Updates 2.6.7

Updates 2.6.7

This version fixes bug in 2.6.6 and added the static web server features

• Fixed multidomain missing logic (by @daluntw )
• Added Static Web Server function
• Web Directory Manager
• Added static web server and black / whitelist template
• Added default / preferred Ca features
• Added Service Expose Proxy dummy page
• Optimized TLS/SSL page and added dedicated section for ACME related features

Working with Templates

To add templates to black / whitelist, create a html file under the blacklist / whitelist folder. By default, the templates should be placed at the following paths.

./www/templates/blacklist.html
./www/templates/whitelist.html

If the template is not found, the build in one will be used.

Static Web Server Notes

Web directory can only be changed via startup parameter -webroot due to security reasons. You can manage your web directory and perform some basic file operations like rename, upload, download, copy / cut and delete via the web directory manager which is basically a trim down version of the ArozOS File Manager.

If you do not want to expose your web directory to the web interface due to security concerns, use -webfm=false in your startup parameter to disable the feature. This will disable all api related to the file manager in the back-end server.

Updates 2.6.6

Updates 2.6.6

This version fixes some bugs in 2.6.5 and added a few minor new features.

• Added basic auth editor custom exception rules
• Fixed redirection bug under another reverse proxy and Apache location headers
• Optimized memory usage (from 1.2GB to 61MB for low speed geoip lookup mode or 650MB for high speed mode, see technical notes below)
• Added unset subdomain custom redirection feature
• Fixed potential security issue in satori/go.uuid

By @daluntw

• Added custom acme feature in back-end
• Added bypass TLS check for custom acme server

Notes regarding low / high speed GeoIP lookup mode

Zoraxy will try to resolve and store the visitors country of origin in its statistic collector. As requested by users regarding the memory usage issue, we added a low speed mode for GeoIP lookup logic to reduce memory usage by space time tradeoff. The low speed mode (default mode) of GeoIP lookup will slow down each request by around 6ms, which is not significant in homelab / self hosting environment. However, if you plan to use Zoraxy in production environment, you can enable to high speed mode by using -fastgeoip=true. We also optimized the high speed mode data structure so it now use around 600 - 700MB of RAM instead of 1.2GB. If your server have that capacity to run in high speed mode, we generally recommend using high speed mode for better user experience.

Updates 7 Sept 2023

A quick patch has been applied to the binary and fixed a minor UI bug that causes the backend to generate stating certificates (See issue #61 ). If you are using old version of v2.6.6, it is recommend that you download the new binary and overwrite the old one.

Updates 2.6.5

Updates v2.6.5

This is a beta testing build for Zoraxy and already been using in my homelab environment. You can try to deploy this to your production environment at your own risk.

IMPORTANT NOTES BEFORE UPDATE
The config files are moved to the following folders in this update. You can backup the old folders and restore them in the location below if you are too lazy to set it up again.

conf/*.conf -> conf/proxy/*.conf
certs/ -> conf/certs/
rules/redirect/ -> conf/redirect/
authtoken.secret -> conf/authtoken.secret
rules/acme_conf.json -> conf/acme_conf.json

Update 25 Aug 2023
For those who are using docker, here is a message from @PassiveLemon

Breaking Changes:
File structure change requires you to update the volume mount for the configurations. It should be changed to `/opt/zoraxy/config/`
The management port is no longer changeable. This is to allow for a healthcheck.

Changes:
Healthcheck was added. See breaking changes above.
Notifier was removed.
VERSION variable is no longer configurable.

• Added Import / Export-Feature
• Moved configurationfiles to a separate folder #26
• Added auto-renew with ACME #6
• Fixed Whitelistbug #18
• Added Whois

The runtime memory usage of this build should be around 1.2GB which is normal and not memory leak. We are still trying to figure out a way to reduce runtime RAM usage while keeping the web interface embedded. Ideas and PR are always welcomed!

Updates 2.6.4

IMPORTANT NOTES BEFORE UPDATE
If you are updating from 2.6.3, your redirection rules will be gone. Please make a backup for all the json files inside rules/(rule_names).json and restore it later after update to rules/redirect/(rule_names).json

• Added force TLS v1.2 above toggle
• Added trace route
• Added ICMP ping
• Added special routing rules module for up-coming acme integration
• Fixed IPv6 check bug in black/whitelist
• Optimized UI for TCP Proxy

As there are many screwed up anti-virus software complains UPX compression, the upx compression workflow was removed from the build process. If you need to deploy Zoraxy on embedded machines, it is still recommend that you compress the binary with upx to save some spaces.

Updates 2.6.3

• Added X-Forwarded-Proto for automatic proxy detector
• Split blacklist and whitelist from geodb script file
• Fixed whitelist CIDR and wildcard matching logic for issue #18
• Optimized compile binary size
• Added access control to TCP proxy
• Added "invalid config detect" in up time monitor for issue #7
• Fixed minor bugs in advance stats panel
• Reduced file size of embedded materials

From this version onward, releases are compressed by upx to save spaces on embedded devices (except riscv64 builds, seems upx doesn't support it yet)

Zoraxy v2.6.2 (Nightly)

Change Log

• Added TCP Proxy
• Added advance stats operation tab
• Added statistic reset
• Added statistic export to csv and json (please use json)
• Make subdomain clickable (not vdir)
• Updates SMTP setup UI to make it more straight forward to setup

Remarks
TCP Proxy is currently tested with HTTP / HTTPS proxy and Minecraft only.
If you encounter issues with the implementation, please ping @cw1997 to help fix it as I reference the design (aka copy) of the TCP proxy features from here

Zoraxy v2.6.1 (Nightly)

Change Log

• Added reverse proxy TLS skip verification
• Added basic auth
• Edit proxy settings
• Whitelist
• TCP Proxy (experimental)
• System Info (Utilities page scroll to bottom to see your current Zoraxy version)
• Added trend analysis
• Added referer and file type analysis
• Added cert expire day display
• Moved subdomain proxy logic to dpcore
• Fixed IPv6 extraction logic from headers
• Added cert merging tool for issue #10 (2)
• Updated a new zoraxy default cert (you still need to upload your own though)

Zoraxy v2.5 (Nightly)

Experimental preview of the zoraxy 2.5 nightly
DO NOT USE IN PRODUCTION

• Information Rendering and Analytics functions
• Added wip TCP proxy interface (Not functional)
• Fixed some bugs

Zoraxy v2.4 (Nightly)

Experimental preview of the zoraxy 2.4 nightly
DO NOT USE IN PRODUCTION

• Collecting request user UserAgent and request URL
• Fixed https proxy to remote domain
• Optimized concurrent connection for speed

Zoraxy v2.3 (Nightly)

Experimental preview of the zoraxy 2.3 nightly
DO NOT USE IN PRODUCTION

• Fixed Location header invalid rewrite logic
• Fixed wordpress reverse proxy Host detection issue
• Improved speed
• More concurrent connections
• Updated graph render logic and buffers to 5 minutes of netstats
• Optimized geoip lookup to O(1) speed