Starstruk Logo MarkStarstruk

v25.8.3

XTLS/Xray-corev25.8.3Aug 3, 2025by RPRX

AI Summary

Tunnel inbound improvements, TLS ECH client features, and root config version enforcement.

Key Highlights

  • Tunnel inbound added `portMap` config for local listening port to remote address mapping.
  • TLS ECH client received Chrome fingerprint, padding, 'h2c', and `echSockopt` support.
  • Root config added `version` parameter to enforce minimum and maximum Xray versions.

Breaking Changes

  • Inbound type renamed from '任意门' to 'tunnel'

New Features

  • Tunnel portMap configuration
  • TLS ECH client features (Chrome fingerprint, padding, h2c)
  • Root config version enforcement

Full Release Notes

## Tunnel inbound: Add `portMap` config (local listening port -> remote specified address/port) https://github.com/XTLS/Xray-core/commit/146b14ab556dc6c4cd1144e12320a4618230b624 https://github.com/XTLS/Xray-core/pull/4968 & TLS ECH client improvements https://github.com/XTLS/Xray-core/pull/4973 https://github.com/XTLS/Xray-core/pull/4949

*ray 一直支持“隧道”即“通过代理协议来端口转发”功能，此前主要由于命名原因（任意门）导致该功能被忽略，**现在更名为了 `tunnel`、为原有的 `address`/`port` 参数设置了默认值、新增了优先级更高的 `portMap` 参数，简化配置后一个入站即可将本地多个端口通过代理协议转发到服务端对应的端口，或指定的地址/端口，详情见 https://github.com/XTLS/Xray-core/pull/4968**

~~这也提醒各位记得在服务端 block "geoip:private"，防止用户通过代理直接穿透到服务端的内网~~

补充：Xray-core v25.8.3 顺便给 freedom 加了别名 `direct`、blackhole 加了别名 `block` 以追求直观

**TLS ECH client：@Fangliding 新增了 `echForceQuery` 参数以支持三种需求 https://github.com/XTLS/Xray-core/pull/4973 ，@patterniha 复制了 Xray-core 内置 DoH 已有的特性：Chrome 指纹、header & body padding、"h2c"、`echSockopt` https://github.com/XTLS/Xray-core/pull/4949 ，文档见 [TLSObject](https://xtls.github.io/config/transport.html#tlsobject)**

Xray-core 根配置新增 `version` 参数，以限制该配置文件适用的最低、最高 Xray 版本：https://github.com/XTLS/Xray-core/pull/4970

```json
"version": {
    "min": "25.8.3",
    "max": ""
}
```

## NFT

本次久违地放出了一些 REALITY NFT 和几个 Project X NFT

**请支持一个 REALITY NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2**

如果你有余力，请支持一个 Project X NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

该版本使用 Go 1.24.5 编译，已 tag v1.250803.0，感谢所有贡献者，详见下方 change log

## What's Changed
* Update readme by @yuhan6665 in https://github.com/XTLS/Xray-core/commit/c569f478afa79ca92ea10d0b4d0f20b86c175287
* Dokodemo-door: Add simple `tunnel` config (alias and default values) by @RPRX in https://github.com/XTLS/Xray-core/pull/4968
* TLS ECH client: Add `echForceQuery` config by @Fangliding in https://github.com/XTLS/Xray-core/pull/4947
* Tunnel inbound: Add `portMap` config (local listening port -> remote specified address/port) by @RPRX in https://github.com/XTLS/Xray-core/commit/146b14ab556dc6c4cd1144e12320a4618230b624
* TLS ECH client: Use chrome-fingerprint and add padding; Add "h2c" and `echSockopt`; Fix some issues by @patterniha in https://github.com/XTLS/Xray-core/pull/4949
* Root config: Add `version` config (`min` and `max`) by @patterniha in https://github.com/XTLS/Xray-core/pull/4970
* TLS ECH client: `echForceQuery` "full" / "half" / "none" (default) by @Fangliding in https://github.com/XTLS/Xray-core/pull/4973
* app/proxyman/inbound/inbound.go: Fix ListHandlers() by @Fangliding in https://github.com/XTLS/Xray-core/pull/4976
* UDS: Check address before listen by @Fangliding in https://github.com/XTLS/Xray-core/pull/4945

**Full Changelog**: https://github.com/XTLS/Xray-core/compare/v25.7.26...v25.8.3