I2pd Versions Save

1. Encrypted tunnel tests
2. New streaming RTT/RTO/Window calculation algorithms
3. Publish medium congestion indication
4. Changed upstream SOCKS proxy from SOCKS4 to SOCKS5
5. New implementation of SSU2 retransmission, send buffer, window, congestion control, timeouts
6. Transit tunnels limit more than 64K. Default value to 10K
7. Fixed lookup of encrypted LeaseSet
8. Report error if client is trying to connect to itself in SAM
9. Fixed crash when packet comes to terminated stream
10. Tunnel status "declined" in web console
11. SAM error reply "Incompatible crypto" if remote destination has incompatible crypto
12. Fixed outbound tunnel build failure if it's endpoint is the same as reply tunnel gateway
13. Reduce unreachable router ban interval to 8 minutes
14. Send lookup reply directly to reply tunnel gateway if possible
15. Fixed I2PControl RouterManager returns invalid JSON when unknown params are passed
16. Correct implementation of "reservedrange" config param
17. Less false positive cases for tunnel tests
18. Check ipv4/ipv6 compatibility for peer tests
19. Allow SSU2 even if port binding fails
20. Support local domain sockets for SOCKS proxy upstream

1. Fixed crash with OpenSSL 3.2.0
2. Fixed false positive clock skew detection

Minor release for systems which have switched to OpenSSL 3.2.0

• Fixed support for new EdDSA usage behavior in OpenSSL 3.2.0

• Support of concurrent ACCEPTs on SAM 3.1
• Added Haiku OS support
• Low bandwidth and far routers can expire before 1 hour
• Don't pick too active peer for first hop
• Try peer test again if status is Unknown
• Send peer tests with random delay
• Updated reseeds list
• Fixed XSS vulnerability in addresshelper
• Fixed publishing NAT64 ipv6 addresses
• Fixed deadlock in AsyncSend callback

Note for everyone, who uses latest OpenSSL 3.2.0: they broke everything again. So, if you build application yourself, use at least version 3.1.4 of OpenSSL. Windows binaries built with MSYS2 with OpenSSL 3.1.3 packages.

1. Handle SOCK5 authorization with empty user/password and send correct version in response
2. Improve NTCP2 transport session logging
3. Allow 0 hops in explicitPeers
4. Don't allow incoming transport sessions from routers with incorrect timestamp
5. Fixed sending keepalive for sessions with introducers
6. Always select router with ipv4 for tunnel endpoint
7. Fixed crash if deleted BOB destination was shared between few BOB sessions
8. Memory pool for router profiles
9. Removed AVX code
10. Exclude SSU1 introducers from SSU2 addresses
11. Don't create paired inbound tunnel if length is different
12. Fixed padding length for SSU2 path response
13. Don't publish introducers with zero tag
14. Consider all addresses non-published for U and H routers even if they have host/port
15. Don't pick completely unreachable routers for tunnels
16. Separate network and testing status

1. Added 'critical' log level
2. Allow user/password authentication method for SOCK5 proxy
3. Fixed reload tunnels
4. Don't recognize new router as floodfill until it proves it's real
5. Fixed incomplete HTTP headers in I2P tunnels
6. Publish congestion cap 'G' if transit is not accepted
7. Added webconsole button to drop a remote LeaseSet manually
8. Publish encrypted RouterInfo through tunnels
9. Print local b32 address on webconsole destination page
10. Fixed incorrect address caps for unspecified ipv6 address

• DHT for floodfills instead plain list
• Process router's messages in separate thread
• Don't publish non-reachable router
• Fixed memory leak in Windows network state detection
• Fixed reseed attempts from invalid address
• Add support for domain addresses for Yggdrasil reseeds
• Send and check target destination in first streaming SYN packet
• Added congestion caps (https://geti2p.net/spec/proposals/162-congestion-caps)
• Added SAM UDP port parameter

1. Fixed race condition while getting router's peer profile
2. Fixed creation of new router.info
3. Fixed displaying LeaseSets in the webconsole
4. Fixed crash when processing ACK request

1. New algorithm for tunnel creation success rate calculation
2. Localization to Swedish, Portuguese, Turkish, Polish
3. Fixed deadlock during processing I2NP block with Garlic in ECIES encrypted message to router
4. Periodically send Datetime block in NTCP2 and SSU2 and check
5. Better profiling for unreachable routers
6. Minimal version for floodfill is 0.9.51
7. Drop incoming NTCP2 and SSU2 connection if published IP doesn't match actual endpoint
8. Sort transports by endpoints in webconsole
9. Don't publish "0.0.0.0" in RouterInfo
10. Check referer when processing Addresshelper
11. Select first hop from high bandwidth peers for client tunnels
12. Exclude unreachable router from NetDB for 2 hours
13. Fixed missing NTCP2 address in RouterInfo if enabled back
14. Fixed race condition with encrypted LeaseSets

1. Fixed UPnP crash if SSU2 or NTCP2 is disabled
2. Fixed crash on termination for some platforms
3. Network status is always OK if peer test msg 5 received
4. Added "Full Cone NAT" status error
5. Drop duplicated I2NP messages in SSU2
6. Set rejection code 30 if tunnel with id already exists