Starstruk Logo MarkStarstruk

v25.5.16

XTLS/Xray-corev25.5.16May 16, 2025by RPRX

AI Summary

REALITY X25519MLKEM768 support (Anti-Quantum) and significant DNS module enhancements.

Key Highlights

  • REALITY supports X25519MLKEM768 for TLS communication to prevent future quantum decryption.
  • DNS module received `allowUnexpectedIPs`, `tag`, `timeoutMs`, and EDNS0 retry support.
  • uTLS library updated with new fingerprints including X25519MLKEM768.

New Features

  • REALITY X25519MLKEM768 support
  • DNS enhancements (allowUnexpectedIPs, tag, timeoutMs, EDNS0)
  • uTLS fingerprints update

Full Release Notes

## REALITY practice: Support X25519MLKEM768 for TLS' communication

REALITY 抗量子更新第一弹来袭！升级服务端、客户端至该版本，**REALITY target 支持 X25519MLKEM768 时将自动启用**

**X25519MLKEM768 可有效预防被“现在记录、以后拿量子计算机解密 TLS 流量”**，此外 https://github.com/XTLS/Xray-core/pull/3813#issuecomment-2885620329

最近有越来越多的网站开始支持 X25519MLKEM768 了，**所以服务端一定要及时升级，避免新版客户端连不上**

感谢 @yuhan6665 对 [REALITY](https://github.com/XTLS/REALITY) 仓库的维护，以及 @mingyech @BRUHItsABunny 对 [uTLS](https://github.com/refraction-networking/utls) 仓库的维护

> 有人觉得这次是 breaking，其实不尽然，因为我发得早，现在已经支持 X25519MLKEM768 的就技术前沿像 CF、Google 这样的，它们都没人偷，等一两个月后其它网站陆续开始支持了，大家的服务端早就升级、兼容了，所以我必须让 v25.5.16 成为新的稳定版

> **Shadowrocket TF 版已支持 XHTTP**，大家可以测测，如果有问题请反馈过去

此外从上个版本开始，auto mode 的 XHTTP TLS 默认改为 packet-up，XHTTP REALITY 默认仍为 stream-one

**请支持一个 REALITY NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2**

如果你有余力，请支持一个 Project X NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

该版本升级了一些依赖，并使用 Go 1.24.3 编译，已 tag v1.250516.0，感谢所有贡献者，详见下方 change log

## What's Changed
* README.md: Add Remnawave to Web Panels by @iambabyninja in https://github.com/XTLS/Xray-core/pull/4498
* API: Fix data race in online ipList by @Fangliding in https://github.com/XTLS/Xray-core/pull/4513
* DNS: Ensure order for DNS server match by @Fangliding in https://github.com/XTLS/Xray-core/pull/4510
* DNS: Add `allowUnexpectedIPs` for DnsServerObject by @patterniha in https://github.com/XTLS/Xray-core/pull/4497
* DNS: Add `tag` for DnsServerObject by @Fangliding in https://github.com/XTLS/Xray-core/pull/4515
* DNS: Retry with EDNS0 when response is truncated by @Fangliding in https://github.com/XTLS/Xray-core/pull/4516
* DNS: Add `timeoutMs` for DnsServerObject by @patterniha in https://github.com/XTLS/Xray-core/pull/4523
* Sockopt: Fix Windows UDP `interface` bind; Allow Linux `customSockopt` work for UDP by @Fangliding in https://github.com/XTLS/Xray-core/pull/4504
* DNS DoH: Use EDNS0 with 100-300 padding by default (body padding) by @RPRX in https://github.com/XTLS/Xray-core/commit/607c2a6d31ea1db70e8079f27ea4c7a771158652
* Env: Add `XRAY_LOCATION_CERT` variable by @patterniha @RPRX in https://github.com/XTLS/Xray-core/pull/4536
* DNS: Support returning upstream TTL to clients by @Meo597 in https://github.com/XTLS/Xray-core/pull/4526
* DNS: Add `expectedIPs` as an alias of `expectIPs` by @patterniha in https://github.com/XTLS/Xray-core/pull/4551
* HTTP inbound: Directly forward plain HTTP 1xx response header by @Fangliding in https://github.com/XTLS/Xray-core/pull/4547
* Chore: Optimize .gitignore by @Pk-web6936 in https://github.com/XTLS/Xray-core/pull/4564
* DNS: Use cache for NXDOMAIN (rcode 3 error) by @patterniha in https://github.com/XTLS/Xray-core/pull/4560
* Sockopt: Fix Windows Multicast `interface` bind by @xqzr in https://github.com/XTLS/Xray-core/pull/4568
* WireGuard: Improve config error handling; Prevent panic in case of errors during server initialization by @IlyaGulya in https://github.com/XTLS/Xray-core/pull/4566
* Dialer: Do not use ListenSystemPacket() when dialing UDP by @RPRX in https://github.com/XTLS/Xray-core/commit/8284a0ef8f1ee3774982cb6e53f53848401fa3a5
* Sockopt: Fix Darwin (macOS, iOS...) UDP `interface` bind by @92613hjh in https://github.com/XTLS/Xray-core/pull/4530
* Sockopt: Allow listen `v6only` work for Windows & Darwin by @xqzr @RPRX in https://github.com/XTLS/Xray-core/pull/4571
* Config: Implement missing MarshalJSON for structs having custom UnmarshalJSON by @ragavpr in https://github.com/XTLS/Xray-core/pull/4585
* Sockopt: Use Windows `syscall` by @xqzr in https://github.com/XTLS/Xray-core/pull/4581
* Fix issues related to android client by @Cl-He-O in https://github.com/XTLS/Xray-core/pull/4616
* Sockopt: Allow `customSockopt` work for Windows & Darwin by @Fangliding in https://github.com/XTLS/Xray-core/pull/4576
* README.md: Add Loon to Others by @RPRX in https://github.com/XTLS/Xray-core/commit/82123259807d3f33d016e7aebe52bc9b1e8e0c17
* README.md: Rename Clash.Meta to mihomo in Others by @RPRX in https://github.com/XTLS/Xray-core/commit/2916b1b977006b7d41daa143dc79ffd2e78705cb
* XHTTP client: Set packet-up as the default `mode` (auto) when using TLS by @RPRX in https://github.com/XTLS/Xray-core/commit/0995fa41fe692e332412670665bd934e4c734caa
* Sockopt: Fix Windows IP_MULTICAST_IF & IPV6_MULTICAST_IF by @xqzr in https://github.com/XTLS/Xray-core/pull/4627
* DNS log: Optimize IP address display by @ddatsh in https://github.com/XTLS/Xray-core/pull/4630
* uTLS: Add new fingerprints by @yuhan6665 in https://github.com/XTLS/Xray-core/commit/a608c5a1dbfa59b8328ac5d0363f360b2fd3bebe
* QUIC sniffer: Full support for handling multiple initial packets by @j2rong4cn @RPRX @Vigilans @xiaokangwang @dyhkwong in https://github.com/XTLS/Xray-core/pull/4642
* buffer.go: Ensure extended part by Extend() & Resize() are all-zero by @RPRX in https://github.com/XTLS/Xray-core/commit/2eed70e17dda9db003ecf6aa7ca5ce88f76f7a38
* QUIC sniffer: Optimize the code by @j2rong4cn in https://github.com/XTLS/Xray-core/pull/4655
* Sockopt: Fix some domainStrategy & dialerProxy bugs by @patterniha in https://github.com/XTLS/Xray-core/pull/4661
* DNS: Fix some bugs; Refactors; Optimizations by @patterniha in https://github.com/XTLS/Xray-core/pull/4659
* Workflows: Build Android(7+) using NDK; Add Android(7+) amd64 build by @j2rong4cn in https://github.com/XTLS/Xray-core/pull/4664
* Chore: Update gVisor to the latest version; Fmt .go files by @Pk-web6936 in https://github.com/XTLS/Xray-core/pull/4663
* Improve random IP compatibility: support IPv4, add srcip option, and sync client source IP via sendthrough by @ImAubrey in https://github.com/XTLS/Xray-core/pull/4671
* DNS: Extend `hosts` Abilities by @patterniha in https://github.com/XTLS/Xray-core/pull/4673
* Workflows: Authenticating the GitHub API call with GitHub token by @yin1999 in https://github.com/XTLS/Xray-core/pull/4703
* DNS-Hosts: appending matched-results again by @patterniha @Fangliding in https://github.com/XTLS/Xray-core/pull/4702
* Workflows: Ensure Geodat exists by @Meo597 in https://github.com/XTLS/Xray-core/pull/4680
* Removing code that was not being executed and should not be executed. by @patterniha in https://github.com/XTLS/Xray-core/pull/4721
* REALITY practice: Support X25519MLKEM768 for TLS' communication by @RPRX in https://github.com/XTLS/Xray-core/commit/7ddc4a2525bc81317e6a4d5075212c155e2a15ea
* REALITY protocol: Remove ChaCha20-Poly1305 support for REALITY's session id auth by @RPRX in https://github.com/XTLS/Xray-core/commit/09d84c42e9c729c23549ea71b374e154d5365922
* Sniffer: Fix potential infinite loop by @patterniha @Fangliding in https://github.com/XTLS/Xray-core/pull/4726
* QUIC sniffer: Fix potential slice panic by @Fangliding in https://github.com/XTLS/Xray-core/pull/4732

## New Contributors
* @Meo597 made their first contribution in https://github.com/XTLS/Xray-core/pull/4526
* @Pk-web6936 made their first contribution in https://github.com/XTLS/Xray-core/pull/4564
* @IlyaGulya made their first contribution in https://github.com/XTLS/Xray-core/pull/4566
* @92613hjh made their first contribution in https://github.com/XTLS/Xray-core/pull/4530
* @ragavpr made their first contribution in https://github.com/XTLS/Xray-core/pull/4585
* @Cl-He-O made their first contribution in https://github.com/XTLS/Xray-core/pull/4616
* @ddatsh made their first contribution in https://github.com/XTLS/Xray-core/pull/4630
* @j2rong4cn made their first contribution in https://github.com/XTLS/Xray-core/pull/4642

**Full Changelog**: https://github.com/XTLS/Xray-core/compare/v25.3.6...v25.5.16