This release contains important security fixes and we strongly encourage everyone to upgrade.
- Added Gecko obfuscation: a new experimental obfuscation layer that fragments QUIC handshake packets
- Fixed a security issue where UDP packets could bypass ACL
- Fixed a potential server OOM caused by incomplete or oversized HTTP requests during sniff
- Fixed an ACL bypass via trailing dots in domain names (e.g.
example.com.) - Fixed incorrect destination handling in the SOCKS5 UDP outbound
- Fixed prefix matching in DNS HTTPS records
- Outbound rules now reject invalid port values
- Minor performance improvements
此版本包含重要安全修复，强烈建议更新
- 新增 Gecko：一种实验性的新混淆实现，会对 QUIC 握手包进行分片处理
- 修复了 UDP 包可绕过 ACL 的安全问题
- 修复了启用 sniff 时，不完整或超大 HTTP 请求可能导致服务端 OOM 的问题
- 修复了通过在域名末尾添加点（如
example.com.）绕过 ACL 的问题 - 修复了 SOCKS5 UDP 出站中目标地址处理错误的问题
- 修复了 DNS HTTPS 记录前缀匹配的问题
- outbound 规则现在会拒绝无效端口号
- 小幅性能改进