Skip to content

Wayfork 0.4.0 — field hardening

Pre-release
Pre-release

Choose a tag to compare

View all tags
@fosteev fosteev released this 02 Sep 07:52
· 62 commits to main since this release
v0.4.0
be33bc8

Per-domain split tunneling across several VPNs at once. A hardening release for both
platforms, straight from a day of field debugging: a daemon that had died silently, voice
UDP cut at the VPN server, and a poisoned ISP resolver mislabeling traffic.

Downloads

  • Windows 10/11: Wayfork-0.4.0.exe — one installer for x64 and ARM64, it picks the
    right package itself. (Wayfork-0.4.0-amd64.msi / -arm64.msi are there for deployment
    tooling that wants an MSI.)
  • macOS 14+: Wayfork-0.4.0.dmg (universal).

Verify a download against its .sha256 before installing.

What's new

  • A slow TUN bring-up no longer kills a healthy start. The startup check polls for up
    to 12 seconds and retries the start once, instead of one check after 3 seconds that
    could declare a working sing-box failed. Turn Off during a failing start answers
    immediately.
  • A routing engine that cannot start is loud now. The menu bar / tray icon shows the
    error state, one notification per failure streak says Wayfork keeps retrying, and the
    app re-applies on its own with growing backoff (5 s … 5 min) — previously the app could
    look On while everything routed direct.
  • One-way UDP warning. A tunnel whose UDP connections keep sending but have received
    nothing for 10 seconds gets an orange ⚠ next to its traffic rate — the signature of a
    VPN server dropping UDP, which is how broken voice chat and gaming look. The counts are
    logged and included in Export Diagnostics, which now carries a traffic summary.
  • Traffic labels no longer trust a poisoned resolver. reverse_mapping is emitted
    only when a default tunnel needs it for routing, so a spoofed ISP answer for a blocked
    domain can no longer tag unrelated raw-IP connections with that domain.

See CHANGELOG.md for the
full entry and the known limitations.

Signing

Still unsigned by a paid certificate: SmartScreen warns on the Windows installer and on
the first launch ("More info" → "Run anyway"); on macOS clear the quarantine flag as the
README's Install section describes.

Assets 10
Loading