Stash - Rule Based Proxy 4+

• New
- Added support for setting CNAME as hosts
- Added proxy-hosts: you can configure proxy-hosts to specify the IP requested by a remote server
- HTTP rewrite now supports Mock
Configuration details: https://stash.wiki/http-engine/rewrite#mock

- Added Collapsed Tile
To provide more customization space for “Third-Party Service” checks, we added Collapsed Tile, which uses the same script API as Tile. Collapsed Tile will appear in “Availability” and “Long Press Proxy - Proxy Information”. We also provide sample Tiles, which will be prompted for download when updating to Stash 3.2. Details: https://stash.wiki/script/tile

- Stash now generates a random API key upon first installation. All API operations require authentication via the HTTP header Authorization: Bearer ${secret}. The API key can be changed in “More Settings”.
The API key is automatically synced via the user’s iCloud. When accessing other Stash devices under the same iCloud through “Tools” → “Remote Controller”, the API key will be filled in automatically.

- Added “Network Quality Test” page to evaluate network status via DNS response latency. Remote Controller can also view network quality of other devices (requires remote device version ≥ 3.2.0)
- “HTTP Inspection” page now supports showing request details before and after rewrite for easier debugging (remote debugging requires remote device version ≥ 3.2.0)
- Proxy list now supports switching sorting method: “By Configuration File” or “By Benchmark Results”
- Added long-press proxy information in Remote Controller (requires remote device version ≥ 3.2.0)
- Redesigned Override interface
- Transparent rewrite now supports regex parameters
- Added filter to Connections page
- Added filter to HTTP Inspection page
- Added local override for policy group icons
- Added background refresh for YAML configuration files
- Added “Reset Settings” in “More Settings” to restore Stash to default configuration

• Optimizations
- Optimized Connections interface
- Optimized HTTP Inspection interface
- Optimized DNS Inspection interface
- Optimized Override installation flow
- Optimized iPerf
- Optimized QUIC
- UI improvements on several pages, added transition animations (requires iOS 17 or later)

• Fixes
- Fixed compatibility issues between WireGuard and IPv6
- Fixed XUDP IPv6 connections
- Fixed Relay policy group not performing automatic speed tests in some cases
- Fixed issue where pinging domain names in Enhanced Mode may return incorrect IPs
- Fixed URL Transparent rewrite not correctly parsing parameters
- Fixed DNS hijacking compatibility with non-standard DNS queries