Fixed

• TTL override calculation.

Changed

• quic-go update: fields QUICConnection and QUICStream of proxy.DNSContext type are now pointer to structs.

Removed

• The previously deprecated function fastip.NewFastestAddr.

Fixed

• Opened listeners are now closed on failed start.

Changed

• Improved logging.
• Updated gonum dependency.

Fixed

• The custom cache provided through DNSContext is now utilized even when the global cache is disabled.

Acknowledgements

Special thanks to Xiang Li for reporting the vulnerability.

Security

• New configuration object PendingRequestsConfig for configuring the cache poisoning attack mitigation. By default, proxy.Proxy will now track all simultaneous duplicate requests, and only perform a single lookup for them.

Added

• New type BindRetryConfig for configuring listen addresses binding retry mechanism.

Changed

• The minimum required version of Go has been increased to 1.24.

Added

• The DNSContext.QueryStatistics method that returns the DNS query statistics for both the upstream and fallback DNS servers.

Changed

• Positional (non-flag) arguments now cause an error instead of being ignored.

Fixed

• The upstream.ExchangeParallel function now consistently returns a nil upstream in case of a DNS lookup error.

Removed

• The DNSContext.CachedUpstreamAddr and DNSContext.QueryDuration properties.

Fixed

• Issue with locating the system hosts file (#430).
• Reverse DNS lookups for records from the hosts file.