Skip to content

gproxy v2.9.7

Choose a tag to compare

@LeenHawk LeenHawk released this 31 Aug 10:58

v2.9.7

Makes client request filtering configurable at the instance and provider
boundaries, with Console controls for header and query policies.

支持在实例与 Provider 边界配置客户端请求过滤,并在 Console 中管理 Header
与 Query 策略。

English

Added

  • Configurable global request blacklist. Instance settings can replace the default client-ingress header and query blacklist. The policy is hot-reloaded and runs once after client authentication, before provider selection and request rules.
  • Configurable provider request allowlist. Every Provider can extend its channel's built-in header/query allowlist or replace the defaults with an exact list. The allowlist runs after Header Rules, so operators can intentionally inject and forward user-agent, authorization, cookies, API keys, or other upstream-required headers.
  • Console and import/export support. The Settings and Provider forms expose the new policies in English, Simplified Chinese, and Traditional Chinese. Instance persistence, migrations, bundle import/export, native databases, and edge libSQL all retain the configuration.

Changed

  • Custom upstream UA handling is configuration-driven. Providers that gate traffic by user agent can add user-agent to their request allowlist and inject the expected value with a Header Rule, without forwarding the caller's UA or hard-coding it for every custom provider.
  • Dependency maintenance. Updated borsh-derive, h2, potential_utf, rustls-webpki, and writeable to their current compatible patch releases.

简体中文

新增

  • 可配置的全局请求黑名单。 实例设置现在可以替换默认的客户端入口 Header 与 Query 黑名单。策略支持热更新,在客户端鉴权完成后、选择 Provider 和执行请求规则之前仅运行一次。
  • 可配置的 Provider 请求白名单。 每个 Provider 都可以扩展渠道内置的 Header/Query 白名单,也可以用精确列表完全替换默认项。白名单在 Header Rule 之后生效,因此管理员可以主动注入并转发 user-agent、鉴权头、Cookie、API Key 或其他上游要求的 Header。
  • Console 与导入导出支持。 Settings 和 Provider 表单已提供英文、简体中文和繁体中文配置界面;实例持久化、数据库迁移、Bundle 导入导出、原生数据库与 edge libSQL 均会保留这些配置。

变更

  • Custom 上游 UA 改为配置驱动。 对 User-Agent 有访问控制的供应商可以在请求白名单中加入 user-agent,再通过 Header Rule 注入上游期望的值,无需透传客户端 UA,也无需为所有 custom Provider 硬编码放行。
  • 依赖维护。borsh-deriveh2potential_utfrustls-webpkiwriteable 更新到当前兼容的补丁版本。