v0.8.0

What's New

End-to-End Test Suite

Full e2e test infrastructure that exercises the real nftables/pf + proxy pipeline on both Linux and macOS:

• SOCKS5 tunneling — transparent intercept → SOCKS5 upstream → destination
• HTTP CONNECT tunneling — same flow via HTTP CONNECT
• DNS forwarding — DNS forwarder + IP-to-domain mapping verification
• Port-selective redirect — verifies --ports flag only intercepts specified ports

Tests run in CI on both platforms (GitHub Actions) and locally via Vagrant (Linux) or directly on macOS.

Improved Loop Prevention

Local traffic interception (--local-traffic) no longer requires a dedicated system user:

• Linux: Uses SO_MARK (fwmark) on outbound sockets — nftables OUTPUT chain skips marked packets
• macOS: Uses IP_BOUND_IF to bind outbound sockets to lo0 + pass out quick pf rule for upstream exclusion

The --proxy-user flag is deprecated and ignored. The --fwmark flag (default: 1) controls the mark value on Linux.

SSH Lockout Prevention

Firewall setup scripts now automatically bypass SSH (port 22) to the gateway interface IP, preventing accidental lockout when redirecting all TCP traffic.

Other Changes

• macOS LaunchDaemon wrapper script for pf lifecycle management
• Port-selective redirection via --ports flag
• Updated firewall script arguments (fwmark/upstream_proxy instead of proxy_user)

Downloads

File	Platform
trans_proxy-v0.8.0-darwin-arm64.zip	macOS (Apple Silicon)
trans_proxy-v0.8.0-linux-amd64.zip	Linux (x86_64)