Skip to content

xray 26.2.6#266161

Merged
BrewTestBot merged 2 commits intomainfrom
bump-xray-26.2.6
Feb 6, 2026
Merged

xray 26.2.6#266161
BrewTestBot merged 2 commits intomainfrom
bump-xray-26.2.6

Conversation

@BrewTestBot
Copy link
Contributor

@BrewTestBot BrewTestBot commented Feb 6, 2026

Created by brew bump


Created with brew bump-formula-pr.

  • resource blocks have been checked for updates.
release notes
## XHTTP transport: New options for bypassing CDN's potential detection https://github.com/XTLS/Xray-core/pull/5414 & Finalmask: Add [XICMP](https://github.com/XTLS/Xray-core/pull/5633), [XDNS](https://github.com/XTLS/Xray-core/pull/5560) (relies on mKCP, like DNSTT), header-\*, mkcp-\*

为了捍卫通信自由,本次重点更新内容:

  1. XHTTP 新增了一些选项以对绕过潜在的 CDN 检测(尚未定型,不建议第三方实现现在跟进),详见 XHTTP transport: New options for bypassing CDN's potential detection XTLS/Xray-core#5414
  2. Xray-core HTTP 请求的 User-Agent 均由 Go 改为动态 Chrome(可被 headers 等配置覆写),详见 Xray-core: Dynamic Chrome User-Agent for all HTTP requests by default (overwriteable through config) XTLS/Xray-core#5658
  3. Finalmask UDP 新增了 XICMPXDNS、header-*、mkcp-*,分享链接标准 VMessAEAD / VLESS 分享链接标准提案 XTLS/Xray-core#716 已更新 fmpcsvcn
  4. Finalmask UDP 支持了 WireGuard、SS AEAD/2022 等代理层协议产生的 UDP 流量,详见 Finalmask UDP: Support WireGuard & Shadowsocks AEAD/2022 XTLS/Xray-core#5643
  5. TLS 移除了 allowInsecure 配置项,请使用 pinnedPeerCertSha256verifyPeerCertByName 代替,详见 XTLS/Xray-core@2c92339
  6. 进一步降低了 Xray-core 启动时的瞬时内存占用 Geodat: Reduce peak memory usage XTLS/Xray-core#5581 ,对于 iOS/router 请测试 MPH domian matcher: Support building & using cache directly (instead of building from geosite.dat when Xray starts) XTLS/Xray-core#5505
  7. v26.2.6 包含一些 v26.1.23 新增功能的配置项变更、重要修复,请及时升级 Xray-core 以及 GUI 客户端

https://t.me/projectXtls/1464 此外我们将于下个月推出 XDRIVE 传输层与 XICMP 伪装层,前者可利用网盘、S3 stores 等服务传输数据,不需要自有公网 IP,而是通过潜在的白名单 IP 进行代理,或者境外能访问到境内的服务也行

https://t.me/projectXtls/1473 定义已经清晰,“最终伪装层”是最底层的一个“不可靠的传输层”,比如对于 UDP 它只做每个包的伪装而不会确保可靠传输(依赖上层 mKCP/QUIC/WG,或者代理协议就是想要原生 UDP 特性),另一方面它放的那些东西天马行空、不具备抗检测的鲁棒性但可能就是有奇效,比如现在已有的 XICMP、XDNS、header-*、mkcp-*、Salamander,后续还会把 TCP/TLS fragment、UDP noises 移过来,它们都支持分享,以及据称有用的 ASCII、gfw-killer 想要的在 TCP 流开头加自定义数据等,还可能加 MC 等游戏伪装,如果你有天马行空的 idea 也可以提出

分两种情况,一种是只加 header 一种是真的通过那个东西传输数据,第一种会被命名为 header-*,第二种会被命名为 X*,懒得起名了,另外 TCP 的那些伪装可以通过 VLESS fallbacks offload 给别的程序

https://t.me/projectXtls/1478 不在乎主动探测的话其实最简单的方法就是 REALITY 加随便填 SNI,服务端允许的值和客户端填写的值对得上就行,不需要自签再 pin 那么麻烦,且几乎所有客户端都支持 REALITY 及其分享,这不比自签强吗

https://t.me/projectXtls/1490 为了给少数机场一些迁移时间,今天的版本将 allowInsecure 设为了延时自动禁用(UTC 2026.6.1 00:00),请联系你的机场主为 allowInsecure 的订阅配置加上 pcs/vcn,即可同时兼容新旧版本

这和明文 HTTP 面板一样是 *ray 一开始就有的安全设计问题,可以允许自签但从一开始就不该给出完全不验证证书的选项,然后又错误地被越来越多的代理软件学去,GFW 一个主动探测就知道你能被 MITM

毕竟现在的代理已经越来越多地转向 VLESS、Trojan、Hy2 等内层明文、依赖 TLS 层安全的协议,所以在已知 GFW 拥有完备的 MITM 能力且在其它国家进行过大规模尝试后,这个问题必须得到纠正

Sponsors

Remnawave

Happ

Sponsor Xray-core

Donation & NFTs

Collect a Project X NFT to support the development of Project X!

Project X NFT

该版本升级了一些依赖,并使用 Go 1.25.7 拉满 inline 编译,已 tag v1.260206.0,感谢所有贡献者,详见下方 change log

What's Changed

New Contributors

Full Changelog: XTLS/Xray-core@v26.1.23...v26.2.6

View the full release notes at https://github.com/XTLS/Xray-core/releases/tag/v26.2.6.


@github-actions github-actions bot added go Go use is a significant feature of the PR or issue bump-formula-pr PR was created using `brew bump-formula-pr` labels Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.

@github-actions github-actions bot added the CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. label Feb 6, 2026
@BrewTestBot BrewTestBot enabled auto-merge February 6, 2026 13:01
@BrewTestBot BrewTestBot added this pull request to the merge queue Feb 6, 2026
Merged via the queue into main with commit 3e35659 Feb 6, 2026
22 checks passed
@BrewTestBot BrewTestBot deleted the bump-xray-26.2.6 branch February 6, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bump-formula-pr PR was created using `brew bump-formula-pr` CI-published-bottle-commits The commits for the built bottles have been pushed to the PR branch. go Go use is a significant feature of the PR or issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants