Focus on making the most of Xray (HTTP/HTTPS/Socks/TProxy inbounds, multiple protocols support, DNS server, bridge (reverse proxy), even HTTPS proxy server for actual HTTP services) while keeping thin and elegant.
-
For security concerns, global SOCKS / HTTP inbound (listen on 0.0.0.0, port 1080 / 1081 by default) is deprecated and will be removed in next major version (4.0.0).
- These settings are moved out of main luci app. Select "Preview or Deprecated" in "Extra Settings" tab and reboot to let those settings show again in preview app.
- Use Extra Inbound to manually add ports (avoid using common ports like 1080, also set listen addresses carefully) and adjust related workloads to use that.
-
Since version 3.2.0 sniffing and global custom settings are deprecated.
- These features are moved out of main luci app (into preview app).
- Global custom settings will be removed in version 4.0.0. Use "Custom Configuration Hook" for global custom settings.
- Sniffing might get completely reimplemented later. Use FakeDNS instead of sniffing to avoid incompatibilities.
-
This project DOES NOT SUPPORT the following versions of OpenWrt because of the requirements of firewall4 and cilent-side rendering LuCI:
- LEDE / OpenWrt prior to 22.03
- Lean's OpenWrt Source (which uses a variant of LuCI shipped with OpenWrt 18.06)
If this is your case, use Passwall or similar projects instead (you could find links in XTLS/Xray-core).
-
About experimental REALITY support
- it may change quite frequently (before the release of official documents about the protocol). Keep in mind for (maybe) breaking changes.
-
If you see
WARNING: at least one of asset files (geoip.dat, geosite.dat) is not found under /usr/share/xray. Xray may not work properlyand don't know what to do:- try
opkg update && opkg install v2ray-geoip v2ray-geosite - if that doesn't work, see #52
- try
-
This project may change its code structure, configuration files format, user interface or dependencies quite frequently since it is still in its very early stage.
Choose one below:
- Add
src-git-full luci_app_xray https://github.com/yichya/luci-app-xraytofeeds.conf.defaultand run./scripts/feeds update -a; ./scripts/feeds install -a - Clone this repository under
package
Then find luci-app-xray under Extra Packages.
Fork this repository and:
- Create a release by pushing a tag
- Wait until actions finish
- Use
opkg -i *to install both ipks from Releases.
- 2024-02-18 chore: optimize code style; bump version
- 2024-02-19 fix: several DNS related validation
- 2024-02-20 fix: domain match priority; stricter resolve options; socks / http auth
- 2024-02-23 chore: bump version to 3.4.1
- 2024-01-19 chore: bump version
- 2024-01-24 feat: add alias to LAN Hosts Access Control
- 2024-02-04 fix: avoid firewall restart failure & some minor adjustments
- 2024-02-16 feat: dns hijacking preview; deprecate global http / socks inbound
- 2024-02-17 feat: add username / password for extra socks / http inbound
- 2023-12-20 chore: bump version
- 2023-12-22 chore: optimize list folded format; add roundRobin balancer
- 2024-01-04 chore: start later than sysntpd; change firewall include file path
- 2024-01-18 feat: make "Resolve Domain via DNS" available to all outbounds
- 2024-01-19 feat: socks / http outbound
- 2023-10-24 chore: bump version
- 2023-10-25 fix: set required for some fields; remove unused code
- 2023-10-26 fix: allow empty selection for extra inbound outbound balancer
- 2023-10-30 fix: blocked as nxdomain for IPv6
- 2023-10-31 chore: bump version to 3.1.1
- 2023-11-01 feat: custom configuration hook
- 2023-11-02 feat: specify DNS to resolve outbound server name
- 2023-11-30 fix: dialer proxy tag
- 2023-12-14 fix: default gateway
- 2023-12-20 chore: deprecate sniffing; move some preview features to main app; add custom configuration hook; refactor web files
- 2023-09-26 Version 3.0.0 merge master
- 2023-09-27 fix: sniffing inboundTag; fix: upstream_domain_names
- 2023-10-01 fix: default configuration
- 2023-10-06 chore: code cleanup
- 2023-10-19 feat: detailed status page via metrics
- 2023-10-20 feat: better network interface control. Requires reselection of LAN interfaces in
Xray (preview)->LAN Hosts Access Control