0.1.2-rc.1

What's Changed

Core & Protocols

• xHTTP Transport & ALPN: Added full support for Xray 26+ xhttp transport mode and custom ALPN negotiation in server profiles and Xray engine.
• xHTTP TUN Bridging: Transparently route xHTTP nodes through a local Xray bridge inside sing-box TUN mode with proxy IP loop rejection.
• Clash API Guard: Excluded xHTTP and incompatible nodes from Clash selector API to prevent core crashes and hot-swap failures.
• Bypass LAN: Added setting and routing exclusions to sing-box TUN to bypass local networks and private subnets.
• DNS Leak Protection: Enabled strict_route on Windows TUN to prevent Smart Multi-Homed Name Resolution (SMHNR) DNS leaks. Exempted DNS port 53 from UDP blackhole when UDP blocking is enabled.

Reliability & Security

• Linux Process Death Guard: Implemented pipe death guard (linux_death_guard) to reliably terminate engine cores when Socksicle exits, survives launcher worker thread exit, and works cleanly with cap_net_admin capabilities.
• Windows Job Object: Attached child engine processes to a Windows Job Object with KILL_ON_JOB_CLOSE to eliminate orphaned processes on crash or exit.
• Crash Recovery & Fast Startup: Automatically cleans stale lock files on startup, preventing the 30-second freeze after abnormal termination.
• Clean SIGTERM Handling: Added SIGTERM handler on Linux for graceful shutdown and cleanup of Kill Switch rules upon desktop session logout or systemd stop.
• Atomic File Persistence: Implemented atomic write for servers.json and settings.json via temporary files to eliminate 0-byte file corruption during sudden power loss.
• Hardened Subscriptions: Enforced overall timeout deadlines against Slowloris DoS, stripped X-HWID and sensitive authorization headers on cross-origin redirects, and validated port bounds (1..65535).

UI & User Experience

• Modernized Tray Context Menu:
  • Added a status header at the top displaying the active connected server name and state.
  • Added direct operating mode switching between System Proxy and TUN Mode with radio checkboxes.
  • Added selection checkboxes to server items in the tray to mark the currently active node.
  • Redesigned with spacious layout (min-width: 170px, comfortable padding) and styled SVG icons for all actions.
• Server Selection Persistence & Hot-Swap: Persisted selected server across app restarts. Added hot-swap rejection guard when switching between standard nodes and nodes requiring Xray without losing selection state.
• Hero Button Animation: Added smooth kinetic turn-off animation for the main power button.
• Subscription Cards: Enlarged action buttons (from 32×32 to 36×36) and enhanced 3-dots action menu with pin/unpin and delete.
• Notifications Hub: Centralized desktop notifications with a dedicated Notifications section in Settings.

Subscriptions & Ping Engine

• High-Performance Parallel Ping: Raised default ping concurrency to 64 (configurable via settings), added overall probe deadlines, and single-flight DNS resolution with TTL caching for True Hop Ping (THP).
• Subscription Controls: Added customizable auto-update intervals (disabled, 1h, 6h, 12h, 24h) and a toggle to control HWID transmission.

Localization & Documentation

• Updated Catalogs: Synchronized translations across English, Russian, Simplified Chinese

0.1.1

What's Changed

Still beta

Core & Protocols

• Xray 26+ support: Added Trojan outbound, httpupgrade, xhttp, kcp, and spiderX transports.
• TLS & Certificate Pinning: Added support for pinSHA256 (pcs) and pinned certificate names (pcn).
• TUN Mode: Switched Windows sing-box TUN inbound stack to mixed mode.

Packaging & Distribution

• Linux installer: Added one-line curl install script (packaging/linux/install.sh) with auto-updates, variant selection, and clean uninstall.
• Multi-edition packages: Both Windows and Linux now provide 3 build variants:
  • Standard: Bundled with sing-box.
  • Xray: Bundled with Xray-core.
  • Coreless: Minimal package for existing system cores.
• Linux archives: Switched Linux binaries to .tar.xz.

UI & Performance

• Server list virtualization: Reworked server rendering for low memory usage and instant scrolling on large lists.
• Theme engine: Added Material 3 2021/2025 color specs and dynamic wallpaper accent extraction (including Linux/Hyprland).
• Interface polish: Smoother search and dialog animations; click-to-reveal for HWID.

Localization

• Added Hebrew (עברית) translation (beta).
• Updated English, Russian, and Chinese translations.

0.1-rc.1

What's inside

• Material 3 UI — animated hero power button, dynamic tinting, custom palettes
  (Lavender, Sakura, Mint, AMOLED, custom hex)
• Protocols — Shadowsocks, Hysteria 2, VLESS (REALITY, uTLS, XHTTP via Xray),
  VMess, Trojan, TUIC
• Dual engines — sing-box (default; TUN, Hy2, Trojan, TUIC) and xray
  (SS/VLESS/VMess, XHTTP); auto mode picks the right engine per server
• Subscriptions — HTTPS-only import (URL list, Base64, SIP008), background updates,
  groups, filtering, per-group latency checks
• TUN mode (beta) — full-system routing; Linux privileges granted once via Polkit
• Kill Switch (beta) — Windows Firewall / Linux iptables leak protection
• Latency checks — THP, HTTP HEAD/GET, TCP connect; ms / signal bars / hidden
• Secure DNS — system, Cloudflare, Quad9, AdGuard, Google, custom DoH/DoT
• Sharing — QR codes, JSON profile export/import, tws3:// links
• Desktop integration — tray, autostart, start minimized

Downloads

Platform	File
Windows 10/11 x64 — Installer	Socksicle-Setup-0.1-rc.1-x64.exe
Windows 10/11 x64 — Portable	Socksicle-0.1-rc.1-Windows-Portable-x64.zip
Linux x86_64 — AppImage	Socksicle-0.1-rc.1-x86_64.AppImage

Prebuilt packages bundle sing-box 1.14.3 (and wintun.dll on Windows).
xray is optional and must be added manually — it's required only for VLESS over XHTTP.

Quick start

1. Download and run the package for your platform
   (Linux: chmod +x Socksicle-*.AppImage && ./Socksicle-*.AppImage)
2. Add a server manually (ss://, vless://, vmess://, hysteria2://,
   trojan://, tuic://) or import an HTTPS subscription
3. Hit the power button

TUN mode asks for elevated rights once: Administrator on Windows, a single Polkit
prompt on Linux.

Known limitations

• Only Shadowsocks and Hysteria 2 are fully tested; VLESS, VMess, Trojan and
  TUIC have less real-world coverage
• No macOS support
• SIP003 plugins for Shadowsocks are parsed but not yet passed to engine configs
• Xray does not support DoT nameservers — use DoH or switch to sing-box

Full details, screenshots and requirements: README

Feedback

• Bugs and ideas: Issues
• Updates: Telegram @iwtsddev

---

Socksicle is an independent open-source project. sing-box and Xray-core are developed
by their respective authors under their own licenses.