Skip to content

v5.0.9

Compare
Choose a tag to compare
@nekohasekai nekohasekai released this 02 May 05:00
· 47 commits to main since this release
185f5c8
  • shadowsocks 2022 edition support 1
  • shadowsocks_sing and trojan_sing outbound 2
  • XTLS protocol compatibility for vless and trojan 3
  • gRPC multi/raw mode

1:

added support for the new shadowsocks 2022 edition ciphers:

2022-blake3-aes-128-gcm
2022-blake3-aes-256-gcm
2022-blake3-chacha20-poly1305

the new protocol is designed to improve UDP performance and provide full replay protection.

although the protocol is still in draft, professionals can try to deploy it with: https://github.com/SagerNet/sing/tree/main/cli/ss-server

{
  "outbounds": [
    {
      "protocol": "shadowsocks",
      "settings": {
        "servers": [
          {
            "address": "127.0.0.1",
            "port": 1234,
            "method": "2022-blake3-aes-128-gcm",
            "password": "<psk>"
          }
        ]
      }
    }
  ]
}

2:

  • shadowsocks_sing outbound

high performance shadowsocks outbound, with AEAD 2022 Extensible Identity Headers support.

supported cipher list:

none

2022-blake3-aes-128-gcm
2022-blake3-aes-256-gcm
2022-blake3-chacha20-poly1305

aes-128-gcm
aes-192-gcm
aes-256-gcm
chacha20-ietf-poly1305
xchacha20-ietf-poly1305
{
  "outbounds": [
    {
      "protocol": "shadowsocks_sing",
      "settings": {
        "address": "127.0.0.1",
        "port": 1234,
        "method": "aes-128-gcm",
        "password": "my password"
      }
    }
  ]
}

for shadowsocks 2022 ciphers

{
  "outbounds": [
    {
      "protocol": "shadowsocks_sing",
      "settings": {
        "address": "127.0.0.1",
        "port": 1234,
        "method": "2022-blake3-aes-128-gcm",
        "key": "<psk>"
      }
    }
  ]
}
  • trojan_sing outbound

high performance trojan outbound.

notice: only the origin trojan (tls) protocol is supported.

{
  "outbounds": [
    {
      "protocol": "trojan_sing",
      "settings": {
        "address": "my.address",
        "serverName": "my.domain",
        "port": 443,
        "password": "my password",
        "insecure": false
      }
    }
  ]
}

3:

this protocol does not guarantee concealment.