v1.33.1

[1.33.1] - 2026-01-26

• FIXED: UDP/QUIC traffic stopping to match after some time. B4 now keeps server-to-domain associations active as long as traffic is flowing, preventing the "works at first, then stops" issue.
• IMPROVED: Rewrite TLS ClientHello payload generation.

What's Changed

• feat(capture): implement TLS ClientHello generation and API endpoint … by @DanielLavrushin in #19

Full Changelog: v1.32.0...v1.33.1

v1.32.0

[1.32.0] - 2026-01-19

• ADDED: Validation tries setting in Discovery - require multiple successful connections before accepting a configuration as reliable (default: 1, configurable 1-5). Helps filter out unstable bypass methods.
• IMPROVED: UDP/QUIC filtering now correctly matches packets from domain-specified targets. When you add a domain like youtube.com, B4 now tracks which IP addresses belong to that domain and properly handles all UDP traffic to those IPs, not just the initial connection.
• IMPROVED: Connection logs now show domain names for QUIC traffic even when not actively filtering those connections.
• FIXED: UDP port filtering incorrectly matching unrelated traffic. Previously, specifying port 443 for one service could accidentally match all UDP traffic on port 443, including other services.

What's Changed

• feat(discovery): add validation tries setting and improve connection … by @DanielLavrushin in #15

Full Changelog: v1.31.2...v1.32.0

v1.31.2

[1.31.2] - 2026-01-16

• FIXED: Custom payload files not working in Discovery feature - old configurations with relative paths like captures/payload.bin now work correctly.

What's Changed

• fix(manager): validate filename and extension in LoadCaptureData func… by @DanielLavrushin in #14

Full Changelog: v1.31.1...v1.31.2

v1.31.0

[1.31.0] - 2026-01-11

• ADDED: TCP MD5 option support.
• ADDED: TCP MD5 preset in Discovery - automatically tests TCP MD5 bypass strategy during configuration discovery.
• ADDED: iptables multiport module support - improves firewall rule efficiency when filtering multiple ports. The installer now detects and uses the multiport extension when available.
• IMPROVED: Import/Export now automatically migrates old set configurations (pre-v1.29) to the current format when importing.

Full Changelog: v1.30.1...v1.31.0

v1.30.1

[1.30.1] - 2026-01-02

• FIXED: White screen when importing old set configurations (sets saved before v1.29 now automatically convert to current format).

Full Changelog: v1.30.0...v1.30.1

v1.30.0

[1.30.0] - 2026-01-02

• ADDED: Custom payload support in Discovery - test bypass strategies using your own captured TLS payloads instead of built-in defaults.
• FIXED: Crash during Discovery when checking status (e.g. clicking "Create Set" or refreshing page while discovery is running. Reported by Andrew B.).

Full Changelog: v1.29.1...v1.30.0

v1.29.1

[1.29.1] - 2026-01-01

• ADDED: Incoming response bypass - defeats TSPU throttling that blocks downloads after ~15KB. I nmost cases - select TCP incoming fake.
• FIXED: Discovery progress bar sometimes showing over 100%.

Full Changelog: v1.29.0...v1.29.1

v1.29.0

[1.29.0] - 2025-xx-xx

• PRERELEASE - not yet ready.

Full Changelog: v1.28.1...v1.29.0

v1.28.1

[1.28.1] - 2025-12-30

• ADDED: Web server bind address setting - control which network interface the web UI listens on (e.g., 127.0.0.1 for localhost-only access, 0.0.0.0 for all interfaces). Supports IPv6.
• ADDED: Added Skip DNS toggle in Discovery - useful when you know DNS isn't blocked and want faster results.
• ADDED: Support for MIPS devices with soft float.
• ADDED: Post-ClientHello RST injection - sends fake connection reset after the initial handshake to confuse DPI systems that track connection state. Enable with Post-ClientHello RST toggle in TCP Desync Set settings.
• IMPROVED: Discovery now finds the optimal TTL for a specific network, instead of using a fixed value.
• IMPROVED: Removed DPI fingerprinting phase from discovery - it was slow and unreliable. Discovery now starts testing bypass strategies immediately, making the process faster.
• IMPROVED: Shutdown behavior - B4 now waits up to 5 seconds for in-flight packet operations to complete gracefully before terminating.
• FIXED: DPI bypass not working for LAN devices on routers using nftables (e.g., OpenWrt with fw4 firewall).
• FIXED: TCP desync bypass methods (rst, fin, ack, combo, full modes) were sending malformed packets, causing them to fail or be ignored. Affects both IPv4 and IPv6.
• FIXED: Restored missing Packet Mark setting in Network Configuration - allows customizing the firewall mark used for traffic routing.
• FIXED: Potential connection hangs caused by packets getting stuck in the processing queue without verdicts being set.
• FIXED: Memory leak where packet injection operations could continue running after service shutdown, potentially causing crashes or instability during restart.
• FIXED: Race condition in network interface name caching that could cause incorrect packet filtering decisions on multi-interface systems.
• FIXED: Fragmented IP packets now bypass B4 processing entirely to prevent incomplete packet inspection and potential protocol violations.
• REMOVED: Fragmentation strategy overlap — functionality merged into combo.
• CHANGED: Fragmentation combo now supports decoy packets. When enabled, B4 sends a fake ClientHello with a whitelisted domain (e.g., ya.ru, vk.com) before sending the real fragmented request. Can be found in Fragmentaiton Tab set settings.

Full Changelog: v1.28.0...v1.28.1

v1.27.2

[1.27.2] - 2025-12-27

• FIXED: Adding multiple services with many UDP ports (Discord, WhatsApp, etc.) could cause iptables firewall rules to fail, preventing B4 from starting or restarting properly.

Full Changelog: v1.27.1...v1.27.2