sing-box 1.13.0-alpha.6 has been released.

* Add proxy support for ICMP echo request 1
* Fixes and improvements

1:

You can now match ICMP echo (ping) requests using the new icmp network in routing rules.

Such traffic originates from TUN, WireGuard, and Tailscale inbounds and can be routed to Direct, WireGuard, and Tailscale outbounds.

See Route Rule.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.6

sing-box 1.13.0-alpha.7 has been released.

* Add reject support for ICMP echo supports 1
* Fixes and improvements

1:

You can now reject, drop, or directly reply to ICMP echo (ping) requests using reject Route Action.

See Route Action.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.7

sing-box 1.13.0-alpha.9 has been released.

* Add kTLS support 1
* Fixes and improvements

1:

See TLS.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.9

sing-box 1.13.0-alpha.10 has been released.

* Improve kTLS support 1
* Fixes and improvements

1:

kTLS is now compatible with custom TLS implementations other than uTLS.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.10

sing-box 1.13.0-alpha.15 has been released.

* Update quic-go to v0.54.0
* Update gVisor to v20250811
* Update Tailscale to v1.86.5
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.15

sing-box 1.12.10 and 1.13.0-alpha.22 have been released.

* Update uTLS to v1.8.1 1
* Fixes and improvements

1:

This update fixes an critical issue that could cause simulated Chrome fingerprints to be detected,
see https://github.com/refraction-networking/utls/pull/375.

https://github.com/SagerNet/sing-box/releases/tag/v1.12.10
https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.22

sing-box 1.13.0-alpha.23 has been released.

* Fix compatibility with MPTCP 1
* Fixes and improvements

1:

auto_redirect now rejects MPTCP connections by default to fix compatibility issues, but you can change it to bypass the sing-box via the new exclude_mptcp option.

See TUN.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.23

sing-box 1.13.0-alpha.26 has been released.

* Update quic-go to v0.55.0
* Fix memory leak in hysteria2
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.26

sing-box 1.12.13 has been released.

* Fix naive inbound
* Fixes and improvements

* Unfortunately, for non-technical reasons, we are currently unable to notarize the standalone version of the macOS client: because system extensions require signatures to function, we have had to temporarily halt its release.
We plan to fix the App Store release issue and launch a new standalone desktop client, but until then, only clients on TestFlight will be available (unless you have an Apple Developer Program and compile from source code).

https://github.com/SagerNet/sing-box/releases/tag/v1.12.13

sing-box 1.13.0-alpha.28 has been released.

* Add naiveproxy outbound 1
* Add disable_tcp_keep_alive, tcp_keep_alive and tcp_keep_alive_interval options for dial fields 2
* Update default TCP keep-alive initial period from 10 minutes to 5 minutes
* Update quic-go to v0.57.1
* Fixes and improvements

1:

Only available on Apple platforms, Android, Windows and some Linux architectures.

See NaiveProxy outbound.

2:

See Dial Fields.

* Unfortunately, for non-technical reasons, we are currently unable to notarize the standalone version of the macOS client: because system extensions require signatures to function, we have had to temporarily halt its release.
We plan to fix the App Store release issue and launch a new standalone desktop client, but until then, only clients on TestFlight will be available (unless you have an Apple Developer Program and compile from source code).

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.28

sing-box 1.13.0-alpha.29 has been released.

* Add UDP over TCP support for naiveproxy outbound 1
* Fixes and improvements

1:

See NaiveProxy outbound.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.29

sing-box 1.13.0-alpha.30 has been released.

* Add ECH support for NaiveProxy outbound 1
* Add tls.ech.query_server_name option 2
* Fix NaiveProxy outbound on Windows 3
* Add OpenAI Codex Multiplexer service 4
* Fixes and improvements

1:

See NaiveProxy outbound.

2:

See TLS.

3:

Each Windows release now includes libcronet.dll.
Ensure this file is in the same directory as sing-box.exe or in a directory listed in PATH.

4:

See OCM.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.30

sing-box 1.13.0-alpha.31 has been released.

* Add QUIC support for NaiveProxy outbound 1
* Add QUIC congestion control option for NaiveProxy 2
* Fixes and improvements

1:

NaiveProxy outbound now supports QUIC.

See NaiveProxy outbound.

2:

NaiveProxy inbound and outbound now supports configurable QUIC congestion control algorithms, including BBR and BBRv2.

See NaiveProxy inbound and NaiveProxy outbound.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.31

sing-box 1.13.0-alpha.32 has been released.


* Remove certificate_public_key_sha256 option for NaiveProxy outbound 1
* Fixes and improvements

1:

Self-signed certificates change traffic behavior significantly, which defeats the purpose of NaiveProxy's design to resist traffic analysis.
For this reason, and due to maintenance costs, there is no reason to continue supporting certificate_public_key_sha256, which was designed to simplify the use of self-signed certificates.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.32

sing-box 1.13.0-alpha.33 has been released.

* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.33

sing-box 1.13.0-alpha.34 has been released.

* Add Chrome Root Store certificate option 1
* Add new options for ACME DNS-01 challenge providers 2
* Add Wi-Fi state support for Linux and Windows 3
* Update naiveproxy to 143.0.7499.109
* Update quic-go to v0.58.0
* Update tailscale to v1.92.4
* Drop support for go1.23 4
* Drop support for Android 5.0 5

1:

Adds chrome as a new certificate store option alongside mozilla.
Both stores filter out China-based CA certificates.

See Certificate.

2:

See DNS-01 Challenge.

3:

sing-box can now monitor Wi-Fi state on Linux and Windows to enable routing rules based on wifi_ssid and wifi_bssid.

See Wi-Fi State.

4:

Due to maintenance difficulties, sing-box 1.13.0 requires at least Go 1.24 to compile.

5:

Due to maintenance difficulties, sing-box 1.13.0 will be the last version to support Android 5.0,
and only through a separate legacy build (with -legacy-android-5 suffix).

For standalone binaries, the minimum Android version has been raised to Android 6.0,
since Termux requires Android 7.0 or later.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.34

sing-box 1.13.0-alpha.35 has been released.

* Add pre-match support for auto_redirect 1
* Fixes and improvements

1:

auto_redirect now allows you to bypass sing-box for connections based on routing rules.

A new rule action bypass is introduced to support this feature. When matched during pre-match, the connection will bypass sing-box and connect directly.

This feature requires Linux with auto_redirect enabled.

See Pre-match and Rule Action.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.35

sing-box 1.13.0-alpha.36 has been released.

* Downgrade quic-go to v0.57.1
* Fixes and improvements

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-alpha.36

sing-box 1.13.0-beta.1 has been released.

* Add system interface support for Tailscale endpoint 1
* Fixes and improvements

1:

Tailscale endpoint can now create a system TUN interface to handle traffic directly.

See Tailscale endpoint.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.1

sing-box 1.13.0-beta.2 has been released.

* Add bind_address_no_port option for dial fields 1
* Fixes and improvements

1:

Adds the Linux socket option IP_BIND_ADDRESS_NO_PORT support when explicitly binding to a source address.

This allows reusing the same source port for multiple connections, improving scalability for high-concurrency proxy scenarios.

See Dial Fields.

https://github.com/SagerNet/sing-box/releases/tag/v1.13.0-beta.2