FluxGate v0.3.0
FluxGate v0.3.0
FluxGate 0.3 introduces the protocol/profile layer and the first production proxy core alongside
WireGuard and OpenVPN.
Highlights
- Production sing-box provider
- Typed Core / Protocol / Transport / Security / Profile architecture
- VLESS over TCP + TLS
- Trojan over TCP + TLS
- Hysteria2 over QUIC + TLS
- Managed TLS identities with strict certificate verification
- Profile-scoped client credentials
- Provider/profile-selective revocation
- Unified WireGuard, OpenVPN and sing-box exports
- Secret-free capability manifest
- Verified sing-box binary acquisition
- TCP/UDP and IPv4/IPv6 collision protection
- WireGuard + OpenVPN + sing-box coexistence
- Stronger path, migration, TLS and service convergence hardening
Validation
The release candidate was validated with:
- 150+ unit/regression tests
- Checksum-verified upstream sing-box parser validation
- Python 3.10–3.14 CI
- Ubuntu 24.04 privileged lifecycle validation
- WireGuard/OpenVPN/sing-box coexistence
- Real macOS VLESS/TCP/TLS connection
- Real macOS Trojan/TCP/TLS connection
- Real macOS Hysteria2/QUIC/TLS connection
- IPv4 egress and remote DNS
- Selective credential revocation
- Service restart recovery
- VPS reboot persistence
- Linux/OpenSSL managed TLS identity verification
Supported
Core providers:
- WireGuard
- OpenVPN
- sing-box
sing-box profiles:
- VLESS / TCP / TLS
- Trojan / TCP / TLS
- Hysteria2 / QUIC / TLS
Planned
- Xray-core
- TUIC
- WebSocket
- HTTP/2
- gRPC
- Reality
- Pathfinder / adaptive profile selection
- Web UI and additional integrations
FluxGate remains an early-stage networking project. Review the security and testing documentation
before deployment.