File shadowsocks-rust.changes of Package shadowsocks-rust
-------------------------------------------------------------------
Sun May 4 12:59:48 UTC 2025 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.23.2
* local-tun: Fixes panic when resizing cached buffers
* local-tun: Enable congestion control algorithm for TCP connections
* local-tun: Disable TCP package receive checksum for improving performance
* local-tun: Buffer for receiving/sending packets from/to tun device are
cached globally
* Fix some issues
-------------------------------------------------------------------
Mon Apr 7 09:33:03 UTC 2025 - Marguerite Su <i@marguerite.su>
- Update version to 1.23.0
* local-fake-dns switched storage engine from sled to rocksdb,
users should delete the old database file and let sslocal
recreate it ageain
* refactor: change error handling to be strongly-typed
* fix: mips-* reenabled, moka automatically switches to a
fallback impl for AtomicU64
-------------------------------------------------------------------
Mon Jan 6 08:27:53 UTC 2025 - Hillwood Yang <hillwood@opensuse.org>
- Fix start failure by systemd
* Make sure /etc/shadowsocks can be read by shadowsocks user
* Create the PID file under /run/shadowsocks
-------------------------------------------------------------------
Fri Nov 22 13:00:48 UTC 2024 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.21.2
* supports generic I/O socket type
* Support OpenBSD Packet-Filter (pf)
* Fix bugs
-------------------------------------------------------------------
Wed Nov 13 06:18:54 UTC 2024 - Bernhard Wiedemann <bwiedemann@suse.com>
- Add reproducible.patch to override build date (boo#1047218)
-------------------------------------------------------------------
Thu Sep 12 13:19:28 UTC 2024 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.20.4
* Updated rustls to v0.23 with ring backend
* local-redir, server: Better approach to check current platform IP stack
capabilities like Go (IPv4, IPv6, IPv4-mapped-IPv6 supports)
* Explicitly enable dual-stack if listen addresses (server, local_address)
are IPv4-mapped-IPv6, by setting IPV6_V6ONLY=0
* PingBalancer check Firefox portal allowing 200 HTTP status
* Ping Balancer scores replaced standard deviation with median absolute
deviation, which should help focusing less on outlying observations in
latency samples
* local: Allow configuring SOCKS5 UDP_ASSOCIATE address
* ProxyServerStream::from_stream made public
* Fix bugs
-------------------------------------------------------------------
Sun Jun 16 09:07:43 UTC 2024 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.20.0
* Making HTTP requests with local-http's HttpClient implementation, mainly
for supporting outbound_* socket configurations.
* Support SIP008 Online Configuration. Pull servers from remote servers
automatically. (Experimental)
* Add basic, full, full-extra features makes building command line arguments
shorter
* Binaries support --plugin-mode command line argument
* local-tun is enabled by default for Windows targets in CI builds
* Fix bugs
- Drop fix-boo-1223239.patch, merged by upstream
-------------------------------------------------------------------
Mon Apr 22 14:26:29 UTC 2024 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.18.3
* Support outbound_fwmark in server side to split outbound tunnel
* Default build for *-windows-* targets includes sswinservice
* local-fakedns: Add a basic implementation of Fake-DNS, which will
allocate IPs from pool for DNS queries. This experimental feature
could be useful when using local-tun, local-redir or other features
that could only receive IP destinations, the domain name that is
resolved by the Fake-DNS will be translated from IP back to domain
name when connecting to the remote
* Add launchd_udp_socket_name, launchd_tcp_socket_name to basic config format
* local-tun: Support tun_interface_destination configuration key
* Default logging framework changed to tracing-subscriber
* local: socks local server will support SOCKS5, SOCKS4a, HTTP proxy
protocols when local-http, local-socks4 features are enabled
* local: Support setting udp_mtu in configuration file to actively reject
packet.size > MTU
* Fix bugs
- Add fix-boo-1223239.patch, fix CVE-2024-32650 boo#1223239
-------------------------------------------------------------------
Wed Dec 13 13:55:57 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
- Set permissions as 640 for /etc/shadowsocks (boo#1216372)
-------------------------------------------------------------------
Sun Dec 3 09:25:05 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.17.1
* Trust-DNS is rebranded to Hickory-DNS
* Support DNS-over-H3 (Try with configuration "dns": "google_h3"
and compile with feature "dns-over-h3")
* Allow configuring local-dns client cache size
* local-tun supports Windows with Wintun
* Upgrade hyper
* Fix bugs
-------------------------------------------------------------------
Tue Oct 24 14:38:46 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
- Fix boo#1216372 and boo#1216373, run systemd service as a dedicated user and group
-------------------------------------------------------------------
Mon Sep 25 14:02:49 UTC 2023 - Hillwood Yang <hillwood@opensuse.org>
- Update version to 1.16.2
* Fix bugs
- Update vendor, fix boo#1215658 CVE-2023-42811
-------------------------------------------------------------------
Wed Jun 21 17:34:03 UTC 2023 - Andreas Schwab <schwab@suse.de>
- Update constraints for riscv64
-------------------------------------------------------------------
Tue Jun 20 06:46:10 UTC 2023 - opensuse-packaging <opensuse-packaging@opensuse.org>
- Add Recommends for shadowsocks-v2ray-plugin
- Update systemd services
-------------------------------------------------------------------
Mon Jun 19 06:19:16 UTC 2023 - opensuse-packaging <opensuse-packaging@opensuse.org>
- Update version to 1.15.3
* local-tun: Support tun_interface_destination for configuring Tun
device's destination address
* Support outbound_fwmark, outbound_user_cookie, outbound_bind_interface
and outbound_bind_addr in configuration file
* AEAD-2022 protoco
* SIP002 Extended Format: Allowing unencoded user-info in URL
* Manager standalone mode support bypassing ACL files
* Allow sslocal run without any servers, which will bypass all connections
and packets
* "password" is optional for none / plain method
* redir-local: Enable dual-stack support on Linux (TProxy) and FreeBSD
* Disable md5-asm and sha1-asm: shadowsocks/shadowsocks-crypto
* "acl" and "outbound_fwmark" are available in configuration file
* Properly handle IPv4-mapped-IPv6 addresses in UDP assocations
* Automatically bump RLIMIT_NOFILE on Unix (except Android)
* SOCKS5 protocol supports RFC1929 Username/Password Authentication
* HKDF-SHA1 uses ring's assembly implementation
* Set environment variable SS_SYSTEM_DNS_RESOLVER_FORCE_BUILTIN to use system's
builtin DNS resolver
* Allow setting "system" in DNS configuration key "dns" to use system provided
DNS API
* Support setting SO_USER_COOKIE on FreeBSD
* Local tun interface refactored the VirtDevice::poll strategy
* balancer.check_best_interval could let ping balancer to ping only the choosen
best server in this interval
* Set a shorter interval in balancer.check_best_interval than
balancer.check_interval to check much frequently the best server
* efactored local-tun, using smoltcp as a user-space network stack
* Support K8S deployment
* shadowsocks-crypto switch underlying encryption library to RustCrypto
* New binary ssservice with unified features in (sslocal, ssserver and
ssmanager)
* Removed direct dependency to mio, sending file descriptors through UDS now
with sendfd
* ACL regular expression rules will try to convert to || (sub-domains) and |
(exact match) rules
* TCP connects with Happy Eyeballs (RFC6555, RFC8305) strategy
* Basic support of tun interface in sslocal (Experimental) Tested on macOS and
Linux
* Local server will choose remote servers based on their "mode"
* ssmanager support --plugin and --plugin-opts as default plugin
configurations
* ssmanager support starting ssserver in standalone (independent process) mode
* ACL support | and || hash-set and domain-tree mode
* Support --outbound-bind-interface on Windows
* TFO on Linux queue length set to 1024 to match backlogs
* Completely remove Replay Attack Protection with Ping-Pong bloom filter in
default build configuration
* Support Snapcraft
* Multi-architecture Docker image for release
* Replaced futures::future::abortable with tokio's builtin
tokio::task::JoinHandle::abort
* Define binaries' exit code with standard in sysexits.h
* HTTP local listener supports TCP_NODELAY, SO_KEEPALIVE and dual-stack
* Remove slient dropping when replay was detected
* Enable TCP Keep Alive for inbound and outbound sockets
* Add disabled key for local servers in configuration
* Support TFO (TCP Fast Open) on Linux, Windows, macOS (iOS), FreeBSD
* Support customizing servers' weight for balancer
* HTTP Proxy preserves headers' title case
* Support non-standard AEAD ciphers sm4-gcm and sm4-ccm
* Support non-standard AEAD ciphers with crypto2, could be enabled by feature
aead-cipher-extra
* Support protocol in basic configuration format
* supports starting multiple instances in the same process
* Check repeated salt after first successful decryption
* Support setting SO_MARK, SO_BINDTODEVICE on Linux
* Support setting SO_SNDBUF and SO_RCVBUF for TCP sockets
* Support SIP008 extend server fields server, server_port, remarks
* Support sending TCP and UDP queries simutaneously
* Support connection reusability
* Remove mostly TCP timeout setting for tunnels, connections will only be
killed if clients or servers close
* Auto-reload DNS resolver configuration from /etc/resolv.conf on *NIX
platforms
* Allow customizing number of worker-threads for multi-threaded scheduler
* Support field disabled in extended server configuration
* Support customizing inbound and outbound sockets' SO_SNDBUF and SO_RCVBUF by
command line options
* Fix bugs
-------------------------------------------------------------------
Sat Nov 13 12:01:57 UTC 2021 - opensuse-packaging <opensuse-packaging@opensuse.org>
- Initial package for version 1.8.23
