ClashRS: vanhemmat versiot ja versiohistoria

⚙️ Miscellaneous Tasks
- Bump version to v0.10.10 by @github-actions[bot]
Full Changelog: https://github.com/ibigbug/clash-rs/compare/v0.10.9...v0.10.10

🚀 Features
- (rules) Add per-rule outbound interface selection (#1485) by @ibigbug
- (proxy/smart) Async cache load, retry exclusion, and lock scope reduction (#1511) by @ibigbug
- (memory) Memory limit controller, DNS cache eviction, and jemalloc tuning (#1512) by @ibigbug
- (proxy/urltest) Forced fastest selection, name-based lock, and healthcheck concurrency (#1513) by @ibigbug
- (api) Implement /cache/fakeip/flush and /cache/dns/flush endpoints (#191) (#1556) by @ibigbug
- (proxy) Support fwmark and interface binding for SSH and Tor (#788, #787) (#1554) by @ibigbug
- (router) Support port ranges, composite ports, and inbound rules (IN-TYPE, IN-USER) (#1558) by @ibigbug
- (urltest) Implement passive failure circuit breaker for URLTest (#1559) by @ibigbug
- (net) Implement Happy Eyeballs v2 (RFC 8305) dual-stack connection racing (#1560) by @ibigbug
- (tproxy) Support dns hijacking for tproxy inbound (#879) (#1555) by @ibigbug
- (tun) Add ICMPv4 and ICMPv6 echo responder support (#719) (#1561) by @ibigbug
- (proxy) Implement XHTTP (SplitHTTP) transport for VLESS and VMess (#1562) by @ibigbug
- (hysteria2) Complete udp port hopping support (#1563) by @ibigbug
🐛 Bug Fixes
- Pass through CORS preflight requests in auth middleware (#1486) by @oseau
- Remove unused shadowquic git patch and fix release workflow (#1488) by @aaronjheng
- (inbound) Listener error recovery and panic hardening (#1506) by @ibigbug
- (transport) Datagram stream framing and partial I/O handling (#1507) by @ibigbug
- (memory) Closed_flows memory leak and statistics deadlock (#1508) by @ibigbug
- (dns) Fakeip bidirectional cache invariants and IP offset cycling (#1509) by @ibigbug
- (misc) Panic hardening, UI fallback, and AnyTLS buffer optimizations (#1525) by @ibigbug
- (hc) Use group.url for default latency test url in healthcheck (#864) (#1533) by @ibigbug
- (rules) Make domain rule matching case-insensitive (#621) (#1534) by @ibigbug
- (config) Preserve error details and log on config parse failure (#711) (#1535) by @ibigbug
- (api) Allow get_outbound and delay test to find provider proxies (#1394) (#1536) by @ibigbug
- (config) Make path and health-check optional for proxy providers (#1537) by @ibigbug
- Use portable_atomic::AtomicU64 for 32-bit platform compatibility (#1539) by @ibigbug
- (api) Support zero-downtime hot reloading of runtime components (#1553) by @ibigbug
🚜 Refactor
- Replace async_recursion with loops across clash-lib and remove dependency (#1550) by @ibigbug
⚡ Performance
- (io) Cooperative stream copy yield to prevent CPU starvation (#1510) by @ibigbug
- (router) Optimize rule matching using radix trie and aho-corasick (#703) (#1557) by @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group with 47 updates (#1494) by @dependabot[bot]
- (deps) Bump the npm-dependencies group in /clash-dashboard with 16 updates (#1493) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 3 updates (#1492) by @dependabot[bot]
- (deps) Bump brace-expansion from 5.0.7 to 5.0.9 in /clash-dashboard (#1495) by @dependabot[bot]
- (deps) Bump ip-address from 10.2.0 to 10.4.0 in /clash-dashboard (#1496) by @dependabot[bot]
- (deps) Bump js-yaml from 4.2.0 to 4.3.2 in /clash-dashboard (#1523) by @dependabot[bot]
- (deps) Bump browserslist from 4.28.2 to 4.28.9 in /clash-dashboard (#1518) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 45 updates (#1524) by @dependabot[bot]
- (deps) Hold tower-http at 0.6 to keep 32-bit builds green (#1529) by @ibigbug
- (deps) Bump the rust-dependencies group across 1 directory with 34 updates (#1531) by @dependabot[bot]
- (deps) Bump the npm-dependencies group in /clash-dashboard with 17 updates (#1532) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 35 updates (#1540) by @dependabot[bot]
- (deps) Bump ip-address from 10.4.0 to 10.7.2 in /clash-dashboard in the npm-security-dependencies group across 1 directory (#1542) by @d

🚀 Features
- Auto-reload local file rule/proxy-providers on change (#1465) by @Copilot
- (tun) Add FreeBSD tun support via FIB multi-table routing (#1475) by @lakako
🐛 Bug Fixes
- (config) Ignore unknown fields for forward-compatible parsing (#1471) by @Copilot
- (hysteria2) Refresh the UDP poller after port hops (#1482) by @cedar-otter-47
- (ws) Percent-encode spaces in WebSocket paths (#1480) by @cedar-otter-47
- (urltest) Honor tolerance and skip unavailable proxies (#1481) by @cedar-otter-47
🚜 Refactor
- (dispatcher,transport) Dedup tracked streams + TransportLayer enum (#1477) by @ibigbug
🛠️ Builds
- (deps) Bump the npm-dependencies group in /clash-dashboard with 17 updates (#1462) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 6 updates (#1461) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 32 updates (#1463) by @dependabot[bot]
- (deps) Bump cmov from 0.5.3 to 0.5.4 (#1469) by @dependabot[bot]
- (deps) Bump body-parser from 2.2.2 to 2.3.0 in /clash-dashboard (#1479) by @dependabot[bot]
- (deps) Bump brace-expansion from 5.0.6 to 5.0.7 in /clash-dashboard (#1478) by @dependabot[bot]
- (deps) Bump serde_with from 3.20.0 to 3.21.0 (#1474) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump shadowquic version (#1476) by @spongebob888
- Bump version to v0.10.8 by @github-actions[bot]
Other
- Add Hysteria2 inbound listener (#1466)
- Initial plan
- Add Hysteria2 inbound listener (issue #1460)
- Fix UdpPacket src_addr/inbound_user in Hysteria2InboundDatagram
- Refactor user watch-channel creation to use match with OR patterns
- fix(hysteria2 inbound): keep connection alive after auth; harden UDP/TCP paths
Address review findings on the Hysteria2 inbound listener.
- Keep the h3 server connection alive for the QUIC connection's lifetime.
authenticate() previously dropped it on return, and h3's Drop closes the
underlying QUIC connection — so every proxy stream/datagram failed
immediately after a successful auth, making the inbound non-functional.
- Bounds-check the UDP packet decoder before split_to(addr_len); a malformed
datagram with an oversized address length previously panicked the datagram
task (a remote DoS under panic = "abort").
- Send the correct address in UDP reply datagrams: use the upstream source
(src_addr), not the client's own address (dst_addr), so clients can
correlate replies (e.g. DNS-over-Hysteria2).
- Evict per-session Defraggers: move fragment state into the session map so
it is dropped when the session ends, instead of a separate map that grew
unbounded per distinct session id.
- Use try_send on the per-session datagram channel so one stalled UDP
destination cannot head-of-line-block every other session on the connection.
- Preserve payload bytes pipelined into the request frame via into_parts()
instead of discarding the read buffer with into_inner().
- Reject empty auth passwords so a blank password cannot become an open relay.
- Guard Fragments against underflow/divide-by-zero when the advertised max
datagram size is smaller than the frame header.
- Treat a request frame split across QUIC reads as "need more bytes" instead of
a fatal decode error.
- Canonicalize the client address before the allow_lan check (dual-stack
IPv4-mapped IPv6), matching the other inbounds.
- Remove a duplicate address parser; add regression tests for the UDP decode
bounds check and partial-frame handling.
- style: fix typos spellcheck (avoid 'mis' fragment in comment)
- refactor(hysteria2): split inbound/outbound and share stream/codec/TLS helpers
Reorganize the hysteria2 module to match the shadowsocks layout and remove
duplication between the client and server sides:
- Move the outbound client implementation from mod.rs into outbound/mod.rs;
mod.rs is now a thin module root that declares submodules and re-exports the
outbound surface (Handler, HystOption, Obfs, SalamanderObfs).
- Add a shared stream.rs unifying the outbound HystStream and inbound
HystServerStream into one HystStrea

🚀 Features
- Make all user configs statically typed in def.rs (#1436) by @Copilot
- Silently ignore unknown top-level/dns config fields; add --strict-config (#1452) by @Copilot
🐛 Bug Fixes
- Remove v6 dns config from wintun (#1437) by @spongebob888
- (socket) Skip SO_BINDTODEVICE on Android (#1442) by @masike0609
- Skip interface binding for loopback destinations (#1445) by @Copilot
🚜 Refactor
- (tuic) Use tuic-core re-exported quinn (#1429) by @Itsusinn
- Remove docker requirement of tuic (#1345) by @Itsusinn
🛠️ Builds
- Upgrade tuic-core to v1.8.4 (#1431) by @Itsusinn
- (deps) Bump the rust-dependencies group with 23 updates (#1448) by @dependabot[bot]
- (deps) Bump the npm-dependencies group in /clash-dashboard with 15 updates (#1447) by @dependabot[bot]
- (deps) Bump qs from 6.15.1 to 6.15.2 in /clash-dashboard (#1441) by @dependabot[bot]
- (deps) Bump brace-expansion from 5.0.5 to 5.0.6 in /clash-dashboard (#1430) by @dependabot[bot]
- (deps) Bump hono from 4.12.18 to 4.12.26 in /clash-dashboard (#1456) by @dependabot[bot]
- (deps-dev) Bump vite from 8.0.15 to 8.0.16 in /clash-dashboard (#1455) by @dependabot[bot]
- (deps) Bump js-yaml from 4.1.1 to 4.2.0 in /clash-dashboard (#1459) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Handle cache service rate limits (429) with exponential backoff (#1432) by @Itsusinn
- Bump workflows to v1.0.35, enable sccache & cross-rs integration (#1443) by @Itsusinn
- Bump version to v0.10.7 by @github-actions[bot]
Other
- Reject unknown config fields during deserialization (#1440) by @Copilot
- Handle wildcard CORS origins without panicking (#1458)
- Initial plan
- Handle wildcard CORS origins
- Warn on mixed wildcard CORS origins
- Polish wildcard CORS regression test

Co-authored-by: copilot-swe-agent[bot] 198982749+Copilot@users.noreply.github.com by @Copilot
New Contributors ❤️
- @masike0609 made their first contribution in #1442
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.6...v0.10.7

🚀 Features
- (dashboard) Persist dashboard API secret across browser sessions for LAN deployments (#1409) by @Copilot
- (dns) Add respect-rules to route upstream DNS via the rule engine (#1427) by @ibigbug
- MTLS (mutual TLS) support for outbound proxies (#1424) by @Copilot
🐛 Bug Fixes
- Upgrade smoltcp to 0.13.1 to fix TCP sequence number underflow panic (#1406) by @ibigbug
- Timeout on hyper handshake and consolidate proxy state writes (#1404) by @xmh0511
- Shadowquic udp proxy (#1412) by @spongebob888
- (dns) DNS client rebuild resilience (#1410) by @xiguagua
- (tun) Bind interface on windows not valid for dualstack (#1413) by @spongebob888
- (dns) Skip caching NXDomain, ServFail, and all-unspecified responses (#1414) by @xiguagua
- Warn on proxy parse failure, harden group handlers against empty providers (#1420) by @Copilot
- (vless) CMD_PADDING_END must not trigger XTLS splice (#1417) by @Copilot
- (api) Store startup config path, fix dashboard reload (#1421) by @Copilot
🚜 Refactor
- Remove outer RwLock from ThreadSafeProxyProvider (#1407) by @ibigbug
⚙️ Miscellaneous Tasks
- Bump version to v0.10.6 by @github-actions[bot]
Other
- Guard tproxy UDP GRO chunking when stride is zero (#1416) by @Copilot
New Contributors ❤️
- @xmh0511 made their first contribution in #1404
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.5...v0.10.6

🐛 Bug Fixes
- Remove ring from aws-lc-rs code path (~500KB-1MB binary savings) (#1397) by @ibigbug
- Tuic IPV6 rebind (#1398) by @Itsusinn
- (socket) Bind dual-stack UDP socket when interface is set (fixes Windows WSAEINVAL #1399) (#1401) by @ibigbug
🚜 Refactor
- Migrate hickory-client to hickory-net (#1396) by @ibigbug
⚙️ Miscellaneous Tasks
- Bump version to v0.10.5 by @github-actions[bot]
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.4...v0.10.5

🐛 Bug Fixes
- Use child_token() instead of clone() for reload API server cancellation token (#1385) by @xiguagua
- (tun) Survive Wintun ring-buffer-full; make TcpStream notifications best-effort (#1383) by @Copilot
- (DNS) LRU cache to ensure entries are read back properly (#1389) by @Codex
- (dispatcher) Canonicalize IPv4-mapped IPv6 UDP source to prevent EAFNOSUPPORT (#1391) by @ibigbug
- (ss-inbound) Canonicalize UDP src before storing control entry (#1392) by @ibigbug
🚜 Refactor
- refactor!: consolidate rustls forks via [patch.crates-io] (#1395) by @ibigbug
🛠️ Builds
- (deps) Bump fast-uri from 3.1.0 to 3.1.2 in /clash-dashboard (#1384) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 13 updates (#1377) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump version to v0.10.4 by @github-actions[bot]
New Contributors ❤️
- @Codex made their first contribution in #1389
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.3...v0.10.4

🚀 Features
- Netflow-like flows dashboard (#1357) by @ibigbug
- (dashboard) New proxies page and nav restructure (#1362) by @ibigbug
- (dashboard) Flows page improvements (#1361) by @ibigbug
- Expose commit SHA in /version API + update agent instructions (#1367) by @ibigbug
- (dashboard) Dark mode, theme toggle, test refresh fixes, group latency, batch test, rule match (#1368) by @ibigbug
🐛 Bug Fixes
- (api) Exempt /ui from secret authentication (#1359) by @ibigbug
- (dashboard) Use correct bulk endpoints for proxy latency tests (#1360) by @ibigbug
- UDP direct DNS failure causes panic ("JoinHandle polled after completion") (#1364) by @Copilot
- (dashboard) Group latency, provider healthcheck, rule provider API (#1365) by @ibigbug
- (dashboard) Widen navbar to prevent scroll (#1369) by @ibigbug
- Pin docker-publish workflow back to v1.0.12 (#1380) by @ibigbug
⚡ Performance
- Fix WebSocket data duplication, cache TLS connector, add TCP_NODELAY, fix H2 flow control (#1378) by @Copilot
🧪 Testing
- Run api_tests in parallel with dynamic port allocation (#1354) by @ibigbug
🛠️ Builds
- (deps) Bump the actions-dependencies group with 3 updates (#1355) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 32 updates (#1356) by @dependabot[bot]
- (deps) Bump ip-address and express-rate-limit in /clash-dashboard (#1370) by @dependabot[bot]
- (deps) Bump the npm-dependencies group in /clash-dashboard with 11 updates (#1376) by @dependabot[bot]
- (deps) Bump hickory-net from 0.26.0 to 0.26.1 (#1372) by @dependabot[bot]
- (deps) Bump hickory-proto from 0.26.0 to 0.26.1 (#1373) by @dependabot[bot]
- (deps) Bump hono from 4.12.15 to 4.12.18 in /clash-dashboard (#1371) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Reduce release binary size with line-tables-only debug info (#1366) by @ibigbug
- Add npm ecosystem to dependabot.yaml (#1375) by @Copilot
- Bump version to v0.10.3 by @github-actions[bot]
- Bump rust-proxy/workflows to v1.0.13 (#1379) by @ibigbug
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.2...v0.10.3

🚀 Features
- Add AnyTLS inbound listener with multi-user support (#1349) by @ibigbug
🐛 Bug Fixes
- (udp) Full cone NAT — correct domain→orig_dest attribution for UDP sessions (#1346) by @Claude
🚜 Refactor
- (clash-lib) Reduce nesting with if-let chains and guard clauses (#1350) by @Itsusinn
🛠️ Builds
- Install Node 20 in cross containers for dashboard build (#1352) by @ibigbug
⚙️ Miscellaneous Tasks
- Bump version to v0.10.2 by @github-actions[bot]
New Contributors ❤️
- @Claude made their first contribution in #1346
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.1...v0.10.2

🚀 Features
- (dns) Support proxy-server-nameserver (#1002) by @Itsusinn
- E2e throughput tests for SS outbound + transport Poll::Pending bug fixes (#1332) by @ibigbug
- API improvements - config reload, rule providers, log stability (#1343) by @ibigbug
- (test) E2e throughput tests for all proxy protocols (#1337) by @ibigbug
- Built-in web dashboard (#1342) by @ibigbug
🐛 Bug Fixes
- Rename user_hosts to use_hosts in DNS config (#1324) by @ibigbug
- (controller) Incorrect latency of groups (#1007) by @Itsusinn
- Ss2022 throughput, simple-obfs TLS state machine, MMDB path (#1330) by @ibigbug
- Verge compatibility part 2 (#1339) by @Itsusinn
- Verger compatibility part 3 (#1344) by @Itsusinn
🚜 Refactor
- (test) Run all docker integration tests in parallel (#1335) by @ibigbug
📚 Documentation
- (config) Audit test configs and add full.yaml reference (#1338) by @ibigbug
- README protocol support tables + built-in dashboard mention (#1340) by @ibigbug
🛠️ Builds
- (deps) Bump russh from 0.60.0 to 0.60.1 (#1329) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump version to v0.10.1 by @github-actions[bot]
Other
- Full endpoint coverage, mode PATCH bug fix, group delay off-by-one, provider delay serialization (#1328) by @Copilot
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.10.0...v0.10.1

🚀 Features
- (anytls) Add dedicated AnyTLS outbound with native TCP/UDP and robust datagram framing (#1317) by @Copilot
- (tailscale) Add embedded tailscale-rs outbound with TCP and UDP support (#1315) by @Copilot
🐛 Bug Fixes
- (dispatcher) Canonicalize IPv4-mapped IPv6 UDP dst to prevent EINVAL on bind (#1312) by @ibigbug
- (ss-inbound) Propagate user key and client_session_id for multi-user SS2022 UDP responses (#1313) by @ibigbug
- Compat mode (#1319) by @Itsusinn
- field and centralize common proxy API fields for 0.9.7 client compatibility (#1321) by @Copilot
- Tun reliability (#1322) by @ibigbug
📚 Documentation
- Update copilot-instructions.md by @ibigbug
- Update readme (#1323) by @ibigbug
⚙️ Miscellaneous Tasks
- Bump version to v0.10.0 by @github-actions[bot]
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.7...v0.10.0

🚀 Features
- Enrich api response for plain proxies (#1056) by @ibigbug
- Support vless reality (#1057) by @SKTT1Ryze
- Support inbound provider (#1066) by @ibigbug
- Allow proxy groups/providers as outbounds for DNS and geo-data downloads (#1061) by @Copilot
- Support dashboard resources auto-downloading (issue #985) (#1062) by @Copilot
- IPC and WebSocket support (#1068) by @Itsusinn
- Support ss2022 multi user inbound (#1073) by @ibigbug
- Improve cli compatibility mode for verge (#1077) by @Itsusinn
- RESTful API improvements for Verge compatibility (#1078) by @Itsusinn
🐛 Bug Fixes
- Group api name field (#1058) by @ibigbug
- IPv6 literals fail in direct outbound when dns.ipv6 is disabled (#1063) by @Copilot
- (tun) Use async sleep to wait for TUN interface visibility before route setup (#1060) by @Copilot
- (netstack) Add SYN flood protection & deduplication (#1070) by @Alma-human
- (netstack) Honor EOF and half-close state (#1069) by @OneOne-ai
- Better tun logging (#1074) by @ibigbug
- Incorrect tcp state check in tun stack (#1075) by @ibigbug
- Deterministic TUN GUID on Windows and filter broadcast IPs from fake-ip pool (#1081) by @Copilot
- Resolve CI failures from rust-dependencies bump (#1084) by @dependabot[bot]
- (ss-inbound) Loop on UDP decrypt error to re-register waker (#1309) by @ibigbug
🚜 Refactor
- Rename feature to (#1076) by @Itsusinn
⚡ Performance
- Add tun bench workflow (#1072) by @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group with 23 updates (#1055) by @dependabot[bot]
- (deps) Bump tar from 0.4.44 to 0.4.45 (#1067) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 4 updates (#1082) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Add rust-expert custom GitHub Copilot agent (#1059) by @ibigbug
- Bump version to v0.9.7 by @github-actions[bot]
Other
- Upgrade shadowquic to v0.3.4 (#1310)
- Upgrade shadowquic to v0.3.4
Agent-Logs-Url: https://github.com/spongebob888/clash-rs/sessions/90bd1e93-ae5c-4d0d-bfe2-bd5425c59417
Co-authored-by: spongebob888 121923937+spongebob888@users.noreply.github.com
- Fix compile error: add cipher_suite_preference field to ShadowQuicClientCfg initializer
Agent-Logs-Url: https://github.com/spongebob888/clash-rs/sessions/000f47c5-760e-493f-bcae-3b8b3d7deddc
Co-authored-by: spongebob888 121923937+spongebob888@users.noreply.github.com

Co-authored-by: copilot-swe-agent[bot] 198982749+Copilot@users.noreply.github.com by @spongebob888
New Contributors ❤️
- @OneOne-ai made their first contribution in #1069
- @Alma-human made their first contribution in #1070
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.6...v0.9.7

🚀 Features
- Proper mechanism part 1 (#1025) by @Itsusinn
- Enrich /configs api response (#1053) by @ibigbug
🐛 Bug Fixes
- (test) Fix all unit tests for macOS Apple Silicon (#1039) by @litcc
🛠️ Builds
- (deps) Bump the rust-dependencies group across 1 directory with 17 updates (#1049) by @dependabot[bot]
- (deps) Bump quinn-proto from 0.11.13 to 0.11.14 (#1048) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Replace workflows with reusable rust-proxy workflows (#1045) by @Itsusinn
- Bump version to v0.9.6 by @github-actions[bot]
Full Changelog: https://github.com/Watfaq/clash-rs/compare/pr-1045-final...v0.9.6

🐛 Bug Fixes
- Direct udp bound to session src #971 (#972) by @spongebob888
- Dns not using fw_mark (#977) by @spongebob888
- Url_test not using fw_mark and align tun so_mark with glabal mark (#983) by @spongebob888
- (tun) Address not set on linux (#988) by @spongebob888
- (shadowquic) Compiler error for android build (#989) by @spongebob888
- (wireguard) Pre-shared-key field name to match standard convention (#991) by @Copilot
- (tproxy) Using raw socket to sending packet to local (#975) by @spongebob888
🛠️ Builds
- (deps) Bump the actions-dependencies group with 4 updates (#980) by @dependabot[bot]
- Rustc stable feature lazy_get (#990) by @Itsusinn
- (deps) Bump the rust-dependencies group across 1 directory with 32 updates (#995) by @dependabot[bot]
- (deps) Bump cmov from 0.4.3 to 0.4.5 (#996) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump version to v0.9.4 by @github-actions[bot]
Other
- Adding Docker test for tun and simple direct test (#978)
- feat: Add Docker-based integration tests with Python runner for direct proxy functionality.
- feat: Add TUN tests and enable privileged mode for the Docker test runner.
- feat: Integrate LLVM code coverage generation into the Docker test suite. by @spongebob888
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.3...v0.9.4

🚀 Features
- (rule) Add Windows support for PROCESS-NAME rule (#957) by @Copilot
- Add NETWORK rule support for TCP/UDP protocol routing (#968) by @Copilot
🐛 Bug Fixes
- (shadowquic) Fix quinn not work when bound to interface (#960) by @spongebob888
- (rule) Optimize MRS parsing and fix CIDR trie network truncation (#964) by @ibigbug
- Fixed default ALPN for trojan ws (#969) by @ibigbug
🛠️ Builds
- (deps) Bump the actions-dependencies group with 2 updates (#961) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 22 updates (#962) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 6 updates (#965) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump version to v0.9.3 by @github-actions[bot]
Other
- Added App Store link and sponsors (#963)
Update README.md
Signed-off-by: Yuwei Ba dev@watfaq.com by @ibigbug
New Contributors ❤️
- @Copilot made their first contribution in #968
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.2...v0.9.3

🚀 Features
- (dns) Add edns subnet config (#949) by @ibigbug
- (rule) Implement process name matching for routing rules (#956) by @ibigbug
🐛 Bug Fixes
- (tun) Check tun exist before setting IP to preserve pre-configured routes (#940) by @ibigbug
- (tun) Skip route setup for existing tun interfaces and update test assertions (#942) by @ibigbug
- (tun) Only add device IP on Windows (#943) by @ibigbug
- Can not find crate clash_ffi when creating framework for iOS and macOS (#945) by @xiguagua
- (build_apple.sh) Update header and modulemap file paths for proper directory structure (#947) by @xiguagua
🛠️ Builds
- (deps) Bump tracing-opentelemetry from 0.31.0 to 0.32.0 in the rust-dependencies group (#936) by @dependabot[bot]
- (deps) Bump crate-ci/typos from 1.36.2 to 1.37.0 in the actions-dependencies group (#935) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 10 updates (#941) by @dependabot[bot]
- Fix clippy warnings (#950) by @ibigbug
- (deps) Bump the actions-dependencies group with 5 updates (#953) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 13 updates (#954) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump aws-lc-sys version to fix build problem (#955) by @spongebob888
- Bump version to v0.9.2 by @github-actions[bot]
Other
- Speed up release CI pipeline (#944) by @ibigbug
New Contributors ❤️
- @xiguagua made their first contribution in #947
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.1...v0.9.2

🚀 Features
- (config) Support alias for direct and reject outbound (#910) by @ibigbug
- (dns) Adding dns over proxy (#923) by @spongebob888
- IPC support (#867) by @Itsusinn
🐛 Bug Fixes
- Fix ci (#916) by @Itsusinn
- (proxy) Udp not bound for shadowquic #918 (#919) by @spongebob888
- (dns) Fix ip address nameserver checking (#929) by @arkxfly
🛠️ Builds
- (deps) Bump the rust-dependencies group across 1 directory with 4 updates (#908) by @dependabot[bot]
- (deps) Bump crate-ci/typos from 1.35.4 to 1.35.5 in the actions-dependencies group (#911) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 7 updates (#912) by @dependabot[bot]
- (deps) Bump tracing-subscriber from 0.3.19 to 0.3.20 (#917) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 5 updates (#922) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 2 updates (#921) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 7 updates (#926) by @dependabot[bot]
- (deps) Bump crate-ci/typos from 1.35.7 to 1.36.2 in the actions-dependencies group (#925) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 27 updates (#934) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Mips build jobs (#913) by @Itsusinn
- Bump version to v0.9.1 by @github-actions[bot]
Other
- Make defaults consistent with mihomo (#931) by @arkxfly
New Contributors ❤️
- @arkxfly made their first contribution in #929
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.9.0...v0.9.1

🚀 Features
- (tun) [breaking] Replace netstack with smoltcp based impl (#886) by @ibigbug
🐛 Bug Fixes
- (geoip-code) Filter logically reversed (#887) by @JimmyHuang454
- (tun) Connection stuck in some cases (#890) by @ibigbug
- (tun) Fixed performance degradation (#894) by @ibigbug
- Reset udp outbound map when selector changed (#895) by @ibigbug
- Simple obfs tls bug (#901) by @ibigbug
⚡ Performance
- (tun) Some perf improvement (#896) by @ibigbug
- (tun) Align with other impls (#899) by @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group across 1 directory with 10 updates (#891) by @dependabot[bot]
- (deps) Bump russh from 0.53.0 to 0.54.1 (#892) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 6 updates (#897) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 2 updates (#898) by @dependabot[bot]
- (deps) Bump slab from 0.4.10 to 0.4.11 (#900) by @dependabot[bot]
- (deps) Bump the actions-dependencies group with 2 updates (#905) by @dependabot[bot]
- Update packages (#907) by @ibigbug
⚙️ Miscellaneous Tasks
- Bump version to v0.9.0 by @github-actions[bot]
Other
- Add VLESS protocol support (#903) by @ibigbug
- Update CLAUDE.md by @ibigbug
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.8.2...v0.9.0

🚀 Features
- Add urltest support for outbound groups with optional url field (#843) by @ibigbug
- (tun) Support ipv6 on tun inbound (#851) by @ibigbug
- Adding dual stack (#863) by @spongebob888
- (redir) Redir proxy implementation (#870) by @spongebob888
- Add OpenTelemetry observability and DNS client optimizations (#866) by @ibigbug
- (proxy) Apply proxy for downloading datasets (#881) by @ibigbug
🐛 Bug Fixes
- (proxy) Added family hint for new_udp_socket (#862) by @ibigbug
- Ipv6 not effective for redir/tproxy (#874) by @spongebob888
- (tproxy) UDP failed on GSO (#882) by @spongebob888
- (tproxy) Limiting buf to used len (#883) by @spongebob888
- (fallback-filter) Geoip-code failed to match (#885) by @JimmyHuang454
⚡ Performance
- Don't download mmdb and geosite on startup when not provide (#877) by @ibigbug
🛠️ Builds
- Replace ring with aws-lc-rs (#829) by @ibigbug
- (deps) Bump crate-ci/typos from 1.33.1 to 1.34.0 in the actions-dependencies group (#846) by @dependabot[bot]
- (deps) Upgrade a few deps (#849) by @ibigbug
- (deps) Bump the rust-dependencies group across 1 directory with 3 updates (#850) by @dependabot[bot]
- (deps) Bump ring from 0.17.8 to 0.17.14 (#854) by @dependabot[bot]
- Upgrade toolchain to 2025-06-30 (#855) by @ibigbug
- (deps) Bump the rust-dependencies group with 7 updates (#857) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 3 updates (#860) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 5 updates (#872) by @dependabot[bot]
- (deps) Bump async-process to 2.4.0 (#875) by @peeweep
- Make tracing optional (#876) by @ibigbug
- (deps) Bump the rust-dependencies group with 6 updates (#884) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump shadowquic version (#853) by @spongebob888
- Bump shadowquic version (#856) by @spongebob888
- Loosen shadowquic version constraint (#873) by @spongebob888
Other
- Adding dual stack for tunnel (#869)
feat(tunnel): adding dual stack by @spongebob888
- Bump v0.8.2 by @ibigbug
New Contributors ❤️
- @JimmyHuang454 made their first contribution in #885
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.8.1...v0.8.2

🚀 Features
- (proxy) Allow setting allow-lan via API (#824) by @ibigbug
- Add release pipeline workflow (#840) by @ibigbug
🐛 Bug Fixes
- (mixed) Prevent listener from exiting on socket peek failure (os error 10054) (#823) by @kkqin
- (test) Fixed api test failure on windows (#825) by @ibigbug
- (tls) Add skip logic to DefaultTlsVerifier for signature verification for self signed certificates (#828) by @kkqin
- (wg) Fixed crash when socket not connected (#833) by @ibigbug
- (api) Global proxy names duplicates (#835) by @ibigbug
- (api) Fix provider proxy endpoint and proxies endpoint returning provider proxies (#837) by @ibigbug
🎨 Styling
- Add pre-commit hooks (#826) by @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group with 12 updates (#827) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 8 updates (#831) by @dependabot[bot]
- (deps) Bump sentry from 0.40.0 to 0.41.0 in the rust-dependencies group (#836) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Bump version to v0.8.1 by @github-actions[bot]
Other
- Use cargo-edit for release by @ibigbug
- Use PAT to bypass branch rule by @ibigbug
- Add CLAUDE.md for Claude Code guidance (#841)
fix flaky tests by @ibigbug
New Contributors ❤️
- @kkqin made their first contribution in #828
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.8.0...v0.8.1

🚀 Features
- (api) [breaking] Secure external controller when not listening on lan (#800) by @ibigbug
- Introduce Smart proxy group for intelligent proxy selection (#804) by @noctiro
- Improve rule_provider (#806) by @noctiro
- (proxy) Add shadowsocks inbound support (#813) by @ibigbug
- (rules) Add inline rules to rule_providers (#819) by @ibigbug
🐛 Bug Fixes
- Bump version to fix shadowquic udp ci failed (#798) by @spongebob888
- (api) Return all proxies in providers for API (#801) by @ibigbug
- (api) Append provider proxies to global proxies list (#802) by @ibigbug
- Fix tunnel inbound name mismatch in log (#807) by @sJJdGG
- (API) Proxy name missing in proxy chain for group outbounds (#817) by @ibigbug
- (core) Proxy loader early exit on mis config proxies (#821) by @ibigbug
🚜 Refactor
- (tun) Replace cmd style auto route with api on windows (#808) by @spongebob888
- Simplify smart strategy group logic (#814) by @noctiro
🎨 Styling
- (spelling) Add spell check actions (#815) by @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group across 1 directory with 6 updates (#799) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 4 updates (#803) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 6 updates (#811) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 5 updates (#818) by @dependabot[bot]
Other
- Fix shadowquic udp over datagram ci failed #790 (#796)
- Revert "chore: fix shadowquic ci failed (#789)"
This reverts commit a302e47ceac36e7c57178052cfc42f164fdc81ae.
- fix: shadowquic ci failed #790

Co-authored-by: spongebob888 121923937+vincentliu77@users.noreply.github.com by @spongebob888
- Bump v0.8.0 by @ibigbug
New Contributors ❤️
- @noctiro made their first contribution in #814
- @sJJdGG made their first contribution in #807
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.7.8...v0.8.0

🚀 Features
- (proxy) Add shadowquic protocol (#784) by @spongebob888
- (fw_mark) Implement fw_mark for socks/mixed/http/tproxy/tunnel (#786) by @spongebob888
🐛 Bug Fixes
- (tun) Use session's original dst addr as the src addr during udp NAT (#775) by @VendettaReborn
- (router) Match ipcidr if request host is ip (#780) by @ibigbug
- (listener) Pass allow-lan down to listeners (#781) by @ibigbug
- (build) Unstable feature unbounded_shifts build failure on rust 1.86 (#792) by @peeweep
🛠️ Builds
- (deps) Bump the rust-dependencies group with 5 updates (#776) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 5 updates (#782) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 6 updates (#783) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 14 updates (#785) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 14 updates (#791) by @dependabot[bot]
⚙️ Miscellaneous Tasks
- Fix shadowquic ci failed (#789) by @spongebob888
Other
- Bump v0.7.8 by @ibigbug
New Contributors ❤️
- @peeweep made their first contribution in #792
- @spongebob888 made their first contribution in #789
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.7.7...v0.7.8

🚀 Features
- Add sentry and panic report (#751) by @ibigbug
- (tun) Add default tun device name (#750) by @lmmqxyx404
- (inbound) Fix listening addr and potentially impl allow-lan(beta) (#763) by @ibigbug
- (tun) Support wintun guid (#766) by @ibigbug
🐛 Bug Fixes
- (build) Linux build with hickory API change (#761) by @ibigbug
🚜 Refactor
- Unify ss plugin & transport code style (#738) by @VendettaReborn
🛠️ Builds
- Fix older nightly toolchain (#744) by @Itsusinn
- (deps) Bump the rust-dependencies group with 4 updates (#745) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 13 updates (#748) by @dependabot[bot]
- (size) Fix app size (#755) by @ibigbug
- (deps) Bump the rust-dependencies group with 13 updates (#756) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 9 updates (#759) by @dependabot[bot]
- (deps) Bump the rust-dependencies group with 7 updates (#764) by @dependabot[bot]
- (deps) Bump tokio from 1.44.1 to 1.44.2 (#768) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 3 updates (#770) by @dependabot[bot]
- (deps) Bump the rust-dependencies group across 1 directory with 3 updates (#770) by @dependabot[bot]
- (deps) Bump crossbeam-channel from 0.5.14 to 0.5.15 (#772) by @dependabot[bot]
Other
- Support domain regex (#739) by @ibigbug
- Support ws auth header (#749) by @ibigbug
- Show missing commits (#752) by @ibigbug
- Bump v0.7.7 by @ibigbug
New Contributors ❤️
- @lmmqxyx404 made their first contribution in #750
Full Changelog: https://github.com/Watfaq/clash-rs/compare/v0.7.6...v0.7.7

🚀 Features
- (tun) Replace lwip with smoltcp and add bsd build (#712) @ibigbug
- (perf) Implement zero copy for direct streams (#713) @VendettaReborn
- (tuic) Support skip_cert_verify, add docker test (#724) @VendettaReborn
- Support ss v2ray plugin(without mux) (#722) @VendettaReborn
- Support hysteria2 udp (#729) @VendettaReborn
- Support listeners & tunnel (#732) @Itsusinn
- (dns) Enhance dns hijack with fake IP enabled (#730) @ibigbug
🐛 Bug Fixes
- Remove android target SO_MARK (#725) @Itsusinn
- Clean up useless code (#727) @VendettaReborn
- Use watfaq-rustls instead of patched one (#736) @VendettaReborn
🚜 Refactor
- Change clash_lib entrypoint (#710) @Itsusinn
- Conditional compile when glibc static-crt (#726) @Itsusinn
⚡ Performance
- Enable jemallocator for musl targets (#715) @Itsusinn
- (throughput) Large buffer for copy bidirectional (#714) @VendettaReborn
🧪 Testing
- Hysteria2 test(tcp only) (#723) @VendettaReborn
🛠️ Builds
- (deps) Bump the rust-dependencies group with 6 updates (#728) @dependabot[bot]
- (toolchain) Update to rust 2024 (#731) @ibigbug
- (deps) Bump the rust-dependencies group with 11 updates (#735) @dependabot[bot]
⚙️ Miscellaneous Tasks
- Add standard and plus feature sets (#708) @ibigbug
- (coverage) Add code coverage (#721) @ibigbug
- Extract coverage ci & add emails check (#737) @Itsusinn

🚀 Features
- Support ssh protocol (#694) @VendettaReborn
🐛 Bug Fixes
- Fix typos (#691) @VendettaReborn
- (config) When the specified configuration file does not exist, create and… (#695) @GenshinMinecraft
🚜 Refactor
- (dispatcher) Use RwLock<RunMode> instead of Mutex<RunMode> (#680) @cppcoffee
🎨 Styling
- Make poll_read_exact a general trait (#689) @VendettaReborn
🛠️ Builds
- (deps) Bump the rust-dependencies group with 12 updates (#669) @dependabot[bot]
- (deps) Bump clechasseur/rs-cargo from 2 to 3 in the actions-dependencies group (#670) @dependabot[bot]
- (apple) FFI and macOS+iOS build script (#672) @EbrahimTahernejad
- (deps) Bump the rust-dependencies group across 1 directory with 16 updates (#697) @dependabot[bot]
- (deps) Bump russh (#707) @dependabot[bot]
Clash_ffi
- Remove unnecessary unsafe block (#687) @cppcoffee
Enhance
- (load balance) Add StickySession load balance strategy (#673) @VendettaReborn
Fakeip
- Fixed unnecessary braces in use statement (#681) @cppcoffee
Ssh
- Fix ssh test case & optimize ssh auth code style (#702) @VendettaReborn
Traffic
- Statistics use the u64 type (#678) @cppcoffee

🐛 Bug Fixes
- Fix ss 2022 udp (#668) @ibigbug
🛠️ Builds
- (deps) Bump the rust-dependencies group with 10 updates (#660) @dependabot[bot]
- (deps) Bump the rust-dependencies group with 7 updates (#661) @dependabot[bot]
- (deps) Bump the rust-dependencies group with 11 updates (#662) @dependabot[bot]
- (deps) Bump serde from 1.0.216 to 1.0.217 in the rust-dependencies group (#663) @dependabot[bot]
- (deps) Bump the rust-dependencies group with 4 updates (#666) @dependabot[bot]