[v0.9.0] - 2026-10-12
🚀 Features & Enhancements
- Hysteria UDP FinalMask Support:
- Added FinalMask transport stream configuration support for Hysteria inbounds (
stream_settings.html). - Dynamically configured the FinalMask interface to display supported UDP masks (
salamander,udpHop,sudoku,noise,header-custom) while hiding TCP-specific masks for Hysteria streams (stream_finalmask.html).
- Added FinalMask transport stream configuration support for Hysteria inbounds (
- Hysteria Proxy Masquerade Enhancements:
- Added
X-Forwardedheader switch to Hysteria masquerade settings in inbound configuration form (stream_hysteria.html). - Added
xForwardedproperty and serialization support toHysteriaMasquerademodel (inbound.js).
- Added
- Comprehensive Hysteria 2 Subscription Links (
hysteria2://):- Implemented complete Hysteria 2 subscription link generation across Go backend (
subService.go) and Web UI (inbound.js). - Salamander Obfuscation: Automatically parses
salamanderUDP FinalMask into standardobfs=salamander&obfs-password=<password>query parameters. - Port Hopping (
mport): Automatically extracts multi-port hopping ranges fromudpHopUDP FinalMask orhysteriaSettings.udphopinto themportparameter. - Insecure TLS Support: Appends
insecure=1parameter whenallowInsecureis enabled in TLS settings. - External Proxies: Added multi-node link generation for Hysteria when
externalProxyendpoints are defined. - JSON Subscription Outbounds: Preserved
finalmaskstream settings on Hysteria outbounds insubJsonService.goand provided fallbackauthextraction.
- Implemented complete Hysteria 2 subscription link generation across Go backend (
🐛 Bug Fixes & Stability
- Hysteria Client Indexing & Actions:
- Fixed client indexing in
findIndexOfClient(inbounds.html) by identifying Hysteria clients viaauthandemailinstead of non-existent UUIDid. - Added
Authcredential row display in client information modal (inbound_info_modal.html).
- Fixed client indexing in
- Node Client Service Hysteria Authentication:
- Handled
nc.Authmapping with fallback tonc.Passwordor randomly generated credentials when attaching clients to Hysteria inbounds innode_client.go.
- Handled
- Nil Safety in Subscription Services:
- Ensured safe default initialization of
SubServiceinNewSubJsonServiceand guardedgenRemarkagainst nil receiver dereferences.
- Ensured safe default initialization of