v1.2.0
Server (Go)
- DES-CTR bidirectional encryption with separate IV exchange
- Independent keystreams for each direction
- TXDEF, TXDEE, TXDE encryption methods
Android Client v1.3.0
- Whitelist mode: non-whitelisted sites connect directly via DirectTunnel
- Blacklist mode: listed sites go direct, others via encrypted proxy
- SOCKS5 proxy: always routes through encrypted tunnel
- DirectTunnel: @volatile channel, immediate data read, VpnService.protect()
- Performance: async TUN write queue, 16KB relay buffers, 64KB socket buffers
- Stability: SYN dedup, pending data buffering, unreachable IP filtering
- MSS=1460 in SYN-ACK to reduce TLS fragmentation
- DNS-over-HTTPS (8.8.8.8:443) forced through proxy
- DNS: always proxied to avoid GFW pollution
- EncryptedTunnel: channelReadAtLeastOne() prevents EOF misinterpretation
SHA256
31124835b1aeb777945046dd72a83ed87e0391112223c4e1b554c8a9128c0ff6 gocon.apk