Skip to content

v2.0.0

Choose a tag to compare

@github-actions github-actions released this 31 May 10:12
· 32 commits to master since this release

Anti-DPI Multi-Transport Tunnel Engine

9 Transports • 15 Stealth Techniques • 18 New Modules • Full QUIC • Auto-Failover


🚀 What's New in v2.0.0

This is a major release with 18 new modules fully integrated into the engine. Every feature from the v1.0 roadmap has been delivered.


⚡ Transport

Feature Description
🌐 Full QUIC Real QUIC via quic-go — 0-RTT, connection migration, UDP multiplexing
🔀 Auto-Failover Multi-path with priority/round-robin/latency strategies + auto-recovery
🏗️ Adaptive Pool Connection pool that auto-scales based on load (warmup, min/max)
☁️ CDN Mode Full CDN integration — Cloudflare, Gcore, Arvan (IP completely hidden)

🕵️ Anti-DPI & Stealth

Feature Description
🎭 Traffic Obfuscation 4 modes: HTTPS mimic, Video streaming, Random burst, Constant rate
🔒 DNS Leak Protection Automatic DNS-over-HTTPS (DoH) — prevents DNS poisoning
🛡️ TLS for tcpmux Optional TLS encryption layer for tcpmux transport

🌍 Networking

Feature Description
🗺️ Split Tunneling Rule-based routing with Iran IP bypass (200+ CIDRs)
🌐 Cluster Mode Multi-server with geographic routing, health checks, state sync
🔄 Config Sync Encrypted config push/pull between servers (AES-GCM)

🔐 Security & Management

Feature Description
🧩 Plugin System Transport, Auth, and Filter plugins with hook system
⚖️ Rate Limiter Per-user/IP bandwidth control (token bucket)
🚫 Security Manager IP blacklist/whitelist, brute-force protection, audit log
📜 ACME/Auto-Cert Automatic TLS certificate management with auto-renewal

📊 Monitoring & Operations

Feature Description
📈 Real-time Dashboard WebSocket-based with live traffic charts & user management
📡 Prometheus + Grafana Docker Compose monitoring stack with pre-built alert rules
🐕 Watchdog Systemd WatchdogSec + HTTP health endpoint
♻️ Graceful Upgrade Zero-downtime binary upgrades (no connection drops)
🧠 Smart Detection TCP/UDP/TLS/H2 probing with intelligent transport recommendation

🔌 Integration Architecture

┌─────────────────────────────────────────────────────────┐
│                     iPShadowT Engine                     │
├─────────────────────────────────────────────────────────┤
│                                                         │
│  CLIENT SIDE:                                           │
│  ┌─────────┐  ┌───────────┐  ┌──────────────────────┐  │
│  │ DNS DoH │→ │ Transport │→ │ Obfuscation Wrapper  │  │
│  └─────────┘  └───────────┘  └──────────────────────┘  │
│       ↓                              ↓                  │
│  ┌─────────────────────────────────────────────────┐    │
│  │         Failover Manager (Multi-Path)           │    │
│  └─────────────────────────────────────────────────┘    │
│                                                         │
│  SERVER SIDE:                                           │
│  ┌──────────┐  ┌───────────┐  ┌────────────────────┐   │
│  │ Security │→ │ Rate Limit│→ │ Plugin Filters     │   │
│  └──────────┘  └───────────┘  └────────────────────┘   │
│       ↓                              ↓                  │
│  ┌─────────────────────────────────────────────────┐    │
│  │    Metrics + Health + Prometheus + Dashboard     │    │
│  └─────────────────────────────────────────────────┘    │
│                                                         │
└─────────────────────────────────────────────────────────┘

📦 Downloads

File Platform Architecture
ipshadowt-linux-amd64 Linux x86_64
ipshadowt-linux-arm64 Linux ARM64 (Raspberry Pi 4+)
ipshadowt-linux-armv7 Linux ARMv7 (Raspberry Pi 3)
ipshadowt-linux-mips-softfloat Linux MIPS (OpenWrt routers)
ipshadowt-linux-mipsle-softfloat Linux MIPS LE (OpenWrt)
ipshadowt-windows-amd64.exe Windows x64
ipshadowt-windows-arm64.exe Windows ARM64
ipshadowt-darwin-amd64 macOS Intel
ipshadowt-darwin-arm64 macOS Apple Silicon (M1/M2/M3)
ipshadowt-freebsd-amd64 FreeBSD x86_64
ipshadowt-manager.sh Deploy & management script
configs-examples.tar.gz Example configurations
monitoring-stack.tar.gz Prometheus + Grafana + Alerts
SHA256SUMS.txt Checksums for verification

🐳 Docker

docker pull ghcr.io/ipmartnetwork/ipshadowt:2.0.0
docker run -v ./config.toml:/etc/ipshadowt/config.toml ghcr.io/ipmartnetwork/ipshadowt:2.0.0

⚡ Quick Install (Linux)

sudo bash <(curl -fsSL https://raw.githubusercontent.com/iPmartNetwork/iPShadowT/master/deploy/ipshadowt-manager.sh)

📋 Upgrade from v1.0.0

# Option 1: Manager script (recommended)
sudo bash ipshadowt-manager.sh
# Choose: 8) Update → 1) Update binary

# Option 2: Manual
systemctl stop ipshadowt
curl -fSL -o /usr/local/bin/ipshadowt https://github.com/iPmartNetwork/iPShadowT/releases/download/v2.0.0/ipshadowt-linux-amd64
chmod +x /usr/local/bin/ipshadowt
systemctl start ipshadowt

⚠️ Config files are backward compatible — no changes needed. New features activate when you add their config sections.


🆕 New Config Sections (Optional)

# Health/Watchdog endpoint
[health]
enabled = true
listen = "127.0.0.1:9090"

# CDN mode (Cloudflare)
[cdn]
enabled = true
provider = "cloudflare"
domain = "your-domain.com"
path = "/tunnel"
tls = true

# Multi-path failover
[[paths]]
name = "direct"
remote_addr = "server-ip:443"
transport = "reality"
priority = 1

[[paths]]
name = "cdn-fallback"
remote_addr = "your-domain.com:443"
transport = "wsmux"
priority = 2

🗺️ Roadmap (v3.0)

  • Android/iOS client (gomobile)
  • Desktop GUI (Wails)
  • Telegram Bot management
  • WireGuard integration
  • Full E2E test suite

📊 Stats

  • 30 files changed, 4,975 insertions(+), 203 deletions(-)
  • 18 new modules added
  • 10 platforms supported
  • 0 breaking changes from v1.0.0

© 2026 iPmart Network (Ali Hassanzadeh)
Made with ❤️ for the community