proxy-everything 0.6.17

修复 QUIC 共享连接失活后持续影响新请求的问题，并补齐断连恢复边界。

• 监测经过认证的 ACK 进展，隔离失活连接；后续请求建立新连接，已有会话的数据不会被重放。
• 连接在获取流期间关闭时，在原始超时预算内重新获取一次连接。
• 连接池身份与认证使用同一份凭据快照，避免运行时切换密钥造成竞态。
• TCP 监听发生异常时采用可取消的退避，避免资源不足时忙循环。
• 修正连接健康监测任务的释放，并补充真实 UDP 回程丢包、并发等待和凭据切换测试。

TCP/QUIC 载体选择、既有线协议和 FFI ABI 保持兼容，不自动退回 TCP。

本地验证：工作区 Rust 测试、严格 Clippy、格式检查、旧服务端与新客户端的 TCP/QUIC 和 legacy/v3 收发校验通过。

GitHub Windows、macOS、Linux CI 均已通过；正式 Windows DLL 与旧服务端的 8 次兼容性收发校验通过。全部 44 个原生归档已通过发布完整性和来源校验。

应用版本：CipherRelay v2.0.19。
发布附件中的 release-manifest.json 和 SHA256SUMS 提供原生构建来源与校验值。

proxy-everything 0.6.15

Windows TUN 按进程绕过 UDP 时，现在按应用源端点复用物理 socket，使同一应用访问 STUN 和 P2P 对端时保持一致的物理源端口。修复 #58；实现见 #61 和 acking-you/tun2proxy#15。

• 串行化所有权快照及其应用，修正维护与新流之间的竞态；绑定时间只用于相等性判断。
• 建立映射时读取当前出口，只按对应地址族的接口索引判断是否重建；DNS 变化不会重置活跃映射。
• 改进空闲映射的策略撤销、短暂查表失败处理、高扇出流量及目标冲突回退，隔离对端 ICMP 错误。
• 按端口索引归属信息，删除冗余状态，统一端点生命周期管理。

无加密线协议或 C FFI ABI 变化。Windows 归属识别的系统限制、回退策略及入站边界见 docs/client-usage.md。

发布包含 44 个原生归档，覆盖 CLI、服务端、管理工具、TUI 和各平台 FFI 库。每个归档含 build-info.json；release-manifest.json 和 SHA256SUMS 记录完整的来源及校验值。

0.6.14

build: release native 0.6.14 (#57)

Native 0.6.14 carries the toolchain and dependency upgrade (#55, with the
review fixes in tun2proxy, ipstack, kanal-plus 0.2.2 and mimalloc), Android
libraries with 16 KB-aligned LOAD segments and a release gate for them (#56),
and the QUIC/TCP switching tracking from #54.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

0.6.13

Merge pull request #53 from acking-you/codex/socks5-block-mainland-cn

fix: restrict managed SOCKS5 sources and preserve QUIC key compatibility

0.6.11

Merge pull request #51 from acking-you/feat/quic-capability

feat: report each node's QUIC endpoint to clients (native 0.6.11)

0.6.10

Merge pull request #49 from acking-you/chore/native-0.6.10

build: release native 0.6.10

0.6.9

Merge pull request #44 from acking-you/codex/managed-socks5-server

feat: add managed authenticated SOCKS5 server with app links

0.6.8

build: require the app-proxy launcher in native releases

A macOS or Windows native archive without cipherrelay-app-launcher would
let the UI build but leave app proxies unable to create launchers, so the
release verifier now rejects it like a missing TUN helper.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Native 0.6.7

Native 0.6.7 accompanies CipherRelay 2.0.8+76.

• Recover orphaned Windows DNS ETW sessions after crashes so process bypass can attribute DNS requests again, while preserving live and inaccessible owners.
• Add the Rust updater transfer engine and Windows installation helper with readiness acknowledgement, process-exit waiting, integrity checks, and installed-version verification.
• Add bounded cached subscription serving, asynchronous frontend operations, and native log persistence.
• Move galaxy body/star calculations and cached country layout into reusable Rust buffers.

TCP/UDP wire behavior is unchanged. The additive FFI exports require the matching CipherRelay client for the new functionality.

All archives include source provenance. The release manifest and SHA256SUMS cover the complete native build matrix. Android APKs are built and signed locally by the maintainer and are distributed from the CipherRelay client release, not from CI mobile package builds.

Main PR: #36
Client release: https://github.com/Proxy-UI/Proxy-UI-Flutter/releases/tag/v2.0.8

0.6.6

Native 0.6.6

• Adds asynchronous batch node probes on the shared control runtime, with bounded concurrency, per-node timeouts, one result delivery per index, and explicit FFI result ownership.
• Retains the existing single-node API for compatibility.
• Preserves the Android IPv4 DNS default fix confirmed on a physical phone for the reported HTTPS reset issue, while keeping IPv6 VPN capture routes.

Verified with workspace tests, strict Clippy and formatting checks. All 44 native archives are rebuilt and validated against source commit 4146d78a917d247b0d40f1dda820a35787704f48; checksums and build metadata are included.

Companion UI: CipherRelay 2.0.7 build 73. Mobile application packages are built and signed locally.