REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions https://github.com/XTLS/Xray-core/pull/4915 & TLS client & server: Support ECH https://github.com/XTLS/Xray-core/pull/3813

REALITY 抗量子更新第二弹来袭！本次更新为 REALITY 协议加上了可选的、抗量子的 ML-DSA-65 签名验签机制，向后兼容，详情见 https://github.com/XTLS/Xray-core/pull/4915 ，注意目标网站证书链总长度需 3500+，VLESS 分享链接标准 https://github.com/XTLS/Xray-core/discussions/716 已更新 REALITY pqv

该版本修复了 post-handshake records 的日志问题 https://github.com/XTLS/Xray-core/issues/4845 、端口范围问题 https://github.com/XTLS/Xray-core/issues/4843 ，将启动时探测改为并发并优化了缓存机制 https://github.com/XTLS/REALITY/commit/e62c4aed0d577e9e42578d3b229cf7a256534cda 、改为用三种 ALPN 进行探测 https://github.com/XTLS/REALITY/commit/05a351a645211662691aeac82a9e328ef628eccc ，已经 cover 绝大多数客户端指纹

时机成熟后，该版本终于合并了 TLS ECH 功能 https://github.com/XTLS/Xray-core/pull/3813 ，文档见 TLSObject ，VLESS 分享链接标准 https://github.com/XTLS/Xray-core/discussions/716 已更新 TLS ech

该版本还新增了一些功能，比如 @Fangliding 给 DNS 出站的 nonIPQuery 加了 "reject" 以对非 IP 查询回复拒绝包 https://github.com/XTLS/Xray-core/pull/4824 ，该版本还含有大量修复，据 @patterniha 称 Serverless-for-Iran-Anti-Sanctions 终于等齐了所有新功能和修复，即将更新

NFT

本次久违地放出了一些 REALITY NFT 和几个 Project X NFT

请支持一个 REALITY NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/2

如果你有余力，请支持一个 Project X NFT：https://opensea.io/assets/ethereum/0x5ee362866001613093361eb8569d59c4141b76d1/1

该版本升级了一些依赖，并使用 Go 1.24.5 编译，已 tag v1.250726.0，感谢所有贡献者，详见下方 change log

What's Changed

• BurstObservatory: add option to set http method for burst check by @Jolymmiles @Fangliding in https://github.com/XTLS/Xray-core/pull/4835
• API: Fix issue with inbounduser not finding emails with uppercase letters by @fL1pSt3r in https://github.com/XTLS/Xray-core/pull/4818
• DNS: Add new nonIPQuery "reject" by @Fangliding in https://github.com/XTLS/Xray-core/pull/4824
• common: fix task leak in timer by @isluckys in https://github.com/XTLS/Xray-core/pull/4831
• API: add option to fetch only tags from ListInbounds by @Jolymmiles in https://github.com/XTLS/Xray-core/pull/4870
• Bump quic-go to v0.53.0 & update codes by @xDragonZ in https://github.com/XTLS/Xray-core/pull/4906
• REALITY server: Three types of ALPN for post-handshake records detection & imitation; Two fixes by @RPRX in https://github.com/XTLS/Xray-core/commit/1785178762eda8edb3d594e6c2b14761fdd66ca9
• README.md: Add AnyPortal to GUI Clients by @AnyPortal in https://github.com/XTLS/Xray-core/pull/4902
• VLESS fallbacks: dest defaults to "127.0.0.1" -> "localhost" by @xqzr in https://github.com/XTLS/Xray-core/pull/4840
• Commands: Display Post-Quantum key exchange in tls ping by @Fangliding in https://github.com/XTLS/Xray-core/pull/4857
• Stats API: Return status "not found" instead of "unknown" by @M03ED in https://github.com/XTLS/Xray-core/pull/4860
• Workflows: Cleaner Docker builds, support for manual exec and pre-release by @Meo597 in https://github.com/XTLS/Xray-core/pull/4809
• DNS outbound: Prevent panic from rejecting invalid domain by @Fangliding in https://github.com/XTLS/Xray-core/pull/4903
• REALITY protocol: Add optional Post-Quantum ML-DSA-65 verification for cert's ExtraExtensions by @RPRX in https://github.com/XTLS/Xray-core/pull/4915
• Freedom: Cache UDP resolve result by @Fangliding in https://github.com/XTLS/Xray-core/pull/4804
• Freedom: Fix UDP reply mismatch-address by @patterniha in https://github.com/XTLS/Xray-core/pull/4816
• MUX: Refine and Fix some occasional problems by @patterniha in https://github.com/XTLS/Xray-core/pull/4861
• Reverse: portal-worker should not be closed before making sure there is at least one other active worker by @patterniha in https://github.com/XTLS/Xray-core/pull/4869
• UDP: Fix removeRay will close a connEntry that not belongs to it by @Fangliding in https://github.com/XTLS/Xray-core/pull/4899
• DNS hosts: Support returning RCode by @j2rong4cn in https://github.com/XTLS/Xray-core/pull/4681
• README.md: Add Happ to macOS x64 & tvOS Clients by @mangustyura @RPRX in https://github.com/XTLS/Xray-core/pull/4921
• README.md: Add GoXRay to macOS & Linux Clients by @garstas @RPRX in https://github.com/XTLS/Xray-core/pull/4260
• README.md: Add Project X NFT's image & link by @RPRX in https://github.com/XTLS/Xray-core/commit/a196a16c55b5d6323ea612a8df54119b9fe95a83
• Update github.com/xtls/reality to 20250723121014 by @RPRX in https://github.com/XTLS/Xray-core/commit/4433641e30dab19ce6655e6e7fffc61cf29ac01f
• Chore: Three small fixes by @patterniha in https://github.com/XTLS/Xray-core/pull/4922
• REALITY config: Allow mldsa65 fields to be empty by @Fangliding in https://github.com/XTLS/Xray-core/pull/4924
• REALITY config: Convert mldsa65Seed to its private key later by @RPRX in https://github.com/XTLS/Xray-core/commit/31b508d372da061fd1d55e130f323a4343963843
• README.md: Update Donation & NFTs by @RPRX in https://github.com/XTLS/Xray-core/commit/26de58933f04a0d8539607b0fd75b44cbdbbd2c3
• REALITY client: Fix log when printing "is using X25519MLKEM768..." by @Fangliding in https://github.com/XTLS/Xray-core/pull/4929
• Commands: Output certificate chain's total length in tls ping by @Fangliding @RPRX in https://github.com/XTLS/Xray-core/pull/4933
• Inbounds & Outbounds: TCP KeepAlive better default value by @Fangliding in https://github.com/XTLS/Xray-core/pull/4931
• Update github.com/xtls/reality to 20250725142056 by @RPRX in https://github.com/XTLS/Xray-core/commit/caee152adf5f5d0a9fa216069494514cade846a1
• UDP: Remove removeRay()'s error log by @Fangliding in https://github.com/XTLS/Xray-core/pull/4936
• Workflows: Fix github.ref_name sometimes is empty when building Docker images by @Meo597 in https://github.com/XTLS/Xray-core/pull/4937
• UDP listener: Allow listening on "localhost" by @Fangliding in https://github.com/XTLS/Xray-core/pull/4940
• Freedom UDP: Fix some cone uses like STUN,... when address is domain by @patterniha in https://github.com/XTLS/Xray-core/pull/4942
• REALITY config: mldsa65Seed and privateKey can not be the same value by @RPRX in https://github.com/XTLS/Xray-core/commit/5f93ff6c3a97deef7f6bcf5a41adb466da4a81a0
• Commands: Add adu/rmu inbound user management to API by @vrnobody in https://github.com/XTLS/Xray-core/pull/4943
• TLS client & server: Support Encrypted Client Hello (ECH) by @Fangliding @yuhan6665 in https://github.com/XTLS/Xray-core/pull/3813

New Contributors

• @Jolymmiles made their first contribution in https://github.com/XTLS/Xray-core/pull/4835
• @fL1pSt3r made their first contribution in https://github.com/XTLS/Xray-core/pull/4818
• @xDragonZ made their first contribution in https://github.com/XTLS/Xray-core/pull/4906
• @AnyPortal made their first contribution in https://github.com/XTLS/Xray-core/pull/4902
• @M03ED made their first contribution in https://github.com/XTLS/Xray-core/pull/4860
• @garstas made their first contribution in https://github.com/XTLS/Xray-core/pull/4260

Full Changelog: https://github.com/XTLS/Xray-core/compare/v25.6.8...v25.7.26