🚀 Xray-knife v11.4.1 (JOIN THE TELEGRAM CHANNEL)

https://t.me/lilendian0x00

Four kinds of share links that failed for the wrong reason now work, and xray-core moves to 26.10.21. 🛠️

⚠️ After upgrading

• 📌 --bind fails loudly. On xray-core, a dial whose interface couldn't be bound (on Linux it needs CAP_NET_RAW) used to log the error and go out the default route anyway, so a test could pass over the wrong link. It now fails.

🔗 Links that failed for the wrong reason

• 🔐 A raw + in ech (cloudflare-ech.com+https://1.1.1.1/dns-query, or base64 like AEX+/wBBAA==) was read as a space. The config built fine, then ECH failed at connect time. Fixed for VLESS and Trojan; %2B keeps working.

• 🧱 Junk headerType on tcp. http is the only tcp header, but exports sometimes put a cipher name or another transport's header there (aes-128-gcm, srtp). Those links sent fake HTTP request headers to a plain tcp server and failed. Anything but http now means plain tcp on VLESS, Trojan and VMess, and -z auto routes them like headerType=none.

• 🔓 ss://plain:… failed on every core. plain is xray's name for the none cipher, but sing-box only knows none:

  initialize outbound[0]: unknown method: plain
  

  It now runs on sing-box, as an outbound or an inbound.

• 🚚 Trojan dropped xhttp extra. Padding, xmux and download settings were thrown away without a warning, while the same link as vless:// kept them. They now reach xray-core and survive a regenerated link.

Thanks @ranthe21 for finding and fixing these, and @markpash for the PRs (#71, #72, #73, #74). 🙏

🆙 xray-core 26.10.21

• 🧬 XTLS Vision (flow=xtls-rprx-vision) works when xray-knife is built with Go 1.27.3 or newer.
• 🛡️ WireGuard on xray-core runs on its own TCP/IP stack instead of gVisor.
• 🌐 The built-in root bundle that TLS links are verified against drops CAs that lost trust.
• 🩹 Upstream fixes for Hysteria (stalled writes, cancelled dials), Shadowsocks 2022, WireGuard setup failures and HTTP proxies hanging on server-first traffic.

📦 Install

Grab a prebuilt binary from the assets below (verify with sha256sum -c --ignore-missing SHA256SUMS), or install with Go. The tags match the release binaries:

go install -tags "with_gvisor,with_quic,with_wireguard,with_utls,with_clash_api,with_grpc" \
  github.com/lilendian0x00/xray-knife/v11@latest

Full Changelog: v11.4.0...v11.4.1