REALITY practice: Detect & imitate target's post-handshake records
#4778 提到 @ban6cat6 发布了检测工具 Aparecium,通过检测“未模仿 OpenSSL 握手后发的两个 NewSessionTicket
”来检测 REALITY、ShadowTLS 等可以“偷别人”的协议,对此,Xray 团队迅速响应,研究并着手修复该问题
该版本 REALITY 服务端启动后会自动用 Chrome 指纹探测 target 的 post-handshake records 长度,耗时半分钟左右(期间会阻塞代理请求),并在后续的 REALITY 连接中模仿发送这些 records,从而初步修复了上述问题,请大家尽快升级服务端
再次感谢 @ban6cat6 的发现,与此同时,Xray 团队对这类问题的响应与修复速度也非常值得骄傲
该版本还重点修复了上个版本中 REALITY 服务端未用上 AES-NI 硬件加速导致性能下降的问题 #4741 ,以及合并了 REALITY 回落限速、Docker 镜像重构、Happy Eyeballs、DNS New Features 等重要 PR,Serverless-for-Iran 预计会有更新
请支持一个 REALITY NFT:https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
如果你有余力,请支持一个 Project X NFT:https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
该版本升级了一些依赖,并使用 Go 1.24.4 编译,已 tag v1.250608.0,感谢所有贡献者,详见下方 change log
What's Changed
- README.md: Rename FoXray to OneXray in GUI Clients by @yiguodev in #4754
- Update reality to 20250527 by @yuhan6665 in 84c8e24
- BurstObservatory: Fix nil panic when pingConfig is missing by @Fangliding in #4757
- Core: Export the running bool by @CodeWithTamim in #4775
- Workflows: Refactor docker by @Meo597 in #4738
- API: Add ListInbounds and ListOutbounds by @gsergey418 in #4723
- Outbound: Fix sendthrough srcip precheck by @ImAubrey @RPRX in #4750
- DNS New Features:
disableCache
,finalQuery
,unexpectedIPs
,"*"
,UseSystem-queryStrategy
,useSystemHosts
by @patterniha in #4666 - README.md: Add Amnezia VPN to Others by @yuhan6665 in #4718
- REALITY practice: Detect & imitate target's post-handshake records by @RPRX in ab0b9a6
- Sniffer-destOverride: Remove
fakedns+others
option by @patterniha in #4739 - README.md: Add VPainLess to One Click by @vpainless @RPRX in #4782
- README.md: Add SimpleXray to Android Clients by @lhear in #4761
- Update github.com/xtls/reality to 20250607105625 by @RPRX in bfbccc2
- New feature: Happy Eyeballs (RFC 8305) by @patterniha in #4667
- Tests: Fix TestCommanderListHandlers by @Meo597 in #4789
- Tests: Real fix for TestCommanderListHandlers by @Meo597 in #4792
- Docker: Fix geodata directory permissions issue by @Meo597 in #4790
- README.md: Add DeepWiki badge to Contributing by @TonyMa1 @RPRX in #4777
- RAW transport hub.go: Call REALITY's DetectPostHandshakeRecordsLens() in advance by @RPRX in e011b74
- REALITY: Add rate limiting to fallback handling via token bucket by @Meo597 in #4553
- README.md: Add xtls-sdk to Xray Wrapper by @kastov in #4793
- README.md: Add GorzRay to Linux Clients by @ketetefid in #4767
New Contributors
- @CodeWithTamim made their first contribution in #4775
- @gsergey418 made their first contribution in #4723
- @vpainless made their first contribution in #4782
- @lhear made their first contribution in #4761
- @TonyMa1 made their first contribution in #4777
- @kastov made their first contribution in #4793
- @ketetefid made their first contribution in #4767
Full Changelog: v25.5.16...v25.6.8