LxBox v2.25.4 发布
已发布 v2.25.4，以下为官方变更日志。
官方变更日志@L×Box v2.25.4
A patch on top of v2.25.3.
The core moves to v1.14.2-lx.1. WireGuard and AmneziaWG servers no longer hold
memory until traffic actually goes through them, and two new settings control
this. The Ru internet segment preset now routes Russian apps by package name.
The server list uses two columns on a tablet. A subscription that repeats the
same server no longer shows it twice.Патч поверх v2.25.3.
Ядро обновлено до v1.14.2-lx.1. Серверы WireGuard и AmneziaWG больше не
держат память, пока через них не пошёл трафик, и этим управляют две новые
настройки. Пресет «Ru internet segment» теперь ведёт российские приложения
по имени пакета. На планшете список серверов идёт в две колонки. Подписка,
повторяющая один и тот же сервер, больше не показывает его дважды.🇬🇧 English
⚠️ Read before updating
- Duplicate servers in one subscription are collapsed. If a subscription
lists the same server several times under different names, the list keeps
one server per configuration (the first one). The rest are skipped and
marked duplicate with a “Duplicate of ” note. Only entries inside one
subscription or one import are compared.
- At most 5 WireGuard/AmneziaWG tunnels are kept built at a time by default.
A server over the limit may show ERR on a latency check while it waits for
a free slot, and the selected server may be torn down to free a slot.
VPN Settings → System → WireGuard connections → Built tunnels limit →
0 (no limit) removes the cap.✨ Added
- Russian apps by package in the Ru internet segment preset. A fourth rule
set, ru-app-list (by legiz-ru), matches a connection by the Android package
name rather than by domain or IP. Banking and government apps that go through
third-party CDNs or by bare IP used to miss both the domain and the IP sets and
ended up in the tunnel; now they go direct. The checkbox Russian apps by
package is on by default; the set is downloaded when first enabled.
Unchecking it leaves domains and IPs as they are
(#116).
- Two columns of servers on wide screens. From 600 dp of window width the
server list on the home screen goes into two columns; narrower screens keep
one. The layout follows rotation and split screen on the fly. Manual sort
stays in one column, since drag and drop only works there
(#134).
- Appearance tab in App Settings. Theme, language and Allow rotation
moved here from General. The Layout section also has Two columns on wide
screens (on by default). Changes apply immediately and are included in the
backup.
- Per-app summary in the log with Verbose on. When Verbose (TRACE/DEBUG) is
enabled on the Diagnostics tab, each tunnel start writes one per-app: line
to Logs: allow or deny mode, allow_bypass, the packages applied and the ones
not installed on the device.
- Lazy tunnel build and Built tunnels limit. VPN Settings → System →
WireGuard connections. Lazy tunnel build (on by default) builds a
WireGuard/AmneziaWG tunnel on first use. Built tunnels limit sets how many
stay built at once: 0 (no limit), 3, 5, 8, 12; default 5. Both need
Suspend idle tunnels on; the limit also needs lazy build. Applied on the
next connect.🔄 Changed
- Core v1.14.2-lx.1. A network change (Wi-Fi ↔ mobile) no longer resets the
tunnel on every system notification, only on a real interface change: fewer
drops on the move. The disabled UDP GSO lines that filled the log of a
working AmneziaWG server are gone; connectivity was never affected
(#95).
- WireGuard/AmneziaWG servers take no memory until used. Previously every
WG/AWG server in storage got a device with about 17.5 MB of receive buffers at
tunnel start. Now a server starts unbuilt and is built on first use. On a test
setup with eleven AWG servers the core's live memory fell from 113 MB to
53 MB. The cost is half a second to a second on the first switch to a server.
The Auto group probes all its members at start and builds them, so there the
saving comes from the limit.
- WireGuard/AmneziaWG server state in one word. The server row shows up,
sleep or down instead of “Node asleep” / “Node not built yet”. The full
core state and idle time are in Endpoint state on the Details screen from
the server menu.
- Copy link follows the common scheme format. VLESS always carries
security, including security=reality (other Xray clients read its absence
as “no encryption”). NaiveProxy keeps port 443. AnyTLS writes insecure
instead of allowInsecure. Shadowsocks has no trailing =. VLESS drops the
default fp=random; other fingerprints are kept. TUIC writes
reducertt=true instead of reducertt=1. Reading has not changed: links
saved earlier or received from other clients parse as before.
- The preset “Russian domains & IPs” is renamed “Ru internet segment”. The
preset id is the same, saved rules expand as before.
🩹 Fixes
- Proxy mode no longer asks about another active VPN. In Proxy mode (local
port only, no tunnel) Start showed “Another VPN is active. Switch to L×Box?”,
although the other VPN is not revoked in this mode. The question now appears
only in VPN and VPN+Proxy modes
(#126).
- Duplicate servers in one subscription. A subscription sent the same AWG
server twice, as an amneziawg:// line and as a vpn:// link, and the list
showed two identical servers. See the warning above.
- An unchecked rule set in the Ru internet segment preset no longer switches
off the whole rule. The GeoIP IP-range fallback and Russian apps by
package checkboxes were only honoured by config build; the Routing screen,