g3proxy-v1.10.1

This is a bug fix release for v1.10 LTS branch.

• fix socket usage on Windows
• set expire info for udp tasks with socks5 proxy peers
• send ppv2 header on http forward connections in divert_tcp escaper
• fix match of TLS ticker name in decryption
• fix global datagram limiter
• fix handle of ICAP Preview data in HTTP/1 interception
• fix DELETE in FTP over HTTP task
• support chunked upload in FTP over HTTP task

g3proxy-v1.10.0

Feature Highlights since v1.8

ICAP

• Support ICAP reqmod service for:
  • H1 CONENCT and Upgrade request
  • H2 (Extended) CONNECT request
  • SMTP DATA Command
  • IMAP APPEND Command
• Support ICAP over TLS

TLS Interception

• Upgraded cert generation protocol to allow to mimic the original cert, this will require g3fcgen >= 0.8
• Allow to use custom TLS client config at user-site level, which can be used to enable mTLS
• Support TLCP protocol

Traffic Redirection

• Added divert_tcp escaper to divert traffic to third party servers
• Added stream_detour feature to allow third party servers to intercept connected streams remotely
• Allow to set inspect policy for each supported protocols separately, which can b based on domain rules
• Added comply_audit escaper to allow select auditors based route rules

Misc

• Support compilation on Windows
• Support Redis over TLS
• Improved capability with non-RFC-compliant socks5 server implementations
• Added support for Socks5 over TLS

See g3proxy/CHANGELOG for detailed changelogs.

Pre-Build packages can be found at cloudsmith g3-stable repo.