Skip to content

ProxyGW v1.3.0 Stable

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Apr 17:40
· 710 commits to main since this release
v1.3.0
e66446b

2026-04-15 (Deep System & UI Optimization, Security, and Fake-IP)

Added

  • Deep System Optimization: 后端 SQLite 强制开启 PRAGMA journal_mode=WAL，读写全并发。
  • Deep System Optimization: API 响应引入 Gzip 压缩。
  • Deep System Optimization: /api/login 新增动态指数延迟与最大 10 次错误熔断机制。
  • Deep System Optimization: 前端资源 (Vue3, Tailwind, FontAwesome) 完成全量本地化下载，支持 100% 离线脱机运行。
  • Fake-IP Architecture: 完整引入了 Fake-IP 零延迟直通架构。Xray 开启内置 fakedns 引擎 (198.18.0.0/16)，OSPF (FRR) 在 Mode B 下静态宣告 198.18.0.0/16 路由。
  • Security: Supply Chain Validation - Added rigorous SHA256/SHA512 hash verification for Xray-core downloads via .dgst files.
  • Security: GeoData Validation - Added rules.zip.sha256sum signature verification for geosite and geoip downloads.
  • Security: Systemd Sandboxing - Introduced ProtectSystem=strict, NoNewPrivileges=yes, PrivateTmp=yes to proxygw.service.
  • Security: Initial Password Generation - Removed hardcoded admin password. First-time installs now generate a secure random password saved to config/bootstrap_password.txt.

Changed

  • 彻底移除了 watchDnsLogs 协程与相关陈旧的 OSPF 动态路由下发逻辑（由于 Fake-IP 架构已上线，此逻辑为无效高负载开销）。
  • 修改 xray_service.go，TProxy 入站开启对 fakedns、http 和 tls 的 Sniffing。
  • 修改 mosdns_service.go，命中 proxy_domains 时瞬间向 Xray 的 FakeDNS 请求假 IP 并阻塞式返回。
  • scripts/install.sh upgraded to auto-deploy the hardened Systemd service and disable systemd-resolved DNS stub.
  • README.md updated to reflect Fake-IP architecture and security posture.

Fixed

  • 彻底解决由于 DNS 解析时间与 OSPF 路由下发时间差导致的首包（TCP SYN）漏网与高延迟断流问题。
Assets 3
Loading