v1.14.3 | FList

What's Changed

Configs example

REALITY is experimental support and may have compatibility issues

feat: support set tun file-descriptor in config file by @wwqgtxx
feat: Support Restls-V1 in Clash.Meta (#441) by @3andne
feat: Update UoT protocol by @nekohasekai
feat: Converter support REALITY share standard by @H1JK
feat: REALITY use proxy servername by @H1JK
feat: Support REALITY protocol by @H1JK
feat: Support VLESS XTLS Vision (#406) by @H1JK
feat: add sni field for tuic by @Skyxim
feat: add upgrade api by @Larvan2
feat: nameserver-policy support multiple keys by @Larvan2
feta: add hosts support domain and mulitple ip (#439) by @Skyxim
refactor: tcp dial (#412) by @Skyxim

Maintenance

chore: Better REJECT conn by @H1JK
chore: Chore: adjust the loading order, and then load the resource at last by @Skyxim
chore: Cleanup REALITY code by @H1JK
chore: Generate UUID from fastrand by @H1JK
chore: Improve REALITY handshake by @H1JK
chore: Remove useless mutex in Vision by @H1JK
chore: Update dependencies by @wwqgtxx
chore: Vision padding upgrade by @H1JK
chore: proxy-server-nameserver does not follow the nameserver-policy by @Skyxim
chore: add /restart to restful api by @wwqgtxx
chore: add comment by @Skyxim
chore: add custom ca trust by @Skyxim
chore: add early conn interface to decrease unneeded write by @wwqgtxx
chore: add more utls fingerprints by @wwqgtxx
chore: add pprof api, when log-level is debug by @Skyxim
chore: add reality-grpc by @Larvan2
chore: add release branch by @Larvan2
chore: add sni of tuic in demo by @Skyxim
chore: adjust error log by @Skyxim
chore: adjust log by @Skyxim
chore: adjust the configuration loading order by @Skyxim
chore: adjust trust cert by @Skyxim
chore: better REJECT process by @wwqgtxx
chore: better TunnelStatus define by @wwqgtxx
chore: better geodata shared by @wwqgtxx
chore: better release notes by @Larvan2
chore: better release notes by @kunish
chore: better rename by @Larvan2
chore: better restls by @wwqgtxx
chore: better uuid using by @wwqgtxx
chore: better windows bind error handle by @wwqgtxx
chore: better workflow by @Larvan2
chore: better workflow by @metacubex
chore: better workflow by @wwqgtxx
chore: change default geo* url by @Larvan2
chore: change internal tcp traffic type by @Skyxim
chore: clean up code by @Larvan2
chore: clean up code by @wwqgtxx
chore: cleanup code by @wwqgtxx
chore: cleanup dialer's code by @wwqgtxx
chore: code cleanup by @wwqgtxx
chore: disconnect when suspended by @Skyxim
chore: do not apply padding for nonTLS packet with contentLen over 900 by @Larvan2
chore: do not modify ALPN in utls by @Larvan2
chore: exposure ipv6 wait time by @Skyxim
chore: fix issues #440 by @Larvan2
chore: format code by @Skyxim
chore: keep existing connections by @Skyxim
chore: move sing-tun's udpTimeout fix to there lib by @wwqgtxx
chore: parse the allowInsecure field for the trojan uri scheme by @metacubex
chore: push latest alpha core to MetaCubeX/AlphaBinary by @Larvan2
chore: rename delete.yml by @Larvan2
chore: reset tunName in macos when it isn't startWith "utun" by @wwqgtxx
chore: Simplify VLESS handshake lock by @H1JK
chore: set prerelease notes timezone of release create time to Asia/Shanghai by @kunish
chore: shadowsocks listener support the "udp" setting by @wwqgtxx
chore: share the same geodata in different rule by @wwqgtxx
chore: skip restart when update error by @Larvan2
chore: support TFO for outbounds by @wwqgtxx
chore: try to fix slice out of bound. by @Larvan2
chore: Update flake.nix (#452) by @yaoshiu
chore: update for testing the updater by @Larvan2
chore: update quic-go by @wwqgtxx
chore: update quic-go to release unused buffer when error by @wwqgtxx
chore: update readme by @Larvan2
chore: update utls library by @wwqgtxx
chore: update xray-core version by @Larvan2
chore: use early conn to support real ws 0-rtt by @wwqgtxx
chore: use fastrand to replace math/rand by @wwqgtxx
chore: use inner for upgrade core by @Larvan2
chore: using sing-shadowtls to support shadowtls v1/2/3 by @wwqgtxx
chore: wireguard using internal dialer by @wwqgtxx

BUG & Fix

fix: ALPN not applied in uTLS/REALITY by @H1JK
fix: Adjust the timing of subscription information acquisition by @Skyxim
fix: Converter REALITY security type by @H1JK
fix: Filter slice index out of bounds by @H1JK
fix: REALITY with gRPC transport by @H1JK
fix: SA4001 for net.UDPAddr copy by @wwqgtxx
fix: SA4001 for netDialer copy by @wwqgtxx
fix: The default interface is actually configured incorrectly by @Skyxim
fix: ToLower first by @Larvan2
fix: Vision disable filter for non-TLS connections by @H1JK
fix: Vision filter Client Hello by @H1JK
fix: Vision filter TLS 1.2 by @H1JK
fix: Vision filter TLS 1.2 by @wwqgtxx
fix: add "dns resolve failed" error in dialer by @wwqgtxx
fix: add version of shadow-tls plugin in docs/config.yaml by @wwqgtxx
fix: add xtls-rprx-vision server version warning to user by @wwqgtxx
fix: checkTunName mistake by @wwqgtxx
fix: dial panic by @Skyxim
fix: dialer dual stack panic by @Skyxim
fix: dns resolve in dialer by @wwqgtxx
fix: dns resolver by @wwqgtxx
fix: don't return a non-nil interface containing nil pointer by @wwqgtxx
fix: dual stack serial dial by @Skyxim
fix: ensure peekMutex is locked before handleSocket by @wwqgtxx
fix: ensure restart api return ok by @wwqgtxx
fix: ensure wireguard inner use dialer with DefaultResolver by @wwqgtxx
fix: geosite of nameserver-policy cannot be loaded correctly by @metacubex
fix: global-client-fingerprint is now work by @Larvan2
fix: golang1.19 can't compile by @wwqgtxx
fix: handle no IP address by @Skyxim
fix: incorrect time to set interface name by @Skyxim
fix: inner http use host of address by @Skyxim
fix: ip version prefer not working by @Skyxim
fix: let quic-go works on outbound's packetConn by @wwqgtxx
fix: load-balance's touch not effected by @wwqgtxx
fix: loadbalance panic by @wwqgtxx
fix: log typo by @metacubex
fix: optimize health check by @Skyxim
fix: peek not work with some inbound by @wwqgtxx
fix: rand ip error and clash remove loopback ip by @Skyxim
fix: reject's dial warning by @wwqgtxx
fix: replace self define "connect timeout" to os.ErrDeadlineExceeded by @wwqgtxx
fix: sing-vmess listener‘s "cipher: message authentication failed" by @wwqgtxx
fix: sing_tun apply udpTimeout when using gvisor stack by @wwqgtxx
fix: strategyRoundRobin not begin with zero by @wwqgtxx
fix: tproxy listener cannot listen udp by @Skyxim
fix: tuic missing routing mark by @wwqgtxx
fix: tuic relay tuic by @wwqgtxx
fix: tuic server close with error message by @wwqgtxx
fix: tuic server set authentication timeout after quic handshake complete by @wwqgtxx
fix: tuic udp native mode can't relay packetSize>1200 by @wwqgtxx
fix: tunnel's inboundTFO missing by @wwqgtxx
fix: udp loopback show "The requested address is not valid in its context." by @wwqgtxx
fix: unmap 4in6 address in dialer and wireguard by @wwqgtxx
fix: uot client's WriteTo mistake by @wwqgtxx
fix: upgrade backup by @Larvan2
fix: vless NeedHandshake mistake by @wwqgtxx

New Contributors

@3andne made their first contribution in https://github.com/MetaCubeX/Clash.Meta/pull/441
@yaoshiu made their first contribution in https://github.com/MetaCubeX/Clash.Meta/pull/452

Full Changelog: https://github.com/MetaCubeX/Clash.Meta/compare/v1.14.2...v1.14.3