MHSanaei f66e369e41 fix(node): keep pushed inbounds off the node host's own resources ...

A node-sync token, or a master enrolled with the mTLS certificate, may
push inbounds, and the node stored them as already validated. An
inbound is effectively config for a core running as root, so a push
could serve the host's files (hysteria file masquerade), relay to its
own services or the core API (masquerade proxy, fallback dest, REALITY
target), write files (masterKeyLog), use local or templated XDRIVE
storage, fetch URLs (ECH, realm masks), or run tun/http/mixed inbounds.

A push now refuses those fields unless the node already stores the same
value, which keeps rows configured by the node's own admin syncing:
relay targets must be public or another of this node's inbounds, and
only node-eligible protocols are accepted. Every caller is refused env:
references, which the core expands from the panel's environment, and
the inbound listen address is JSON-encoded into the config instead of
quoted by hand.

2026-10-31 23:30:02 +01:00

..

discord

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

email

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

integration

feat(warp): register WARP over MASQUE from the WARP modal

2026-10-11 10:31:01 +02:00

outbound

fix(outbound): dial IPv6 literals correctly in TCP probes (#6850)

2026-10-24 06:09:36 +02:00

panel

fix(web): refuse oversized login usernames before recording them

2026-10-31 09:04:27 +00:00

tgbot

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

calendar_weekly_bound_test.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

calendar_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_add_dedupe_test.go

fix(node): rewrite a node's settings blob without decoding all of it

2026-10-31 10:39:13 +01:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

fix(wireguard): reject allowedIPs that overlap another client's range

2026-09-27 18:18:50 +02:00

client_apply_field_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_fanout_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_flow_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reenable_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reset_query_count_test.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_bulk_reset_reenable_test.go

fix(traffic): re-enable quota-disabled clients on inbound and reset-all resets (#6833)

2026-10-24 04:21:11 +02:00

client_bulk.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(clients): probe inbound settings with a short literal pattern

2026-10-31 14:24:28 +01:00

client_disable_restart_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix(node-sync): write only changed client rows in the node traffic merge

2026-10-14 00:37:00 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_group_reset_test.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_groups.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_host_binding_test.go

feat(clients): bind host rules to individual clients in subscriptions (#6620)

2026-10-24 12:33:02 +02:00

client_hwid_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_hwid_tx_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_hwid.go

fix(hwid): serialize the device-limit write with its trim (#6591)

2026-09-26 20:30:22 +02:00

client_identity_normalized_test.go

fix(node-sync): keep shared-email lookups on the open transaction

2026-10-11 22:05:24 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

client_ip_sync_postgres_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_ip_sync_scale_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_ips_prune_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

client_keepalive_range_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_keepalive.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link_postgres_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

client_link.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): rewrite a node's settings blob without decoding all of it

2026-10-31 10:39:13 +01:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

fix(clients): probe inbound settings with a short literal pattern

2026-10-31 14:24:28 +01:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

Fix clients group filter and search for non-ASCII capitals (#6685)

2026-10-03 01:22:28 +02:00

client_paging.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

client_portable_test.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_portable.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

client_renewal_preview.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_renewal_write_validation_test.go

fix(clients): bound the auto-renew interval at a century

2026-10-31 14:32:31 +01:00

client_reverse_readd_test.go

fix(clients): keep a vless reverse client's handler across a re-add (#6558)

2026-09-15 18:00:54 +03:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_multiprotocol_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

client_sync_orphan_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

fix(traffic): stop adding capped counters in SQL

2026-10-31 14:41:12 +01:00

client_traffic_reset_order_test.go

fix(clients): zero traffic before re-enabling a client on reset

2026-09-28 01:59:53 +02:00

client_traffic.go

fix(traffic): re-enable quota-disabled clients on inbound and reset-all resets (#6833)

2026-10-24 04:21:11 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_keepalive_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_tunnel_peers_test.go

fix(clients): keep per-peer keys when a client spans several tunnel inbounds

2026-09-09 00:30:02 +02:00

client_weekly_renew_crud_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

fix(wireguard): step over wide address claims when allocating

2026-10-31 14:35:01 +01:00

client_wireguard.go

fix(wireguard): step over wide address claims when allocating

2026-10-31 14:35:01 +01:00

client.go

feat(clients): preserve traffic counters in portable export/import (#6469)

2026-09-27 02:48:40 +02:00

config.json

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

default_template_freedom_test.go

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

external_hwid.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

fallback.go

fix(fallback): derive a linked fallback's PROXY protocol header from its child (#6880)

2026-10-24 07:30:09 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_heartbeat_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_postgres_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_scale_test.go

perf(traffic): skip unchanged global writes between heartbeats (#6931)

2026-10-25 08:44:05 +01:00

global_traffic_test.go

fix(traffic): keep enforcing limits when one inbound's settings are broken

2026-10-31 10:43:40 +01:00

golden_fixtures_xray_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

happ_crypto.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_local_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

happ.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

host_test.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

host.go

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_relay_window_test.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_amneziawg_test.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

inbound_amneziawg.go

fix(amneziawg): bound what a handshake allocates and the tunnel MTU

2026-10-31 14:50:18 +01:00

inbound_autorenew_calendar_test.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_weekly_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

inbound_client_ips_merge_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

inbound_client_ips.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_stats_benchmark_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_stats_postgres_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_stats_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_client_traffic_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

inbound_clients_stale_uuid_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_clients_tuic_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

inbound_clients.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_disable.go

fix(traffic): keep enforcing limits when one inbound's settings are broken

2026-10-31 10:43:40 +01:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_enable_port_test.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

inbound_exclude_from_sub_test.go

feat(inbound): excludeFromSub hides links without disabling (#6463)

2026-09-27 12:26:37 +02:00

inbound_fallback_runtime_test.go

fix(fallback): derive a linked fallback's PROXY protocol header from its child (#6880)

2026-10-24 07:30:09 +02:00

inbound_finalmask_reality_test.go

fix(wireguard): check every line of generated client configs

2026-10-24 01:10:09 +02:00

inbound_finalmask_salamander_test.go

fix(finalmask): refuse a salamander password xray-core cannot open

2026-10-11 18:26:45 +02:00

inbound_finalmask_xdns_test.go

fix(finalmask): keep a single udphop mask last in every client finalmask

2026-10-11 18:02:12 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_legacy_fields_test.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_masque_test.go

fix(clients): refuse a ":" email on a MASQUE inbound

2026-10-11 16:35:20 +02:00

inbound_migration_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_migration.go

fix(traffic): keep lifecycle statements under SQLite's variable limit

2026-10-31 10:34:35 +01:00

inbound_mtproto_apply_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

inbound_node_ips_test.go

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

inbound_node_ips.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

inbound_node_protocol_update_test.go

feat(inbounds): deploy AmneziaWG, TUIC and MTProto inbounds to nodes

2026-10-03 00:26:46 +02:00

inbound_node_reconcile_test.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_node_sidecar_test.go

feat(inbounds): deploy AmneziaWG, TUIC and MTProto inbounds to nodes

2026-10-03 00:26:46 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_masque_test.go

feat(xray): add the MASQUE protocol and transport

2026-10-11 10:28:49 +02:00

inbound_protocol_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound_protocol.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound_push_guard.go

fix(node): keep pushed inbounds off the node host's own resources

2026-10-31 23:30:02 +01:00

inbound_runtime_depleted_filter_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

fix(inbounds): accept v2.x client fields on inbound import

2026-09-27 18:28:07 +02:00

inbound_settings_commit.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

inbound_settings_stale_write_test.go

fix(clients): stop client ops from reverting a renewal committed mid-op

2026-09-28 01:59:33 +02:00

inbound_sub_sort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_sublink.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

inbound_subsort_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

inbound_tgbot_lookup_test.go

fix(tgbot): look up a Telegram account's clients through the indexed client table (#6887)

2026-10-24 05:55:19 +02:00

inbound_tls_test.go

fix(node): keep pushed inbounds off the node host's own resources

2026-10-31 23:30:02 +01:00

inbound_traffic_apply.go

fix(node): give each node one push budget per traffic sync

2026-10-31 14:07:08 +01:00

inbound_traffic_global.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(traffic): keep lifecycle statements under SQLite's variable limit

2026-10-31 10:34:35 +01:00

inbound_tuic_test.go

fix(tuic): bound the timeout settings at a day

2026-10-31 14:53:20 +01:00

inbound_tuic.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

inbound_update_external_proxy_test.go

fix(hosts): carry an inbound update's externalProxy change onto its imported hosts (#6831)

2026-10-24 04:20:50 +02:00

inbound_update_hot_users_test.go

fix(xray): apply shadowsocks client changes in place instead of rebuilding

2026-10-14 14:16:48 +02:00

inbound_update_stale_form_test.go

fix(inbounds): keep the stored client list and enable on inbound save

2026-09-28 13:23:48 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util_test.go

fix(service): keep chunk capacity math from overflowing

2026-10-11 22:10:46 +02:00

inbound_util.go

fix(traffic): keep lifecycle statements under SQLite's variable limit

2026-10-31 10:34:35 +01:00

inbound_xdrive_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

inbound.go

fix(node): keep pushed inbounds off the node host's own resources

2026-10-31 23:30:02 +01:00

kernel_client_guard_test.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(traffic): make a client reset reach every counter enforcing its quota

2026-09-28 02:56:53 +02:00

mtproto_quota_reset_test.go

fix(traffic): re-enable quota-disabled clients on inbound and reset-all resets (#6833)

2026-10-24 04:21:11 +02:00

node_admin_fanout_test.go

fix(node): fan out operations that call every node

2026-09-15 20:07:18 +02:00

node_bulk_dispatch_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node-sync): do not latch node disable when master allows (#6870) (#6876)

2026-10-23 19:04:46 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node-sync): write only changed client rows in the node traffic merge

2026-10-14 00:37:00 +02:00

node_client_weekly_renew_test.go

feat(clients): add calendar weekly renewal and schedule previews (#6524)

2026-09-26 22:59:23 +02:00

node_contract.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_degraded_snapshot_test.go

fix(node): don't delete clients when a node reports an empty snapshot (#6734)

2026-10-05 16:12:08 +02:00

node_delete_cleanup_test.go

fix(node): release a deleted node's metric series and HTTP client

2026-09-15 20:39:32 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_detached_client_stats_test.go

fix(node): ignore a node's stats for clients detached from the inbound

2026-10-05 20:37:35 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_inbound_replace_test.go

fix(node): keep client traffic history when a node inbound is replaced

2026-10-06 12:35:59 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

node_origin_guid_test.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

node_probe_body_cap_test.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

node_probe_unsampled_test.go

fix(nodes): stop a restarting panel from reporting itself as down

2026-09-18 13:25:24 +03:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_reset_queue.go

fix(node): settle each queued node reset on its own

2026-10-31 14:01:45 +01:00

node_reset_undelivered_test.go

fix(node): give each node one push budget per traffic sync

2026-10-31 14:07:08 +01:00

node_shared_guid_test.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

node_sweep_guard_test.go

fix(traffic): keep enforcing limits when one inbound's settings are broken

2026-10-31 10:43:40 +01:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(net): stop per-request clients parking connections to remote hosts

2026-10-31 08:32:58 +00:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(node): drop online clients and sub-nodes of nodes no longer synced

2026-09-15 19:27:38 +02:00

node_unsynced_online_test.go

fix(node): keep a node's online and IP reports to its own clients

2026-10-31 14:17:43 +01:00

node.go

fix(node): bound the panel GUIDs a peer reports

2026-10-31 09:22:24 +00:00

outbound_hwid_test.go

fix(sub): send panel guid as X-HWID on outbound subscription fetch (#6579)

2026-09-26 21:59:29 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

outbound_subscription.go

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

port_conflict_forwarded_test.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

port_conflict_test.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

port_conflict.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

reality_scan_test.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reality_scan.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

perf(inbounds): batch client identities for stats enrichment (#6929)

2026-10-25 14:01:46 +01:00

server_cold_status_test.go

fix(monitoring): refresh cached public IP addresses (#6933)

2026-10-25 13:50:29 +01:00

server_geofile_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_sniff_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_import_stage_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_public_ip_async_test.go

fix(monitoring): refresh cached public IP addresses (#6933)

2026-10-25 13:50:29 +01:00

server_remote_cert_hash_test.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

server_scope_test.go

fix(monitoring): refresh cached public IP addresses (#6933)

2026-10-25 13:50:29 +01:00

server_scope.go

fix(monitoring): read LXC CPU, swap and uptime from the container (#6920)

2026-10-24 20:24:34 +02:00

server_syslog_test.go

Bound the panel syslog view with a journalctl timeout (#6689)

2026-10-03 01:21:25 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

setting_clash_test.go

feat(sub): opt-in dns and sniffer from remote Clash rules (#6868)

2026-10-24 04:21:04 +02:00

setting_factory_defaults_test.go

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

setting_happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

setting_mtls_bundle_test.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_mtls_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_mtls.go

fix(nodes): say which half of node mTLS failed, and say it as an error (#6565)

2026-09-16 12:30:44 +02:00

setting_remote_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

setting_security_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(hosts): add drag-and-drop and global subscription ordering (#6895)

2026-10-24 07:27:47 +02:00

setting_sub_json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

setting_sub_profile_test.go

fix(sub): prevent default profile page URL disclosure (#6538)

2026-09-15 21:13:29 +02:00

setting.go

feat(hosts): add drag-and-drop and global subscription ordering (#6895)

2026-10-24 07:27:47 +02:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

shadowsocks_server_key_test.go

fix(inbounds): refuse 2022-blake3-chacha20-poly1305 on shadowsocks inbounds

2026-10-11 21:20:07 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_data_invalidation.go

perf(sub): cache each inbound's settings without clients for subscription bodies (#6758)

2026-10-24 22:45:46 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sublink_registry_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

sync_scale_postgres_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_depletion_node_push_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(traffic): push depletion changes to nodes off the serial writer

2026-09-15 19:04:55 +02:00

traffic_writer_test.go

fix(service): run inbound deletes and depleted-client purges on the serial traffic writer (#6912)

2026-10-24 05:06:03 +02:00

traffic_writer.go

fix(clients): withdraw delete tombstones for clients any serialized write re-creates

2026-10-23 19:30:13 +02:00

tuic_accounting_identity_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

tuic_relay_apply.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_email_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_isolation_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_lifecycle_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_reconcile.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_routing_gate_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_relay_window_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

tuic_settings.go

fix(tuic): bound the timeout settings at a day

2026-10-31 14:53:20 +01:00

tuic_traffic_receipt.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

tuic_user_routing_test.go

test(tuic): retry until one port is free for both TCP and UDP

2026-10-24 07:20:16 +02:00

tx_pool_starvation_test.go

fix(node-sync): keep shared-email lookups on the open transaction

2026-10-11 22:05:24 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_amneziawg_outbound_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

xray_amneziawg_outbound.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_balancer_override_e2e_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

xray_balancer_override_test.go

fix(xray): keep balancer overrides across routing reloads (#6779)

2026-10-12 14:59:26 +02:00

xray_balancer_override.go

fix(xray): keep balancer overrides across routing reloads (#6779)

2026-10-12 14:59:26 +02:00

xray_bind_conflict_test.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_bind_conflict.go

fix: allow IPv4 and IPv6 inbounds to share a port (#6603)

2026-09-26 22:02:22 +02:00

xray_config_clients_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

xray_config_inject_test.go

fix(amneziawg): sniff the relay with routeOnly; scope the v6 egress to IPv6 (#6654)

2026-09-26 22:04:08 +02:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_drop_clients_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

xray_hot_apply_persist_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

perf(tests): copy a migrated template DB instead of migrating per test

2026-09-27 03:04:50 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_process_test_seam.go

chore(node): cover the sync tick's online prune from the job package

2026-09-15 20:39:32 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_qtype_test.go

fix(xray): stop a lone dns qType 0 from matching every query

2026-09-15 16:00:05 +02:00

xray_setting_dns_routing_test.go

fix(xray): allow a private DoH server on the port Xray dials (#6918)

2026-10-24 19:40:00 +02:00

xray_setting_dns_routing.go

fix(xray): allow a private DoH server on the port Xray dials (#6918)

2026-10-24 19:40:00 +02:00

xray_setting_routing_sync_test.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_routing_sync.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_test.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

xray_setting.go

feat(xray): update xray-core to v26.10.21 and adapt panel

2026-10-22 17:10:11 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

feat(amneziawg): support persistent keepalive ranges (#6881)

2026-10-24 06:36:49 +02:00

xray_xhttp_session_test.go

feat(xray): update xray-core to v26.10.10 and adapt panel

2026-10-11 07:55:12 +02:00

xray.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00