sing-box v1.10 brings important novelties, especially to the TUN inbound. Here are some of them:
"inet4_address" & "inet6_address" – deprecated and removed in favor of "address""inet4_route_exclude_address" & "inet6_route_exclude_address" – deprecated and removed in favor of "route_exclude_address""auto_redirect" – аutomatically configure iptables/nftables to redirect connections
"include_package" & "exclude_package" – not new for v1.10, but this is a good alternative for the current app whitelisting/blacklisting (personally tested)
sing-box also provides some other TUN options useful for Android, like "strict_route", so current config has significant room for improvement in more native way. (Hopefully some of this options will also help defeat IPv6 DNS leaks finally.)
sing-box v1.10 brings important novelties, especially to the TUN inbound. Here are some of them:
"inet4_address"&"inet6_address"– deprecated and removed in favor of"address""inet4_route_exclude_address"&"inet6_route_exclude_address"– deprecated and removed in favor of"route_exclude_address""auto_redirect"– аutomatically configure iptables/nftables to redirect connections"include_package"&"exclude_package"– not new for v1.10, but this is a good alternative for the current app whitelisting/blacklisting (personally tested)sing-box also provides some other TUN options useful for Android, like
"strict_route", so current config has significant room for improvement in more native way. (Hopefully some of this options will also help defeat IPv6 DNS leaks finally.)