit address in a different range than a single hop gives you.
• The QUIC opener sends a version-negotiation probe first, which gets QUIC through networks that drop v1 on every port but leave v2 alone.

Fixes

• A busy proxy ran out of file descriptors and stopped answering. The limit is raised at startup, the client count is capped, and the leaks behind it are closed. (#101, #106)
• Sockets can carry a firewall mark, so a Linux router can route Aether's own traffic without it looping back through the tunnel. (#106)
• Idle and half-closed connections were kept forever. They time out now, and a dead one is reset instead of lingering.
• The relay never flushed what it wrote, which stalled any transport that buffers.
• The build commands in the docs left out the directory they have to be run from. (#83)

Changes

• The crate needs Rust 1.98.

Every archive ships with a matching .sha256 file, and SHA256SUMS.txt lists them all.

See README.md and the Docs directory for install steps, transport selection, obfuscation profiles, and the full environment-variable reference.

Full Changelog: v1.9.0...v2.0.0