v1.14.0

Features

• Optimization: UDP associations managment removes unnecessary locks

Breaking Changes

• shadowsocks_service::local::net::udp::UdpAssociationManager::new returns clean-up interval and keep-alive receiver. It is not recommended to use this directly in your Project, because the API may change occasionally.

What's Changed

• Bump trust-dns-proto from 0.20.4 to 0.21.1 by @dependabot in #776
• Bump trust-dns-resolver from 0.20.4 to 0.21.1 by @dependabot in #777

Full Changelog: v1.13.5...v1.14.0

v1.13.5

Features

• #773 Set environment variable SS_SYSTEM_DNS_RESOLVER_FORCE_BUILTIN to use system's builtin DNS resolver

Full Changelog: v1.13.4...v1.13.5

v1.13.4

Features

• Allow setting "system" in DNS configuration key "dns" to use system provided DNS API

BUG Fixes

• ssservice - fixed command line options when running it as symlink of ssserver and ssmanager

What's Changed

• Bump clap from 3.0.14 to 3.1.0 by @dependabot in #772
• remove deprecated code for clap 3.1.0 by @18o in #774

Full Changelog: v1.13.3...v1.13.4

v1.13.3

BUG Fixes

• #767 REGRESSION: ssmanager missing --server-host command line option since v1.13.0
• shadowsocks/shadowsocks-crypto#12 REGRESSION: rc4-md5 method cipher IV length should be 16
• #768 Disable md5-asm and sha1-asm on x86_64-pc-windows-gnu target.

Full Changelog: v1.13.2...v1.13.3

v1.13.2

Features

• (EXPERIMENTAL) Support setting SO_USER_COOKIE on FreeBSD
  • Set cookie with --outbound-user-cookie command line option, working just like --outbound-fwmark on Linux
• (EXPERIMENTAL) Local tun interface refactored the VirtDevice::poll strategy
  • Improve performance
  • Still slow comparing to system's network stack

BUG Fixes

• #765 Updated broken Wiki URL for Plugins in command line help message
• #764 Regression of client blocking ACL strategy on ssserver
  • Introduced since v1.9.0

What's Changed

• Bump parking_lot from 0.11.2 to 0.12.0 by @dependabot in #758
• Update broken url in --help by @mborsetti in #765

New Contributors

• @mborsetti made their first contribution in #765

Full Changelog: v1.13.1...v1.13.2

v1.13.1

Bug Fixes

• Instant subtraction may be overflowed in PingBalancer
  • When sslocal has set multiple remote servers and the host system just reboots, it will crash.

v1.13.0

Features

• #706 balancer.check_best_interval could let ping balancer to ping only the choosen best server in this interval
• Recommended: Set a shorter interval in balancer.check_best_interval than balancer.check_interval to check much frequently the best server.
  • balancer.check_interval controls the interval of checking all the available servers
  • When server start, the "check best" strategy starts after it receives enough data for estimating all servers' scores
• #744 Refactored local-tun, using smoltcp as a user-space network stack

Miscelleneous

• Upgrade clap (the command-line argument handling library) to v3.0
• #739 Support K8S deployment
• shadowsocks-crypto switch underlying encryption library to RustCrypto
  • Able to build with stable Rust
  • Build for target aarch64 with nightly, features "armv8 neon" should be enabled for hardware acceleration.

What's Changed

• Bump nix from 0.23.0 to 0.23.1 by @dependabot in #728
• Bump futures from 0.3.17 to 0.3.19 by @dependabot in #727
• Update debian deb script by @wevsty in #734
• Bump webpki-roots from 0.22.1 to 0.22.2 by @dependabot in #735
• Bump pin-project from 1.0.8 to 1.0.10 by @dependabot in #736
• Bump serde_json from 1.0.73 to 1.0.74 by @dependabot in #738
• feat(deploy): support k8s deployment (#739) by @longkai in #741
• chore(k8s): change default image to ghcr latest by @longkai in #742
• Bump clap from 3.0.4 to 3.0.5 by @dependabot in #743
• Bump serde_urlencoded from 0.7.0 to 0.7.1 by @dependabot in #747
• Bump iprange from 0.6.6 to 0.6.7 by @dependabot in #746
• Strip symbols in release mode by @Y0ba in #750
• Disable secure mode in mimalloc allocator by @Y0ba in #751
• Bump serde_json from 1.0.75 to 1.0.78 by @dependabot in #755

New Contributors

• @wevsty made their first contribution in #734
• @longkai made their first contribution in #741

Full Changelog: v1.12.5...v1.13.0

v1.12.5

Bug Fixed

• #725 High CPU consumption on Linux Kernel < 4.11 when TCP Fast Open is enabled.

What's Changed

• remove duplicate code in client_cache for local dns by @18o in #709
• remove duplicate code for local http by @18o in #708
• optimize logging code by @18o in #711
• optimize dns code by @18o in #713
• remove duplicate code in local http connector by @18o in #712
• remove duplicate codes in udp association by @18o in #714
• fixed pr #714 by @18o in #715
• Bump clap from 2.33.3 to 2.34.0 by @dependabot in #716
• Update tcprelay.rs by @kda2000 in #718
• Compress ssservice for mips targets by @riKirsti in #721
• Update sslocal server-url help string by @jabedude in #722
• Bump hyper from 0.14.15 to 0.14.16 by @dependabot in #724
• Bump async-trait from 0.1.51 to 0.1.52 by @dependabot in #723

New Contributors

• @kda2000 made their first contribution in #718
• @riKirsti made their first contribution in #721
• @jabedude made their first contribution in #722

Full Changelog: v1.12.4...v1.12.5

v1.12.4

Features

• Configuration
  • ipv6_only configuration option setting IPV6_V6ONLY to all listener sockets that are listening to dual-stack address (::)
  • #700 Default configuration search path also includes $PWD
  • Log and Runtime related options could be configured via configuration file
• #698 New binary ssservice with unified features in (sslocal, ssserver and ssmanager)
  • sslocal, ssserver, ssmanager may not be included in the release build in the future.
  • COMPATIBLE NOTE: ssservice can be served as any of the sslocal, ssserver and ssmanager, for example, ln -s ssservice sslocal and then run sslocal with exactly the same options as the standalone sslocal binary.

Bug Fixes

• #694 UDP binds to dual-stack address (::) will detect 0.0.0.0 already in use automatically
• Transparent Proxy (redir) local client will always set IPV6_V6ONLY for listeners that are listening on ::

Miscelleneous

• Deprecating SS_LOG_VERBOSE_LEVEL and SS_LOG_WITHOUT_TIME (introduced in v1.12.3) in flavor of "log" in the configuration file

What's Changed

• fixed UDP listener binds to dual-stack addresses (::) by @zonyitoo in #696
• Support ipv6_only socket option (IPV6_V6ONLY) by @zonyitoo in #699
• Local, Server & Manager unified binary ssservice by @zonyitoo in #701
• "log" and "runtime" specific options configurable in file by @zonyitoo in #702

Full Changelog: v1.12.3...v1.12.4

v1.12.3

Features

• #688 Support default configuration file path for sslocal, ssserver and ssmanager
  • Linux: $XDG_CONFIG_PATH/shadowsocks-rust/config.json or $HOME/.config/shadowsocks-rust/config.json
  • Windows: {FOLDERID_RoamingAppData}\shadowsocks\shadowsocks-rust\config\config.json
  • macOS: $HOME/Library/Application Support/org.shadowsocks.shadowsocks-rust/config.json
  • *NIX: $XDG_CONFIG_PATH/shadowsocks-rust/config.json or $HOME/.config/shadowsocks-rust/config.json or /etc/shadowsocks-rust/config.json
• #691 Manipulating default logging options (command line options -vvv and --log-without-time) with environment variable SS_LOG_VERBOSE_LEVEL and SS_LOG_WITHOUT_TIME
• #419 Read servers' password from environment variables
  • Server created from command line argument without --password will try to read it from TTY
  • Servers' "password" field or --password option support ${VAR_NAME} format to read password from environment variable VAR_NAME

What's Changed

• Bump serde_json from 1.0.70 to 1.0.71 by @dependabot in #690
• Bump hyper from 0.14.14 to 0.14.15 by @dependabot in #689

Full Changelog: v1.12.2...v1.12.3