Skip to content

sing-box 1.12.14.3 - Full Features Build

Choose a tag to compare

@ZhiShengYuan ZhiShengYuan released this 16 Jan 06:29
· 3453 commits to master since this release

Router Inbound + Full Feature Build

This release includes the router inbound feature and is built with all features enabled:

  • ✅ QUIC support (with_quic)
  • ✅ WireGuard support (with_wireguard)
  • ✅ uTLS support (with_utls)
  • ✅ ACME support (with_acme)
  • ✅ Clash API support (with_clash_api)
  • ✅ gVisor support (with_gvisor)
  • ✅ DHCP support (with_dhcp)
  • ✅ Tailscale support (with_tailscale)

Router Inbound

The router inbound is an HTTP/HTTPS routing layer that forwards traffic to other inbounds based on HTTP request properties.

Features:

  • Protocol Multiplexing: Run multiple proxy protocols (Trojan, VMess, VLESS) on one HTTP/HTTPS port
  • Path-Based Routing: Different paths route to different protocols (e.g., /trojan, /vmess)
  • Host-Based Routing: Different domains route to different protocols with wildcard support
  • Header-Based Routing: Route based on authentication headers, user agents, etc.
  • Internal-Only Mode: Works with or without a TCP listener (can be used via detour)
  • Static File Fallback: Serve static website while hiding proxy traffic for camouflage
  • Full HTTP Support: GET, POST, WebSocket, gRPC, HTTP/2 all supported

Configuration Example:

```json
{
"type": "router",
"tag": "https-router",
"listen": "0.0.0.0",
"listen_port": 443,
"tls": {
"enabled": true,
"server_name": "example.com",
"certificate_path": "/path/to/cert.pem",
"key_path": "/path/to/key.pem"
},
"routes": [
{
"name": "trojan-route",
"match": {"path_prefix": ["/trojan"]},
"target": "trojan-in",
"priority": 100
},
{
"name": "vmess-ws",
"match": {
"path_prefix": ["/vmess"],
"header": {"Upgrade": ["websocket"]}
},
"target": "vmess-in",
"priority": 90
}
],
"fallback": {
"type": "static",
"webroot": "/var/www/html",
"index": ["index.html"]
}
}
```

Use Cases:

  • Protocol Multiplexing: Multiple protocols on one port
  • CDN Camouflage: Mix proxy traffic with legitimate static website
  • Path Distribution: Different paths to different protocols
  • Domain Routing: Different domains to different backends
  • Header Auth: Route based on authentication tokens

Documentation

Previous Features

See changelog for xhttp (splithttp) transport and 464XLAT features added in previous releases.