No reviews yet. Be the first to share your experience!
Latest Posts
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.14.0-alpha.10 has been released.
* Add evaluate DNS rule action and Response Match Fields 1
* ip_version and query_type now also take effect on internal DNS lookups 2
* Add package_name_regex route, DNS and headless rule item 3
* Add cloudflared inbound 4
* Fixes and improvements
1:
Response Match Fields ( https://sing-box.sagernet.org/configuration/dns/rule/#response_rcode, https://sing-box.sagernet.org/configuration/dns/rule/#response_answer, https://sing-box.sagernet.org/configuration/dns/rule/#response_ns, and https://sing-box.sagernet.org/configuration/dns/rule/#response_extra) match the evaluated DNS response. They are gated by the new https://sing-box.sagernet.org/configuration/dns/rule/#match_response field and populated by a preceding https://sing-box.sagernet.org/configuration/dns/rule_action/#evaluate DNS rule action; the evaluated response can also be returned directly by a https://sing-box.sagernet.org/configuration/dns/rule_action/#respond action.
This deprecates the Legacy Address Filter Fields (ip_cidr, ip_is_private without match_response) in DNS rules, the Legacy strategy DNS rule action option, and the Legacy rule_set_ip_cidr_accept_empty DNS rule item; all three will be removed in sing-box 1.16.0. See https://sing-box.sagernet.org/migration/#migrate-address-filter-fields-to-response-matching.
2:
ip_version and query_type in DNS rules, together with query_type in referenced rule-sets, now take effect on every DNS rule evaluation, including matches from internal domain resolutions that do not target a specific DNS server (for example a resolve route rule action without server set). In earlier versions they were silently ignored in that path. Combining these fields with any of the legacy DNS fields deprecated in 1 in the same DNS configuration is no longer supported and is rejected at startup. See https://sing-box.sagernet.org/migration/#ip_version-and-query_type-behavior-changes-in-dns-rules.
3:
See https://sing-box.sagernet.org/configuration/route/rule/#package_name_regex, https://sing-box.sagernet.org/configuration/dns/rule/#package_name_regex and https://sing-box.sagernet.org/configuration/rule-set/headless-rule/#package_name_regex.
4:
See https://sing-box.sagernet.org/configuration/inbound/cloudflared/.
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.10
3,650
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.13.6 and 1.14.0-alpha.9 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.6
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.9
4,160
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.13.4 and 1.14.0-alpha.7 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.4
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.7
7,190
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.13.5 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.5
5,990
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.14.0-alpha.8 has been released.
* Add BBR profile and hop interval randomization for Hysteria2 1
* Fixes and improvements
1:
See https://sing-box.sagernet.org/configuration/inbound/hysteria2/#bbr_profile and https://sing-box.sagernet.org/configuration/outbound/hysteria2/#bbr_profile.
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.8
6,350
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.13.4-beta.1 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.4-beta.1
4,840
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.14.0-alpha.4 has been released.
* Refactor ACME support to certificate provider system 1
* Add Cloudflare Origin CA certificate provider 2
* Add Tailscale certificate provider 3
* Fixes and improvements
1:
See https://sing-box.sagernet.org/configuration/shared/certificate-provider/ and https://sing-box.sagernet.org/migration/#migrate-inline-acme-to-certificate-provider.
2:
See https://sing-box.sagernet.org/configuration/shared/certificate-provider/cloudflare-origin-ca.
3:
See https://sing-box.sagernet.org/configuration/shared/certificate-provider/tailscale.
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.4
7,120
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.13.3-beta.1 and 1.14.0-alpha.2 has been released.
* Add OpenWrt and Alpine APK packages to release 1
* Backport to macOS 10.13 High Sierra 2
* OCM service: Add WebSocket support for Responses API 3
* Fixes and improvements
1:
Alpine APK files use linux in the filename to distinguish from OpenWrt APKs which use the openwrt prefix:
- OpenWrt: sing-box_{version}_openwrt_{architecture}.apk
- Alpine: sing-box_{version}_linux_{architecture}.apk
2:
Legacy macOS binaries (with -legacy-macos-10.13 suffix) now support
macOS 10.13 High Sierra, built using Go 1.25 with patches
from https://github.com/SagerNet/go.
3:
See https://sing-box.sagernet.org/configuration/service/ocm.
https://github.com/SagerNet/sing-box/releases/tag/v1.13.3-beta.1
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.2
6,570
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.12.25, 1.13.3 and 1.14.0-alpha.3 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.12.25
https://github.com/SagerNet/sing-box/releases/tag/v1.13.3
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.3
6,250
0
0
Yet Another Public Notification Channel
May 21, 2026, 09:39 AM
sing-box 1.14.0-alpha.1 has been released.
* Add source_mac_address and source_hostname rule items 1
* Add include_mac_address and exclude_mac_address TUN options 2
* Update NaiveProxy to 145.0.7632.159 3
* Fixes and improvements
1:
New rule items for matching LAN devices by MAC address and hostname via neighbor resolution.
Supported on Linux, macOS, or in graphical clients on Android and macOS.
See https://sing-box.sagernet.org/configuration/route/rule/#source_mac_address, https://sing-box.sagernet.org/configuration/dns/rule/#source_mac_address and https://sing-box.sagernet.org/configuration/shared/neighbor/.
2:
Limit or exclude devices from TUN routing by MAC address.
Only supported on Linux with auto_route and auto_redirect enabled.
See https://sing-box.sagernet.org/configuration/inbound/tun/#include_mac_address.
3:
This is not an official update from NaiveProxy. Instead, it's a Chromium codebase update maintained by Project S.
https://github.com/SagerNet/sing-box/releases/tag/v1.14.0-alpha.1
5,500
0
Yet Another Public Notification Channel
May 6, 2026, 11:03 PM
sing-box 1.12.24 and 1.13.1 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.12.24
https://github.com/SagerNet/sing-box/releases/tag/v1.13.1
4,250
0
0
Yet Another Public Notification Channel
May 6, 2026, 11:03 PM
sing-box 1.13.2 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.2
4,040
0
0
Yet Another Public Notification Channel
Apr 19, 2026, 11:21 PM
11:
Matches outbounds' preferred routes.
For Tailscale: MagicDNS domains and peers' allowed IPs. For WireGuard: peers' allowed IPs.
12:
The local DNS server now uses platform-native resolution:
getaddrinfo/libresolv on Apple platforms, systemd-resolved DBus on Linux.
A new prefer_go option is available to opt out.
See https://sing-box.sagernet.org/configuration/dns/server/local/.
13:
The default TCP keep-alive initial period has been updated from 10 minutes to 5 minutes.
See https://sing-box.sagernet.org/configuration/shared/dial/#tcp_keep_alive.
14:
Adds the Linux socket option IP_BIND_ADDRESS_NO_PORT support when explicitly binding to a source address.
This allows reusing the same source port for multiple connections, improving scalability for high-concurrency proxy scenarios.
See https://sing-box.sagernet.org/configuration/shared/dial/#bind_address_no_port.
15:
Tailscale endpoint can now create a system TUN interface to handle traffic directly.
New relay_server_port and relay_server_static_endpoints options for incoming relay connections.
See https://sing-box.sagernet.org/configuration/endpoint/tailscale/.
16:
CCM (Claude Code Multiplexer) service allows you to access your local Claude Code subscription remotely through custom tokens, eliminating the need for OAuth authentication on remote clients.
See https://sing-box.sagernet.org/configuration/service/ccm.
17:
See https://sing-box.sagernet.org/configuration/service/ocm.
18:
Due to maintenance difficulties, sing-box 1.13.0 requires at least Go 1.24 to compile.
19:
Due to maintenance difficulties, sing-box 1.13.0 will be the last version to support Android 5.0,
and only through a separate legacy build (with -legacy-android-5 suffix).
For standalone binaries, the minimum Android version has been raised to Android 6.0,
since Termux requires Android 7.0 or later.
20:
This update fixes missing padding extension for Chrome 120+ fingerprints.
Also, documentation has been updated with a warning about uTLS fingerprinting vulnerabilities.
uTLS is not recommended for censorship circumvention due to fundamental architectural limitations;
use NaiveProxy instead for TLS fingerprint resistance.
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0
Yet Another Public Notification Channel
Apr 19, 2026, 11:21 PM
sing-box 1.13.0 has been released.
Important changes since 1.12:
* Add NaiveProxy outbound 1
* Add pre-match support for auto_redirect 2
* Improve auto_redirect 3
* Add Chrome Root Store certificate option 4
* Add new options for ACME DNS-01 challenge providers 5
* Add Wi-Fi state support for Linux and Windows 6
* Add curve preferences, pinned public key SHA256, mTLS and ECH query_server_name for TLS options 7
* Add kTLS support 8
* Add ICMP echo (ping) proxy support 9
* Add interface_address, network_interface_address and default_interface_address rule items 10
* Add preferred_by route rule item 11
* Improve local DNS server 12
* Add disable_tcp_keep_alive, tcp_keep_alive and tcp_keep_alive_interval options for listen and dial fields 13
* Add bind_address_no_port option for dial fields 14
* Add system interface and relay server options for Tailscale endpoint 15
* Add Claude Code Multiplexer service 16
* Add OpenAI Codex Multiplexer service 17
* Apple/Android: Refactor GUI
* Apple/Android: Add support for sharing configurations via https://github.com/qifi-dev/qrs
* Android: Add support for resisting VPN detection via Xposed
* Drop support for go1.23 18
* Drop support for Android 5.0 19
* Update uTLS to v1.8.2 20
* Update quic-go to v0.59.0
* Update gVisor to v20250811
* Update Tailscale to v1.92.4
1:
NaiveProxy outbound now supports QUIC, ECH, UDP over TCP, and configurable QUIC congestion control.
Only available on Apple platforms, Android, Windows and some Linux architectures.
Each Windows release includes libcronet.dll —
ensure this file is in the same directory as sing-box.exe or in a directory listed in PATH.
See https://sing-box.sagernet.org/configuration/outbound/naive/.
2:
auto_redirect now allows you to bypass sing-box for connections based on routing rules.
A new rule action bypass is introduced to support this feature. When matched during pre-match, the connection will bypass sing-box and connect directly.
This feature requires Linux with auto_redirect enabled.
See https://sing-box.sagernet.org/configuration/shared/pre-match/ and https://sing-box.sagernet.org/configuration/route/rule_action/#bypass.
3:
auto_redirect now rejects MPTCP connections by default to fix compatibility issues.
You can change it to bypass sing-box via the new exclude_mptcp option.
Adds a fallback iproute2 rule checked after system default rules (32766: main, 32767: default),
ensuring traffic is routed to the sing-box table when no route is found in system tables.
The rule index can be customized via auto_redirect_iproute2_fallback_rule_index (default: 32768).
See https://sing-box.sagernet.org/configuration/inbound/tun/#exclude_mptcp.
4:
Adds chrome as a new certificate store option alongside mozilla.
Both stores filter out China-based CA certificates.
See https://sing-box.sagernet.org/configuration/certificate/#store.
5:
See https://sing-box.sagernet.org/configuration/shared/dns01_challenge/.
6:
sing-box can now monitor Wi-Fi state on Linux and Windows to enable routing rules based on wifi_ssid and wifi_bssid.
See https://sing-box.sagernet.org/configuration/shared/wifi-state/.
7:
See https://sing-box.sagernet.org/configuration/shared/tls/.
8:
Adds kernel_tx and kernel_rx options for TLS inbound.
Enables kernel-level TLS offloading via splice(2) on Linux 5.1+ with TLS 1.3.
See https://sing-box.sagernet.org/configuration/shared/tls/.
9:
sing-box can now proxy ICMP echo (ping) requests.
A new icmp network type is available for route rules.
Supported from TUN, WireGuard and Tailscale inbounds to Direct, WireGuard and Tailscale outbounds.
The reject action can also reply to ICMP echo requests.
10:
New rule items for matching based on interface IP addresses, available in route rules, DNS rules and rule-sets.
Yet Another Public Notification Channel
Apr 19, 2026, 11:21 PM
sing-box 1.12.22 and 1.13.0-rc.4 has been released.
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.12.22
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-rc.4
5,410
0
0
Yet Another Public Notification Channel
Apr 19, 2026, 11:21 PM
sing-box 1.12.7 and 1.13.0-beta.6 has been released.
* Update uTLS to v1.8.2 1
* Fixes and improvements
1:
This update fixes missing padding extension for Chrome 120+ fingerprints.
Also, documentation has been updated with a warning about uTLS fingerprinting vulnerabilities.
uTLS is not recommended for censorship circumvention due to fundamental architectural limitations;
use NaiveProxy instead for TLS fingerprint resistance.
https://github.com/SagerNet/sing-box/releases/tag/v1.12.17
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.6
10,900
0
0
Yet Another Public Notification Channel
Apr 7, 2026, 05:02 PM
sing-box 1.13.0-beta.2 has been released.
* Add bind_address_no_port option for dial fields 1
* Fixes and improvements
1:
Adds the Linux socket option IP_BIND_ADDRESS_NO_PORT support when explicitly binding to a source address.
This allows reusing the same source port for multiple connections, improving scalability for high-concurrency proxy scenarios.
See https://sing-box.sagernet.org/configuration/shared/dial/#bind_address_no_port.
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.2
8,970
0
0
Yet Another Public Notification Channel
Apr 7, 2026, 05:02 PM
sing-box 1.13.0-beta.4 has been released.
* Apple/Android: Add support for sharing configurations via https://github.com/qifi-dev/qrs
* Android: Add support for resisting VPN detection via Xposed
* Update quic-go to v0.59.0
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.4
9,860
0
0
Yet Another Public Notification Channel
Apr 7, 2026, 05:02 PM
sing-box 1.13.0-alpha.35 has been released.
* Add pre-match support for auto_redirect 1
* Fixes and improvements
1:
auto_redirect now allows you to bypass sing-box for connections based on routing rules.
A new rule action bypass is introduced to support this feature. When matched during pre-match, the connection will bypass sing-box and connect directly.
This feature requires Linux with auto_redirect enabled.
See https://sing-box.sagernet.org//configuration/shared/pre-match/ and https://sing-box.sagernet.org//configuration/route/rule_action/#bypass.
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.35
9,160
0
0
Yet Another Public Notification Channel
Apr 7, 2026, 05:02 PM
sing-box 1.13.0-alpha.36 has been released.
* Downgrade quic-go to v0.57.1
* Fixes and improvements
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.36
9,080
0
0
Yet Another Public Notification Channel
Apr 7, 2026, 05:02 PM
sing-box 1.13.0-beta.1 has been released.
* Add system interface support for Tailscale endpoint 1
* Fixes and improvements
1:
Tailscale endpoint can now create a system TUN interface to handle traffic directly.
See https://sing-box.sagernet.org/configuration/endpoint/tailscale/#system_interface.
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.1
