2.6.6

tobychui/zoraxy2.6.6Aug 30, 2023by tobychui

AI Summary

Version 2.6.6 delivers dramatic memory optimizations for GeoIP lookup (reducing RAM usage from 1.2GB to as low as 61MB), introduces custom ACME server support with TLS bypass capabilities, and fixes security vulnerabilities and reverse proxy compatibility issues. A subsequent patch on September 7, 2023 fixed a UI bug related to certificate generation.

Key Highlights

  • Significant memory optimization for GeoIP lookup with configurable modes: low-speed (61MB, +6ms latency, default) or high-speed (650MB, enabled via -fastgeoip=true)
  • Added custom ACME feature with TLS certificate verification bypass for custom ACME servers
  • Fixed potential security vulnerability in satori/go.uuid library
  • Resolved redirection bugs when operating behind reverse proxies or with Apache location headers
  • Added basic auth editor custom exception rules and unset subdomain custom redirection capabilities

New Features

  • Basic auth editor custom exception rules
  • Custom ACME feature in back-end with TLS verification bypass option
  • Unset subdomain custom redirection feature
  • Low-speed GeoIP lookup mode for minimal memory footprint (61MB)
  • Optimized high-speed GeoIP lookup mode (~650MB RAM usage via -fastgeoip=true)

Full Release Notes

## Updates 2.6.6
This version fixes some bugs in 2.6.5 and added a few minor new features.

+ Added basic auth editor custom exception rules
+ Fixed redirection bug under another reverse proxy and Apache location headers
+ Optimized memory usage (from 1.2GB to 61MB for low speed geoip lookup mode or 650MB for high speed mode, see technical notes below)
+ Added unset subdomain custom redirection feature
+ Fixed potential security issue in satori/go.uuid
 
By @daluntw
+ Added custom acme feature in back-end 
+ Added bypass TLS check for custom acme server

### Notes regarding low / high speed GeoIP lookup mode
Zoraxy will try to resolve and store the visitors country of origin in its statistic collector. As requested by users regarding the memory usage issue, we added a low speed mode for GeoIP lookup logic to reduce memory usage by space time tradeoff. The low speed mode (default mode) of GeoIP lookup will slow down each request by around 6ms, which is not significant in homelab / self hosting environment. However, if you plan to use Zoraxy in production environment, you can enable to high speed mode by using ```-fastgeoip=true```. We also optimized the high speed mode data structure so it now use around 600 - 700MB of RAM instead of 1.2GB. If your server have that capacity to run in high speed mode, we generally recommend using high speed mode for better user experience.  

## Updates 7 Sept 2023
A quick patch has been applied to the binary and fixed a minor UI bug that causes the backend to generate stating certificates (See issue #61 ). If you are using old version of v2.6.6, it is recommend that you download the new binary and overwrite the old one.