v0.34.9

What's Changed / 更新内容

• Rewrite IP blacklists/whitelists; global, client and tunnel/host levels can each have both a blacklist and a whitelist
  重写IP黑白名单，全局、客户端、隧道/域名三层均可同时配置黑名单和白名单

• Selectable list priority; support CIDR ranges, IPv4 wildcards and geoip rules
  黑白名单可选择优先级，支持网段、IPv4通配和geoip规则

• Add acl_max_rules to cap the number of list rules; existing blacklists keep working as before
  新增acl_max_rules限制名单规则条数，旧版黑名单原样沿用

• The global list applies to every connection into nps, including client connections and the web UI
  全局名单作用于所有进入nps的连接，包括客户端连接和Web管理界面

• Mixed proxy destination lists support geosite, geoip and other rules, validated on save
  混合代理目标名单支持geosite、geoip等规则，保存时校验规则

• Plain domains in mixed proxy destination lists now match as keywords; use full: for exact matches
  混合代理目标名单中不带前缀的域名改为按关键字匹配，精确匹配请使用full:

• Mixed proxy supports SOCKS5 UDP with destination lists enabled, checking each datagram
  混合代理启用目标名单后支持SOCKS5 UDP，按数据报检查目标

• Mixed proxy checks the source list before handshake and authentication
  混合代理在握手和认证前检查来源名单

• Remove ip_limit; "allow registered IPs only" can now be enabled per client, tunnel and host
  移除ip_limit，改为按客户端、隧道、域名单独开启“仅允许已登记的IP”

• Add an IP registration page supporting a registration passphrase, vkey or public key
  新增IP登记页面，支持登记口令、vkey或公钥登记

• The IP registration page can listen on its own port and be nested via bridge://ipreg
  IP登记页面支持单独监听端口和bridge://ipreg嵌套转发

• Release packages and Docker images ship Geo data
  发布包和Docker镜像附带Geo数据

• Add the nps update-geo command and a web button to update Geo data
  新增nps update-geo命令和网页Geo数据更新按钮

• Add one-click server update in the web UI
  新增网页一键更新服务端

• Add remote client update (requires client v0.34.9 or later)
  新增远程更新客户端（需客户端v0.34.9及以上）

• Add -disable_remote_update to forbid remote updates; disabled by default in Docker images
  新增-disable_remote_update禁止远程更新，Docker镜像默认禁止

• Improve the update command: verify the new version runs before replacing, and also update the binary the system service actually runs
  优化update命令，替换前验证新版本可运行，同时更新系统服务实际运行的程序

• Add http_proxy_access_port and https_proxy_access_port; host list links use the public access port
  新增http_proxy_access_port、https_proxy_access_port，域名列表的访问链接使用对外访问端口

• Add a global bandwidth limit on the global settings page
  新增全局带宽限制，在全局参数页设置

• Show the server's total forwarded traffic and rate above the client list; "Clear traffic" resets it too
  客户端列表上方显示服务端转发的总流量和速率，“清除流量”同时清零

• Count traffic on one side at every level; "Total traffic" is renamed "Up/down traffic". Client traffic accumulated by older versions is too high, so clear it once after upgrading
  各级流量统一按单侧统计，“总流量”更名为“上下行流量”，旧版累计的客户端流量偏大，建议升级后清除一次

• Add an "Actual usage" column (up/down traffic × 2) estimating traffic on both sides of the server
  流量列表新增“实际消耗”（上下行流量×2），估算服务器两侧的实际流量

• Add flow_limit_type: client traffic limits can count up/down traffic or actual usage
  新增flow_limit_type，客户端流量限制可选按上下行流量或实际消耗计算

• Fix the "Clear traffic" button above the client list having no permission and doing nothing
  修复客户端列表上方“清除流量”按钮无权限、点击无效的问题

• Fix login responses carrying multiple duplicate session cookies (about 6 KB), which overflowed default header buffers of reverse proxies such as Nginx and caused 502 / failed logins; a failed session save no longer reports a successful login
  修复登录响应带有多条重复会话Cookie（约6KB），经Nginx等反向代理访问时超出默认响应头缓冲导致502、无法登录的问题；会话保存失败时不再误报登录成功

• All multi-line inputs accept Windows, Linux and macOS line endings (\r\n, \n, \r), including certificate content
  所有多行输入统一兼容Windows、Linux、macOS换行（\r\n、\n、\r），证书内容同样适用

• Fix host and client lists being sorted after pagination, so sorting was only correct within the current page
  修复域名、客户端列表先分页后排序，排序结果只在当前页内正确的问题

• Fix reversed sort direction for inbound/outbound traffic in the client list
  修复客户端列表按入口/出口流量排序方向相反的问题

• Fix crashes at startup or on list pages when data files contain empty entries or lack client or traffic fields
  修复数据文件中存在空条目或缺少客户端、流量字段时启动或列表页崩溃的问题

• Fix a crash at startup when global.json is null
  修复global.json内容为null时启动崩溃的问题

• Fix multi-line blacklists saved by older web versions being stored as one entry and never taking effect; they are now read line by line
  修复旧版网页保存的多行黑名单被存成一条、从未生效的问题，现按行读取

• Polish the login and IP registration pages: consistent heights for inputs, selects and buttons, an icon on the expiry selector, and buttons to switch between the two pages
  优化登录页和IP登记页：输入框、下拉框和按钮统一高度，有效期选择框带图标，两页互相跳转的入口改为按钮

• The dashboard's server update button only appears when a new version is available
  仪表盘的服务端更新按钮仅在有新版本时显示

• The "Actual usage" column is sortable and hidden by default
  “实际消耗”列支持排序，默认隐藏

• Fix system service installation failing on Linux with the service shown as masked
  修复Linux下安装系统服务失败、服务显示masked的问题

• Fix system service install, uninstall and restart after update on OpenWrt, FreeBSD and other platforms
  修复OpenWrt、FreeBSD等平台系统服务安装、卸载和更新后重启的问题

• Fix possible loss of trailing data when a QUIC connection closes
  修复QUIC连接关闭时末尾数据可能丢失的问题

• Fix KCP/QUIC listeners using CPU continuously after being closed
  修复KCP/QUIC监听关闭后持续占用CPU的问题

• Fix a crash when configuration values reference each other
  修复配置文件中键值互相引用时程序崩溃的问题

• Fix mixed proxy destination lists not taking effect for tunnels in configuration file mode
  修复配置文件模式隧道的混合代理目标名单不生效的问题

• Fix web feature switches not taking effect and related inputs and charts not showing
  修复网页功能开关不生效、相关输入项和图表不显示的问题

• Fix visiting the web root while logged in redirecting to /app
  修复已登录时访问网页根路径跳转到/app的问题

Additional Downloads / 其他下载

• Android
• OpenWrt