fix(tuic): preserve IP destinations during sniffing (#6753)

Keep sniffed TLS domains available for routing without replacing the destination address requested by the TUIC client. Add a regression assertion for the generated relay sniffing settings.
This commit is contained in:
libmur-dev
2026-10-07 11:53:46 +03:00
committed by GitHub
parent c9207b6f3e
commit b3f1cced70
2 changed files with 18 additions and 4 deletions
+4 -2
View File
@@ -796,8 +796,10 @@ func injectAmneziawgnetSocks(cfg *xray.Config, inbounds []*model.Inbound) {
}
const (
tuicEgressSocksSettings = `{"auth":"noauth","udp":true}`
tuicEgressSniffingSettings = `{"enabled":true,"destOverride":["http","tls","quic","fakedns"]}`
tuicEgressSocksSettings = `{"auth":"noauth","udp":true}`
// TUIC clients can connect to an IP while TLS carries a different or unresolvable SNI.
// Keep sniffed domains available for routing without replacing the requested destination.
tuicEgressSniffingSettings = `{"enabled":true,"destOverride":["http","tls","quic","fakedns"],"routeOnly":true}`
)
func injectTuicSocks(cfg *xray.Config, inbounds []*model.Inbound) {