v1.69.0

Changelog

• External controller https support.
  To enable external controller https support you should add external-server-name: your_custom_domain_name into config.yaml.
  e.g:

  external-controller: 127.0.0.1:7878
  external-server-name: your.domain
  
  tun:
    enable: true
    stack: system
    device: tun://utun
    dns-hijack:
      - any:53
      - tcp://any:53
    auto-route: true
    auto-detect-interface: true
  
  hosts:
    'your.domain': '127.0.0.1'
  
  dns:
    enable: true
    use-hosts: true
    ...

  you can download the root CA from https://127.0.0.1:7878/ca.crt, then install and trust it. before you install the CA and trust it, you may get a warning page, just continue download it. if you don't want to download it, the root CA file is actually located at CLASH_HOME_DIR/mitm_ca.crt.

• RFC8484 DoH server API support.
  This API depend on external controller https support, add the DoH URL in your browser you will get the ECH support.
  Test site: https://tls-ech.dev
  e.g:

  external-controller: 127.0.0.1:7878
  external-server-name: localhost
  secret: xxxx
  
  tun:
    enable: true
    stack: system
    device: tun://utun
    dns-hijack:
      - any:53
      - tcp://any:53
    auto-route: true
    auto-detect-interface: true
  
  hosts:
    'localhost': '127.0.0.1'
  
  dns:
    enable: true
    use-hosts: true
    ipv6: false
    remote-dns-resolve: true
    enhanced-mode: fake-ip
    fake-ip-range: 198.18.0.1/16
    default-nameserver:
      - 223.6.6.6
    proxy-server-nameserver:
      - https://223.5.5.5/dns-query # ECH feature need DoH client support
    nameserver:
      - https://223.6.6.6/dns-query # ECH feature need DoH client support
    remote-nameserver:
      - https://1.1.1.1/dns-query # ECH feature need DoH client support
    fallback:
      - 'https://1.1.1.1/dns-query#DNS-Proxy' # ECH feature need DoH client support
    ...

  the DoH URL is https://127.0.0.1:7878/dns-query?token=xxxx or https://localhost:7878/dns-query?token=xxxx.

• Tun auto-route ipv6 support.

• Fake-IP ipv6 support.
  Add option fake-ip-range6 to the dns config section.

  ipv6: true
  dns:
    ...
    enable: true
    ipv6: true
    fake-ip-range: 198.18.0.1/16
    fake-ip-range6: 64:64::1/64
    ...

Full Changelog: v1.68.0...v1.69.0

Template

• General, usually used as a single local client.
• Auto redirect, usually used as a transparent proxy gateway(low tcp CPU usage).
• Redirect to tun, usually used as a transparent proxy gateway(bypass icmp).

Daemon

• For macOS.
• For Linux.
• For Windows.

v1.68.0

Changelog

• Migration go1.24.x.
• New TLS encrypted client hello (ECH) support.
• Update dependencies.

Full Changelog: v1.67.0...v1.68.0

v1.67.0

Changelog

• Update dependencies.

Full Changelog: v1.66.0...v1.67.0

v1.66.0

Changelog

• Use Go Protobuf Opaque API.
• Update dependencies.

Full Changelog: v1.65.0...v1.66.0

v1.65.0

Changelog

• Re-enable Go1.23 asynctimerchan behavior.
• Update dependencies.

Full Changelog: v1.64.0...v1.65.0

v1.64.0

Changelog

• Fix system stack nat table.
• Update dependencies.

Full Changelog: v1.63.0...v1.64.0

v1.63.0

Changelog

• Update dependencies.

Full Changelog: v1.62.0...v1.63.0

v1.62.0

Changelog

• Add options ports and hop-interval to Hysteria2.

proxies:
  - name: "hysteria"
    type: hysteria2
    ports: "443-8443,9443"
    # hop-interval: "5s" # optional
    ...

Full Changelog: v1.61.0...v1.62.0

v1.61.0

Changelog

• Update dependencies.

Full Changelog: v1.60.0...v1.61.0

v1.60.0

Changelog

• Add sniffing option for dns enhanced-mode.

dns:
  ...
  enable: true
  enhanced-mode: sniffing
  ...