유사한 콘텐츠 찾기

#Mac#Beta Version 5.4.1-2484 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Profile error message prompt optimization, now it can give the exact line number where the error occurred more accurately. - Bug fixes.

#Mac#Beta Version 5.4.1-2481 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Profile error message prompt optimization, now it can give the exact line number where the error occurred more accurately. - Bug fixes.

#Mac#Beta Version 5.4.1-2480 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Profile error message prompt optimization, now it can give the exact line number where the error occurred more accurately. - Bug fixes.

#Mac#Beta Version 5.4.1-2478 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Profile error message prompt optimization, now it can give the exact line number where the error occurred more accurately. - Bug fixes.

#Mac#Beta Version 5.4.1-2477 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Profile error message prompt optimization, now it can give the exact line number where the error occurred more accurately. - Bug fixes.

#Mac#Beta Version 5.4.1-2476 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - All comments (at the beginning and end of lines) can now use #, //, ; three common comment symbols. - Bug fixes.

#Mac#Beta Version 5.4.1-2475 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - Bug fixes.

#Mac#Beta Version 5.4.1-2474 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - Bug fixes.

#Mac#Beta Version 5.4.1-2473 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - Bug fixes.

#Mac#Beta Version 5.4.1-2472 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - Bug fixes.

#Mac#Beta Version 5.4.1-2471 - Now, when performing MITM, the certificate used for signing will be sent to the client together, to support using intermediate certificates for MITM. - Bug fixes.

#Mac#Beta Version 5.4.0-2470 #### New Features * Protocol sniffing Requests to port 80 and 443 will wait for the client to send the first packet, then extract the SNI and other information for the rule system to judge. - DOMAIN, DOMAIN-SUFFIX, DOMAIN-KEYWORD rules add an optional parameter called extended-matching. When this parameter is enabled, the rule will try to match both the SNI and the HTTP Host Header (or :authority). - Added a parameter called always-raw-tcp-hosts, used to forcibly turn off active protocol detection for specific hostnames. * New proxy protocol support: Hysteria 2 Hysteria 2 is a proxy protocol optimized for unstable and packet-loss-prone network environments, based on UDP/QUIC. * Automatic QUIC blocking Since most proxy protocols are not suitable for forwarding QUIC traffic, Surge will now automatically block QUIC traffic to make it fallback to HTTPS/TCP protocol, ensuring performance. For QUIC traffic that hits the MITM hostname, it will also be automatically rejected. * ECN (Explicit Congestion Notification) support for QUIC-based protocols Significantly improved the performance of the Vector(Surge Ponte)/TUIC/Hysteria 2 protocol. #### Optimizations - Reworked HTTP capture functionality - The related settings are no longer stored in the configuration, the [Replica] section has been deprecated. - Added an automatic shut-off setting after turning on the capture switch, which can automatically stop capturing based on time, size, or the number of requests. - Added automatic activation of MITM after turning on the capture switch, which can be additionally turned on for specific hostnames. (Even if the main MITM switch is off). - Added an option to only save HTTP/HTTPS requests after turning on the capture switch. - Improved compatibility with some non-standard protocols. - When testing the Ponte policy, the test URL has been changed from proxy-test-url to internet-test-url. - Following the WireGuard protocol standard recommendation, WireGuard handshake packets will now be tagged with 0x88 (AF41) DSCP to increase the success rate. - When forwarding UDP packets via WireGuard, it supports retaining the TOS(DSCP/ECN) tag of packets inside the tunnel. - Based on the WireGuard protocol standard recommendation, Surge will copy the ECN tag from packets inside the tunnel to packets outside. When receiving packets with an ECN tag, they will be strictly merged according to RFC6040. (ecn=true must be set for the strategy). - UDP NAT can close the UDP session early based on ICMP messages. - Improved PMTU support for QUIC. #### Bug Fixes - Fixed the issue where the external resources of rule sets needed to be reloaded to take effect after updates. - After a network switch, it will forcefully break the original long connection of DoH/DoQ/DoH3 to avoid obtaining results that are not suitable for the current network environment. - Fixed the issue where invalid certificates might cause the key store interface to crash. - When performing MITM on HTTPS requests that directly connect using an IP address, the IP address should not be sent as SNI, as this might cause compatibility issues. - Other bug fixes.