Nova Proxy 4.6.2 adds real diagnostics and stops normal client behaviour from being treated as an error.
- Connection-level errors are recorded and shown in the panel's diagnostics. Previously these happened in a detached part of the worker and were not visible anywhere, which made problems very hard to trace. A small sample is now kept, rate limited so it can never slow the panel down.
- A client asking for UDP on a non-DNS port (which clients do constantly, for QUIC) and a request for a blocked host now close cleanly instead of raising an error. Neither was ever a real fault, and treating them as errors did unnecessary work on every occurrence.
Includes all the 4.6.x fixes for the main causes of the 1101 error.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request. Your users, settings, and data are preserved. See DEPLOY.md.
Nova Proxy 4.5.7 makes a deployed panel harder to fingerprint from the outside and adds a country flag to config names.
- An unauthenticated request no longer gets the product name or the source repository back:
/manifest.jsonis now generic and the old/version.jsonis gone. - A request that matches no route (a scanner or censor probing the bare URL) now sees a real, stable website served inline, chosen per host, instead of a redirect that changed on every request.
- Config names now start with the exit country's flag when the config routes through a fixed, non-Cloudflare exit (a proxyIP or backend), and a neutral globe for a direct-Cloudflare connection (which is anycast and has no single country). The flag is geolocated once and cached, so it never slows a subscription.
Connections, subscriptions, and ping behavior are unchanged.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request after reviewing its diff and Cloudflare preview. Your users, settings, and data are preserved. Full deployment and update instructions are in DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.
Nova Proxy 4.5.6 fixes a slow leak that could make a busy panel eventually return a 1101 error.
- The Worker keeps a small table of live connections and periodically deletes expired rows. That cleanup was scanning the entire table, so on a busy panel it got slower as the table grew and could eventually trip the Worker's CPU limit (a 1101), most visibly under the traffic spike that follows turning on a relay.
- The table is now indexed on the expiry column, so the cleanup is a fast indexed delete regardless of size. Behavior is otherwise unchanged; the index is created automatically on the next start, and your users, settings, and data are untouched.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request after reviewing its diff and Cloudflare preview. Your users, settings, and data are preserved. Full deployment and update instructions are in DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.
Nova Proxy 4.5.5 fixes the live Cloudflare usage box so the read-only token connects on the first try.
- The "Create read-only token" button now requests Account Analytics: Read and Account Settings: Read (both read-only). The analytics-only token it created before could read stats but could not list your account, so the panel could not auto-detect your Account ID and the usage box failed to connect.
- If auto-detection still cannot find your account, the panel now points you to the Account ID field and asks you to paste it (you can copy it from your Cloudflare dashboard URL).
- The token still cannot deploy or change Workers. It is read-only.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request after reviewing its diff and Cloudflare preview. Your users, settings, and data are preserved. Full deployment and update instructions are in DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.
Nova Proxy 4.5.4 is a hardening release that lowers the deployed worker's static fingerprint. Runtime behavior is unchanged, so existing panels keep working exactly as before.
- A few internal constants that used to sit in the worker as plain text are now stored encoded and decoded at runtime, so a static scan of the deployed
worker.jsno longer surfaces them. - This is a code-shape change only. Configs, connections, and every panel feature behave exactly as in 4.5.2.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request after reviewing its diff and Cloudflare preview. Your users, settings, and data are preserved. Full deployment and update instructions are in DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.
Nova Proxy 4.5.2 stops a dead or unresponsive proxy IP from hanging the worker.
- If a connection is routed through a proxy IP that accepts the connection but then never sends any data, the worker now closes it after a short wait instead of hanging until the runtime cancels the request.
- Only the wait for the first byte is bounded. Active connections, and legitimately idle-but-alive connections, are untouched.
Nova Proxy 4.5.1 hardens the WebSocket handler so a malformed or scanner-probe connection closes cleanly instead of returning an internal error.
- A probe or malformed WebSocket connection now closes quietly instead of surfacing an internal error. This also removes a signal a scanner could use to fingerprint the worker as a proxy.
- Real client connections are unaffected.
Nova Proxy 4.5.0 fixes subscription links, gives every user a stable TLS fingerprint, trims the Resistance Policy down to the toggles that actually change behavior, and makes the release build prove the artifact boots before it ships.
- Subscription links are now token-based, so each link maps to exactly one user account instead of leaning on the request path.
- The token travels with the link across every format (Auto, Base64, Clash), so a user's config imports the same way in any client.
- Links keep working after a worker rename or a domain change, because the token, not the hostname, identifies the account.
- Each user now keeps one TLS fingerprint instead of drawing a new one on every connection.
- A consistent fingerprint is harder for a network to single out and block, and it stops a client from re-negotiating a different shape mid-session.
- Only the toggles that measurably change routing behavior remain; the switches that did nothing are gone, so the panel no longer promises more than it delivers.
- QUIC blocking now drives the real block: the panel switch maps to the actual QUIC drop rule, so turning it on blocks UDP 443 and turning it off restores it.
- Exit Location has been removed. It never changed the egress in a free-tier Worker, so it was misleading and is now off the page.
- Per-connection limit accounting is lighter, cutting the bookkeeping overhead each connection pays and leaving more headroom on the free plan.
- The release build now boots the packaged artifact before it is published, so a bundle that fails to start is caught at build time rather than on a user's Worker.
Deploy the update with the Deploy to Cloudflare button, or merge the daily Check for Nova updates pull request after reviewing its diff and Cloudflare preview. Your users, settings, and data are preserved. Full deployment and update instructions are in DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.
The 4.4 line hardened multi-user state and simplified how configs are shared.
- Config sharing collapsed to three universal formats: Auto, Base64, and Clash. One link now imports into almost any client.
- Fixed a data-loss bug where saving Network Settings could clear the user list. Users, multi-user state, and the host pool are now preserved on every save.
- Added a Quick actions panel to the dashboard and cleaned up the mobile Users screen.
- Hardened the GitHub mirror: the access token is trimmed before use, so a token pasted with extra whitespace no longer fails.
Update through the Deploy to Cloudflare button or the Check for Nova updates pull request. See DEPLOY.md.
The public repository contains only the obfuscated worker.js deployment artifact, its deployment metadata, checksums, and documentation. The maintainable panel source stays private.