v1.3.0

Aether v1.3.0

Aether is a user-space proxy client. It tunnels traffic out of a filtered network and exposes a local SOCKS5 proxy on 127.0.0.1:1819. Point a browser, terminal, or system proxy at that address and your traffic leaves through the tunnel.

What's new in v1.3.0:

• New "ironclad" scan mode. The existing scan modes only check that a candidate gateway answers a handshake; ironclad goes further and opens a real tunnel through each candidate, then sends a real HTTP request end to end before trusting it. Slower than the other modes, but it's the only one that guarantees the gateway actually works before you connect.
• MASQUE and WireGuard both reconnect smarter after a drop. Instead of always kicking off a full rescan (which can take minutes in ironclad mode), Aether now first re-checks the gateway that was working a moment ago, and only falls back to a fresh scan if that one is actually dead.
• Fixed a bug where probe tunnels opened during scanning could keep running in the background after their timeout, which showed up as a wall of "connection closed" log lines during a scan.
• Fixed UDP over SOCKS5 not working when exposing the proxy to your local network (AETHER_SOCKS set to a non-loopback address). The UDP relay was always binding to 127.0.0.1 regardless of what address SOCKS5 was actually listening on, so TCP worked from other devices on the network but UDP silently dropped everything.
• New fully static armv7 musl build, meant for OpenWrt routers and other musl-based Linux systems that can't run the regular glibc binary.

This release includes prebuilt binaries for:

• Linux x86_64, built on Fedora latest (aether-linux-x86_64.tar.gz)
• Linux arm64 / aarch64, built on Fedora latest (aether-linux-arm64.tar.gz)
• Linux armv7 / 32-bit ARM, e.g. Raspberry Pi 2/3 (aether-linux-armv7.tar.gz)
• Linux armv7 musl / 32-bit ARM, fully static, for OpenWrt routers and other musl-based systems (aether-linux-armv7-musl.tar.gz)
• macOS arm64 / Apple Silicon (aether-macos-arm64.tar.gz)
• macOS x86_64 / Intel (aether-macos-x86_64.tar.gz)
• Windows x86_64 (aether-windows-x86_64.zip)
• Android / Termux arm64 (aether-android-arm64.tar.gz)
• Android / Termux armv7 (aether-android-armv7.tar.gz)
• Android / Termux x86_64 (aether-android-x86_64.tar.gz)

Each archive ships with a matching .sha256 file, and a combined SHA256SUMS.txt lists every checksum.

Quick start (Termux, one-line install):

curl -fsSL https://raw.githubusercontent.com/CluvexStudio/aether/main/aether.sh -o aether.sh && chmod +x aether.sh && ./aether.sh install

Quick start (Windows):

1. Download aether-windows-x86_64.zip and extract it.
2. Double-click run-aether.bat. It opens a terminal, runs aether.exe, and stays open afterwards so you can read any errors.

Quick start (other platforms):

1. Download the archive for your platform and extract it.
2. Run the binary and answer the prompts, or set the environment variables listed in the guides.
3. Point your client at socks5h://127.0.0.1:1819 and verify with:
   curl -x socks5h://127.0.0.1:1819 https://www.cloudflare.com/cdn-cgi/trace

Verify a download (Linux/macOS):
sha256sum -c aether-linux-x86_64.tar.gz.sha256

See README.md and the Docs directory for transport selection, obfuscation profiles, the HTTP/2 vs HTTP/3 choice in MASQUE, and the full environment-variable reference.

What's Changed

• feat: add --version flag and print version at startup by @Vonarian in #23

New Contributors

• @Vonarian made their first contribution in #23

Full Changelog: v1.2.0...v1.3.0