Version History
Here you can find the changelog of Surge 5 since it was posted on our website on 2020-04-04.
The latest version is 5.9.0 and it was updated on soft112.com on 05 March, 2024.
See below the changes in each version:
version 5.9.0
posted on 2024-03-01
Mar 1, 2024
Version 5.9.0
Module
- Added several new official modules; official modules can now be dynamically updated.
- Modules have a new classification field for convenient access and categorization in the UI.
- Modules now accept parameter tables, supporting multiple parameters. Parameters will be used to modify module content through text replacement.
Script
- New script execution engine. Optimized execution performance and memory usage.
- $httpClient has added several practical parameters.
For more details on the updates above, see the documentation.
Enhancements
- Added desktop shortcut jumps for remote controllers; see the configuration guide at the bottom of the device page for details.
- New parameter: always-raw-tcp-keywords. For usage, refer to documentation.
- Added SRC-PORT rule to match client port numbers.
- IN-PORT/SRC-PORT/DEST-POT three rules are categorized as port number rule class, supporting more usages.
- The UI can now maintain pure empty lines from original configurations after editing.
Fixes
- Corrected a detail issue with QUIC flow control and optimized latency performance for Ponte/TUIC/Hysteria2 protocols.
- After editing a single rule, the notification-related parameters will be retained..
- Corrected an issue where switching outbound modes via widget was not possible in newer iOS versions.
- Fixed potential sudden memory overruns that could occur when when processing huge external resources leading to stops.
version 5.8.3
posted on 2023-12-08
Dec 8, 2023
Version 5.8.3
- Rewrote the virtual IP database, now the database can automatically clean up data based on last use time.
- Added viewing of the virtual IP table. (at the top right corner of the DNS result page)
- For DNS requests with illegal domain names, an empty result response will be generated instead of being ignored directly.
- Surge Ponte connections no longer validate peer addresses to ensure normal operation in certain special scenarios.
- Removed include-all-network option from UI to avoid misuse.
- Support configuring no-resolve for built-in rule sets/Inline rule sets.
- Other improvements and bug fixes.
version 5.7.0
posted on 2023-09-14
Sep 14, 2023
Version 5.7.0
New Features
· Surge tvOS is now available. All users who have purchased Surge iOS can use it directly without any additional purchase.
· Supports interactive widgets for the latest system.
· Added full-text search support for HTTP request's header and body.
· Web Dashboard updated to version 2.0.
· Inline Ruleset, allowing the Ruleset to be written directly in the main profile.
Minor Improvements
· Optimized the script logging system, ensuring that script logs in request logs do not display content from other sessions during concurrent execution.
· Removed the Wi-Fi Assist notification.
· When using UI to edit policy groups, you can now select Ponte devices.
· When creating temporary rules for remote devices, Ponte devices can be selected.
· Remote controllers support viewing and updating external resources of remote devices, compatible with Surge Mac and Surge tvOS.
· Icons for Ponte devices now display the device type.
· Improved details related to accessibility.
· Improved some UI details.
Bug Fixes
· Fixed some potential issues when editing the MITM Hostname list.
· Fixed an issue where, when creating rules for remote devices, the policy options might be local policies instead of remote policies.
· Fixed an issue where, when using iCloud sync, the local module selection might be deselected if the cache was cleared.
· Fixed an issue where switching to Dropbox sync was not possible.
· Fixed a problem where some card backgrounds were incomplete when expanded.
· Fixed an issue where modules added via Basic Auth URL could not auto-update.
· Fixed a problem in quick switch mode where, after switching from an IPv6 network to a non-IPv6 network, the v6-vif didn't correctly auto-turn off when set to auto.
version 5.6.0
posted on 2023-07-25
Jul 25, 2023
Version 5.6.0
Enhancements
· Comprehensive optimization of the request list page
· Ponte device sharing can now be initiated and managed directly on iOS
· The name of the source device will be displayed when viewing external requests
· Profile list added Create Linked Profile option for quick creation of detached profile
· Changed the logic of accessing the data protection area, now Surge can be properly activated in the locked screen state. (Except after rebooting)
· Will prompt when a CA certificate expiration is detected
· Single request exported .zip files support import back into Surge iOS, and will be displayed in the favorite requests
· Performance optimization
Problem Fixes
· Fixed the issue that in the same round of policy testing, if different test URLs are mixed, the HTTP Header constructed in the secondary test may be incorrect, leading to abnormal test results
· Fixed the issue that the Panel refresh may not be executed correctly after the main program is opened from the background
· Fixed the issue that the policy group title options under the list policy group view may not update in time
· Fixed the issue that using the DIRECT strategy as underlying proxy might cause UDP failure
· Fixed the issue that when using the SSH protocol, if the server side is configured with a banner, it cannot handshake properly
· Fixed some issues that may occur under the Lucid theme on iPad
· Fixed the issue that SSID related functions may not work correctly in some cases
· Fixed some problems that may occur when using TUIC v5 as underlying-proxy
· Fixed the issue that when directly using IPv6 address as vmess hostname, if WebSocket is enabled, the WebSocket request cannot be correctly constructed
· Fixed the issue that the use of certain invalid data in the DOMAIN-SET rule may cause a crash
· Fixed the crash that may be caused by profile errors
· Fixed the issue that the returned data of the replayed request cannot be viewed if there is compression
· Fixed the issue that the device list cannot be loaded when there is only a shared Ponte device
· Fixed some crashes that may occur with DNS over HTTP3
· Fixed the issue that when Surge Ponte is in a subnet CIDR not a multiple of 8, it will judge incorrectly leading to non-use of LAN direct connection
· Fixed some problems that may occur when using Surge Ponte
· Optimized the logic of re-establishing the main connection after network switching in TUIC/Ponte
version 5.5.3
posted on 2023-06-23
Jun 23, 2023
Version 5.5.3
Bug fixes
version 5.5.1
posted on 2023-06-07
Jun 7, 2023
Version 5.5.1
Remote Controller
* Supports adding and modifying temporary rules remotely.
* The device management now groups devices by active and non-active devices. (whether there is a request)
* Supports directly adding temporary or permanent rules for devices.
* Other detail optimizations.
Others
* Added support for TUIC v5 protocol.
* The policy group menu adds the option to display hidden groups.
* In traffic statistics, the subdomains of apple.com will be processed separately, facilitating the observation of the traffic consumption of system services.
* After external resources are updated, now only the update of the policy group will cause the group page to reload, other types will no longer cause the group page to reload.
* Optimized the performance of Surge Ponte/TUIC.
* Optimized the request Note recording when the strategy group is abnormal.
* Fixed the problem that connection reuse was not done correctly under MITM H2 mode.
* Fixed the problem that the request of $httpClient/DoH may sometimes be accidentally cancelled.
* Other bug fixes.
version 5.4.0
posted on 2023-04-06
Apr 6, 2023
Version 5.4.0
Surge Ponte
Surge Ponte is a private mesh network between your devices running Surge Mac & iOS.
· Zero configuration required
· Surge automatically chooses the most appropriate channel to establish connections.
· Always end-to-end encryption.
· The device information and encryption keys are synchronized via your iCloud, and none of your data passes through third-party servers, except the proxy server if you choose.
Surge Ponte needs to be used with Surge Mac 5.
WireGuard-related optimizations
· Significantly optimized handshake-related logic.
· WireGuard's Client ID supports UI configuration and adds support for 0xabcdef and 6-character base64 formats.
Other updates
· Redesigned the network diagnostics page and optimized the information display.
· Optimized peak bandwidth performance and CPU usage for QUIC.
· Requests matched by the REJECT rule will be marked as Rejected and distinguished by gray, no longer classified as Failed.
· Optimized the switch control logic for various functions to avoid accidentally turning off/on a function in some cases.
· When using MITM, prioritize using the client-reported SNI to generate certificates and use the accessed domain name when SNI is not reported.
· Increased the wake-up speed of executing Surge scripts via shortcuts when Surge is not enabled.
· Changed the display of SOCKS5 proxy request type to TCP. You may confirm in Notes that it was taken over by SOCKS5 proxy.
· Support for configuring DNS over QUIC/H3 for specific domain names in [Host].
· Introduced the FAILED built-in policy for marking request failures in special cases (e.g., policy group cannot be loaded) instead of using REJECT.
· Fixed an issue where rules would not match if the client accidentally sent a domain name with uppercase letters during rule matching.
· Fixed a problem where policy group decisions would fail if multiple external policy groups used the same name for policies with different actual content.
· DNS Local Mapping allows configuring multiple IPs for a domain name to be used concurrently.
· Other issues fixed.
Please note that starting with iOS 16.4, the system no longer allows reading the MCC/MNC of cellular networks. Related functions may become invalid.
version 5.0.2
posted on 2022-08-19
Aug 19, 2022 Version 5.0.2
- Fixed a bug that the text editor may be unable to save content.
version 4.15.0
posted on 2022-06-30
Jun 30, 2022 Version 4.15.0
MITM over HTTP/2
- Surge now supports performing MITM with HTTP/2 protocol to improve concurrent performance.
- Surge now supports performing MITM on WebSocket connections.
Others
- You may use `doh-skip-cert-verification=true` to disable server certificate verification for DNS-over-HTTPS.
- Bug fixes.
version 4.13.0
posted on 2022-04-23
Apr 23, 2022 Version 4.13.0
HTTP Capture
- You can now export HTTP/HTTPS requests to a HAR file, which is a standard format and can be opened by many web analysis tools
- The image viewer now supports SVG format.
Proxy
- New parameter `server-cert-fingerprint-sha256` for TLS proxy policies. Use a pinned server certificate instead of the standard X.509 validation.
- `tls-engine` option is now deprecated. OpenSSL is now the only TLS engine.
- You can now use a full profile as the external policy group (policy-path). All proxies in the [Proxy] section will be used.
MITM
- You can export the CA certificate to a P12 or PEM file.
- Fixed an issue that the CA certificate can’t be installed if the default browser isn’t Safari.
Header Rewrite
- Header rewrite now supports using the regex to replace the value.
- Header rewrite now supports modifying the response headers.
Scripting
- The default timeout of $httpClient is now 5 seconds and you may override it with the timeout parameter.
- You can manage the data of $persistentStore with the UI now.
- You may edit the argument with UI now.
Remote Controller
- You may sort and search in the remote device list.
version 4.12.0
posted on 2022-03-18
Mar 18, 2022 Version 4.12.0
### New Feature: Personal Hotspot Proxy Access
- When using an iPhone/iPad as a hotspot, an HTTP or SOCKS5 proxy can be used on the client device to take over the traffic using Surge iOS.
- The proxy IP to be configured on the client is shown in the More Settings and the port number is the same as the WiFi proxy service.
### New Feature: Hybrid Network
- Instead of setting up connections with cellular data when the Wi-Fi network is poor, always set up connections with Wi-Fi and cellular data simultaneously.
- This feature can improve the network experience significantly on poor Wi-Fi or when the Wi-Fi network is switching.
### WireGuard
- WireGuard supports multiple peers.
- The allowed-ips now support multiple IP ranges.
- WireGuard supports preshared-key and keepalive.
- WireGuard supports peers with IPv6 endpoints. (But still no IPv6 tunnel support)
- WireGuard now supports underlying-proxy.
- The raw TCP connections are now relayed on the L3 layer if no high-level features are used.
### Detached Profile
- You can now include multiple detached profiles in one section. But the section will be marked read-only and can't be edited with UI.
#!include A.dconf, B.dconf
### Policy Group
- You can now temporarily override an auto test group or an SSID group's optimal option, until Surge restart or reload.
- The new parameter include-all-proxies=true is added to the policy group, which will include all proxy policies defined in the [Proxy] section, and can be used with the policy-regex-filter parameter for filtering.
- The new parameter include-other-group="group1,group2" is added to include policies from another policy group, and can include multiple policy groups separated by commas, also can be used with the policy-regex-filter parameter for filtering.
- include-all-proxies, include-other-group, and policy-path parameters are allowed to be used in a single policy group at the same time. The policy-regex-filter parameter applies to all three.
- There is an order of precedence among the policy groups for the include-other-group parameter, but there is no order of precedence among the include-all-proxies, include-other-group, and policy-path parameters. For scenarios where the order of sub-policies makes sense (e.g., fallback groups), use policy groups nesting with include-other-group.
### Subnet expression
- SSID Group is now upgraded to Subnet Group, which supports subnet expression.
- SSID Setting now supports subnet expression.
- The SUBNET rule now supports subnet expression.
- The [SSID Setting] can control the TCP Fast Open behavior now. Read the manual for more information.
- The [SSID Setting] can control the Wi-Fi assist and Hybrid Network behavior now. Read the manual for more information.
### Proxy Protocol
- The Trojan protocol now supports using WebSocket as the transport layer.
- Shadowsocks protocol now supports underlying-proxy for UDP relay.
- You may configure the UDP testing endpoint for proxies. e.g., proxy-test-udp = google.com@1.1.1.1
- You may benchmark a single proxy by long press on the proxy cell.
### Module
- New Official Module: Block HTTP3/QUIC
- Surge will check updates for installed modules automatically.
### Others
- Performance improvements.
- OpenSSL is now the default TLS engine.
- The managed profile can be opened with the text editor now.
- The default timeout of $httpClient is 5 seconds now.
- Reduced the app package size.
- You need to perform a one-time Dropbox re-authorization if you are using Dropbox syncing.
- Modules allow modifying the skip-server-cert-verify and tcp-connection parameters of [MITM].
- The client will get an ICMP connection refused message instead of TCP RST if a REJECT policy matches.
- Supports IPv6 addresses with scope ID.
- The Network diagnostics can test proxy UDP relay now.
- Bug fixes.
version 4.11.1
posted on 2022-01-27
Jan 27, 2022 Version 4.11.1
- You may edit the profile in the text mode without changing the current profile now.
- The REJECT policy now can evolve to REJECT-DROP policy for UDP traffics.
- Bug fixes.
version 4.10.0
posted on 2021-12-03
Dec 3, 2021 Version 4.10.0
- You may extend your Surge iOS Pro license to 6 devices for free. You may find the guidance in the License Management view.
New Features
- Sorting option in the request list.
- Supports remote rule editing for the remote controller.
- Added the effective order adjustment view for the module. You can now adjust the effective order of the module.
- Supports custom the policy IP TOS field. Example: test-policy = direct, tos=0xb8.
Other Improvements
- UI details refined.
- Performance improvements.
- Network changed notification message will display the data network operator. If network automatic switching is enabled, you can use the notification to confirm the current carrier.
- The URL query part of the HTTP request is no longer displayed in the request list. It is now displayed in the details view.
- Fixed the problem that the JavaScript script timeout mechanism might not work properly.
- Fixed an issue that could occur when a load-balance group contains another group.
- Removed the "All" option from traffic statistics, as it took too long to count all historical traffic when the feature had not been used for a long time.
- You may remove devices in DDNS and Cloud Notification views.
version 4.9.2
posted on 2021-09-03
Sep 3, 2021 Version 4.9.2
- Bug fixes
version 4.8.0
posted on 2021-06-14
Jun 14, 2021 Version 4.8.0
New Features:
- Request Display Filter
You may use multiple conditions to filter which requests to show.
- Web Dashboard
You may control Surge via a web browser on local or remote devices.
Other bug fixes and improvements.
version 4.7.0
posted on 2021-04-21
Apr 21, 2021 Version 4.7.0
Rules
- New rule type: SUBNET, which can match SSID/BSSID/router IP address with a wildcard pattern.
- New rule type: CELLULAR-CARRIER, which can match the MCC-MNC code.
- New rule type: CELLULAR-RADIO, which can match the radio access technology of the cellular network.
Profile
- You may put partial sections into a detached file. See manual for more information.
HTTP API
- Added new profile related HTTP APIs, including GET /profiles, POST /profiles/check
- Added new device management HTTP APIs, including: GET /devices, POST /devices, GET /devices/icon
- The HTTP API, proxy services, and external controller now support listening on IPv6 addresses. (No UI supports. Manual profile editing is required.)
- You may now use 'http-api-tls=true' enable TLS for HTTP API access. (aka HTTPS-API)
Other bug fixes and improvements.
version 4.6.0
posted on 2021-02-26
Feb 26, 2021 Version 4.6.0
Remote Controller
- You may use this remote controller to view real-time statistics, events and perform network diagnostics remotely.
- You may use the remote controller to control the DHCP server feature of Surge Mac, including adjusting each device's settings.
Cloud Notification
- You can receive Surge Mac's notifications on your iOS device.
Scripting
- You may execute a script with Siri or Shortcuts.
Policy Group
In this release, we completely refactored the policy group functionality, bringing the following changes:
1. The url-test/fallback/load-balance policy group can no longer be configured with a specific testing URL but with a global testing URL or a policy-configured testing URL. The policy's test results can be used directly in all policy group decisions, eliminating the need to retest each policy group individually.
2. All types of policy groups support mixed nesting. The only requirement is that no circular references can be used.
3. When a group policy is used as a sub-policy of the url-test/fallback/load-balance group.
- The latency of the select/url-test/fallback/ssid group is the latency of the selected policy.
- The latency of the load-balance group is the average of the latencies of all available policies.
4. The timeout parameter of a policy group marks policies with latency exceeding this parameter as unavailable when making decisions for the group. But the maximum time taken to test the policy group is controlled by the global test-timeout parameter. (Default is 5s)
5. When testing a group due to decision making, all sub-policies that the group may use are tested, including sub-policies of the sub-policy group.
6. You may use no-alert=true parameter to suppress notifications for particular groups.
version 4.5.1
posted on 2021-01-20
Jan 20, 2021 Version 4.5.1
Bug fixes
version 4.5.0
posted on 2021-01-19
Jan 19, 2021 Version 4.5.0
- New Feature: Network Layer Packet Capture: You may now capture the raw TCP/UDP/ICMP packets and inspect them right on the device. Or you can export a standard .pcap file for other tools.
- You can customize the GeoIP database updating URL now.
- The GeoIP database can be updated automatically now.
- Bug fixes and improvements.
version 4.4.3
posted on 2020-10-28
Oct 28, 2020 Version 4.4.3
- Optimized for the iPhone 12 series.
- Modified requests are now marked with orange color.
- Bug fixes.
version 4.4.2
posted on 2020-09-25
Sep 25, 2020 Version 4.4.2
Bug fixes
version 4.4.1
posted on 2020-09-23
Sep 23, 2020 Version 4.4.1
Bug fixes
version 4.4.0
posted on 2020-09-20
Sep 20, 2020 Version 4.4.0
New Features:
- HTTP API:Control Surge with HTTP API with another app or from another device.
- Proxy Chain: Connection to a remote host will be performed sequentially from one proxy server to another.
Major Improvements:
- You may mix the external proxies with the proxies of the profile in one policy group now.
- The DNS result view has more information.
- You may use 'policy-regex-filter' to include a part of an external proxy list's content.
- New CELLULAR and CELLULAR-ONLY policy.
Minor Improvements:
- iCloud Drive sync improved.
- You may use $notification.post in a script to post a notification with an action URL.
- The HTTP proxy service now supports basic authentication.
- Surge now enables TCP keepalive for all outgoing connections.
- Surge now supports to use a URL with username and password to perform basic authentication for external resource. (https://username:password@example.com)
We recently published official guidance for you to understand Surge. You may find it in the More tab.
version 4.3.2
posted on 2020-06-25
Jun 25, 2020 Version 4.3.2
Improvements for the latest iOS system.
version 4.3.1
posted on 2020-06-22
Jun 22, 2020 Version 4.3.1
New Feature: Wi-Fi Timeline
You may check the connected Wi-Fi network timeline, including entering and leaving time.
Minor Changes
- Optimized the timing system. The DNS time cost is now calculated precisely.
- Bug fixes.
version 4.3.0
posted on 2020-06-04
Jun 4, 2020 Version 4.3.0
New Feature: Mock
- You may mock the API server and return a static response. This feature may also be called as Map Local or API Mocking.
New Feature: Event Center
- You may now review all historical events.
Minor Changes:
- Optimized the classical start view for Dark Mode.
- The Load-Balance group now supports connectivity testing.
- Add a parameter "use-local-host-item-for-proxy", to use local DNS mapping result even through a proxy protocol.
- The module may adjust contents in [SSID Setting] now.
- Optimized Wi-Fi Assist feature.
- You may specify the timeout while using the script editor.
version 4.2.2
posted on 2020-05-19
May 19, 2020 Version 4.2.2
- New Feature: Traffic Statistics
You may examine the history traffic usage grouped by host, by policy, or by network interface.
- New Feature: DOMAIN-SET
We have added a new type of rule: DOMAIN-SET, which may contain millions of sub-rules. No UI configuration in this version. Please configure with the Text Mode
[Rule]
DOMAIN-SET,hostname.txt,REJECT
Each line in the file is a hostname or an IP address. If the hostname starts with a dot, all sub-domains will be matched.
- Other bug fixes and improvements.
version 4.2.1
posted on 2020-04-28
Apr 28, 2020 Version 4.2.1
New Feature: Enhanced Wi-Fi Assist
- Surge will try to set up a connection with cellular data when the Wi-Fi network is poor.
Changes in DNS-over-HTTPS
- From this version, if DNS-over-HTTPS is configured, the traditional DNS will only be used to test the connectivity and resolve the domain in the DOH URL.
- The DNS over HTTPS now has a separate parameter: doh-server. The DOH servers in 'dns-server' will be moved to the new parameter after saving.
- The legacy DNS is always required now.
- DOH can be matched with rule 'PROTOCOL,DOH' now.
- Added a new parameter 'doh-follow-outbound-mode'. In the previous version, the DOH client follows the system proxy settings. From this version, all DOH requests will use DIRECT policy by default. If 'doh-follow-outbound-mode' is set, the DOH requests will follow the outbound mode settings regardless of the system proxy settings.
Bug fixes and stability improvements
version 4.2.1
posted on 2020-04-28
28 Apr 2020 Version 4.2.1
New Feature: Enhanced Wi-Fi Assist
- Surge will try to set up a connection with cellular data when the Wi-Fi network is poor.
Changes in DNS-over-HTTPS
- From this version, if DNS-over-HTTPS is configured, the traditional DNS will only be used to test the connectivity and resolve the domain in the DOH URL.
- The DNS over HTTPS now has a separate parameter: doh-server. The DOH servers in 'dns-server' will be moved to the new parameter after saving.
- The legacy DNS is always required now.
- DOH can be matched with rule 'PROTOCOL,DOH' now.
- Added a new parameter 'doh-follow-outbound-mode'. In the previous version, the DOH client follows the system proxy settings. From this version, all DOH requests will use DIRECT policy by default. If 'doh-follow-outbound-mode' is set, the DOH requests will follow the outbound mode settings regardless of the system proxy settings.
Bug fixes and stability improvements
version 4.2.0
posted on 2020-04-17
Apr 17, 2020 Version 4.2.0
New Feature: Module
Module is a set of settings to override the current profile. You may use modules to:
- Tweak settings in a non-editable profile, such as managed profile and enterprise profile.
- Change part of settings with one tap. For example, you may use a module to enable MitM for all hostnames and adjust the filter temporarily.
- Use a module written by others to accomplish a particular task. For example, your co-work may share with you a module that rewrites the API requests to a test server.
- When you share one profile among devices, some settings might need modifying for different scenarios. The enabling state of modules won't be synced to other devices, so you can use a module to fulfill.
Minor Improvements:
- Added a new rule type: PROTOCOL.
- Improved the MITM CA certificate install assistant.
- You may now use UI to configure a load-balance policy group.
- You may now use UI to configure SSID suspend.
- Bug fixes.
version 4.1.0
posted on 2020-03-30
Mar 30, 2020 Version 4.1.0
New Features:
- Remote Controller
You may use Surge iOS to control Surge Mac/iOS on another device remotely now.
- Script Editor
The script editor can help you edit and test the script on the device.
- TLS Engine
Surge now offers 3 different TLS engine provider options: Secure Transport, OpenSSL, and Network Framework.
Improvements in Proxy Protocol:
- Surge now supports Snell v2 proxy protocol with TCP connection reuse, which can reduce the latency significantly.
- Surge now supports Trojan protocol.
- You may use AES-128-GCM cipher for VMess and Snell protocol.
Minor Improvements:
- An enhanced profile text editor.
- You may open a GET request in Safari now.
- The comment lines in the text profile won't be deleted after editing with UI.
Bug Fixes
- Fixed a bug that Surge may not be able to process DNS response packets lager than 512 bytes.
- Fixed a bug that the UDP broadcast might fail to work in some apps.
version 4.3.2
posted on 1970-01-01
2020年6月25日 Version 4.3.2
Improvements for the latest iOS system.
version 4.2.1
posted on 1970-01-01
2020年4月28日 Version 4.2.1
New Feature: Enhanced Wi-Fi Assist
- Surge will try to set up a connection with cellular data when the Wi-Fi network is poor.
Changes in DNS-over-HTTPS
- From this version, if DNS-over-HTTPS is configured, the traditional DNS will only be used to test the connectivity and resolve the domain in the DOH URL.
- The DNS over HTTPS now has a separate parameter: doh-server. The DOH servers in 'dns-server' will be moved to the new parameter after saving.
- The legacy DNS is always required now.
- DOH can be matched with rule 'PROTOCOL,DOH' now.
- Added a new parameter 'doh-follow-outbound-mode'. In the previous version, the DOH client follows the system proxy settings. From this version, all DOH requests will use DIRECT policy by default. If 'doh-follow-outbound-mode' is set, the DOH requests will follow the outbound mode settings regardless of the system proxy settings.
Bug fixes and stability improvements