v1.15.4

Bug Fixed

• #1239 Fixed misaligned read in shadowsocks' socks5 protocol implementation. It may cause panics compiled by rustc newer than 1.68.

v1.15.3

Features

• local-tun: Support tun_interface_destination for configuring Tun device's destination address
• Support outbound_fwmark, outbound_user_cookie, outbound_bind_interface and outbound_bind_addr in configuration file

Bug Fixed

• local-tun: #1138 Fixed TCP state management (Suggest ALL users to update)
• local-redir: #988 UDP compatible with Linux < 2.6.37 (without IPV6_TRANSPARENT)
• manager: #1101 Set missing ipv6_first for servers

Miscellaneous

• Snap: #1088 Disable Snap daemon by default

What's Changed

• Bump clap from 4.0.29 to 4.0.32 by @dependabot in #1068
• Bump num_cpus from 1.14.0 to 1.15.0 by @dependabot in #1069
• Bump once_cell from 1.16.0 to 1.17.0 by @dependabot in #1072
• Bump arc-swap from 1.5.1 to 1.6.0 by @dependabot in #1074
• Bump sysexits from 0.3.4 to 0.4.0 by @dependabot in #1073
• bugfix: salt recheck will cause duplicated iv/salt error by @chuxi in #1082
• Bump ipnet from 2.7.0 to 2.7.1 by @dependabot in #1080
• Bump mimalloc from 0.1.32 to 0.1.34 by @dependabot in #1079
• Bump base64 from 0.13.1 to 0.21.0 by @dependabot in #1081
• #1088 disable snap daemons by default by @fertkir in #1090
• Bump clap from 4.0.32 to 4.1.1 by @dependabot in #1091
• Bump nix from 0.26.1 to 0.26.2 by @dependabot in #1098
• Bump async-trait from 0.1.61 to 0.1.63 by @dependabot in #1097
• Bump windows-sys from 0.42.0 to 0.45.0 by @dependabot in #1096
• Enable tun destination configuration by @BranLiang in #1099
• Bump notify from 5.0.0 to 5.1.0 by @dependabot in #1103
• ⛔ config: deny unknown fields by @database64128 in #1106
• Revert "⛔ config: deny unknown fields" by @zonyitoo in #1108
• Bump spin from 0.9.4 to 0.9.5 by @dependabot in #1116
• Bump tokio-native-tls from 0.3.0 to 0.3.1 by @dependabot in #1114
• Bump serde_json from 1.0.92 to 1.0.93 by @dependabot in #1115
• Bump smoltcp from 0.8.2 to 0.9.1 by @dependabot in #1117
• Fix UPX compression issue. by @riKirsti in #1123
• macOS fix netmask API by @BranLiang in #1118
• Update docker base image by @vndroid in #1135

New Contributors

• @fertkir made their first contribution in #1090
• @BranLiang made their first contribution in #1099

Full Changelog: v1.15.2...v1.15.3

v1.15.2

Bug Fixes

• #1060 ACL supports checking IPv4-mapped-IPv6 addresses with IPv4 rules

Miscellaneous

• Code style and potential bug fixes with clippy check

What's Changed

• Bump async-trait from 0.1.59 to 0.1.60 by @dependabot in #1059
• Bump thiserror from 1.0.37 to 1.0.38 by @dependabot in #1058
• Bump serde_json from 1.0.89 to 1.0.91 by @dependabot in #1057

Full Changelog: v1.15.1...v1.15.2

v1.15.1

Identical to v1.15.0, but prebuilt binaries are built with stable Rust (current latest version: 1.66).

v1.15.0 prebuilt binaries are built with nightly Rust (1.68), which may crash in some platforms.

v1.15.0

NOTE: In the next release (v1.16.0), prebuilt binaries will only contain ssservice.

Features

• #811 AEAD-2022 protocol (SIP022)
  • WARN: This is still a draft protocol, use it at your own risk.
• SIP002 Extended Format: Allowing unencoded user-info in URL, shadowsocks/shadowsocks-org#27 (comment)
• #810 Manager standalone mode support bypassing ACL files
• #818 Allow sslocal run without any servers, which will bypass all connections and packets
• #838 "password" is optional for none / plain method
• redir-local: Enable dual-stack support on Linux (TProxy) and FreeBSD
• Disable md5-asm and sha1-asm: shadowsocks/shadowsocks-crypto#16
• "acl" and "outbound_fwmark" are available in configuration file

Miscellaneous

• shadowsocks/shadowsocks-org#204 Remove security-iv-printable-prefix experimental feature
• Upgrade clap to v4.0.
• UDP association channel size shrinked to 1024, which could save a lot of memory for each associations

Enhancements

• #855 Properly handle IPv4-mapped-IPv6 addresses in UDP assocations
  • ssserver always convert IPv4-mapped-IPv6 addresses to IPv4 in UDP respond target addresses
  • sslocal
    • tun, socks5 always convert IPv4-mapped-IPv6 addresses to IPv4
    • redir always use IPv6 sockets for sending back packets

What's Changed

• AEAD-2022 ciphers (new protocol) by @zonyitoo in #811
• Bump nix from 0.23.1 to 0.24.1 by @dependabot in #817
• Update build-release.yml to add popular armv7 build targets by @xiazuojie in #821
• Bump mimalloc from 0.1.28 to 0.1.29 by @dependabot in #825
• Bump thiserror from 1.0.30 to 1.0.31 by @dependabot in #826
• Bump notify from 5.0.0-pre.14 to 5.0.0-pre.15 by @dependabot in #827
• Bump serde_json from 1.0.79 to 1.0.80 by @dependabot in #828
• Bump clap from 3.1.12 to 3.1.14 by @dependabot in #829
• fix(docs): JSON config usage update by @NeverBehave in #831
• Bump clap from 3.1.14 to 3.1.15 by @dependabot in #833
• Bump serde_json from 1.0.79 to 1.0.81 by @dependabot in #832
• Bump smoltcp from 0.8.0 to 0.8.1 by @dependabot in #840
• update: remove rnd from security-iv-printable-prefix feature by @chuxi in #844
• Bump hyper from 0.14.18 to 0.14.19 by @dependabot in #851
• Bump jemallocator from 0.3.2 to 0.5.0 by @dependabot in #852
• Bump once_cell from 1.11.0 to 1.12.0 by @dependabot in #853
• Add instructions for Homebrew by @CourierKyn in #857
• Bump async-trait from 0.1.53 to 0.1.56 by @dependabot in #859
• Bump snmalloc-rs from 0.2.28 to 0.3.0 by @dependabot in #858
• Change the return type of the main function by @sorairolake in #865
• Bump snmalloc-rs from 0.3.0 to 0.3.1 by @dependabot in #867
• sslocal, ssservice, ssmanager return non-zero exit codes when failing to launch by @spyophobia in #874
• UDP relay 传输性能随着发送速率增加极速下降 by @wangjian1009 in #877
• Minor update by @vndroid in #878
• Revert "UDP relay 传输性能随着发送速率增加极速下降" by @zonyitoo in #879
• Bump serde_json from 1.0.81 to 1.0.82 by @dependabot in #880
• Bump clap from 3.2.7 to 3.2.8 by @dependabot in #881
• Bump sendfd from 0.4.1 to 0.4.3 by @dependabot in #882
• Bump pin-project from 1.0.10 to 1.0.11 by @dependabot in #883
• Bump once_cell from 1.12.0 to 1.12.1 by @dependabot in #884
• Bump once_cell from 1.12.1 to 1.13.0 by @dependabot in #885
• Update broken Wiki/documentation URLs by @ValdikSS in #889
• Fix typo in file 'dns_resolver.rs'. by @oing9179 in #894
• Bump nix from 0.24.1 to 0.24.2 by @dependabot in #902
• Bump etherparse from 0.10.1 to 0.11.0 by @dependabot in #901
• Bump rpassword from 6.0.1 to 7.0.0 by @dependabot in #900
• Bump etherparse from 0.11.0 to 0.12.0 by @dependabot in #906
• Bump bytes from 1.2.0 to 1.2.1 by @dependabot in #910
• Bump arc-swap from 1.5.0 to 1.5.1 by @dependabot in #911
• Bump async-trait from 0.1.56 to 0.1.57 by @dependabot in #912
• Bump clap from 3.2.14 to 3.2.16 by @dependabot in #913
• Bump nix from 0.24.2 to 0.25.0 by @dependabot in #921
• Bump serde_json from 1.0.83 to 1.0.85 by @dependabot in #925
• Helm: add service annotations by @LvLs9 in #932
• Bump thiserror from 1.0.33 to 1.0.34 by @dependabot in #935
• Bump trust-dns-proto from 0.21.2 to 0.22.0 by @dependabot in #936
• Bump trust-dns-resolver from 0.21.2 to 0.22.0 by @dependabot in #937
• 🚮 Remove security-iv-printable-prefix feature by @database64128 in #940
• Bump idna from 0.2.3 to 0.3.0 by @dependabot in #941
• Bump env_logger from 0.9.0 to 0.9.1 by @dependabot in #945
• Bump clap from 3.2.20 to 3.2.22 by @dependabot in #944
• Bump thiserror from 1.0.34 to 1.0.35 by @dependabot in #943
• Bump sysexits from 0.3.1 to 0.3.2 by @dependabot in #942
• Bump webpki-roots from 0.22.4 to 0.22.5 by @dependabot in #952
• Bump once_cell from 1.14.0 to 1.15.0 by @dependabot in #951
• Bump thiserror from 1.0.35 to 1.0.36 by @dependabot in #950
• fix a typo in 'configs/genipset.py' by @lwintermelon in #956
• Bump thiserror from 1.0.36 to 1.0.37 by @dependabot in #960
• Bump windows-sys from 0.36.1 to 0.42.0 by @dependabot in #959
• Bump clap from 4.0.10 to 4.0.11 by @dependabot in #965
• Bump serde_json from 1.0.85 to 1.0.86 by @dependabot in #966
• Bump mimalloc from 0.1.29 to 0.1.30 by @dependabot in #973
• Bump log4rs from 1.1.1 to 1.2.0 by @dependabot in #974
• Bump clap from 4.0.11 to 4.0.15 by @dependabot in #975
• fix(ssurl): use percent_decode_str for userinfo encoded data by @RAX7 in #985
• Implemented poll_* family functions on UDP ProxySocket by @ibigbug in #987
• Update shadowsocks-rust.rb by @robberphex in #992
• Bump nix from 0.25.0 to 0.26.1 by @dependabot in #1035
• Bump env_logger from 0.9.3 to 0.10.0 by @dependabot in #1018
• Bump webpki-roots from 0.22.5 to 0.22.6 by @dependabot in #1049
• Bump ipnet from 2.6.0 to 2.7.0 by @dependabot in #1048

New Contributors

• @xiazuojie made their first contribution in #821
• @NeverBehave made their first contribution in #831
• @chuxi made their first contribution in https:/...

v1.15.0-alpha.9

Features

• redir-local: Enable dual-stack support on Linux (TProxy) and FreeBSD

Miscellaneous

• shadowsocks/shadowsocks-org#204 Remove security-iv-printable-prefix experimental feature
• Upgrade clap to v4.0.

What's Changed

• Bump etherparse from 0.11.0 to 0.12.0 by @dependabot in #906
• Bump bytes from 1.2.0 to 1.2.1 by @dependabot in #910
• Bump arc-swap from 1.5.0 to 1.5.1 by @dependabot in #911
• Bump async-trait from 0.1.56 to 0.1.57 by @dependabot in #912
• Bump clap from 3.2.14 to 3.2.16 by @dependabot in #913
• Bump nix from 0.24.2 to 0.25.0 by @dependabot in #921
• Bump serde_json from 1.0.83 to 1.0.85 by @dependabot in #925
• Helm: add service annotations by @LvLs9 in #932
• Bump thiserror from 1.0.33 to 1.0.34 by @dependabot in #935
• Bump trust-dns-proto from 0.21.2 to 0.22.0 by @dependabot in #936
• Bump trust-dns-resolver from 0.21.2 to 0.22.0 by @dependabot in #937
• 🚮 Remove security-iv-printable-prefix feature by @database64128 in #940
• Bump idna from 0.2.3 to 0.3.0 by @dependabot in #941
• Bump env_logger from 0.9.0 to 0.9.1 by @dependabot in #945
• Bump clap from 3.2.20 to 3.2.22 by @dependabot in #944
• Bump thiserror from 1.0.34 to 1.0.35 by @dependabot in #943
• Bump sysexits from 0.3.1 to 0.3.2 by @dependabot in #942
• Bump webpki-roots from 0.22.4 to 0.22.5 by @dependabot in #952
• Bump once_cell from 1.14.0 to 1.15.0 by @dependabot in #951
• Bump thiserror from 1.0.35 to 1.0.36 by @dependabot in #950
• fix a typo in 'configs/genipset.py' by @lwintermelon in #956
• Bump thiserror from 1.0.36 to 1.0.37 by @dependabot in #960
• Bump windows-sys from 0.36.1 to 0.42.0 by @dependabot in #959

New Contributors

• @LvLs9 made their first contribution in #932
• @lwintermelon made their first contribution in #956

Full Changelog: v1.15.0-alpha.8...v1.15.0-alpha.9

v1.15.0-alpha.8

Identical to v1.15.0-alpha.7.

v1.15.0-alpha.7

Features

• Disable md5-asm and sha1-asm: shadowsocks/shadowsocks-crypto#16

v1.15.0-alpha.6

Features

• #860 sslocal statistic report supports TCP destination
• EXPERIMENTAL: AEAD-2022 Extensible Identity Headers
  • https://github.com/Shadowsocks-NET/shadowsocks-specs/blob/main/2022-2-shadowsocks-2022-extensible-identity-headers.md
• #876 Support switching users with -a command line options

Bug Fixes

• #856 sslocal with tun device support fixes bugs on Android

v1.15.0-alpha.5

Features

• "acl" and "outbound_fwmark" are available in configuration file

Enhancements

• #855 Properly handle IPv4-mapped-IPv6 addresses in UDP assocations
  • ssserver always convert IPv4-mapped-IPv6 addresses to IPv4 in UDP respond target addresses
  • sslocal
    • tun, socks5 always convert IPv4-mapped-IPv6 addresses to IPv4
    • redir always use IPv6 sockets for sending back packets
• #844 security-iv-printable-prefix removes rand for improving preformance

What's Changed

• update: remove rnd from security-iv-printable-prefix feature by @chuxi in #844
• Bump hyper from 0.14.18 to 0.14.19 by @dependabot in #851
• Bump jemallocator from 0.3.2 to 0.5.0 by @dependabot in #852
• Bump once_cell from 1.11.0 to 1.12.0 by @dependabot in #853
• Add instructions for Homebrew by @CourierKyn in #857
• Bump async-trait from 0.1.53 to 0.1.56 by @dependabot in #859
• Bump snmalloc-rs from 0.2.28 to 0.3.0 by @dependabot in #858

New Contributors

• @chuxi made their first contribution in #844
• @CourierKyn made their first contribution in #857

Full Changelog: v1.15.0-alpha.4...v1.15.0-alpha.5