v1.8.18

BUG Fixed

• #294 UDP relay server's associations shouldn't bind to local address, which will eventually cause EADDRINUSE

v1.8.17

BUG Fixed

• #292 Hold the TCP connection if it failed to decrypt the first packet for preventing activing probing.
• #293 Keep server running if it fails to create UDP associations.

v1.8.16

Features

• #290 UDP's ServerClient support split() into ReadHalf and WriteHalf

BUG Fixed

• #289 Fixed UDP's ServerClient data decryption

v1.8.15

Code base are exactly the same as v1.8.14.

Bug Fixed

• x86_64-unknown-linux-gnu release should be built by cross with GLIBC_2.15
• x86_64-apple-darwin release built with invalid format sslocal (still don't know why)

v1.8.14

Features

• Support customizing memory allocator by features: tcmalloc, mimalloc, jemalloc

BUG Fixed

• #273 Use AtomicUsize for maximum compatibility in flow statistics
• #285 Fixed binaries command line options issue causing by conflicts_with

v1.8.13

Features

• Direct send data for none ciphers, prevent unnecessary data copies
• Feature jemalloc for enabling jemalloc allocator (use system's default allocator by default)
• #272 Support customizing manager created server's bind address

BUG Fixed

• Client flow reports tx and rx are swapped
• AEAD TCP protocol must check the reserved higher 2 bits

v1.8.12

Features

• #260 sslocal supports https protocol (HTTP Proxy over TLS)
• #263 UDP Associations connect() to proxies' IP to avoid re-resolving domain names for every packets
• #233 sslocal supports socks4 protocol (SOCKS4/4a)
• Options for LRU cache in UDP relay:
  • udp_timeout: UDP Association will be kept up to this duration (in seconds)
  • udp_max_associations: Maximum number of UDP Associations will be kept simutanously

BUG Fixed

• Removed unnecessary UDP socket wake ups
  • Expired Associations will be cleaned by a separated task

BREAKING Changes

• Manager's configurations are now wrapped into ManagerConfig
• timeout field in Config is removed inflavored timeout in ServerConfig
  • DNS resolving timeout is using the default configuration (5 seconds for most cases)
  • Bypassing TCP streams won't timeout

v1.8.11

Features

• #232 Send data along with handshake (LOCAL -> REMOTE)
• HTTP server supports https target with both native-tls and rustls
  • For rustls, https connections will try to negociate h2 with ALPN
• shadowsocks/shadowsocks-org#161 Support none as dummy cipher's name
• Adding local-tunnel feature for controlling tunnel protocol
• #252 Support udp_max_associations configuration option
• Various updates for local-dns-relay for Android integration

Fixed BUGs

• #234 Ensure plugin subprocesses are killed when server is exited
  • On *NIX platform, SIGTERM is sent to plugins for graceful exit
• #237 Increase regex memory limit for ACL host rules
• #240 Wait for 10 seconds for plugins to start
• ssserver should start plugins with PluginMode::Server

BREAKING Changes

• Removed Runtime's Handle for all run entry functions

v1.8.10

Features

• Support ACL configuration
  • Examples could be found in shadowsocks/shadowsocks-libev
• sslocal supports transparent proxy protocol (experimental)
  • TCP
    • Linux: iptables with REDIRECT or TPROXY rules
    • macOS: pf
    • FreeBSD: pf or ipfw, not tested
    • OpenBSD: pf, not tested
  • UDP
    • Linux: iptables with TPROXY rules
    • FreeBSD/OpenBSD: pf, not tested
  • Usage: Run sslocal with --protocol redir
• Better command line option verifications

Fixed BUGs

• sslocal with HTTP protocol clears Hop-by-Hop headers
• CryptoStream is now thread safe
• #222 rc4 cipher is now working

Miscellaneous

• Integrate into the Android's client implementation, shadowsocks/shadowsocks-android#2452
  • Not finished yet, you shouldn't use them in production environment
• Abort on panic! for release builds
• #223 --log-without-time command line option is added back
• #205 -6 command line option to resolve host names to IPv6 addresses first

BREAKING Changes

• Merged sstunnel and ssredir into sslocal
• DNS-over-HTTPS and DNS-over-TLS are disabled by default, could be enabled by features dns-over-https and dns-over-tls
• #217 Logging output uses local datetime instead of UTC
  • Logging output is now in customized format

v1.8.9

Features

• ssmanager - Supports Manage Multiple Users APIs

  • Create / Remove servers in the same tokio runtime dynamically

• Fallback to tokio's builtin DNS resolver (currently it is libstd's builtin) if trust-dns's resolver initialize failed

Fixed BUGs

• Ping tasks will panic if remote servers fail to connect for the first time