Usque v0.3.3-beta.2 pre-release / Usque v0.3.3-beta.2 预发布
Usque v0.3.3-beta.2 is a pre-release that improves continuous connection and proxy recovery, Linux startup and network diagnostics, and Proton verification and server selection.
Usque v0.3.3-beta.2 是一个预发布版本，改进持续连接与代理恢复、Linux 启动与网络诊断，以及 Proton 验证和节点选择体验。
Highlights / 更新亮点 ✨
-
Connection and proxy recovery — Cancellable recovery handles recoverable transport failures while local HTTP/SOCKS listeners stay available with bounded waiting queues; stop, credential, configuration and protection failures still end the attempt.
连接与代理恢复 — 可取消的恢复处理可恢复传输故障，本地 HTTP/SOCKS 监听保持可用并采用有界等待队列；停止、凭据、配置及保护失败仍会终止尝试。 -
Linux recovery and startup — Preserve TUN failure and cleanup diagnostics, select physical egress through kernel route queries, and defer sensitive initialization and disk writes to keep startup and settings responsive.
Linux 恢复与启动 — 保留 TUN 故障和清理诊断，通过内核路由查询选择物理出口，并延后敏感初始化和磁盘写入，改善启动与设置响应。 -
Proton verification and selection — Restore desktop verification callbacks, use a full-screen Android verification window, and add server country flags and a persistent scrollbar. Complete official human verification yourself; flags describe directory metadata, not proven egress geography.
Proton 验证与选择 — 修复桌面验证回调，Android 使用全屏验证窗口，并新增节点国家旗帜与常显滚动条。官方人机验证需本人完成；旗帜表示目录元数据，不证明实际出口地区。 -
Certificate-validation maintenance — Update webpki and root-certificate dependencies while retaining strict endpoint authentication and pin checks.
证书校验维护 — 更新 webpki 与根证书依赖，保留严格的端点认证和公钥校验。
Download / 下载 📥
| Platform / 平台 | Download / 下载 |
|---|---|
 Android 8.0+ (API 26) Android TV supported / 支持 Android TV |    
|
 Windows 10 2004+ (build 19041) |  
|
 Linux Ubuntu 22.04+ · Debian 12+ · Fedora · systemd |      
|
Tip
Download packages only from this release. Not sure which APK? Use Universal. On Windows, install the EXE; the MSI files are only for in-app updates.
请仅从此 Release 下载。不确定选哪个 APK 时请用 Universal。Windows 请安装 EXE，MSI 文件仅供应用内更新。
Before upgrading / 升级须知
-
Beta: install manually and back up first — This is not the stable Latest release and is not offered to stable clients. It uses the same application identity, not a parallel installation. Do not downgrade migrated data to v0.3.2 or older.
Beta：手动安装并先备份 — 本版不是稳定 Latest，不会推送给稳定版客户端；使用相同应用身份，不是并行安装。请勿将已迁移的数据降级给 v0.3.2 或更早版本。 -
Defaults stay off — Ads, chain proxy and encrypted WARP DNS stay off until you enable them; your saved choices are kept.
默认保持关闭 — Ads、链式代理和加密 WARP DNS 需手动开启；已保存的设置会保留。 -
Android blocking — To keep apps blocked when the VPN stops, enable Always-on VPN and Block connections without VPN in Android settings.
Android 断网保护 — 若要在 VPN 停止后继续阻止应用联网，请在系统设置中开启“始终开启的 VPN”和“阻止未使用 VPN 的连接”。 -
Test boundaries — Linux packages and experimental Proton exits were introduced in beta.1. Native Android Proton and complete live-tunnel, real-upgrade, leak and performance acceptance remain unverified; interrupted UDP datagrams are not guaranteed to survive recovery.
测试边界 — Linux 安装包与实验性 Proton 出口已在 beta.1 提供。原生 Android Proton、完整实网隧道、真实升级、泄漏与性能验收仍未完成；恢复不保证保留中断期间的 UDP 数据报。
Technical details / 技术细节
-
Configuration schema 26, Agent protocol 3, Windows/Linux recovery journals 6/1 and recovery export 2. All IPC additions are append-only, and diagnostic exports keep their privacy filtering.
配置 schema 26、Agent 协议 3、Windows/Linux 恢复日志 6/1、恢复导出 2。IPC 改动均为追加，诊断导出继续执行隐私过滤。 -
IPv6 presets look up their endpoint hostname through your network's DNS before the tunnel starts. Your DNS provider can see that lookup.
IPv6 预设在隧道建立前通过当前网络的 DNS 查询端点域名，DNS 服务商可以看到这次查询。 -
Chrome 155 is a fixed TLS profile, not full browser emulation. ECH GREASE is not real ECH, and authentication and endpoint pins are always enforced.
Chrome 155 是固定 TLS 配置，并非完整模拟浏览器；ECH GREASE 不是真正的 ECH，认证与端点公钥校验始终生效。 -
Proton account management and its verification window use the ordinary system HTTPS/DNS path; connection and renewal APIs use the established WARP session, while the private agent stays inside Proton. No automatic telemetry or diagnostic upload is added.
Proton 账号管理与验证窗口使用系统普通 HTTPS/DNS 路径；连接与续期 API 使用既有 WARP 会话，私有 agent 留在 Proton 内部。不新增自动遥测或诊断上传。 -
Chain exits connect through the WARP tunnel. If the exit fails, traffic stops instead of falling back to WARP only. UDP-based exits need non-L4 mode.
链式出口经 WARP 隧道连接；出口失败时流量停止，不会退回仅 WARP。基于 UDP 的出口需要非 L4 模式。 -
On Windows, the Usque adapter stays after disconnect for reuse and is removed when you fully exit the app.
Windows 断开后会保留 Usque 虚拟网卡以便复用，完全退出应用时移除。
Verify before installing / 安装前验证 🔐
Compare the file's SHA-256 with SHA256SUMS and check the signer below. Stop if anything differs. Step-by-step guide
请将文件 SHA-256 与 SHA256SUMS 比对并核对下方签名，任何不一致都请停止安装。详细步骤
| Signer / 签名 | SHA-256 / key |
|---|---|
| Windows Authenticode | 12cecd1302aba36bdd920c86b1541e2dab34a7f5a0e13a990345bb8bc6777f9d
|
| Android release certificate | 087cce9ace990b160204908a44c3e73808c5567685cf1b9cf0ae3ad033f9901a
|
| Linux Ed25519 public key | 11983c227537f921a882bed71988a72318580c3b8efc80f834082311b4859151
|
Pre-1.0 packages are self-signed, so Windows may show an unknown-publisher warning. Linux packages are verified with the .manifest.json and .sig files (Linux guide). Also attached: release manifest and per-package SPDX SBOMs.
1.0 之前的安装包为自签名，Windows 可能提示“未知发布者”。Linux 安装包通过 .manifest.json 和 .sig 校验（Linux 指南）。另附发布清单及逐包 SPDX SBOM。
Feedback / 问题反馈 💬
Bug report / 错误反馈 · Feature request / 功能建议 · Security issue (private) / 安全问题（私密）
Remove credentials, tokens and personal addresses from logs before sharing. / 分享日志前请删除凭据、令牌和个人地址。
Cloudflare and WARP are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions. / Cloudflare 和 WARP 是 Cloudflare, Inc. 在美国及其他司法管辖区的商标和/或注册商标。