TLS, REALITY, VLESS, SMUX and Transport Reliability
This release contains nine changes since Xray-core v26.7.24.
TLS and REALITY
- Coalesced TLS records while isolating session-resumption state.
- Skipped session resumption when it would forge the selected client fingerprint.
- Made REALITY client-version bounds operator-configurable without an implicit default.
VLESS and SMUX
- Gave decoded VLESS request addresses independent lifetimes.
- Filled SMUX frame padding with cryptographically random bytes.
- Prevented the readv reader from handing consumers its own vector storage, avoiding concurrent release and merge corruption.
Runtime cleanup
- Removed unreachable HTTP sniffer narrowing from the dispatcher.
- Removed unused pooled-link transport helpers.
- Set the core version to 26.7.26.
What's Changed
- perf(tls): coalesce records and isolate resumption in
9f132ce - fix(reality): make client version bounds configurable without a default in
790ae06 - fix(vless): give decoded request addresses their own lifetime in
535804a - fix(tls): skip session resumption when it would forge the fingerprint in
b4b5cc2 - fix(singmux): fill frame padding with random bytes in
14e7488 - refactor(dispatcher): drop unreachable HTTP sniffer narrowing in
e72a653 - refactor(transport): drop unused pooled link helpers in
2b1463a - chore: bump version to 26.7.26 in
b2feda5 - fix(buf): stop readv reader from handing out its own vector storage in
203fe55
Full Changelog: v26.7.24...v26.7.26