v25.12.8

XTLS/Xray-corev25.12.8Dec 8, 2025by RPRX

AI Summary

Focus on XTLS Vision optimizations, security hardening, and significant DNS/Routing performance improvements.

Key Highlights

  • XTLS Vision added `testpre` and `testseed` parameters to reduce latency through pre-connecting.
  • Security hardening added `trustedXForwardedFor` to prevent IP spoofing in XHTTP, WS, and HU inbounds.
  • VLESS Reverse Proxy defaults to forbidding reverse-proxy UUID using forward-proxy for security.
  • DNS module refactored with parallel queries, optimistic caching, and performance optimizations.

New Features

  • XTLS Vision pre-connect and seed parameters
  • Routing webhook support
  • DNS optimistic caching
  • DNS parallel queries

Full Release Notes

## XTLS Vision: Add `testpre` (outbound pre-connect) and `testseed` (outbound & inbound) https://github.com/XTLS/Xray-core/pull/5270

### 本次重点更新内容:

1. **XTLS Vision 加了试验性的“预连接”以消除延迟,开放用户自定义配置最关键的四个 padding 相关参数,详见 https://github.com/XTLS/Xray-core/pull/5270**
2. **服务端 sockopt 加了 `trustedXForwardedFor` 以防止 XHTTP、WS、HU 客户端伪造源 IP,详见 https://github.com/XTLS/Xray-core/pull/5331**
3. **VLESS inbound 开了 Reverse Proxy 的 UUID 将默认被拒绝使用正向代理,更加安全,详见 https://github.com/XTLS/Xray-core/pull/5101#issuecomment-3567464144**
4. **@Meo597 对 DNS 和路由模块进行了一些重构、优化、功能新增,详见下方 change log**

## Sponsors

[![Remnawave](https://github.com/user-attachments/assets/a22d34ae-01ee-441c-843a-85356748ed1e)](https://docs.rw)

[![Happ](https://github.com/user-attachments/assets/14055dab-e8bb-48bd-89e8-962709e4098e)](https://happ.su)

[**Sponsor Xray-core**](https://github.com/XTLS/Xray-core/issues/3668)

## Donation & NFTs

### [Collect a Project X NFT to support the development of Project X!](https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1)

[<img alt="Project X NFT" width="150px" src="https://raw2.seadn.io/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/7fa9ce900fb39b44226348db330e32/8b7fa9ce900fb39b44226348db330e32.svg" />](https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1)

- **TRX(Tron)/USDT/USDC: `TNrDh5VSfwd4RPrwsohr6poyNTfFefNYan`**
- **TON: `UQApeV-u2gm43aC1uP76xAC1m6vCylstaN1gpfBmre_5IyTH`**
- **BTC: `1JpqcziZZuqv3QQJhZGNGBVdCBrGgkL6cT`**
- **XMR: `4ABHQZ3yJZkBnLoqiKvb3f8eqUnX4iMPb6wdant5ZLGQELctcerceSGEfJnoCk6nnyRZm73wrwSgvZ2WmjYLng6R7sR67nq`**
- **SOL/USDT/USDC: `3x5NuXHzB5APG6vRinPZcsUv5ukWUY1tBGRSJiEJWtZa`**
- **ETH/USDT/USDC: `0xDc3Fe44F0f25D13CACb1C4896CD0D321df3146Ee`**
- **Project X NFT: https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1**
- **VLESS NFT: https://opensea.io/collection/vless**
- **REALITY NFT: https://opensea.io/item/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2**
- **Related links: [VLESS Post-Quantum Encryption](https://github.com/XTLS/Xray-core/pull/5067), [XHTTP: Beyond REALITY](https://github.com/XTLS/Xray-core/discussions/4113), [Announcement of NFTs by Project X](https://github.com/XTLS/Xray-core/discussions/3633)**

该版本升级了一些依赖,并使用 Go 1.25.5 拉满 inline 编译,已 tag v1.251208.0,感谢所有贡献者,详见下方 change log

## What's Changed
* REALITY config: Return error when short id is too long by @Fangliding @RPRX in https://github.com/XTLS/Xray-core/pull/5276
* Fix wireguard not discarding broken connection on android by @Exclude0122 in https://github.com/XTLS/Xray-core/pull/5304
* README.md: Add Remnawave & Happ to Sponsors by @RPRX in https://github.com/XTLS/Xray-core/commit/4e8ee302a6705247ff73da21ade38dc1b83730b5
* README.md: Add TRX & TON & BTC & XMR & SOL to Donation & NFTs by @RPRX in https://github.com/XTLS/Xray-core/commit/8a4b0a9eb084fff56128cc22fe50d1915ce40487
* README.md: Add v2rayN to macOS & Linux Clients by @alen420 in https://github.com/XTLS/Xray-core/pull/5271
* Socks: Fix buffer full panic when encoding large UDP packets by @vemneyy @Fangliding in https://github.com/XTLS/Xray-core/pull/5252
* Docker: Use more aggressive inlining for higher efficiency by @Meo597 in https://github.com/XTLS/Xray-core/pull/5242
* Refactor WrapLink logic by @Fangliding in https://github.com/XTLS/Xray-core/pull/5288
* HTTP outbound: Read negotiated protocol from uTLS by @hax0r31337 in https://github.com/XTLS/Xray-core/pull/5251
* DNS: Fix wrong protocol parse by @vanserox @Fangliding in https://github.com/XTLS/Xray-core/pull/5232
* refactor(dns): enhance cache safety, optimize performance, and refactor query logic by @Meo597 in https://github.com/XTLS/Xray-core/pull/5248
* perf(GeoIPMatcher): faster heuristic matching with reduced memory usage by @Meo597 in https://github.com/XTLS/Xray-core/pull/5289
* perf(router): adjust the order of rules to optimize performance by @Meo597 in https://github.com/XTLS/Xray-core/pull/5267
* perf(dns): cache network capability check by @Meo597 in https://github.com/XTLS/Xray-core/pull/5244
* feat(dns): add optimistic caching by @Meo597 in https://github.com/XTLS/Xray-core/pull/5237
* feat(dns): add parallel query by @Meo597 in https://github.com/XTLS/Xray-core/pull/5239
* Router: Remove the deprecated UseIP option by @Meo597 in https://github.com/XTLS/Xray-core/pull/5323
* Sockopt config: Add `trustedXForwardedFor` (for XHTTP, WS, HU inbounds) by @RPRX in https://github.com/XTLS/Xray-core/pull/5331
* VLESS Reverse Proxy: Forbid reverse-proxy UUID using forward-proxy, enabled by default by @RPRX in https://github.com/XTLS/Xray-core/commit/a83253f3d7a4d423d2bfdf522205daacd8ee868e
* fix(dns): inheritance issue with disableCache by @Meo597 in https://github.com/XTLS/Xray-core/pull/5351
* XTLS Vision: Check TLS record isComplete by @yuhan6665 in https://github.com/XTLS/Xray-core/pull/5179
* XTLS Vision: Add `testpre` (outbound pre-connect) and `testseed` (outbound & inbound) by @RPRX @Fangliding in https://github.com/XTLS/Xray-core/pull/5270
* XTLS Vision: Fix IsCompleteRecord() by @Fangliding in https://github.com/XTLS/Xray-core/pull/5365
* XTLS Vision: Discard expired pre-connect conn automatically by @RPRX in https://github.com/XTLS/Xray-core/commit/c123f163c20d5f54cb92fc1421c844955cddbaaf
* XTLS Vision: Fix enabled uplink splice flag by mistake by @yuhan6665 in https://github.com/XTLS/Xray-core/pull/5391
* XTLS Vision: LogInfo() -> LogDebug() by @RPRX in https://github.com/XTLS/Xray-core/commit/bd7503d506b07252e9c6ae48ef084be7b95fb1c3
* Chore: Remove ctlcmd and leftover envvar by @KobeArthurScofield in https://github.com/XTLS/Xray-core/pull/5392

## New Contributors
* @Exclude0122 made their first contribution in https://github.com/XTLS/Xray-core/pull/5304
* @alen420 made their first contribution in https://github.com/XTLS/Xray-core/pull/5271
* @vemneyy made their first contribution in https://github.com/XTLS/Xray-core/pull/5252
* @vanserox made their first contribution in https://github.com/XTLS/Xray-core/pull/5232

**Full Changelog**: https://github.com/XTLS/Xray-core/compare/v25.10.15...v25.12.8