138.0.7204.180

This is a major update of Envoy

• Adds OHTTP
• Adds HTTP Concealed Auth (with an Envoy proxy)
• Adds ECH connections to Envoy proxies
• Updated Hysteria, V2Ray, and Shadowsocks libraries
• Lots of little stuff

Envoy itself is majorly refactored. It should connect faster, and be easier to maintain. We also remove some deprecated API use

138.0.7204.63-beta demo app

This is a working build of the demo app

commit 0d09f4f

• Cronet is built using the patches and scripts in this branch: https://github.com/greatfire/envoy/tree/138.0.7204.35
• IEnvoyProxy: https://github.com/greatfire/IEnvoyProxy/releases/tag/e3.5.0-beta1

The Flo Health OHTTP dependencies:

• https://github.com/flo-health/ok-bhttp/releases/download/0.1.0/lib-bhttp.jar
• https://github.com/flo-health/ohttp-encapsulator/releases/download/0.1.0/ok-ohttp-encapsulator-release.aar
• https://github.com/flo-health/ok-ohttp-plugin/releases/download/0.1.0/lib-ohttp-plugin-release.aar

108.0.5359.243 beta 1

• Updates cronet code to 108.0.5359.243
• Re-orders the (still hardcoded) DNS servers to put Cloudflare back as the first

108.0.5359.195

• updates to 108.0.5359.195
• Adds ECH support
• Currently, DoH servers are hardcoded (dns.sb, quad9, cloudflare, and nextdns)
• DNS won't fall back to insecure methods, so HTTPS proxying will fail if all DoH servers are blocked

108.0.5359.195-beta1 ECH support

• updates to 108.0.5359.195 (from my closed PR to update to 108)
• Enabled the built in resolver and configures it to use DoH, so ECH is supported
• Currently, DoH servers are hardcoded (dns.sb, quad9, cloudflare, and nextdns)
• DNS won't fall back to insecure methods, so HTTPS proxying will fail if all DoH servers are blocked

108.0.5359.195 alpha 1

Updated build for 108.0.5359.195

Envoy 107.0.5304.150.5

• Adds support for Meek
• Fixes some timing issues

The same 107.0.5304.150-1 release of cronet is used with this version

Envoy 107.0.5304.150.3

several related improvements:

• batches are now somewhat randomly sized
• selected services (currently snowflake) can be pushed to the front of the
• shortened service startup
• moved http/envoy delays into results processing so delays can be skipped if direct URL results have been received

This still depends on Chromium 107.0.5304.150-1

Envoy 107.0.5304.150.1

• update to IEnvoyProxy 1.4.2 (random masquerading client hello by default for snowflake support)
• feature: improve scrubbing sensitive info from logs
• fix: direct URLs always failing

This uses the current 107.0.5304.150-1 release of Cronet

107.0.5304.150

• Add support for Snowflake
• Adds Envoy/Cronet support a socks5 param to envoy:// URLs to allow using Envoy's HTTPS proxying over SOCKS, which lets us support spec compliant PTs like Snowflake
• Updates Cronet to 107.0.5304.150 (107.0.5304.150-1 build is needed, we missed Java support for the socks5 param in the first version)