Highlights
- Synced the fork with upstream
5e245b08and stamped the release as26.8.30-2253UTC. - Added QUIC v2 ClientHello sniffing while preserving strict QUIC Retry rejection.
- Updated Hysteria transport behavior through the upstream 2.12.2 integration, including safer masquerade proxy handling and optional stateless-reset suppression.
- Added FreeBSD TUN automatic routing-table and outbound-interface support.
Fork fixes
- Preserved the fork's protobuf field numbers for existing QUIC and Hysteria settings, avoiding wire-incompatible renumbering during the upstream merge.
- Preserved hardened Hysteria, XHTTP, Realm port-mapping, physical-peer provenance, cleanup, and shared TLS-config ownership behavior.
- Kept QUIC Retry packets fail-closed instead of treating truncated Retry framing as incomplete Initial data.
- Regenerated protobuf outputs with
protoc-gen-go v1.36.11andprotoc v6.33.5.
Upstream changes
- Hysteria: upgraded the official integration to 2.12.2.
- Transport: bind UDP outbound sockets in the destination address family.
- TUN: support
autoSystemRoutingTableandautoOutboundsInterfaceon FreeBSD. - Sniffing: support QUIC v2 Initial packets.
- Routing: export
HealthCheckSettings.
Compatibility notes
- REALITY
minClientVerandmaxClientVerremain operator-controlled with no implicit minimum when omitted. - SMUX continues to use the maintained in-tree
common/singmuximplementation. - Existing serialized QUIC and Hysteria configuration field numbers remain stable. The new
disableStatelessResetsetting is additive.
Validation
- Targeted unit tests for QUIC, Hysteria, XHTTP, Realm, TUN, transport configuration, VLESS, and REALITY passed.
- Race, checkptr, vet, protobuf-header, formatting, SMUX unit/race, and SMUX coverage gates passed.
- VLESS TCP TLS/REALITY interoperability passed 36/36 executions across Xray, sing-box 1.13.21, and Mihomo Meta 1.19.30.
- SMUX process interoperability passed all 40 Xray/sing-box/Mihomo VLESS/Trojan TCP/UDP/padding cells.
- Linux/amd64 static release build passed with Go 1.27.0 and
GOAMD64=v1. - Clean-tree GitHub Tests and Checkings passed for both
mainand the release tag; the release matrix and multi-architecture container publication also completed successfully.