clash v1.18 releases: rule-based tunnel in Go
A rule-based tunnel in Go.
- Local HTTP/HTTPS/SOCKS server with authentication support
- VMess, Shadowsocks, Trojan, Snell protocol support for remote connections
- Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP.
- Rules-based off domains, GEOIP, IP CIDR, or ports to forward packets to different nodes
- Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing, or auto select node based off latency
- Remote providers, allowing users to get node lists remotely instead of hardcoding in config
- Netfilter TCP redirecting. Deploy Clash on your Internet gateway with iptables.
- Comprehensive HTTP RESTful API controller
- TUN mode on macOS, Linux, and Windows. Doc
- Match your tunnel by Script: Script enables users to programmatically select a policy for the packets with more flexibility.
- Rule Provider: It enables users to load rules from external sources and overall cleaner configuration. This feature is currently Premium core only.
inboundsfor flexible binding inbound (#2818) @fuyuntt
- migration go1.21
- added rule string enums in configs as RuleConfig for better outside integrations (#2878) @nekomeowww
- added a new test CI to run unit test and build test for Pull Requests (#2883) @nekomeowww
- method in vmess http-opts is not used (#2846) @sduoduo233
- mapping dns should not stale
- DNS cache max-age (#2850) @lujjjh
- should Unmap ip after AddrFromSlice
- socks5 udp associate
Copyright (C) 2021 Dreamacro