• v2.2.0+rs.1 c2270c94b6

    v2.2.0+rs.1
    All checks were successful
    Rust CI / Format, lint, and test (push) Successful in 1m12s
    Build and publish container image / Build linux/arm64 image (push) Successful in 3m40s
    Stable

    gofix released this 2026-05-09 08:34:45 +00:00 | 14 commits to master since this release

    First Rust port build retargeted at upstream portal-tunnel v2.2.0. This remains scoped to the relay-server replacement surface.

    Highlights

    • Retarget relay compatibility to upstream v2.2.0, with v2.2 ECH route hostname/hash fields, ECH config-list handling, and hop-route entry access token responses (#64).
    • Sync ECH DNS records: create/update A and HTTPS records with ech=... for ECH-backed public hostnames across direct register, unregister, hop route register/delete, rollback, and expired-record cleanup (#65).
    • Add ACME renew hook (#63).
    • Harden relay public surfaces (#62).
    • Preserve v2.1.x interop via legacy /sdk/connect bearer fallback and legacy keyless signing for active pre-ECH public routes.

    Container image

    docker pull code.rly.best/gofix/portal-tunnel-rs:v2.2.0-rs.1
    

    The git tag is v2.2.0+rs.1; the OCI image tag substitutes + with - because OCI tags do not allow +. Published images are linux/arm64 only.

    Compatibility

    Validated against the official upstream portal v2.2.0 CLI on rly.best, including ECH route hostname generation and a live ECH HTTPS RR smoke (Go 1.26 TLS client returned ECHAccepted=true against an upstream-issued ECH hostname). Backward compatibility with the official portal v2.1.9 CLI was also verified.

    Client CLI/SDK and other non-relay components remain out of scope. See docs/unsupported-features.md for the support matrix.

    Versioning

    Releases follow v<upstream>+rs.<n>: the leading version pins the upstream portal-tunnel release this build is compatible with, and rs.<n> is the Rust port build counter for that upstream version.

    Downloads