1.0.0
Initial release.
Added
- HTTP/1.1 forward proxy and
CONNECTtunnels, with keep-alive connection pooling to origins. - HTTPS proxy (TLS via rustls) and HTTP/2 over TLS, negotiated by ALPN.
- SOCKS5 over TCP and UDP (
UDP ASSOCIATE). - WebSocket upgrades.
- Zero-copy relay with
spliceon Linux; opt-in kernel TLS (kTLS). - Shared-nothing multi-core architecture: one shard per core, optional core pinning.
- Basic authentication with API keys, per-IP bans after repeated failures, client IP allowlist.
- Destination policy: allowed ports, private and denied ranges blocked by default, DNS rebinding protection.
- Request and response size limits, connection limits, and timeouts including anti-slowloris protection.
- Access log with
off,errorsandalllevels, reopened onSIGHUP. - Runtime configuration reload (
rustle reloadorSIGHUP) and a/healthendpoint. rustlecommand line:init,check,status,reload,service(systemd and launchd),update,uninstall.curl | shinstaller with SHA-256 verification; Linux (x86_64, aarch64) and macOS (Apple Silicon, Intel) builds.- Black-box end-to-end test suite and a reproducible benchmark harness; results are in
benchmarks/documentation/RESULTS.md.