vai_prog/Any-Tech-ARCHITECT
Watch
1
0
Fork
You've already forked Any-Tech-ARCHITECT
 0
mirror of https://github.com/Vadim-Khristenko/AmneziaWG-Architect.git synced 2026-10-23 03:27:45 +03:00
Code Issues Projects Releases 30 Packages Wiki Activity
30 releases 33 tags
  • v4.4.0 7eb128dd10

    Any Tech ARCHITECT v4.4.0 Stable

    VIA_GIT_ACTIONS released this 2026-10-05 11:32:13 +03:00 | 7 commits to main since this release

    Signed by vai_prog
    GPG key ID: 2BD468A8EBE4F4EF

    v4.4.0: The talk before the call

    A minor release built from your reports, plus one long-promised disguise.

    STUN / TURN mimicry

    A new profile replays what WebRTC sends before a call starts:

    • a Binding request to a STUN server, the bare header the way browsers send it;
    • a first TURN Allocate, asking for UDP;
    • the same Allocate with credentials: a TURN REST username, the host as REALM, a nonce and an HMAC;
    • ICE connectivity checks with Chromium or Firefox ufrags, a peer-reflexive PRIORITY and a tie-breaker.

    With "apply to I2-I5" the chain walks that whole flow; on its own, I1 is the authenticated Allocate. Transaction IDs, HMACs and tie-breakers come from <r>, so they are fresh on every send. FINGERPRINT is written only when every byte is known in advance, because a CRC over send-time bytes cannot be told the truth.

    Fixes from your reports

    I1-I5 fit the kernel module (#17)

    The kernel module takes every device attribute in one netlink message of a page, which leaves about 3.4 KB for I1-I5. Five SIP packets did not fit: the interface came up and awg show answered Message too long. The generator now keeps the whole chain within 3200 bytes for every client, since the same block goes onto the server:

    1. the profile's full form;
    2. its compact form (for SIP, the one-letter headers of RFC 3261 §7.3.3);
    3. entropy in the trailing slots. I1 is never touched.

    The config check warns about pasted chains that will not fit.

    wg-easy in the client list (#18)

    wg-easy accepts H1-H4 only up to 2147483647. Ranges for it are now laid out under that cap, and its chain carries only the tags both the kernel module and amneziawg-go understand, since awg-quick may run either.

    What H1-H3 width costs (#14)

    With RandomTrailers on, the receiver tests every transport packet against H1-H3 and silently drops the ones that land inside:

    lost = 1 − Π(1 − Wᵢ / 2³²)   over H1, H2, H3
    • the config check reports the share and a "one packet in N" above 1e-4 (16.1% on the ranges from the report);
    • RandomTrailers is now marked as a value both ends must share;
    • "Reduce H1-H4 spread" now really narrows the ranges to 20,000;
    • the 1-4 zone warning stays quiet under HeaderProtectionKey;
    • the FAQ answer on range width gained the formula, and the note that H4 can be wide for free.

    The site

    • The home page lists real profiles only, and SIP is called REGISTER, which is what gets generated.
    • The About page counts its parameter hint instead of the stale "23", and the test floor is 1200+.
    • Both READMEs are rewritten for 4.4.0.

    Tests: 1268/1268 (60 new), vue-tsc clean.
    Version 4.4.0
    Channel Release
    Built at 2026-10-05T08:33:02Z
    Dist size 13M (127 files)
    Commit 7eb128d

    Changes since v4.3.1

    🚀 Features

    • feat(awg): STUN / TURN mimicry profile (e062a35)
    • feat(awg): wg-easy as a client, H laid out under 2^31-1 (30b463c)

    🐛 Bug Fixes

    • fix(awg): price H1-H3 width under RandomTrailers (70495da)
    • fix(awg): keep I1-I5 inside one netlink page for the kernel module (ce53664)

    🔧 Maintenance

    • chore: bump to 4.4.0, changelog, README and site stats (7eb128d)

    Quick Start

    Extract the archive and run the bundled server. It has no
    dependencies — nothing needs to be installed:

    ./bin/awg-serve-linux            # Linux
./bin/awg-serve-macos            # macOS
bin\awg-serve-windows.exe       # Windows

    It serves on port 8080 and opens a browser.
    Pass a port to change it (awg-serve 3000), or
    --no-open to skip launching the browser.

    If you would rather use a runtime you already have, the
    launchers look for bun, npx or python and offer to install
    bun only if none is found:

    ./scripts/serve.sh               # Linux / macOS
.\scripts\serve.ps1             # Windows (PowerShell)
scripts\serve.bat               # Windows (CMD)

    Add --check to either launcher to see what it found
    without starting anything.

    The archive also carries scripts/awg-gen.sh, which
    generates AmneziaWG configurations from a terminal with no
    browser and no network, and a README.md describing the
    layout. The XRay side is browser-only for now.

    Checksums

    306ffc16595c21510a89198ba1ad9013dcf3560c7c994b9733ee6c0bff11c180  any-tech-architect-v4.4.0.zip
7c17af64c95346cccbf187b4b7003274dff22dfaf5888ed97aa33f4b2471eff1  any-tech-architect-v4.4.0.tar.gz

    🪞 Зеркало / mirror of Vadim-Khristenko/Any-Tech-ARCHITECT · синхронизируется автоматически / synced automatically

    Downloads