Changed

• The function upstream.NewDefaultHostsResolver now expects context.Context.
• The version of Go updated to 1.25.2.

Changed

• The version of Go updated to 1.25.1.

Fixed

• TTL override calculation.

Changed

• quic-go update: fields QUICConnection and QUICStream of proxy.DNSContext type are now pointer to structs.

Removed

• The previously deprecated function fastip.NewFastestAddr.

Fixed

• Opened listeners are now closed on failed start.

Changed

• Improved logging.
• Updated gonum dependency.

Fixed

• The custom cache provided through DNSContext is now utilized even when the global cache is disabled.

Acknowledgements

Special thanks to Xiang Li for reporting the vulnerability.

Security

• New configuration object PendingRequestsConfig for configuring the cache poisoning attack mitigation. By default, proxy.Proxy will now track all simultaneous duplicate requests, and only perform a single lookup for them.

Added

• New type BindRetryConfig for configuring listen addresses binding retry mechanism.

Changed

• The minimum required version of Go has been increased to 1.24.