MHSanaei e789583b63 fix(xray): keep legacy-private unencrypted outbounds on cores before 26.10.29 ...

xray-core 26.10.29 (#7249) narrowed the "private" addresses an
unencrypted vless/trojan outbound may reach to RFC 1918, loopback and
link-local, so 100.64.0.0/10 (CGNAT, Tailscale), 198.18.0.0/15 and the
other ranges of the old geoip:private list are now refused. The
embedded validator follows the new core, which made the template save
and outbound subscriptions refuse such an outbound even when the panel
still runs an older core that accepts it.

The legacy skip now also lets through, on a core from 26.7.11 up to
26.10.28, an outbound whose server address (flat, vnext or servers) is
an IP in that core's wider private set. Unknown versions stay strict.

2026-11-01 14:55:29 +01:00

..

controller

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(limit-ip): do not re-add a client the database stopped serving

2026-11-01 13:22:26 +01:00

locale

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

middleware

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

network

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

runtime

fix(node): count only values against the node-answer value cap

2026-11-01 13:14:46 +01:00

service

fix(xray): keep legacy-private unencrypted outbounds on cores before 26.10.29

2026-11-01 14:55:29 +01:00

session

fix(web): start a fresh session at login

2026-10-31 09:05:28 +00:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

assets_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): drop a swept inbound's bookkeeping from the node runtime

2026-10-31 09:28:39 +00:00

routes_contract_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00