sing-box 1.10.0-alpha.29 has been released.

* Update quic-go to v0.46.0
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-alpha.29

Due to problems with our Apple developer account, sing-box apps on Apple platforms are temporarily unavailable for download or update. We estimate that it may take more than a month to resolve this issue.

sing-box 1.9.4 has been released.

* Update quic-go to v0.46.0
* Update Hysteria2 BBR congestion control
* Filter HTTPS ipv4hint/ipv6hint with domain strategy
* Fix crash on Android when using process rules
* Fix non-IP queries accepted by address filter rules
* Fix UDP server for shadowsocks AEAD multi-user inbounds
* Fix default next protos for v2ray QUIC transport
* Fix default end value of port range configuration options
* Fix reset v2ray transports
* Fix panic caused by rule-set generation of duplicate keys for domain_suffix
* Fix UDP connnection leak when sniffing

😫 Help needed

Due to problems with our Apple developer account, sing-box apps on Apple platforms are temporarily unavailable for download or update. If your company or organization is willing to help us return to the App Store, please contact us.

https://github.com/SagerNet/sing-box/releases/tag/v1.9.4

sing-box 1.10.0-beta.1 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.1

sing-box 1.10.0-beta.2 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.2

sing-box 1.10.0-beta.3 has been released.

* Add SSH sniffer
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.3

sing-box 1.10.0-beta.4 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.4

sing-box 1.10.0-beta.5 has been released.

* Add PNA support for Clash API
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.5

sing-box 1.10.0-beta.7 has been released.

* Update quic-go to v0.47.0
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.7

sing-box 1.10.0-beta.8 has been released.

* Fixes and improvements

With the help of a netizen, we are in the process of getting sing-box apps back on the App Store, which should be completed within a month (TestFlight is already available).

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.8

sing-box 1.9.5 has been released.

* Update quic-go to v0.47.0
* Fix direct dialer not resolving domain
* Fix no error return when empty DNS cache retrieved
* Fix build with go1.23
* Fix stream sniffer
* Fix bad redirect in clash-api
* Fix wireguard events chan leak
* Fix cached conn eats up read deadlines
* Fix disconnected interface selected as default in windows
* Update Bundle Identifiers for Apple platform clients 1

1:

See Migration.

We are still working on getting all sing-box apps back on the App Store, which should be completed within a week (SFI on the App Store and others on TestFlight are already available).

https://github.com/SagerNet/sing-box/releases/tag/v1.9.5

sing-box 1.10.0-beta.9 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.9

sing-box 1.10.0-beta.10 has been released.

* Add process_path_regex rule item
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.10

sing-box 1.9.6 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.9.6

The macOS standalone versions of sing-box (1.9.5-1.9.6/1.10.0-beta*) now silently fail and require manual granting of the "Full Disk Access" permission to system extension to start, probably due to Apple's changed security policy. We will prompt users about this in the next version.

sing-box 1.9.7 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.9.7

sing-box 1.10.0-beta.12 has been released.

* Add process_path_regex rule item
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-beta.12

sing-box 1.10.0-rc.1 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0-rc.1

sing-box 1.10.0 has been released.

* Introducing auto-redirect 1
* Add AdGuard DNS Filter support 2
* TUN address fields are merged 3
* Add custom options for auto-route and auto-redirect 4
* Drop support for go1.18 and go1.19 5
* Add tailing comma support in JSON configuration
* Improve sniffers 6
* Add new inline rule-set type 7
* Add access control options for Clash API 8
* Add rule_set_ip_cidr_accept_empty DNS address filter rule item 9
* Add auto reload support for local rule-set
* Update fsnotify usages 10
* Add IP address support for rule-set match command
* Add rule-set decompile command
* Add process_path_regex rule item
* Update uTLS to v1.6.7 11
* Optimize memory usages of rule-sets 12

1:

The new auto-redirect feature allows TUN to automatically configure connection redirection to improve proxy performance.

When auto-redirect is enabled, new route address set options will allow you to automatically configure destination IP CIDR rules from a specified rule set to the firewall.

Specified or unspecified destinations will bypass the sing-box routes to get better performance (for example, keep hardware offloading of direct traffics on the router).

See TUN.

2:

The new feature allows you to use AdGuard DNS Filter lists in a sing-box without AdGuard Home.

See AdGuard DNS Filter.

3:

See Migration.

4:

See iproute2_table_index, iproute2_rule_index, auto_redirect_input_mark and auto_redirect_output_mark.

5:

Due to maintenance difficulties, sing-box 1.10.0 requires at least Go 1.20 to compile.

6:

BitTorrent, DTLS, RDP, SSH sniffers are added.

Now the QUIC sniffer can correctly extract the server name from Chromium requests and can identify common QUIC clients, including Chromium, Safari, Firefox, quic-go (including uquic disguised as Chrome).

7:

The new rule-set type inline (which also becomes the default type) allows you to write headless rules directly without creating a rule-set file.

8:

With the new access control options, not only can you allow Clash dashboards to access the Clash API on your local network, you can also manually limit the websites that can access the API instead of allowing everyone.

See Clash API.

9:

See DNS Rule.

10:

sing-box now uses fsnotify correctly and will not cancel watching if the target file is deleted or recreated via rename (e.g. mv).

This affects all path options that support reload, including tls.certificate_path, tls.key_path, tls.ech.key_path and rule_set.path.

11:

Some legacy chrome fingerprints have been removed and will fallback to chrome, see utls.

12:

See Source Format.

https://github.com/SagerNet/sing-box/releases/tag/v1.10.0

sing-box 1.10.1 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.10.1

sing-box 1.11.0-alpha.1 has been released.

* Update quic-go to v0.48.0
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.11.0-alpha.1