diff --git a/docs/changelog.md b/docs/changelog.md index 1b7ab6adef..2c3fc742d4 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -2,6 +2,65 @@ icon: material/alert-decagram --- +#### 1.10.0-alpha.6 + +* Fixes and improvements + +#### 1.10.0-alpha.5 + +* Improve auto-redirect **1** + +**1**: + +nftables support and DNS hijacking has been added. + +Tun inbounds with `auto_route` and `auto_redirect` now works as expected on routers **without intervention**. + +#### 1.10.0-alpha.4 + +* Fix auto-redirect **1** +* Improve auto-route on linux **2** + +**1**: + +Tun inbounds with `auto_route` and `auto_redirect` now works as expected on routers. + +**2**: + +Tun inbounds with `auto_route` and `strict_route` now works as expected on routers and servers, +but the usages of [exclude_interface](/configuration/inbound/tun/#exclude_interface) need to be updated. + +#### 1.10.0-alpha.2 + +* Move auto-redirect to Tun **1** +* Fixes and improvements + +**1**: + +Linux support are added. + +See [Tun](/configuration/inbound/tun/#auto_redirect). + +#### 1.10.0-alpha.1 + +* Add tailing comma support in JSON configuration +* Add simple auto-redirect for Android **1** +* Add BitTorrent sniffer **2** + +**1**: + +It allows you to use redirect inbound in the sing-box Android client +and automatically configures IPv4 TCP redirection via su. + +This may alleviate the symptoms of some OCD patients who think that +redirect can effectively save power compared to the system HTTP Proxy. + +See [Redirect](/configuration/inbound/redirect/). + +**2**: + +See [Protocol Sniff](/configuration/route/sniff/). + ### 1.9.0 * Fixes and improvements diff --git a/docs/configuration/inbound/tun.md b/docs/configuration/inbound/tun.md index 60cd0638df..4bd7106cc4 100644 --- a/docs/configuration/inbound/tun.md +++ b/docs/configuration/inbound/tun.md @@ -150,9 +150,10 @@ Enforce strict routing rules when `auto_route` is enabled: *In Linux*: * Let unsupported network unreachable +* Make ICMP traffic route to tun instead of upstream interfaces * Route all connections to tun -It prevents address leaks and makes DNS hijacking work on Android. +It prevents IP address leaks and makes DNS hijacking work on Android. *In Windows*: @@ -169,26 +170,16 @@ It may prevent some applications (such as VirtualBox) from working properly in c Only supported on Linux. -Automatically configure iptables to redirect TCP connections. +Automatically configure iptables/nftables to redirect connections. *In Android*： -* Only IPv4 is supported -* Only local connections is forwarded - -To share your VPN connection over hotspot or repeater, use [VPNHotspot](https://github.com/Mygod/VPNHotspot). +Only local connections are forwarded. To share your VPN connection over hotspot or repeater, +use [VPNHotspot](https://github.com/Mygod/VPNHotspot). *In Linux*: -* iptables is required (optional ip6tables) -* `iptables_nat` module is required - -For OpenWrt 23.05, required extra packages are: - -```bash -opkg update -opkg install iptables-nft iptables-mod-nat-extra ip6tables-nft -``` +`auto_route` with `auto_redirect` now works as expected on routers **without intervention**. #### inet4_route_address @@ -248,6 +239,10 @@ Conflict with `exclude_interface`. #### exclude_interface +!!! warning "" + + When `strict_route` enabled, return traffic to excluded interfaces will not be automatically excluded, so add them as well (example: `br-lan` and `pppoe-wan`). + Exclude interfaces in route. Conflict with `include_interface`. diff --git a/docs/configuration/inbound/tun.zh.md b/docs/configuration/inbound/tun.zh.md index f9249d4ff7..ef6543c327 100644 --- a/docs/configuration/inbound/tun.zh.md +++ b/docs/configuration/inbound/tun.zh.md @@ -150,9 +150,10 @@ tun 接口的 IPv6 前缀。 *在 Linux 中*: * 让不支持的网络无法到达 +* 使 ICMP 流量路由到 tun 而不是上游接口 * 将所有连接路由到 tun -它可以防止地址泄漏，并使 DNS 劫持在 Android 上工作。 +它可以防止 IP 地址泄漏，并使 DNS 劫持在 Android 上工作。 *在 Windows 中*: @@ -174,22 +175,11 @@ tun 接口的 IPv6 前缀。 *在 Android 中*： -* 仅支持 IPv4 -* 仅转发本地连接 - -要通过热点或中继共享您的 VPN 连接，请使用 [VPNHotspot](https://github.com/Mygod/VPNHotspot)。 +仅转发本地 IPv4 连接。 要通过热点或中继共享您的 VPN 连接，请使用 [VPNHotspot](https://github.com/Mygod/VPNHotspot)。 *在 Linux 中*: -* 需要 iptables（可选 ip6tables） -* 需要 `iptables_nat` 模块 - -对于 OpenWrt 23.05，所需的额外软件包是： - -```bash -opkg update -opkg install iptables-nft iptables-mod-nat-extra ip6tables-nft -``` +带有 `auto_redirect `的 `auto_route` 现在可以在路由器上按预期工作，**无需干预**。 #### inet4_route_address @@ -245,6 +235,10 @@ TCP/IP 栈。 #### exclude_interface +!!! warning "" + + 当 `strict_route` 启用，到被排除接口的回程流量将不会被自动排除，因此也要添加它们（例：`br-lan` 与 `pppoe-wan`）。 + 排除路由的接口。 与 `include_interface` 冲突。 diff --git a/docs/migration.md b/docs/migration.md index b282a90fc7..efe92dfd6a 100644 --- a/docs/migration.md +++ b/docs/migration.md @@ -4,10 +4,6 @@ icon: material/arrange-bring-forward ## 1.9.0 -!!! warning "Unstable" - - This version is still under development, and the following migration guide may be changed in the future. - ### `domain_suffix` behavior update For historical reasons, sing-box's `domain_suffix` rule matches literal prefixes instead of the same as other projects. diff --git a/docs/migration.zh.md b/docs/migration.zh.md index bd63bf1767..ce23875a93 100644 --- a/docs/migration.zh.md +++ b/docs/migration.zh.md @@ -4,10 +4,6 @@ icon: material/arrange-bring-forward ## 1.9.0 -!!! warning "不稳定的" - - 该版本仍在开发中，迁移指南可能将在未来更改。 - ### `domain_suffix` 行为更新 由于历史原因，sing-box 的 `domain_suffix` 规则匹配字面前缀，而不与其他项目相同。