XTLS/Xray-core v26.1.31

Xray-core v26.1.31

on GitHub

XHTTP transport: New options for bypassing CDN's potential detection #5414 & Finalmask: Add XDNS (relies mKCP, like DNSTT), header-*, mkcp-* #5560

为了捍卫通信自由，本次重点更新内容：

1. XHTTP 新增了一些选项以绕过潜在的 CDN 检测（尚未定型，不建议第三方实现现在跟进），详见 #5414
2. Finalmask 新增了 XDNS、header-*、mkcp-*，详见 #5560 ，分享链接标准 #716 已更新 fm、pcs、pcn
3. TLS 移除了 allowInsecure 配置项，请使用 pinnedPeerCertSha256 和 verifyPeerCertByName 代替，详见 2c92339
4. 进一步降低了 Xray-core 启动时的瞬时内存占用 #5581 ，对于 iOS/router 请测试 #5505

https://t.me/projectXtls/1464 此外我们将于下个月推出 XDRIVE 传输层与 XICMP 伪装层，前者可利用网盘、S3 stores 等服务传输数据，不需要自有公网 IP，而是通过潜在的白名单 IP 进行代理，或者境外能访问到境内的服务也行

Sponsors

Sponsor Xray-core

Donation & NFTs

Collect a Project X NFT to support the development of Project X!

• TRX(Tron)/USDT/USDC: TNrDh5VSfwd4RPrwsohr6poyNTfFefNYan
• TON: UQApeV-u2gm43aC1uP76xAC1m6vCylstaN1gpfBmre_5IyTH
• BTC: 1JpqcziZZuqv3QQJhZGNGBVdCBrGgkL6cT
• XMR: 4ABHQZ3yJZkBnLoqiKvb3f8eqUnX4iMPb6wdant5ZLGQELctcerceSGEfJnoCk6nnyRZm73wrwSgvZ2WmjYLng6R7sR67nq
• SOL/USDT/USDC: 3x5NuXHzB5APG6vRinPZcsUv5ukWUY1tBGRSJiEJWtZa
• ETH/USDT/USDC: 0xDc3Fe44F0f25D13CACb1C4896CD0D321df3146Ee
• Project X NFT: https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1
• VLESS NFT: https://opensea.io/collection/vless
• REALITY NFT: https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2
• Related links: VLESS Post-Quantum Encryption, XHTTP: Beyond REALITY, Announcement of NFTs by Project X

该版本升级了一些依赖，并使用 Go 1.25.6 拉满 inline 编译，已 tag v1.260131.0，感谢所有贡献者，详见下方 change log

What's Changed

• TUN inbound: Disable RACK/TLP recovery to fix connection stalls by @KiGamji in #5600
• TUN inbound: Enhance Darwin interface support by @Owersun in #5598
• Hysteria transport: Support range & random for interval in udphop as well by @LjhAUMEM in #5603
• Geodat: Reduce peak memory usage by @Meo597 in #5581
• TUN inbound: Add iOS support by @evozi-team in #5612
• VMess inbound: Optimize replay filter by @Fangliding in #5562
• README.md: Add Egern & Quantumult X to Others by @nasaboy in #5624
• Upgrade gVisor to latest version v0.0.0-20260122175437-89a5d21be8f0 by @RPRX in 9c46a2d
• TLS config: allowInsecure->pinnedPeerCertSha256; verifyPeerCertInNames->verifyPeerCertByName by @RPRX in 2c92339
• Commands: Print leaf cert's SHA256 in tls ping by @Fangliding @RPRX in #5628
• MPH domian matcher: Support building & using cache directly (instead of building from geosite.dat when Xray starts) by @hossinasaadi in #5505
• XHTTP transport: New options for bypassing CDN's potential detection by @paqx @Fangliding in #5414
• Finalmask: Add XDNS (relies mKCP, like DNSTT), header-*, mkcp-* by @LjhAUMEM in #5560

New Contributors

• @KiGamji made their first contribution in #5600
• @evozi-team made their first contribution in #5612
• @nasaboy made their first contribution in #5624
• @paqx made their first contribution in #5414

Full Changelog: v26.1.23...v26.1.31