287 changed files with 3849 additions and 11086 deletions
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@ -0,0 +1,76 @@
+name: Bug report
+description: Create a report to help us improve
+title: "[Bug] "
+body:
+  - type: checkboxes
+    id: ensure
+    attributes:
+      label: Verify steps
+      description: "
+在提交之前，请确认
+Please verify that you've followed these steps
+"
+      options:
+        - label: "
+如果你可以自己 debug 并解决的话，提交 PR 吧
+Is this something you can **debug and fix**? Send a pull request! Bug fixes and documentation fixes are welcome.
+"
+          required: true
+        - label: "
+我已经在 [Issue Tracker](……/) 中找过我要提出的问题
+I have searched on the [issue tracker](……/) for a related issue.
+"
+          required: true
+        - label: "
+我已经使用 dev 分支版本测试过，问题依旧存在
+I have tested using the dev branch, and the issue still exists.
+"
+          required: true
+        - label: "
+我已经仔细看过 [Documentation](https://github.com/Dreamacro/clash/wiki/) 并无法自行解决问题
+I have read the [documentation](https://github.com/Dreamacro/clash/wiki/) and was unable to solve the issue.
+"
+          required: true
+        - label: "
+这是 Clash 核心的问题，并非我所使用的 Clash 衍生版本（如 OpenClash、KoolClash 等）的特定问题
+This is an issue of the Clash core *per se*, not to the derivatives of Clash, like OpenClash or KoolClash.
+"
+          required: true
+  - type: input
+    attributes:
+      label: Clash version
+    validations:
+      required: true
+  - type: dropdown
+    id: os
+    attributes:
+      label: What OS are you seeing the problem on?
+      multiple: true
+      options:
+        - macOS
+        - Windows
+        - Linux
+        - OpenBSD/FreeBSD
+  - type: textarea
+    attributes:
+      render: yaml
+      label: "Clash config"
+      description: "
+在下方附上 Clash core 脱敏后配置文件的内容
+Paste the Clash core configuration below.
+"
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      render: shell
+      label: Clash log
+      description: "
+在下方附上 Clash Core 的日志，log level 使用 DEBUG
+Paste the Clash core log below with the log level set to `DEBUG`.
+"
+  - type: textarea
+    attributes:
+      label: Description
+    validations:
+      required: true
--- a/.github/ISSUE_TEMPLATE/bug_report_en.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report_en.yml
@ -1,124 +0,0 @@
-name: (English) Report a bug of the Clash core
-description: Create a bug report to help us improve
-labels:
-  - bug
-title: "[Bug] <issue title>"
-body:
-  - type: markdown
-    attributes:
-      value: "## Welcome to the official Clash open-source community"
-
-  - type: markdown
-    attributes:
-      value: |
-        Thank you for taking the time to report an issue with the Clash core.  
-        
-        Prior to submitting this issue, please read and follow the guidelines below to ensure that your issue can be resolved as quickly as possible. Options marked with an asterisk (*) are required, while others are optional. If the information you provide does not comply with the requirements, the maintainers may not respond and may directly close the issue.  
-        
-        If you can debug and fix the issue yourself, we welcome you to submit a pull request to merge your changes upstream.
-
-  - type: checkboxes
-    id: ensure
-    attributes:
-      label: Prerequisites
-      description: "If any of the following options do not apply, please do not submit this issue as we will close it"
-      options:
-        - label: "I understand that this is the official open-source version of the Clash core, **only providing support for the open-source version or Premium version**"
-          required: true
-        - label: "I am submitting an issue with the Clash core, not Clash.Meta / OpenClash / ClashX / Clash For Windows or any other derivative version"
-          required: true
-        - label: "I am using the latest version of the Clash or Clash Premium core **in this repository**"
-          required: true
-        - label: "I have searched at the [Issue Tracker](……/) **and have not found any related issues**"
-          required: true
-        - label: "I have read the [official Wiki](https://dreamacro.github.io/clash/) **and was unable to solve the issue**"
-          required: true
-        - label: "(required for Premium core) I've tried the `dev` branch and the issue still exists"
-          required: false
-
-  - type: markdown
-    attributes:
-      value: "## Environment"
-  - type: markdown
-    attributes:
-      value: |
-        Please provide the following information to help us locate the issue.  
-        The issue might be closed if there's not enough information provided.
-
-  - type: input
-    attributes:
-      label: Version
-      description: "Run `clash -v` or look at the bottom-left corner of the Clash Dashboard to find out"
-    validations:
-      required: true
-
-  - type: dropdown
-    id: os
-    attributes:
-      label: Operating System
-      description: "Select all operating systems that apply to this issue"
-      multiple: true
-      options:
-        - Linux
-        - Windows
-        - macOS (darwin)
-        - Android
-        - OpenBSD / FreeBSD
-
-  - type: dropdown
-    id: arch
-    attributes:
-      label: Architecture
-      description: "Select all architectures that apply to this issue"
-      multiple: true
-      options:
-        - amd64
-        - amd64-v3
-        - arm64
-        - "386"
-        - armv5
-        - armv6
-        - armv7
-        - mips-softfloat
-        - mips-hardfloat
-        - mipsle-softfloat
-        - mipsle-hardfloat
-        - mips64
-        - mips64le
-        - riscv64
-
-  - type: markdown
-    attributes:
-      value: "## Clash related information"
-  - type: markdown
-    attributes:
-      value: |
-        Please provide relevant information about your Clash instance here. If you
-        do not provide enough information, the issue may be closed.
-
-  - type: textarea
-    attributes:
-      render: YAML
-      label: Configuration File
-      placeholder: "Ensure that there is no sensitive information (such as server addresses, passwords, or ports) in the configuration file, and provide the minimum reproducible configuration. Do not post configurations with thousands of lines."
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      render: Text
-      label: Log
-      placeholder: "Please attach the corresponding core outout (setting `log-level: debug` in the configuration provides debugging information)."
-
-  - type: textarea
-    attributes:
-      label: Description
-      placeholder: "Please describe your issue in detail here to help us understand (supports Markdown syntax)."
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: Reproduction Steps
-      placeholder: "Please provide the specific steps to reproduce the issue here (supports Markdown syntax)."
-
--- a/.github/ISSUE_TEMPLATE/bug_report_zh.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report_zh.yml
@ -1,121 +0,0 @@
-name: （中文）提交 Clash 核心的问题
-description: 如果 Clash 核心运作不符合预期，在这里提交问题
-labels:
-  - bug
-title: "[Bug] <问题标题>"
-body:
-  - type: markdown
-    attributes:
-      value: "## 欢迎来到 Clash 官方开源社区！"
-
-  - type: markdown
-    attributes:
-      value: |
-        感谢你拨冗提交 Clash 内核的问题。在提交之前，请仔细阅读并遵守以下指引，以确保你的问题能够被尽快解决。  
-        带有星号（*）的选项为必填，其他可选填。**如果你填写的资料不符合规范，维护者可能不予回复，并直接关闭这个 issue。**
-        如果你可以自行 debug 并且修正，我们随时欢迎你提交 Pull Request，将你的修改合并到上游。
-
-  - type: checkboxes
-    id: ensure
-    attributes:
-      label: 先决条件
-      description: "若以下任意选项不适用，请勿提交这个 issue，因为我们会把它关闭"
-      options:
-        - label: "我了解这里是官方开源版 Clash 核心仓库，**只提供开源版或者 Premium 内核的支持**"
-          required: true
-        - label: "我要提交 Clash 核心的问题，并非 Clash.Meta / OpenClash / ClashX / Clash For Windows 或其他任何衍生版本的问题"
-          required: true
-        - label: "我使用的是**本仓库**最新版本的 Clash 或 Clash Premium 内核"
-          required: true
-        - label: "我已经在 [Issue Tracker](……/) 中找过我要提出的 bug，**并且没有找到相关问题**"
-          required: true
-        - label: "我已经仔细阅读 [官方 Wiki](https://dreamacro.github.io/clash/) 并无法自行解决问题"
-          required: true
-        - label: "（非 Premium 内核必填）我已经使用 dev 分支版本测试过，问题依旧存在"
-          required: false
-
-  - type: markdown
-    attributes:
-      value: "## 系统环境"
-  - type: markdown
-    attributes:
-      value: |
-        请附上这个问题适用的环境，以帮助我们迅速定位问题并解决。若你提供的信息不足，我们将关闭
-        这个 issue 并要求你提供更多信息。
-
-  - type: input
-    attributes:
-      label: 版本
-      description: "运行 `clash -v` 或者查看 Clash Dashboard 的左下角来找到你现在使用的版本"
-    validations:
-      required: true
-
-  - type: dropdown
-    id: os
-    attributes:
-      label: 适用的作业系统
-      description: "勾选所有适用于这个 issue 的系统"
-      multiple: true
-      options:
-        - Linux
-        - Windows
-        - macOS (darwin)
-        - Android
-        - OpenBSD / FreeBSD
-
-  - type: dropdown
-    id: arch
-    attributes:
-      label: 适用的硬件架构
-      description: "勾选所有适用于这个 issue 的架构"
-      multiple: true
-      options:
-        - amd64
-        - amd64-v3
-        - arm64
-        - "386"
-        - armv5
-        - armv6
-        - armv7
-        - mips-softfloat
-        - mips-hardfloat
-        - mipsle-softfloat
-        - mipsle-hardfloat
-        - mips64
-        - mips64le
-        - riscv64
-
-  - type: markdown
-    attributes:
-      value: "## Clash 相关信息"
-  - type: markdown
-    attributes:
-      value: |
-        请附上与这个问题直接相关的相应信息，以帮助我们迅速定位问题并解决。  
-        若你提供的信息不足，我们将关闭这个 issue 并要求你提供更多信息。
-
-  - type: textarea
-    attributes:
-      render: YAML
-      label: "配置文件"
-      placeholder: "确保配置文件中没有敏感信息（如：服务器地址、密码、端口），并且提供最小可复现配置，严禁贴上上千行的配置"
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      render: Text
-      label: 日志输出
-      placeholder: "在这里附上问题对应的内核日志（在配置中设置 `log-level: debug` 可获得调试信息）"
-
-  - type: textarea
-    attributes:
-      label: 问题描述
-      placeholder: "在这里详细叙述你的问题，帮助我们理解（支持 Markdown 语法）"
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: 复现步骤
-      placeholder: "在这里提供问题的具体重现步骤（支持 Markdown 语法）"
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@ -1,9 +1,6 @@
 blank_issues_enabled: false

 contact_links:
-  - name: （中文）阅读 Wiki
-    url: https://dreamacro.github.io/clash/zh_CN/
-    about: 如果你是新手，或者想要了解 Clash 的更多信息，请阅读我们撰写的官方 Wiki
-  - name: (English) Read our Wiki page
-    url: https://dreamacro.github.io/clash/
-    about: If you are new to Clash, or want to know more about Clash, please read our Wiki page
+  - name: Get help in GitHub Discussions
+    url: https://github.com/Dreamacro/clash/discussions
+    about: Have a question? Not sure if your issue affects everyone reproducibly? The quickest way to get help is on Clash's GitHub Discussions!
--- a/.github/ISSUE_TEMPLATE/feature_request.yml
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@ -0,0 +1,36 @@
+name: Feature request
+description: Suggest an idea for this project
+title: "[Feature] "
+body:
+  - type: checkboxes
+    id: ensure
+    attributes:
+      label: Verify steps
+      description: "
+在提交之前，请确认
+Please verify that you've followed these steps
+"
+      options:
+        - label: "
+我已经在 [Issue Tracker](……/) 中找过我要提出的请求
+I have searched on the [issue tracker](……/) for a related feature request.
+"
+          required: true
+        - label: "
+我已经仔细看过 [Documentation](https://github.com/Dreamacro/clash/wiki/) 并无法自行解决问题
+I have read the [documentation](https://github.com/Dreamacro/clash/wiki/) and was unable to solve the issue.
+"
+          required: true
+  - type: textarea
+    attributes:
+      label: Description
+      description: 请详细、清晰地表达你要提出的论述，例如这个问题如何影响到你？你想实现什么功能？目前 Clash Core 的行为是什麽？
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Possible Solution
+      description: "
+此项非必须，但是如果你有想法的话欢迎提出。
+Not obligatory, but suggest a fix/reason for the bug, or ideas how to implement the addition or change
+"
--- a/.github/ISSUE_TEMPLATE/feature_request_en.yml
+++ b/.github/ISSUE_TEMPLATE/feature_request_en.yml
@ -1,43 +0,0 @@
-name: (English) Feature request
-description: Suggest an idea for this project
-labels:
-  - enhancement
-title: "[Feature] <title>"
-body:
-  - type: markdown
-    attributes:
-      value: "## Welcome to the official Clash open-source community"
-
-  - type: markdown
-    attributes:
-      value: |
-        Thank you for taking the time to make a suggestion to the Clash core.  
-        
-        Prior to submitting this issue, please read and follow the guidelines below to ensure that your issue can be resolved as quickly as possible. Options marked with an asterisk (*) are required, while others are optional. If the information you provide does not comply with the requirements, the maintainers may not respond and may directly close the issue.  
-        
-        If you can implement your idea by yourself, we welcome you to submit a pull request to merge your changes upstream.
-
-  - type: checkboxes
-    id: ensure
-    attributes:
-      label: Prerequisites
-      description: "If any of the following options do not apply, please do not submit this issue as we will close it"
-      options:
-        - label: "I understand that this is the official open-source version of the Clash core, **only providing support for the open-source version or Premium version**"
-          required: true
-        - label: "I have looked for my idea in [the issue tracker](https://github.com/Dreamacro/clash/issues?q=is%3Aissue+label%3Aenhancement), **and found none of which being related**"
-          required: true
-        - label: "I have read the [official Wiki](https://dreamacro.github.io/clash/)"
-          required: true
-
-  - type: textarea
-    attributes:
-      label: Description
-      placeholder: "Please explain your suggestions in detail and in a clear manner. For instance, how does this issue impact you? What specific functionality are you hoping to achieve? Also, let us know what Clash Core is currently doing in terms of your suggestion, and what you would like it to do instead."
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: Possible Solution
-      placeholder: "Do you have any ideas on the implementation details?"
--- a/.github/ISSUE_TEMPLATE/feature_request_zh.yml
+++ b/.github/ISSUE_TEMPLATE/feature_request_zh.yml
@ -1,41 +0,0 @@
-name: （中文）建议一个新功能
-description: 在这里提供一个的想法或建议
-labels:
-  - enhancement
-title: "[Feature] <标题>"
-body:
-  - type: markdown
-    attributes:
-      value: "## 欢迎来到 Clash 官方开源社区！"
-
-  - type: markdown
-    attributes:
-      value: |
-        感谢你拨冗为 Clash 内核提供建议。在提交之前，请仔细阅读并遵守以下指引，以确保你的建议能够被顺利采纳。  
-        带有星号（*）的选项为必填，其他可选填。**如果你填写的资料不符合规范，维护者可能不予回复，并直接关闭这个 issue。**
-        如果你可以自行添加这个功能，我们随时欢迎你提交 Pull Request，并将你的修改合并到上游。
-
-  - type: checkboxes
-    id: ensure
-    attributes:
-      label: 先决条件
-      description: "若以下任意选项不适用，请勿提交这个 issue，因为我们会把它关闭"
-      options:
-        - label: "我了解这里是 Clash 官方仓库，并非 Clash.Meta / OpenClash / ClashX / Clash For Windows 或其他任何衍生版本"
-          required: true
-        - label: "我已经在[这里](https://github.com/Dreamacro/clash/issues?q=is%3Aissue+label%3Aenhancement)找过我要提出的建议，**并且没有找到相关问题**"
-          required: true
-        - label: "我已经仔细阅读 [官方 Wiki](https://dreamacro.github.io/clash/) "
-          required: true
-
-  - type: textarea
-    attributes:
-      label: 描述
-      placeholder: 请详细、清晰地表达你要提出的论述，例如这个问题如何影响到你？你想实现什么功能？目前 Clash Core 的行为是什么？
-    validations:
-      required: true
-
-  - type: textarea
-    attributes:
-      label: 可能的解决方案
-      placeholder: 此项非必须，但是如果你有想法的话欢迎提出。
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@ -1,8 +1,8 @@
-name: CodeQL
+name: "CodeQL"

 on:
  push:
-    branches: [master, dev]
+    branches: [ master, dev ]

 jobs:
  analyze:
@ -12,19 +12,19 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        language: ['go']
+        language: [ 'go' ]

    steps:
    - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v2

    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v1
      with:
        languages: ${{ matrix.language }}

    - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v1

    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v1
--- a/.github/workflows/deploy-docs.yml
+++ b/.github/workflows/deploy-docs.yml
@ -1,42 +0,0 @@
-name: Deploy
-on:
-  workflow_dispatch: {}
-  push:
-    branches:
-      - master
-jobs:
-  deploy:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        node-version: [20]
-    permissions:
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    steps:
-      - uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-      - uses: pnpm/action-setup@v2
-        with:
-          version: latest
-      - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@v3
-        with:
-          node-version: ${{ matrix.node-version }}
-      - name: Install dependencies
-        working-directory: docs
-        run: pnpm install --frozen-lockfile=false
-      - name: Build
-        working-directory: docs
-        run: pnpm run docs:build
-      - uses: actions/configure-pages@v2
-      - uses: actions/upload-pages-artifact@v1
-        with:
-          path: docs/.vitepress/dist
-      - name: Deploy
-        id: deployment
-        uses: actions/deploy-pages@v2
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@ -13,29 +13,29 @@ jobs:
    steps:

      - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v2
        with:
          fetch-depth: 0

      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v1
        with:
          platforms: all

      - name: Set up docker buildx
        id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v1
        with:
          version: latest

      - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v1
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}
      
      - name: Login to Github Package
-        uses: docker/login-action@v2
+        uses: docker/login-action@v1
        with:
          registry: ghcr.io
          username: Dreamacro
@ -43,22 +43,20 @@ jobs:

      - name: Build dev branch and push
        if: github.ref == 'refs/heads/dev'
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v2
        with:
          context: .
-          platforms: linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
+          platforms: linux/amd64,linux/arm/v7,linux/arm64
          push: true
          tags: 'dreamacro/clash:dev,ghcr.io/dreamacro/clash:dev'
-          cache-from: type=gha
-          cache-to: type=gha,mode=max

      - name: Get all docker tags
        if: startsWith(github.ref, 'refs/tags/')
-        uses: actions/github-script@v6
+        uses: actions/github-script@v4
        id: tags
        with:
          script: |
-            const ref = context.payload.ref.replace(/\/?refs\/tags\//, '')
+            const ref = `${context.payload.ref.replace(/\/?refs\/tags\//, '')}`
            const tags = [
              'dreamacro/clash:latest',
              `dreamacro/clash:${ref}`,
@ -70,11 +68,9 @@ jobs:

      - name: Build release and push
        if: startsWith(github.ref, 'refs/tags/')
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v2
        with:
          context: .
-          platforms: linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64
+          platforms: linux/amd64,linux/arm/v7,linux/arm64
          push: true
          tags: ${{steps.tags.outputs.result}}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@ -4,15 +4,9 @@ jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v3
-
-      - name: Setup Go
-        uses: actions/setup-go@v4
-        with:
-          check-latest: true
-          go-version: '1.20'
-
+      - uses: actions/checkout@v2
      - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3
+        uses: golangci/golangci-lint-action@v2
        with:
          version: latest
+          args: --disable-all -E govet -E gofumpt -E megacheck ./...
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -4,21 +4,23 @@ jobs:
  build:
    runs-on: ubuntu-latest
    steps:
+      - name: Get latest go version
+        id: version
+        run: |
+          echo ::set-output name=go_version::$(curl -s https://raw.githubusercontent.com/actions/go-versions/main/versions-manifest.json | grep -oE '"version": "[0-9]{1}.[0-9]{1,}(.[0-9]{1,})?"' | head -1 | cut -d':' -f2 | sed 's/ //g; s/"//g')
+
      - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v2
        with:
-          check-latest: true
-          go-version: '1.20'
+          go-version: ${{ steps.version.outputs.go_version }}

      - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v2

      - name: Cache go module
-        uses: actions/cache@v3
+        uses: actions/cache@v2
        with:
-          path: |
-            ~/go/pkg/mod
-            ~/.cache/go-build
+          path: ~/go/pkg/mod
          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
          restore-keys: |
            ${{ runner.os }}-go-
@ -32,7 +34,7 @@ jobs:
        env:
          NAME: clash
          BINDIR: bin
-        run: make -j $(go run ./test/main.go) releases
+        run: make -j releases

      - name: Upload Release
        uses: softprops/action-gh-release@v1
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@ -11,7 +11,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/stale@v7
+      - uses: actions/stale@v4
        with:
          stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 5 days'
          days-before-stale: 60
--- a/.gitignore
+++ b/.gitignore
@ -23,14 +23,3 @@ vendor

 # test suite
 test/config/cache*
-
-# docs site generator
-node_modules
-package-lock.json
-pnpm-lock.yaml
-
-# docs site cache
-docs/.vitepress/cache
-
-# docs site build files
-docs/.vitepress/dist
--- a/.golangci.yaml
+++ b/.golangci.yaml
@ -1,23 +0,0 @@
-linters:
-  disable-all: true
-  enable:
-    - gci
-    - gofumpt
-    - gosimple
-    - govet
-    - ineffassign
-    - misspell
-    - staticcheck
-    - unconvert
-    - unused
-    - usestdlibvars
-
-linters-settings:
-  gci:
-    custom-order: true
-    sections:
-      - standard
-      - prefix(github.com/Dreamacro/clash)
-      - default
-  staticcheck:
-    go: '1.20'
--- a/20
+++ b/20
@ -1,22 +1,18 @@
-FROM --platform=${BUILDPLATFORM} golang:alpine as builder
+FROM golang:alpine as builder

-RUN apk add --no-cache make git ca-certificates tzdata && \
+RUN apk add --no-cache make git && \
    wget -O /Country.mmdb https://github.com/Dreamacro/maxmind-geoip/releases/latest/download/Country.mmdb
-WORKDIR /workdir
+WORKDIR /clash-src
 COPY --from=tonistiigi/xx:golang / /
-ARG TARGETOS TARGETARCH TARGETVARIANT
-
-RUN --mount=target=. \
-    --mount=type=cache,target=/root/.cache/go-build \
-    --mount=type=cache,target=/go/pkg/mod \
-    make BINDIR= ${TARGETOS}-${TARGETARCH}${TARGETVARIANT} && \
-    mv /clash* /clash
+COPY . /clash-src
+RUN go mod download && \
+    make docker && \
+    mv ./bin/clash-docker /clash

 FROM alpine:latest
 LABEL org.opencontainers.image.source="https://github.com/Dreamacro/clash"

-COPY --from=builder /usr/share/zoneinfo /usr/share/zoneinfo
-COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+RUN apk add --no-cache ca-certificates
 COPY --from=builder /Country.mmdb /root/.config/clash/
 COPY --from=builder /clash /
 ENTRYPOINT ["/clash"]
--- a/46
+++ b/46
@ -8,43 +8,37 @@ GOBUILD=CGO_ENABLED=0 go build -trimpath -ldflags '-X "github.com/Dreamacro/clas

 PLATFORM_LIST = \
 	darwin-amd64 \
-	darwin-amd64-v3 \
 	darwin-arm64 \
 	linux-386 \
 	linux-amd64 \
-	linux-amd64-v3 \
 	linux-armv5 \
 	linux-armv6 \
 	linux-armv7 \
-	linux-arm64 \
+	linux-armv8 \
 	linux-mips-softfloat \
 	linux-mips-hardfloat \
 	linux-mipsle-softfloat \
 	linux-mipsle-hardfloat \
 	linux-mips64 \
 	linux-mips64le \
-	linux-riscv64 \
-	linux-loong64 \
 	freebsd-386 \
 	freebsd-amd64 \
-	freebsd-amd64-v3 \
 	freebsd-arm64

 WINDOWS_ARCH_LIST = \
 	windows-386 \
 	windows-amd64 \
-	windows-amd64-v3 \
 	windows-arm64 \
-	windows-armv7
+	windows-arm32v7

 all: linux-amd64 darwin-amd64 windows-amd64 # Most used

+docker:
+	$(GOBUILD) -o $(BINDIR)/$(NAME)-$@
+
 darwin-amd64:
 	GOARCH=amd64 GOOS=darwin $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

-darwin-amd64-v3:
-	GOARCH=amd64 GOOS=darwin GOAMD64=v3 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@
-
 darwin-arm64:
 	GOARCH=arm64 GOOS=darwin $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

@ -54,9 +48,6 @@ linux-386:
 linux-amd64:
 	GOARCH=amd64 GOOS=linux $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

-linux-amd64-v3:
-	GOARCH=amd64 GOOS=linux GOAMD64=v3 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@
-
 linux-armv5:
 	GOARCH=arm GOOS=linux GOARM=5 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

@ -66,7 +57,7 @@ linux-armv6:
 linux-armv7:
 	GOARCH=arm GOOS=linux GOARM=7 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

-linux-arm64:
+linux-armv8:
 	GOARCH=arm64 GOOS=linux $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

 linux-mips-softfloat:
@ -87,21 +78,12 @@ linux-mips64:
 linux-mips64le:
 	GOARCH=mips64le GOOS=linux $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

-linux-riscv64:
-	GOARCH=riscv64 GOOS=linux $(GOBUILD) -o $(BINDIR)/$(NAME)-$@	
-
-linux-loong64:
-	GOARCH=loong64 GOOS=linux $(GOBUILD) -o $(BINDIR)/$(NAME)-$@	
-
 freebsd-386:
 	GOARCH=386 GOOS=freebsd $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

 freebsd-amd64:
 	GOARCH=amd64 GOOS=freebsd $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

-freebsd-amd64-v3:
-	GOARCH=amd64 GOOS=freebsd GOAMD64=v3 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@
-
 freebsd-arm64:
 	GOARCH=arm64 GOOS=freebsd $(GOBUILD) -o $(BINDIR)/$(NAME)-$@

@ -111,13 +93,10 @@ windows-386:
 windows-amd64:
 	GOARCH=amd64 GOOS=windows $(GOBUILD) -o $(BINDIR)/$(NAME)-$@.exe

-windows-amd64-v3:
-	GOARCH=amd64 GOOS=windows GOAMD64=v3 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@.exe
-
 windows-arm64:
 	GOARCH=arm64 GOOS=windows $(GOBUILD) -o $(BINDIR)/$(NAME)-$@.exe

-windows-armv7:
+windows-arm32v7:
 	GOARCH=arm GOOS=windows GOARM=7 $(GOBUILD) -o $(BINDIR)/$(NAME)-$@.exe

 gz_releases=$(addsuffix .gz, $(PLATFORM_LIST))
@ -134,15 +113,8 @@ all-arch: $(PLATFORM_LIST) $(WINDOWS_ARCH_LIST)

 releases: $(gz_releases) $(zip_releases)

-LINT_OS_LIST := darwin windows linux freebsd openbsd
-
-lint: $(foreach os,$(LINT_OS_LIST),$(os)-lint)
-%-lint:
-	GOOS=$* golangci-lint run ./...
-
-lint-fix: $(foreach os,$(LINT_OS_LIST),$(os)-lint-fix)
-%-lint-fix:
-	GOOS=$* golangci-lint run --fix ./...
+lint:
+	golangci-lint run --disable-all -E govet -E gofumpt -E megacheck ./...

 clean:
 	rm $(BINDIR)/*
--- a/README.md
+++ b/README.md
@ -7,7 +7,7 @@

 <p align="center">
  <a href="https://github.com/Dreamacro/clash/actions">
-    <img src="https://img.shields.io/github/actions/workflow/status/Dreamacro/clash/release.yml?branch=master&style=flat-square" alt="Github Actions">
+    <img src="https://img.shields.io/github/workflow/status/Dreamacro/clash/Go?style=flat-square" alt="Github Actions">
  </a>
  <a href="https://goreportcard.com/report/github.com/Dreamacro/clash">
    <img src="https://goreportcard.com/badge/github.com/Dreamacro/clash?style=flat-square">
@ -23,28 +23,35 @@

 ## Features

-This is a general overview of the features that comes with Clash.  
+- Local HTTP/HTTPS/SOCKS server with authentication support
+- VMess, Shadowsocks, Trojan, Snell protocol support for remote connections
+- Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP.
+- Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes
+- Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency
+- Remote providers, allowing users to get node lists remotely instead of hardcoding in config
+- Netfilter TCP redirecting. Deploy Clash on your Internet gateway with `iptables`.
+- Comprehensive HTTP RESTful API controller

- Inbound: HTTP, HTTPS, SOCKS5 server, TUN device
- Outbound: Shadowsocks(R), VMess, Trojan, Snell, SOCKS5, HTTP(S), Wireguard
- Rule-based Routing: dynamic scripting, domain, IP addresses, process name and more
- Fake-IP DNS: minimises impact on DNS pollution and improves network performance
- Transparent Proxy: Redirect TCP and TProxy TCP/UDP with automatic route table/rule management
- Proxy Groups: automatic fallback, load balancing or latency testing
- Remote Providers: load remote proxy lists dynamically
- RESTful API: update configuration in-place via a comprehensive API
+## Premium Features

-*Some of the features may only be available in the [Premium core](https://dreamacro.github.io/clash/premium/introduction.html).*
+- TUN mode on macOS, Linux and Windows. [Doc](https://github.com/Dreamacro/clash/wiki/premium-core-features#tun-device)
+- Match your tunnel by [Script](https://github.com/Dreamacro/clash/wiki/premium-core-features#script)
+- [Rule Provider](https://github.com/Dreamacro/clash/wiki/premium-core-features#rule-providers)

-## Documentation
+## Getting Started
+Documentations are now moved to [GitHub Wiki](https://github.com/Dreamacro/clash/wiki).

-You can find the latest documentation at [https://dreamacro.github.io/clash/](https://dreamacro.github.io/clash/).
+## Premium Release
+[Release](https://github.com/Dreamacro/clash/releases/tag/premium)
+
+## Development
+If you want to build an application that uses clash as a library, check out the the [GitHub Wiki](https://github.com/Dreamacro/clash/wiki/use-clash-as-a-library)

 ## Credits

- [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2)
- [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core)
- [WireGuard/wireguard-go](https://github.com/WireGuard/wireguard-go)
+* [riobard/go-shadowsocks2](https://github.com/riobard/go-shadowsocks2)
+* [v2ray/v2ray-core](https://github.com/v2ray/v2ray-core)
+* [WireGuard/wireguard-go](https://github.com/WireGuard/wireguard-go)

 ## License

--- a/adapter/adapter.go
+++ b/adapter/adapter.go
@ -91,10 +91,9 @@ func (p *Proxy) MarshalJSON() ([]byte, error) {
 		return inner, err
 	}

-	mapping := map[string]any{}
+	mapping := map[string]interface{}{}
 	json.Unmarshal(inner, &mapping)
 	mapping["history"] = p.DelayHistory()
-	mapping["alive"] = p.Alive()
 	mapping["name"] = p.Name()
 	mapping["udp"] = p.SupportUDP()
 	return json.Marshal(mapping)
@ -102,13 +101,12 @@ func (p *Proxy) MarshalJSON() ([]byte, error) {

 // URLTest get the delay for the specified URL
 // implements C.Proxy
-func (p *Proxy) URLTest(ctx context.Context, url string) (delay, meanDelay uint16, err error) {
+func (p *Proxy) URLTest(ctx context.Context, url string) (t uint16, err error) {
 	defer func() {
 		p.alive.Store(err == nil)
 		record := C.DelayHistory{Time: time.Now()}
 		if err == nil {
-			record.Delay = delay
-			record.MeanDelay = meanDelay
+			record.Delay = t
 		}
 		p.history.Put(record)
 		if p.history.Len() > 10 {
@ -158,16 +156,7 @@ func (p *Proxy) URLTest(ctx context.Context, url string) (delay, meanDelay uint1
 		return
 	}
 	resp.Body.Close()
-	delay = uint16(time.Since(start) / time.Millisecond)
-
-	resp, err = client.Do(req)
-	if err != nil {
-		// ignore error because some server will hijack the connection and close immediately
-		return delay, 0, nil
-	}
-	resp.Body.Close()
-	meanDelay = uint16(time.Since(start) / time.Millisecond / 2)
-
+	t = uint16(time.Since(start) / time.Millisecond)
 	return
 }

@ -195,9 +184,10 @@ func urlToMetadata(rawURL string) (addr C.Metadata, err error) {
 	}

 	addr = C.Metadata{
-		Host:    u.Hostname(),
-		DstIP:   nil,
-		DstPort: port,
+		AddrType: C.AtypDomainName,
+		Host:     u.Hostname(),
+		DstIP:    nil,
+		DstPort:  port,
 	}
 	return
 }
--- a/adapter/inbound/http.go
+++ b/adapter/inbound/http.go
@ -2,7 +2,6 @@ package inbound

 import (
 	"net"
-	"net/netip"

 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/context"
@ -10,7 +9,7 @@ import (
 )

 // NewHTTP receive normal http request and return HTTPContext
-func NewHTTP(target socks5.Addr, source net.Addr, originTarget net.Addr, conn net.Conn) *context.ConnContext {
+func NewHTTP(target socks5.Addr, source net.Addr, conn net.Conn) *context.ConnContext {
 	metadata := parseSocksAddr(target)
 	metadata.NetWork = C.TCP
 	metadata.Type = C.HTTP
@ -18,10 +17,5 @@ func NewHTTP(target socks5.Addr, source net.Addr, originTarget net.Addr, conn ne
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
-	if originTarget != nil {
-		if addrPort, err := netip.ParseAddrPort(originTarget.String()); err == nil {
-			metadata.OriginDst = addrPort
-		}
-	}
 	return context.NewConnContext(conn, metadata)
 }
--- a/adapter/inbound/https.go
+++ b/adapter/inbound/https.go
@ -3,7 +3,6 @@ package inbound
 import (
 	"net"
 	"net/http"
-	"net/netip"

 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/context"
@ -17,8 +16,5 @@ func NewHTTPS(request *http.Request, conn net.Conn) *context.ConnContext {
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
-	if addrPort, err := netip.ParseAddrPort(conn.LocalAddr().String()); err == nil {
-		metadata.OriginDst = addrPort
-	}
 	return context.NewConnContext(conn, metadata)
 }
--- a/adapter/inbound/packet.go
+++ b/adapter/inbound/packet.go
@ -1,9 +1,6 @@
 package inbound

 import (
-	"net"
-	"net/netip"
-
 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/transport/socks5"
 )
@ -20,7 +17,7 @@ func (s *PacketAdapter) Metadata() *C.Metadata {
 }

 // NewPacket is PacketAdapter generator
-func NewPacket(target socks5.Addr, originTarget net.Addr, packet C.UDPPacket, source C.Type) *PacketAdapter {
+func NewPacket(target socks5.Addr, packet C.UDPPacket, source C.Type) *PacketAdapter {
 	metadata := parseSocksAddr(target)
 	metadata.NetWork = C.UDP
 	metadata.Type = source
@ -28,11 +25,7 @@ func NewPacket(target socks5.Addr, originTarget net.Addr, packet C.UDPPacket, so
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
-	if originTarget != nil {
-		if addrPort, err := netip.ParseAddrPort(originTarget.String()); err == nil {
-			metadata.OriginDst = addrPort
-		}
-	}
+
 	return &PacketAdapter{
 		UDPPacket: packet,
 		metadata:  metadata,
--- a/adapter/inbound/socket.go
+++ b/adapter/inbound/socket.go
@ -2,7 +2,6 @@ package inbound

 import (
 	"net"
-	"net/netip"

 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/context"
@ -18,8 +17,6 @@ func NewSocket(target socks5.Addr, conn net.Conn, source C.Type) *context.ConnCo
 		metadata.SrcIP = ip
 		metadata.SrcPort = port
 	}
-	if addrPort, err := netip.ParseAddrPort(conn.LocalAddr().String()); err == nil {
-		metadata.OriginDst = addrPort
-	}
+
 	return context.NewConnContext(conn, metadata)
 }
--- a/adapter/inbound/util.go
+++ b/adapter/inbound/util.go
@ -11,7 +11,9 @@ import (
 )

 func parseSocksAddr(target socks5.Addr) *C.Metadata {
-	metadata := &C.Metadata{}
+	metadata := &C.Metadata{
+		AddrType: int(target[0]),
+	}

 	switch target[0] {
 	case socks5.AtypDomainName:
@ -42,13 +44,21 @@ func parseHTTPAddr(request *http.Request) *C.Metadata {
 	host = strings.TrimRight(host, ".")

 	metadata := &C.Metadata{
-		NetWork: C.TCP,
-		Host:    host,
-		DstIP:   nil,
-		DstPort: port,
+		NetWork:  C.TCP,
+		AddrType: C.AtypDomainName,
+		Host:     host,
+		DstIP:    nil,
+		DstPort:  port,
 	}

-	if ip := net.ParseIP(host); ip != nil {
+	ip := net.ParseIP(host)
+	if ip != nil {
+		switch {
+		case ip.To4() == nil:
+			metadata.AddrType = C.AtypIPv6
+		default:
+			metadata.AddrType = C.AtypIPv4
+		}
 		metadata.DstIP = ip
 	}

--- a/adapter/outbound/http.go
+++ b/adapter/outbound/http.go
@ -22,29 +22,25 @@ type Http struct {
 	user      string
 	pass      string
 	tlsConfig *tls.Config
-	Headers   http.Header
 }

 type HttpOption struct {
 	BasicOption
-	Name           string            `proxy:"name"`
-	Server         string            `proxy:"server"`
-	Port           int               `proxy:"port"`
-	UserName       string            `proxy:"username,omitempty"`
-	Password       string            `proxy:"password,omitempty"`
-	TLS            bool              `proxy:"tls,omitempty"`
-	SNI            string            `proxy:"sni,omitempty"`
-	SkipCertVerify bool              `proxy:"skip-cert-verify,omitempty"`
-	Headers        map[string]string `proxy:"headers,omitempty"`
+	Name           string `proxy:"name"`
+	Server         string `proxy:"server"`
+	Port           int    `proxy:"port"`
+	UserName       string `proxy:"username,omitempty"`
+	Password       string `proxy:"password,omitempty"`
+	TLS            bool   `proxy:"tls,omitempty"`
+	SNI            string `proxy:"sni,omitempty"`
+	SkipCertVerify bool   `proxy:"skip-cert-verify,omitempty"`
 }

 // StreamConn implements C.ProxyAdapter
 func (h *Http) StreamConn(c net.Conn, metadata *C.Metadata) (net.Conn, error) {
 	if h.tlsConfig != nil {
 		cc := tls.Client(c, h.tlsConfig)
-		ctx, cancel := context.WithTimeout(context.Background(), C.DefaultTLSTimeout)
-		defer cancel()
-		err := cc.HandshakeContext(ctx)
+		err := cc.Handshake()
 		c = cc
 		if err != nil {
 			return nil, fmt.Errorf("%s connect error: %w", h.addr, err)
@ -65,9 +61,7 @@ func (h *Http) DialContext(ctx context.Context, metadata *C.Metadata, opts ...di
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = h.StreamConn(c, metadata)
 	if err != nil {
@ -84,12 +78,12 @@ func (h *Http) shakeHand(metadata *C.Metadata, rw io.ReadWriter) error {
 		URL: &url.URL{
 			Host: addr,
 		},
-		Host:   addr,
-		Header: h.Headers.Clone(),
+		Host: addr,
+		Header: http.Header{
+			"Proxy-Connection": []string{"Keep-Alive"},
+		},
 	}

-	req.Header.Add("Proxy-Connection", "Keep-Alive")
-
 	if h.user != "" && h.pass != "" {
 		auth := h.user + ":" + h.pass
 		req.Header.Add("Proxy-Authorization", "Basic "+base64.StdEncoding.EncodeToString([]byte(auth)))
@ -136,22 +130,15 @@ func NewHttp(option HttpOption) *Http {
 		}
 	}

-	headers := http.Header{}
-	for name, value := range option.Headers {
-		headers.Add(name, value)
-	}
-
 	return &Http{
 		Base: &Base{
 			name:  option.Name,
 			addr:  net.JoinHostPort(option.Server, strconv.Itoa(option.Port)),
 			tp:    C.Http,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		user:      option.UserName,
 		pass:      option.Password,
 		tlsConfig: tlsConfig,
-		Headers:   headers,
 	}
 }
--- a/adapter/outbound/reject.go
+++ b/adapter/outbound/reject.go
@ -2,6 +2,7 @@ package outbound

 import (
 	"context"
+	"errors"
 	"io"
 	"net"
 	"time"
@ -16,12 +17,12 @@ type Reject struct {

 // DialContext implements C.ProxyAdapter
 func (r *Reject) DialContext(ctx context.Context, metadata *C.Metadata, opts ...dialer.Option) (C.Conn, error) {
-	return NewConn(&nopConn{}, r), nil
+	return NewConn(&NopConn{}, r), nil
 }

 // ListenPacketContext implements C.ProxyAdapter
 func (r *Reject) ListenPacketContext(ctx context.Context, metadata *C.Metadata, opts ...dialer.Option) (C.PacketConn, error) {
-	return newPacketConn(&nopPacketConn{}, r), nil
+	return nil, errors.New("match reject rule")
 }

 func NewReject() *Reject {
@ -34,29 +35,30 @@ func NewReject() *Reject {
 	}
 }

-type nopConn struct{}
+type NopConn struct{}

-func (rw *nopConn) Read(b []byte) (int, error) {
+func (rw *NopConn) Read(b []byte) (int, error) {
 	return 0, io.EOF
 }

-func (rw *nopConn) Write(b []byte) (int, error) {
+func (rw *NopConn) Write(b []byte) (int, error) {
 	return 0, io.EOF
 }

-func (rw *nopConn) Close() error                     { return nil }
-func (rw *nopConn) LocalAddr() net.Addr              { return nil }
-func (rw *nopConn) RemoteAddr() net.Addr             { return nil }
-func (rw *nopConn) SetDeadline(time.Time) error      { return nil }
-func (rw *nopConn) SetReadDeadline(time.Time) error  { return nil }
-func (rw *nopConn) SetWriteDeadline(time.Time) error { return nil }
+// Close is fake function for net.Conn
+func (rw *NopConn) Close() error { return nil }

-type nopPacketConn struct{}
+// LocalAddr is fake function for net.Conn
+func (rw *NopConn) LocalAddr() net.Addr { return nil }

-func (npc *nopPacketConn) WriteTo(b []byte, addr net.Addr) (n int, err error) { return len(b), nil }
-func (npc *nopPacketConn) ReadFrom(b []byte) (int, net.Addr, error)           { return 0, nil, io.EOF }
-func (npc *nopPacketConn) Close() error                                       { return nil }
-func (npc *nopPacketConn) LocalAddr() net.Addr                                { return &net.UDPAddr{IP: net.IPv4zero, Port: 0} }
-func (npc *nopPacketConn) SetDeadline(time.Time) error                        { return nil }
-func (npc *nopPacketConn) SetReadDeadline(time.Time) error                    { return nil }
-func (npc *nopPacketConn) SetWriteDeadline(time.Time) error                   { return nil }
+// RemoteAddr is fake function for net.Conn
+func (rw *NopConn) RemoteAddr() net.Addr { return nil }
+
+// SetDeadline is fake function for net.Conn
+func (rw *NopConn) SetDeadline(time.Time) error { return nil }
+
+// SetReadDeadline is fake function for net.Conn
+func (rw *NopConn) SetReadDeadline(time.Time) error { return nil }
+
+// SetWriteDeadline is fake function for net.Conn
+func (rw *NopConn) SetWriteDeadline(time.Time) error { return nil }
--- a/adapter/outbound/shadowsocks.go
+++ b/adapter/outbound/shadowsocks.go
@ -10,10 +10,11 @@ import (
 	"github.com/Dreamacro/clash/common/structure"
 	"github.com/Dreamacro/clash/component/dialer"
 	C "github.com/Dreamacro/clash/constant"
-	"github.com/Dreamacro/clash/transport/shadowsocks/core"
 	obfs "github.com/Dreamacro/clash/transport/simple-obfs"
 	"github.com/Dreamacro/clash/transport/socks5"
 	v2rayObfs "github.com/Dreamacro/clash/transport/v2ray-plugin"
+
+	"github.com/Dreamacro/go-shadowsocks2/core"
 )

 type ShadowSocks struct {
@ -28,14 +29,14 @@ type ShadowSocks struct {

 type ShadowSocksOption struct {
 	BasicOption
-	Name       string         `proxy:"name"`
-	Server     string         `proxy:"server"`
-	Port       int            `proxy:"port"`
-	Password   string         `proxy:"password"`
-	Cipher     string         `proxy:"cipher"`
-	UDP        bool           `proxy:"udp,omitempty"`
-	Plugin     string         `proxy:"plugin,omitempty"`
-	PluginOpts map[string]any `proxy:"plugin-opts,omitempty"`
+	Name       string                 `proxy:"name"`
+	Server     string                 `proxy:"server"`
+	Port       int                    `proxy:"port"`
+	Password   string                 `proxy:"password"`
+	Cipher     string                 `proxy:"cipher"`
+	UDP        bool                   `proxy:"udp,omitempty"`
+	Plugin     string                 `proxy:"plugin,omitempty"`
+	PluginOpts map[string]interface{} `proxy:"plugin-opts,omitempty"`
 }

 type simpleObfsOption struct {
@ -81,9 +82,7 @@ func (ss *ShadowSocks) DialContext(ctx context.Context, metadata *C.Metadata, op
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = ss.StreamConn(c, metadata)
 	return NewConn(c, ss), err
@ -161,7 +160,6 @@ func NewShadowSocks(option ShadowSocksOption) (*ShadowSocks, error) {
 			tp:    C.Shadowsocks,
 			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		cipher: ciph,

--- a/adapter/outbound/shadowsocksr.go
+++ b/adapter/outbound/shadowsocksr.go
@ -8,11 +8,12 @@ import (

 	"github.com/Dreamacro/clash/component/dialer"
 	C "github.com/Dreamacro/clash/constant"
-	"github.com/Dreamacro/clash/transport/shadowsocks/core"
-	"github.com/Dreamacro/clash/transport/shadowsocks/shadowaead"
-	"github.com/Dreamacro/clash/transport/shadowsocks/shadowstream"
 	"github.com/Dreamacro/clash/transport/ssr/obfs"
 	"github.com/Dreamacro/clash/transport/ssr/protocol"
+
+	"github.com/Dreamacro/go-shadowsocks2/core"
+	"github.com/Dreamacro/go-shadowsocks2/shadowaead"
+	"github.com/Dreamacro/go-shadowsocks2/shadowstream"
 )

 type ShadowSocksR struct {
@ -66,9 +67,7 @@ func (ssr *ShadowSocksR) DialContext(ctx context.Context, metadata *C.Metadata,
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = ssr.StreamConn(c, metadata)
 	return NewConn(c, ssr), err
@ -93,12 +92,6 @@ func (ssr *ShadowSocksR) ListenPacketContext(ctx context.Context, metadata *C.Me
 }

 func NewShadowSocksR(option ShadowSocksROption) (*ShadowSocksR, error) {
-	// SSR protocol compatibility
-	// https://github.com/Dreamacro/clash/pull/2056
-	if option.Cipher == "none" {
-		option.Cipher = "dummy"
-	}
-
 	addr := net.JoinHostPort(option.Server, strconv.Itoa(option.Port))
 	cipher := option.Cipher
 	password := option.Password
@ -110,14 +103,13 @@ func NewShadowSocksR(option ShadowSocksROption) (*ShadowSocksR, error) {
 		ivSize int
 		key    []byte
 	)
-
 	if option.Cipher == "dummy" {
 		ivSize = 0
 		key = core.Kdf(option.Password, 16)
 	} else {
 		ciph, ok := coreCiph.(*core.StreamCipher)
 		if !ok {
-			return nil, fmt.Errorf("%s is not none or a supported stream cipher in ssr", cipher)
+			return nil, fmt.Errorf("%s is not dummy or a supported stream cipher in ssr", cipher)
 		}
 		ivSize = ciph.IVSize()
 		key = ciph.Key
@ -150,7 +142,6 @@ func NewShadowSocksR(option ShadowSocksROption) (*ShadowSocksR, error) {
 			tp:    C.ShadowsocksR,
 			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		cipher:   coreCiph,
 		obfs:     obfs,
--- a/adapter/outbound/snell.go
+++ b/adapter/outbound/snell.go
@ -23,13 +23,12 @@ type Snell struct {

 type SnellOption struct {
 	BasicOption
-	Name     string         `proxy:"name"`
-	Server   string         `proxy:"server"`
-	Port     int            `proxy:"port"`
-	Psk      string         `proxy:"psk"`
-	UDP      bool           `proxy:"udp,omitempty"`
-	Version  int            `proxy:"version,omitempty"`
-	ObfsOpts map[string]any `proxy:"obfs-opts,omitempty"`
+	Name     string                 `proxy:"name"`
+	Server   string                 `proxy:"server"`
+	Port     int                    `proxy:"port"`
+	Psk      string                 `proxy:"psk"`
+	Version  int                    `proxy:"version,omitempty"`
+	ObfsOpts map[string]interface{} `proxy:"obfs-opts,omitempty"`
 }

 type streamOption struct {
@ -53,7 +52,7 @@ func streamConn(c net.Conn, option streamOption) *snell.Snell {
 // StreamConn implements C.ProxyAdapter
 func (s *Snell) StreamConn(c net.Conn, metadata *C.Metadata) (net.Conn, error) {
 	c = streamConn(c, streamOption{s.psk, s.version, s.addr, s.obfsOption})
-	port, _ := strconv.ParseUint(metadata.DstPort, 10, 16)
+	port, _ := strconv.ParseInt(metadata.DstPort, 10, 16)
 	err := snell.WriteHeader(c, metadata.String(), uint(port), s.version)
 	return c, err
 }
@ -80,32 +79,12 @@ func (s *Snell) DialContext(ctx context.Context, metadata *C.Metadata, opts ...d
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = s.StreamConn(c, metadata)
 	return NewConn(c, s), err
 }

-// ListenPacketContext implements C.ProxyAdapter
-func (s *Snell) ListenPacketContext(ctx context.Context, metadata *C.Metadata, opts ...dialer.Option) (C.PacketConn, error) {
-	c, err := dialer.DialContext(ctx, "tcp", s.addr, s.Base.DialOptions(opts...)...)
-	if err != nil {
-		return nil, err
-	}
-	tcpKeepAlive(c)
-	c = streamConn(c, streamOption{s.psk, s.version, s.addr, s.obfsOption})
-
-	err = snell.WriteUDPHeader(c, s.version)
-	if err != nil {
-		return nil, err
-	}
-
-	pc := snell.PacketConn(c)
-	return newPacketConn(pc, s), nil
-}
-
 func NewSnell(option SnellOption) (*Snell, error) {
 	addr := net.JoinHostPort(option.Server, strconv.Itoa(option.Port))
 	psk := []byte(option.Psk)
@ -127,13 +106,7 @@ func NewSnell(option SnellOption) (*Snell, error) {
 	if option.Version == 0 {
 		option.Version = snell.DefaultSnellVersion
 	}
-	switch option.Version {
-	case snell.Version1, snell.Version2:
-		if option.UDP {
-			return nil, fmt.Errorf("snell version %d not support UDP", option.Version)
-		}
-	case snell.Version3:
-	default:
+	if option.Version != snell.Version1 && option.Version != snell.Version2 {
 		return nil, fmt.Errorf("snell version error: %d", option.Version)
 	}

@ -142,9 +115,7 @@ func NewSnell(option SnellOption) (*Snell, error) {
 			name:  option.Name,
 			addr:  addr,
 			tp:    C.Snell,
-			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		psk:        psk,
 		obfsOption: obfsOption,
--- a/adapter/outbound/socks5.go
+++ b/adapter/outbound/socks5.go
@ -39,9 +39,7 @@ type Socks5Option struct {
 func (ss *Socks5) StreamConn(c net.Conn, metadata *C.Metadata) (net.Conn, error) {
 	if ss.tls {
 		cc := tls.Client(c, ss.tlsConfig)
-		ctx, cancel := context.WithTimeout(context.Background(), C.DefaultTLSTimeout)
-		defer cancel()
-		err := cc.HandshakeContext(ctx)
+		err := cc.Handshake()
 		c = cc
 		if err != nil {
 			return nil, fmt.Errorf("%s connect error: %w", ss.addr, err)
@ -69,9 +67,7 @@ func (ss *Socks5) DialContext(ctx context.Context, metadata *C.Metadata, opts ..
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = ss.StreamConn(c, metadata)
 	if err != nil {
@ -91,15 +87,11 @@ func (ss *Socks5) ListenPacketContext(ctx context.Context, metadata *C.Metadata,

 	if ss.tls {
 		cc := tls.Client(c, ss.tlsConfig)
-		ctx, cancel := context.WithTimeout(context.Background(), C.DefaultTLSTimeout)
-		defer cancel()
-		err = cc.HandshakeContext(ctx)
+		err = cc.Handshake()
 		c = cc
 	}

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	tcpKeepAlive(c)
 	var user *socks5.User
@ -162,7 +154,6 @@ func NewSocks5(option Socks5Option) *Socks5 {
 			tp:    C.Socks5,
 			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		user:           option.UserName,
 		pass:           option.Password,
--- a/adapter/outbound/trojan.go
+++ b/adapter/outbound/trojan.go
@ -109,9 +109,7 @@ func (t *Trojan) DialContext(ctx context.Context, metadata *C.Metadata, opts ...
 	}
 	tcpKeepAlive(c)

-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = t.StreamConn(c, metadata)
 	if err != nil {
@ -131,17 +129,13 @@ func (t *Trojan) ListenPacketContext(ctx context.Context, metadata *C.Metadata,
 		if err != nil {
 			return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
 		}
-		defer func(c net.Conn) {
-			safeConnClose(c, err)
-		}(c)
+		defer safeConnClose(c, err)
 	} else {
 		c, err = dialer.DialContext(ctx, "tcp", t.addr, t.Base.DialOptions(opts...)...)
 		if err != nil {
 			return nil, fmt.Errorf("%s connect error: %w", t.addr, err)
 		}
-		defer func(c net.Conn) {
-			safeConnClose(c, err)
-		}(c)
+		defer safeConnClose(c, err)
 		tcpKeepAlive(c)
 		c, err = t.plainStream(c)
 		if err != nil {
@ -179,7 +173,6 @@ func NewTrojan(option TrojanOption) (*Trojan, error) {
 			tp:    C.Trojan,
 			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		instance: trojan.New(tOption),
 		option:   &option,
--- a/adapter/outbound/util.go
+++ b/adapter/outbound/util.go
@ -1,6 +1,7 @@
 package outbound

 import (
+	"bytes"
 	"net"
 	"strconv"
 	"time"
@ -8,8 +9,6 @@ import (
 	"github.com/Dreamacro/clash/component/resolver"
 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/transport/socks5"
-
-	"github.com/Dreamacro/protobytes"
 )

 func tcpKeepAlive(c net.Conn) {
@ -20,24 +19,23 @@ func tcpKeepAlive(c net.Conn) {
 }

 func serializesSocksAddr(metadata *C.Metadata) []byte {
-	buf := protobytes.BytesWriter{}
-
-	addrType := metadata.AddrType()
-	buf.PutUint8(uint8(addrType))
-
+	var buf [][]byte
+	aType := uint8(metadata.AddrType)
 	p, _ := strconv.ParseUint(metadata.DstPort, 10, 16)
-	switch addrType {
+	port := []byte{uint8(p >> 8), uint8(p & 0xff)}
+	switch metadata.AddrType {
 	case socks5.AtypDomainName:
-		buf.PutUint8(uint8(len(metadata.Host)))
-		buf.PutString(metadata.Host)
+		len := uint8(len(metadata.Host))
+		host := []byte(metadata.Host)
+		buf = [][]byte{{aType, len}, host, port}
 	case socks5.AtypIPv4:
-		buf.PutSlice(metadata.DstIP.To4())
+		host := metadata.DstIP.To4()
+		buf = [][]byte{{aType}, host, port}
 	case socks5.AtypIPv6:
-		buf.PutSlice(metadata.DstIP.To16())
+		host := metadata.DstIP.To16()
+		buf = [][]byte{{aType}, host, port}
 	}
-
-	buf.PutUint16be(uint16(p))
-	return buf.Bytes()
+	return bytes.Join(buf, nil)
 }

 func resolveUDPAddr(network, address string) (*net.UDPAddr, error) {
--- a/adapter/outbound/vmess.go
+++ b/adapter/outbound/vmess.go
@ -14,14 +14,11 @@ import (
 	"github.com/Dreamacro/clash/component/resolver"
 	C "github.com/Dreamacro/clash/constant"
 	"github.com/Dreamacro/clash/transport/gun"
-	"github.com/Dreamacro/clash/transport/socks5"
 	"github.com/Dreamacro/clash/transport/vmess"

 	"golang.org/x/net/http2"
 )

-var ErrUDPRemoteAddrMismatch = errors.New("udp packet dropped due to mismatched remote address")
-
 type Vmess struct {
 	*Base
 	client *vmess.Client
@ -50,6 +47,10 @@ type VmessOption struct {
 	HTTP2Opts      HTTP2Options `proxy:"h2-opts,omitempty"`
 	GrpcOpts       GrpcOptions  `proxy:"grpc-opts,omitempty"`
 	WSOpts         WSOptions    `proxy:"ws-opts,omitempty"`
+
+	// TODO: remove these until 2022
+	WSHeaders map[string]string `proxy:"ws-headers,omitempty"`
+	WSPath    string            `proxy:"ws-path,omitempty"`
 }

 type HTTPOptions struct {
@ -79,6 +80,13 @@ func (v *Vmess) StreamConn(c net.Conn, metadata *C.Metadata) (net.Conn, error) {
 	var err error
 	switch v.option.Network {
 	case "ws":
+		if v.option.WSOpts.Path == "" {
+			v.option.WSOpts.Path = v.option.WSPath
+		}
+		if len(v.option.WSOpts.Headers) == 0 {
+			v.option.WSOpts.Headers = v.option.WSHeaders
+		}
+
 		host, port, _ := net.SplitHostPort(v.addr)
 		wsOpts := &vmess.WebsocketConfig{
 			Host:                host,
@ -195,9 +203,7 @@ func (v *Vmess) DialContext(ctx context.Context, metadata *C.Metadata, opts ...d
 		if err != nil {
 			return nil, err
 		}
-		defer func(c net.Conn) {
-			safeConnClose(c, err)
-		}(c)
+		defer safeConnClose(c, err)

 		c, err = v.client.StreamConn(c, parseVmessAddr(metadata))
 		if err != nil {
@ -212,9 +218,7 @@ func (v *Vmess) DialContext(ctx context.Context, metadata *C.Metadata, opts ...d
 		return nil, fmt.Errorf("%s connect error: %s", v.addr, err.Error())
 	}
 	tcpKeepAlive(c)
-	defer func(c net.Conn) {
-		safeConnClose(c, err)
-	}(c)
+	defer safeConnClose(c, err)

 	c, err = v.StreamConn(c, metadata)
 	return NewConn(c, v), err
@ -238,9 +242,7 @@ func (v *Vmess) ListenPacketContext(ctx context.Context, metadata *C.Metadata, o
 		if err != nil {
 			return nil, err
 		}
-		defer func(c net.Conn) {
-			safeConnClose(c, err)
-		}(c)
+		defer safeConnClose(c, err)

 		c, err = v.client.StreamConn(c, parseVmessAddr(metadata))
 	} else {
@ -249,9 +251,7 @@ func (v *Vmess) ListenPacketContext(ctx context.Context, metadata *C.Metadata, o
 			return nil, fmt.Errorf("%s connect error: %s", v.addr, err.Error())
 		}
 		tcpKeepAlive(c)
-		defer func(c net.Conn) {
-			safeConnClose(c, err)
-		}(c)
+		defer safeConnClose(c, err)

 		c, err = v.StreamConn(c, metadata)
 	}
@ -291,7 +291,6 @@ func NewVmess(option VmessOption) (*Vmess, error) {
 			tp:    C.Vmess,
 			udp:   option.UDP,
 			iface: option.Interface,
-			rmark: option.RoutingMark,
 		},
 		client: client,
 		option: &option,
@ -338,17 +337,17 @@ func NewVmess(option VmessOption) (*Vmess, error) {
 func parseVmessAddr(metadata *C.Metadata) *vmess.DstAddr {
 	var addrType byte
 	var addr []byte
-	switch metadata.AddrType() {
-	case socks5.AtypIPv4:
-		addrType = vmess.AtypIPv4
+	switch metadata.AddrType {
+	case C.AtypIPv4:
+		addrType = byte(vmess.AtypIPv4)
 		addr = make([]byte, net.IPv4len)
 		copy(addr[:], metadata.DstIP.To4())
-	case socks5.AtypIPv6:
-		addrType = vmess.AtypIPv6
+	case C.AtypIPv6:
+		addrType = byte(vmess.AtypIPv6)
 		addr = make([]byte, net.IPv6len)
 		copy(addr[:], metadata.DstIP.To16())
-	case socks5.AtypDomainName:
-		addrType = vmess.AtypDomainName
+	case C.AtypDomainName:
+		addrType = byte(vmess.AtypDomainName)
 		addr = make([]byte, len(metadata.Host)+1)
 		addr[0] = byte(len(metadata.Host))
 		copy(addr[1:], []byte(metadata.Host))
@ -368,14 +367,7 @@ type vmessPacketConn struct {
 	rAddr net.Addr
 }

-// WriteTo implments C.PacketConn.WriteTo
-// Since VMess doesn't support full cone NAT by design, we verify if addr matches uc.rAddr, and drop the packet if not.
 func (uc *vmessPacketConn) WriteTo(b []byte, addr net.Addr) (int, error) {
-	allowedAddr := uc.rAddr.(*net.UDPAddr)
-	destAddr := addr.(*net.UDPAddr)
-	if !(allowedAddr.IP.Equal(destAddr.IP) && allowedAddr.Port == destAddr.Port) {
-		return 0, ErrUDPRemoteAddrMismatch
-	}
 	return uc.Conn.Write(b)
 }

--- a/adapter/outboundgroup/common.go
+++ b/adapter/outboundgroup/common.go
@ -11,19 +11,14 @@ const (
 	defaultGetProxiesDuration = time.Second * 5
 )

-func touchProviders(providers []provider.ProxyProvider) {
-	for _, provider := range providers {
-		provider.Touch()
-	}
-}
-
 func getProvidersProxies(providers []provider.ProxyProvider, touch bool) []C.Proxy {
 	proxies := []C.Proxy{}
 	for _, provider := range providers {
 		if touch {
-			provider.Touch()
+			proxies = append(proxies, provider.ProxiesWithTouch()...)
+		} else {
+			proxies = append(proxies, provider.Proxies()...)
 		}
-		proxies = append(proxies, provider.Proxies()...)
 	}
 	return proxies
 }
--- a/adapter/outboundgroup/fallback.go
+++ b/adapter/outboundgroup/fallback.go
@ -59,7 +59,7 @@ func (f *Fallback) MarshalJSON() ([]byte, error) {
 	for _, proxy := range f.proxies(false) {
 		all = append(all, proxy.Name())
 	}
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"type": f.Type().String(),
 		"now":  f.Now(),
 		"all":  all,
@ -73,7 +73,7 @@ func (f *Fallback) Unwrap(metadata *C.Metadata) C.Proxy {
 }

 func (f *Fallback) proxies(touch bool) []C.Proxy {
-	elm, _, _ := f.single.Do(func() (any, error) {
+	elm, _, _ := f.single.Do(func() (interface{}, error) {
 		return getProvidersProxies(f.providers, touch), nil
 	})

--- a/adapter/outboundgroup/loadbalance.go
+++ b/adapter/outboundgroup/loadbalance.go
@ -29,9 +29,11 @@ type LoadBalance struct {

 var errStrategy = errors.New("unsupported strategy")

-func parseStrategy(config map[string]any) string {
-	if strategy, ok := config["strategy"].(string); ok {
-		return strategy
+func parseStrategy(config map[string]interface{}) string {
+	if elm, ok := config["strategy"]; ok {
+		if strategy, ok := elm.(string); ok {
+			return strategy
+		}
 	}
 	return "consistent-hashing"
 }
@ -127,13 +129,6 @@ func strategyConsistentHashing() strategyFn {
 			}
 		}

-		// when availability is poor, traverse the entire list to get the available nodes
-		for _, proxy := range proxies {
-			if proxy.Alive() {
-				return proxy
-			}
-		}
-
 		return proxies[0]
 	}
 }
@ -145,7 +140,7 @@ func (lb *LoadBalance) Unwrap(metadata *C.Metadata) C.Proxy {
 }

 func (lb *LoadBalance) proxies(touch bool) []C.Proxy {
-	elm, _, _ := lb.single.Do(func() (any, error) {
+	elm, _, _ := lb.single.Do(func() (interface{}, error) {
 		return getProvidersProxies(lb.providers, touch), nil
 	})

@ -158,7 +153,7 @@ func (lb *LoadBalance) MarshalJSON() ([]byte, error) {
 	for _, proxy := range lb.proxies(false) {
 		all = append(all, proxy.Name())
 	}
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"type": lb.Type().String(),
 		"all":  all,
 	})
--- a/adapter/outboundgroup/parser.go
+++ b/adapter/outboundgroup/parser.go
@ -9,8 +9,6 @@ import (
 	"github.com/Dreamacro/clash/common/structure"
 	C "github.com/Dreamacro/clash/constant"
 	types "github.com/Dreamacro/clash/constant/provider"
-
-	regexp "github.com/dlclark/regexp2"
 )

 var (
@ -18,7 +16,7 @@ var (
 	errType              = errors.New("unsupport type")
 	errMissProxy         = errors.New("`use` or `proxies` missing")
 	errMissHealthCheck   = errors.New("`url` or `interval` missing")
-	errDuplicateProvider = errors.New("duplicate provider name")
+	errDuplicateProvider = errors.New("`duplicate provider name")
 )

 type GroupCommonOption struct {
@ -31,10 +29,9 @@ type GroupCommonOption struct {
 	Interval   int      `group:"interval,omitempty"`
 	Lazy       bool     `group:"lazy,omitempty"`
 	DisableUDP bool     `group:"disable-udp,omitempty"`
-	Filter     string   `group:"filter,omitempty"`
 }

-func ParseProxyGroup(config map[string]any, proxyMap map[string]C.Proxy, providersMap map[string]types.ProxyProvider) (C.ProxyAdapter, error) {
+func ParseProxyGroup(config map[string]interface{}, proxyMap map[string]C.Proxy, providersMap map[string]types.ProxyProvider) (C.ProxyAdapter, error) {
 	decoder := structure.NewDecoder(structure.Option{TagName: "group", WeaklyTypedInput: true})

 	groupOption := &GroupCommonOption{
@ -48,72 +45,67 @@ func ParseProxyGroup(config map[string]any, proxyMap map[string]C.Proxy, provide
 		return nil, errFormat
 	}

-	var (
-		groupName = groupOption.Name
-		filterReg *regexp.Regexp
-	)
-
-	if groupOption.Filter != "" {
-		f, err := regexp.Compile(groupOption.Filter, regexp.None)
-		if err != nil {
-			return nil, fmt.Errorf("%s: invalid filter regex: %w", groupName, err)
-		}
-		filterReg = f
-	}
-
-	if len(groupOption.Proxies) == 0 && len(groupOption.Use) == 0 {
-		return nil, fmt.Errorf("%s: %w", groupName, errMissProxy)
-	}
+	groupName := groupOption.Name

 	providers := []types.ProxyProvider{}

+	if len(groupOption.Proxies) == 0 && len(groupOption.Use) == 0 {
+		return nil, errMissProxy
+	}
+
 	if len(groupOption.Proxies) != 0 {
 		ps, err := getProxies(proxyMap, groupOption.Proxies)
 		if err != nil {
-			return nil, fmt.Errorf("%s: %w", groupName, err)
+			return nil, err
 		}

-		if _, ok := providersMap[groupName]; ok {
-			return nil, fmt.Errorf("%s: %w", groupName, errDuplicateProvider)
-		}
-
-		// select don't need health check
-		if groupOption.Type == "select" || groupOption.Type == "relay" {
+		// if Use not empty, drop health check options
+		if len(groupOption.Use) != 0 {
 			hc := provider.NewHealthCheck(ps, "", 0, true)
 			pd, err := provider.NewCompatibleProvider(groupName, ps, hc)
 			if err != nil {
-				return nil, fmt.Errorf("%s: %w", groupName, err)
+				return nil, err
 			}

 			providers = append(providers, pd)
-			providersMap[groupName] = pd
 		} else {
-			if groupOption.URL == "" || groupOption.Interval == 0 {
-				return nil, fmt.Errorf("%s: %w", groupName, errMissHealthCheck)
+			if _, ok := providersMap[groupName]; ok {
+				return nil, errDuplicateProvider
 			}

-			hc := provider.NewHealthCheck(ps, groupOption.URL, uint(groupOption.Interval), groupOption.Lazy)
-			pd, err := provider.NewCompatibleProvider(groupName, ps, hc)
-			if err != nil {
-				return nil, fmt.Errorf("%s: %w", groupName, err)
-			}
+			// select don't need health check
+			if groupOption.Type == "select" || groupOption.Type == "relay" {
+				hc := provider.NewHealthCheck(ps, "", 0, true)
+				pd, err := provider.NewCompatibleProvider(groupName, ps, hc)
+				if err != nil {
+					return nil, err
+				}

-			providers = append(providers, pd)
-			providersMap[groupName] = pd
+				providers = append(providers, pd)
+				providersMap[groupName] = pd
+			} else {
+				if groupOption.URL == "" || groupOption.Interval == 0 {
+					return nil, errMissHealthCheck
+				}
+
+				hc := provider.NewHealthCheck(ps, groupOption.URL, uint(groupOption.Interval), groupOption.Lazy)
+				pd, err := provider.NewCompatibleProvider(groupName, ps, hc)
+				if err != nil {
+					return nil, err
+				}
+
+				providers = append(providers, pd)
+				providersMap[groupName] = pd
+			}
 		}
 	}

 	if len(groupOption.Use) != 0 {
 		list, err := getProviders(providersMap, groupOption.Use)
 		if err != nil {
-			return nil, fmt.Errorf("%s: %w", groupName, err)
-		}
-		if filterReg != nil {
-			pd := provider.NewFilterableProvider(groupName, list, filterReg)
-			providers = append(providers, pd)
-		} else {
-			providers = append(providers, list...)
+			return nil, err
 		}
+		providers = append(providers, list...)
 	}

 	var group C.ProxyAdapter
@ -131,7 +123,7 @@ func ParseProxyGroup(config map[string]any, proxyMap map[string]C.Proxy, provide
 	case "relay":
 		group = NewRelay(groupOption, providers)
 	default:
-		return nil, fmt.Errorf("%s %w: %s", groupName, errType, groupOption.Type)
+		return nil, fmt.Errorf("%w: %s", errType, groupOption.Type)
 	}

 	return group, nil
--- a/adapter/outboundgroup/relay.go
+++ b/adapter/outboundgroup/relay.go
@ -72,14 +72,14 @@ func (r *Relay) MarshalJSON() ([]byte, error) {
 	for _, proxy := range r.rawProxies(false) {
 		all = append(all, proxy.Name())
 	}
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"type": r.Type().String(),
 		"all":  all,
 	})
 }

 func (r *Relay) rawProxies(touch bool) []C.Proxy {
-	elm, _, _ := r.single.Do(func() (any, error) {
+	elm, _, _ := r.single.Do(func() (interface{}, error) {
 		return getProvidersProxies(r.providers, touch), nil
 	})

--- a/adapter/outboundgroup/selector.go
+++ b/adapter/outboundgroup/selector.go
@ -54,7 +54,7 @@ func (s *Selector) MarshalJSON() ([]byte, error) {
 		all = append(all, proxy.Name())
 	}

-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"type": s.Type().String(),
 		"now":  s.Now(),
 		"all":  all,
@ -83,7 +83,7 @@ func (s *Selector) Unwrap(metadata *C.Metadata) C.Proxy {
 }

 func (s *Selector) selectedProxy(touch bool) C.Proxy {
-	elm, _, _ := s.single.Do(func() (any, error) {
+	elm, _, _ := s.single.Do(func() (interface{}, error) {
 		proxies := getProvidersProxies(s.providers, touch)
 		for _, proxy := range proxies {
 			if proxy.Name() == s.selected {
--- a/adapter/outboundgroup/urltest.go
+++ b/adapter/outboundgroup/urltest.go
@ -58,7 +58,7 @@ func (u *URLTest) Unwrap(metadata *C.Metadata) C.Proxy {
 }

 func (u *URLTest) proxies(touch bool) []C.Proxy {
-	elm, _, _ := u.single.Do(func() (any, error) {
+	elm, _, _ := u.single.Do(func() (interface{}, error) {
 		return getProvidersProxies(u.providers, touch), nil
 	})

@ -66,7 +66,7 @@ func (u *URLTest) proxies(touch bool) []C.Proxy {
 }

 func (u *URLTest) fast(touch bool) C.Proxy {
-	elm, _, shared := u.fastSingle.Do(func() (any, error) {
+	elm, _, _ := u.fastSingle.Do(func() (interface{}, error) {
 		proxies := u.proxies(touch)
 		fast := proxies[0]
 		min := fast.LastDelay()
@ -95,9 +95,6 @@ func (u *URLTest) fast(touch bool) C.Proxy {

 		return u.fastNode, nil
 	})
-	if shared && touch { // a shared fastSingle.Do() may cause providers untouched, so we touch them again
-		touchProviders(u.providers)
-	}

 	return elm.(C.Proxy)
 }
@ -117,19 +114,21 @@ func (u *URLTest) MarshalJSON() ([]byte, error) {
 	for _, proxy := range u.proxies(false) {
 		all = append(all, proxy.Name())
 	}
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"type": u.Type().String(),
 		"now":  u.Now(),
 		"all":  all,
 	})
 }

-func parseURLTestOption(config map[string]any) []urlTestOption {
+func parseURLTestOption(config map[string]interface{}) []urlTestOption {
 	opts := []urlTestOption{}

 	// tolerance
-	if tolerance, ok := config["tolerance"].(int); ok {
-		opts = append(opts, urlTestWithTolerance(uint16(tolerance)))
+	if elm, ok := config["tolerance"]; ok {
+		if tolerance, ok := elm.(int); ok {
+			opts = append(opts, urlTestWithTolerance(uint16(tolerance)))
+		}
 	}

 	return opts
--- a/adapter/outboundgroup/util.go
+++ b/adapter/outboundgroup/util.go
@ -18,24 +18,27 @@ func addrToMetadata(rawAddress string) (addr *C.Metadata, err error) {
 	ip := net.ParseIP(host)
 	if ip == nil {
 		addr = &C.Metadata{
-			Host:    host,
-			DstIP:   nil,
-			DstPort: port,
+			AddrType: C.AtypDomainName,
+			Host:     host,
+			DstIP:    nil,
+			DstPort:  port,
 		}
 		return
 	} else if ip4 := ip.To4(); ip4 != nil {
 		addr = &C.Metadata{
-			Host:    "",
-			DstIP:   ip4,
-			DstPort: port,
+			AddrType: C.AtypIPv4,
+			Host:     "",
+			DstIP:    ip4,
+			DstPort:  port,
 		}
 		return
 	}

 	addr = &C.Metadata{
-		Host:    "",
-		DstIP:   ip,
-		DstPort: port,
+		AddrType: C.AtypIPv6,
+		Host:     "",
+		DstIP:    ip,
+		DstPort:  port,
 	}
 	return
 }
--- a/adapter/parser.go
+++ b/adapter/parser.go
@ -8,7 +8,7 @@ import (
 	C "github.com/Dreamacro/clash/constant"
 )

-func ParseProxy(mapping map[string]any) (C.Proxy, error) {
+func ParseProxy(mapping map[string]interface{}) (C.Proxy, error) {
 	decoder := structure.NewDecoder(structure.Option{TagName: "proxy", WeaklyTypedInput: true})
 	proxyType, existType := mapping["type"].(string)
 	if !existType {
--- a/adapter/provider/fetcher.go
+++ b/adapter/provider/fetcher.go
@ -16,18 +16,17 @@ var (
 	dirMode  os.FileMode = 0o755
 )

-type parser = func([]byte) (any, error)
+type parser = func([]byte) (interface{}, error)

 type fetcher struct {
 	name      string
 	vehicle   types.Vehicle
-	interval  time.Duration
 	updatedAt *time.Time
 	ticker    *time.Ticker
 	done      chan struct{}
 	hash      [16]byte
 	parser    parser
-	onUpdate  func(any)
+	onUpdate  func(interface{})
 }

 func (f *fetcher) Name() string {
@ -38,19 +37,17 @@ func (f *fetcher) VehicleType() types.VehicleType {
 	return f.vehicle.Type()
 }

-func (f *fetcher) Initial() (any, error) {
+func (f *fetcher) Initial() (interface{}, error) {
 	var (
-		buf               []byte
-		err               error
-		isLocal           bool
-		immediatelyUpdate bool
+		buf     []byte
+		err     error
+		isLocal bool
 	)
 	if stat, fErr := os.Stat(f.vehicle.Path()); fErr == nil {
 		buf, err = os.ReadFile(f.vehicle.Path())
 		modTime := stat.ModTime()
 		f.updatedAt = &modTime
 		isLocal = true
-		immediatelyUpdate = time.Since(modTime) > f.interval
 	} else {
 		buf, err = f.vehicle.Read()
 	}
@ -89,13 +86,13 @@ func (f *fetcher) Initial() (any, error) {

 	// pull proxies automatically
 	if f.ticker != nil {
-		go f.pullLoop(immediatelyUpdate)
+		go f.pullLoop()
 	}

 	return proxies, nil
 }

-func (f *fetcher) Update() (any, bool, error) {
+func (f *fetcher) Update() (interface{}, bool, error) {
 	buf, err := f.vehicle.Read()
 	if err != nil {
 		return nil, false, err
@ -105,7 +102,6 @@ func (f *fetcher) Update() (any, bool, error) {
 	hash := md5.Sum(buf)
 	if bytes.Equal(f.hash[:], hash[:]) {
 		f.updatedAt = &now
-		os.Chtimes(f.vehicle.Path(), now, now)
 		return nil, true, nil
 	}

@ -133,33 +129,25 @@ func (f *fetcher) Destroy() error {
 	return nil
 }

-func (f *fetcher) pullLoop(immediately bool) {
-	update := func() {
-		elm, same, err := f.Update()
-		if err != nil {
-			log.Warnln("[Provider] %s pull error: %s", f.Name(), err.Error())
-			return
-		}
-
-		if same {
-			log.Debugln("[Provider] %s's proxies doesn't change", f.Name())
-			return
-		}
-
-		log.Infoln("[Provider] %s's proxies update", f.Name())
-		if f.onUpdate != nil {
-			f.onUpdate(elm)
-		}
-	}
-
-	if immediately {
-		update()
-	}
-
+func (f *fetcher) pullLoop() {
 	for {
 		select {
 		case <-f.ticker.C:
-			update()
+			elm, same, err := f.Update()
+			if err != nil {
+				log.Warnln("[Provider] %s pull error: %s", f.Name(), err.Error())
+				continue
+			}
+
+			if same {
+				log.Debugln("[Provider] %s's proxies doesn't change", f.Name())
+				continue
+			}
+
+			log.Infoln("[Provider] %s's proxies update", f.Name())
+			if f.onUpdate != nil {
+				f.onUpdate(elm)
+			}
 		case <-f.done:
 			f.ticker.Stop()
 			return
@ -179,7 +167,7 @@ func safeWrite(path string, buf []byte) error {
 	return os.WriteFile(path, buf, fileMode)
 }

-func newFetcher(name string, interval time.Duration, vehicle types.Vehicle, parser parser, onUpdate func(any)) *fetcher {
+func newFetcher(name string, interval time.Duration, vehicle types.Vehicle, parser parser, onUpdate func(interface{})) *fetcher {
 	var ticker *time.Ticker
 	if interval != 0 {
 		ticker = time.NewTicker(interval)
@ -189,7 +177,6 @@ func newFetcher(name string, interval time.Duration, vehicle types.Vehicle, pars
 		name:     name,
 		ticker:   ticker,
 		vehicle:  vehicle,
-		interval: interval,
 		parser:   parser,
 		done:     make(chan struct{}, 1),
 		onUpdate: onUpdate,
--- a/adapter/provider/healthcheck.go
+++ b/adapter/provider/healthcheck.go
@ -7,7 +7,6 @@ import (
 	"github.com/Dreamacro/clash/common/batch"
 	C "github.com/Dreamacro/clash/constant"

-	"github.com/samber/lo"
 	"go.uber.org/atomic"
 )

@ -32,20 +31,13 @@ type HealthCheck struct {
 func (hc *HealthCheck) process() {
 	ticker := time.NewTicker(time.Duration(hc.interval) * time.Second)

-	go hc.checkAll()
+	go hc.check()
 	for {
 		select {
 		case <-ticker.C:
 			now := time.Now().Unix()
 			if !hc.lazy || now-hc.lastTouch.Load() < int64(hc.interval) {
-				hc.checkAll()
-			} else { // lazy but still need to check not alive proxies
-				notAliveProxies := lo.Filter(hc.proxies, func(proxy C.Proxy, _ int) bool {
-					return !proxy.Alive()
-				})
-				if len(notAliveProxies) != 0 {
-					hc.check(notAliveProxies)
-				}
+				hc.check()
 			}
 		case <-hc.done:
 			ticker.Stop()
@ -66,15 +58,11 @@ func (hc *HealthCheck) touch() {
 	hc.lastTouch.Store(time.Now().Unix())
 }

-func (hc *HealthCheck) checkAll() {
-	hc.check(hc.proxies)
-}
-
-func (hc *HealthCheck) check(proxies []C.Proxy) {
+func (hc *HealthCheck) check() {
 	b, _ := batch.New(context.Background(), batch.WithConcurrencyNum(10))
-	for _, proxy := range proxies {
+	for _, proxy := range hc.proxies {
 		p := proxy
-		b.Go(p.Name(), func() (any, error) {
+		b.Go(p.Name(), func() (interface{}, error) {
 			ctx, cancel := context.WithTimeout(context.Background(), defaultURLTestTimeout)
 			defer cancel()
 			p.URLTest(ctx, hc.url)
--- a/adapter/provider/parser.go
+++ b/adapter/provider/parser.go
@ -10,10 +10,7 @@ import (
 	types "github.com/Dreamacro/clash/constant/provider"
 )

-var (
-	errVehicleType = errors.New("unsupport vehicle type")
-	errSubPath     = errors.New("path is not subpath of home directory")
-)
+var errVehicleType = errors.New("unsupport vehicle type")

 type healthCheckSchema struct {
 	Enable   bool   `provider:"enable"`
@ -27,11 +24,10 @@ type proxyProviderSchema struct {
 	Path        string            `provider:"path"`
 	URL         string            `provider:"url,omitempty"`
 	Interval    int               `provider:"interval,omitempty"`
-	Filter      string            `provider:"filter,omitempty"`
 	HealthCheck healthCheckSchema `provider:"health-check,omitempty"`
 }

-func ParseProxyProvider(name string, mapping map[string]any) (types.ProxyProvider, error) {
+func ParseProxyProvider(name string, mapping map[string]interface{}) (types.ProxyProvider, error) {
 	decoder := structure.NewDecoder(structure.Option{TagName: "provider", WeaklyTypedInput: true})

 	schema := &proxyProviderSchema{
@ -56,15 +52,11 @@ func ParseProxyProvider(name string, mapping map[string]any) (types.ProxyProvide
 	case "file":
 		vehicle = NewFileVehicle(path)
 	case "http":
-		if !C.Path.IsSubPath(path) {
-			return nil, fmt.Errorf("%w: %s", errSubPath, path)
-		}
 		vehicle = NewHTTPVehicle(schema.URL, path)
 	default:
 		return nil, fmt.Errorf("%w: %s", errVehicleType, schema.Type)
 	}

 	interval := time.Duration(uint(schema.Interval)) * time.Second
-	filter := schema.Filter
-	return NewProxySetProvider(name, interval, filter, vehicle, hc)
+	return NewProxySetProvider(name, interval, vehicle, hc), nil
 }
--- a/adapter/provider/provider.go
+++ b/adapter/provider/provider.go
@ -8,24 +8,18 @@ import (
 	"time"

 	"github.com/Dreamacro/clash/adapter"
-	"github.com/Dreamacro/clash/adapter/outbound"
-	"github.com/Dreamacro/clash/common/singledo"
 	C "github.com/Dreamacro/clash/constant"
 	types "github.com/Dreamacro/clash/constant/provider"

-	regexp "github.com/dlclark/regexp2"
-	"github.com/samber/lo"
-	"gopkg.in/yaml.v3"
+	"gopkg.in/yaml.v2"
 )

-var reject = adapter.NewProxy(outbound.NewReject())
-
 const (
 	ReservedName = "default"
 )

 type ProxySchema struct {
-	Proxies []map[string]any `yaml:"proxies"`
+	Proxies []map[string]interface{} `yaml:"proxies"`
 }

 // for auto gc
@ -40,7 +34,7 @@ type proxySetProvider struct {
 }

 func (pp *proxySetProvider) MarshalJSON() ([]byte, error) {
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"name":        pp.Name(),
 		"type":        pp.Type().String(),
 		"vehicleType": pp.VehicleType().String(),
@ -54,7 +48,7 @@ func (pp *proxySetProvider) Name() string {
 }

 func (pp *proxySetProvider) HealthCheck() {
-	pp.healthCheck.checkAll()
+	pp.healthCheck.check()
 }

 func (pp *proxySetProvider) Update() error {
@ -83,15 +77,43 @@ func (pp *proxySetProvider) Proxies() []C.Proxy {
 	return pp.proxies
 }

-func (pp *proxySetProvider) Touch() {
+func (pp *proxySetProvider) ProxiesWithTouch() []C.Proxy {
 	pp.healthCheck.touch()
+	return pp.Proxies()
+}
+
+func proxiesParse(buf []byte) (interface{}, error) {
+	schema := &ProxySchema{}
+
+	if err := yaml.Unmarshal(buf, schema); err != nil {
+		return nil, err
+	}
+
+	if schema.Proxies == nil {
+		return nil, errors.New("file must have a `proxies` field")
+	}
+
+	proxies := []C.Proxy{}
+	for idx, mapping := range schema.Proxies {
+		proxy, err := adapter.ParseProxy(mapping)
+		if err != nil {
+			return nil, fmt.Errorf("proxy %d error: %w", idx, err)
+		}
+		proxies = append(proxies, proxy)
+	}
+
+	if len(proxies) == 0 {
+		return nil, errors.New("file doesn't have any valid proxy")
+	}
+
+	return proxies, nil
 }

 func (pp *proxySetProvider) setProxies(proxies []C.Proxy) {
 	pp.proxies = proxies
 	pp.healthCheck.setProxy(proxies)
 	if pp.healthCheck.auto() {
-		go pp.healthCheck.checkAll()
+		go pp.healthCheck.check()
 	}
 }

@ -100,12 +122,7 @@ func stopProxyProvider(pd *ProxySetProvider) {
 	pd.fetcher.Destroy()
 }

-func NewProxySetProvider(name string, interval time.Duration, filter string, vehicle types.Vehicle, hc *HealthCheck) (*ProxySetProvider, error) {
-	filterReg, err := regexp.Compile(filter, regexp.None)
-	if err != nil {
-		return nil, fmt.Errorf("invalid filter regex: %w", err)
-	}
-
+func NewProxySetProvider(name string, interval time.Duration, vehicle types.Vehicle, hc *HealthCheck) *ProxySetProvider {
 	if hc.auto() {
 		go hc.process()
 	}
@ -115,56 +132,17 @@ func NewProxySetProvider(name string, interval time.Duration, filter string, veh
 		healthCheck: hc,
 	}

-	onUpdate := func(elm any) {
+	onUpdate := func(elm interface{}) {
 		ret := elm.([]C.Proxy)
 		pd.setProxies(ret)
 	}

-	proxiesParseAndFilter := func(buf []byte) (any, error) {
-		schema := &ProxySchema{}
-
-		if err := yaml.Unmarshal(buf, schema); err != nil {
-			return nil, err
-		}
-
-		if schema.Proxies == nil {
-			return nil, errors.New("file must have a `proxies` field")
-		}
-
-		proxies := []C.Proxy{}
-		for idx, mapping := range schema.Proxies {
-			if name, ok := mapping["name"].(string); ok && len(filter) > 0 {
-				matched, err := filterReg.MatchString(name)
-				if err != nil {
-					return nil, fmt.Errorf("regex filter failed: %w", err)
-				}
-				if !matched {
-					continue
-				}
-			}
-			proxy, err := adapter.ParseProxy(mapping)
-			if err != nil {
-				return nil, fmt.Errorf("proxy %d error: %w", idx, err)
-			}
-			proxies = append(proxies, proxy)
-		}
-
-		if len(proxies) == 0 {
-			if len(filter) > 0 {
-				return nil, errors.New("doesn't match any proxy, please check your filter")
-			}
-			return nil, errors.New("file doesn't have any proxy")
-		}
-
-		return proxies, nil
-	}
-
-	fetcher := newFetcher(name, interval, vehicle, proxiesParseAndFilter, onUpdate)
+	fetcher := newFetcher(name, interval, vehicle, proxiesParse, onUpdate)
 	pd.fetcher = fetcher

 	wrapper := &ProxySetProvider{pd}
 	runtime.SetFinalizer(wrapper, stopProxyProvider)
-	return wrapper, nil
+	return wrapper
 }

 // for auto gc
@ -179,7 +157,7 @@ type compatibleProvider struct {
 }

 func (cp *compatibleProvider) MarshalJSON() ([]byte, error) {
-	return json.Marshal(map[string]any{
+	return json.Marshal(map[string]interface{}{
 		"name":        cp.Name(),
 		"type":        cp.Type().String(),
 		"vehicleType": cp.VehicleType().String(),
@ -192,7 +170,7 @@ func (cp *compatibleProvider) Name() string {
 }

 func (cp *compatibleProvider) HealthCheck() {
-	cp.healthCheck.checkAll()
+	cp.healthCheck.check()
 }

 func (cp *compatibleProvider) Update() error {
@ -215,8 +193,9 @@ func (cp *compatibleProvider) Proxies() []C.Proxy {
 	return cp.proxies
 }

-func (cp *compatibleProvider) Touch() {
+func (cp *compatibleProvider) ProxiesWithTouch() []C.Proxy {
 	cp.healthCheck.touch()
+	return cp.Proxies()
 }

 func stopCompatibleProvider(pd *CompatibleProvider) {
@ -242,81 +221,3 @@ func NewCompatibleProvider(name string, proxies []C.Proxy, hc *HealthCheck) (*Co
 	runtime.SetFinalizer(wrapper, stopCompatibleProvider)
 	return wrapper, nil
 }
-
-var _ types.ProxyProvider = (*FilterableProvider)(nil)
-
-type FilterableProvider struct {
-	name      string
-	providers []types.ProxyProvider
-	filterReg *regexp.Regexp
-	single    *singledo.Single
-}
-
-func (fp *FilterableProvider) MarshalJSON() ([]byte, error) {
-	return json.Marshal(map[string]any{
-		"name":        fp.Name(),
-		"type":        fp.Type().String(),
-		"vehicleType": fp.VehicleType().String(),
-		"proxies":     fp.Proxies(),
-	})
-}
-
-func (fp *FilterableProvider) Name() string {
-	return fp.name
-}
-
-func (fp *FilterableProvider) HealthCheck() {
-}
-
-func (fp *FilterableProvider) Update() error {
-	return nil
-}
-
-func (fp *FilterableProvider) Initial() error {
-	return nil
-}
-
-func (fp *FilterableProvider) VehicleType() types.VehicleType {
-	return types.Compatible
-}
-
-func (fp *FilterableProvider) Type() types.ProviderType {
-	return types.Proxy
-}
-
-func (fp *FilterableProvider) Proxies() []C.Proxy {
-	elm, _, _ := fp.single.Do(func() (any, error) {
-		proxies := lo.FlatMap(
-			fp.providers,
-			func(item types.ProxyProvider, _ int) []C.Proxy {
-				return lo.Filter(
-					item.Proxies(),
-					func(item C.Proxy, _ int) bool {
-						matched, _ := fp.filterReg.MatchString(item.Name())
-						return matched
-					})
-			})
-
-		if len(proxies) == 0 {
-			proxies = append(proxies, reject)
-		}
-		return proxies, nil
-	})
-
-	return elm.([]C.Proxy)
-}
-
-func (fp *FilterableProvider) Touch() {
-	for _, provider := range fp.providers {
-		provider.Touch()
-	}
-}
-
-func NewFilterableProvider(name string, providers []types.ProxyProvider, filterReg *regexp.Regexp) *FilterableProvider {
-	return &FilterableProvider{
-		name:      name,
-		providers: providers,
-		filterReg: filterReg,
-		single:    singledo.NewSingle(time.Second * 10),
-	}
-}
--- a/common/batch/batch.go
+++ b/common/batch/batch.go
@ -8,7 +8,7 @@ import (
 type Option = func(b *Batch)

 type Result struct {
-	Value any
+	Value interface{}
 	Err   error
 }

@ -38,7 +38,7 @@ type Batch struct {
 	cancel func()
 }

-func (b *Batch) Go(key string, fn func() (any, error)) {
+func (b *Batch) Go(key string, fn func() (interface{}, error)) {
 	b.wg.Add(1)
 	go func() {
 		defer b.wg.Done()
--- a/common/batch/batch_test.go
+++ b/common/batch/batch_test.go
@ -14,11 +14,11 @@ func TestBatch(t *testing.T) {
 	b, _ := New(context.Background())

 	now := time.Now()
-	b.Go("foo", func() (any, error) {
+	b.Go("foo", func() (interface{}, error) {
 		time.Sleep(time.Millisecond * 100)
 		return "foo", nil
 	})
-	b.Go("bar", func() (any, error) {
+	b.Go("bar", func() (interface{}, error) {
 		time.Sleep(time.Millisecond * 150)
 		return "bar", nil
 	})
@ -45,7 +45,7 @@ func TestBatchWithConcurrencyNum(t *testing.T) {
 	now := time.Now()
 	for i := 0; i < 7; i++ {
 		idx := i
-		b.Go(strconv.Itoa(idx), func() (any, error) {
+		b.Go(strconv.Itoa(idx), func() (interface{}, error) {
 			time.Sleep(time.Millisecond * 100)
 			return strconv.Itoa(idx), nil
 		})
@ -64,12 +64,12 @@ func TestBatchWithConcurrencyNum(t *testing.T) {
 func TestBatchContext(t *testing.T) {
 	b, ctx := New(context.Background())

-	b.Go("error", func() (any, error) {
+	b.Go("error", func() (interface{}, error) {
 		time.Sleep(time.Millisecond * 100)
 		return nil, errors.New("test error")
 	})

-	b.Go("ctx", func() (any, error) {
+	b.Go("ctx", func() (interface{}, error) {
 		<-ctx.Done()
 		return nil, ctx.Err()
 	})
--- a/common/cache/cache.go
+++ b/common/cache/cache.go
@ -0,0 +1,106 @@
+package cache
+
+import (
+	"runtime"
+	"sync"
+	"time"
+)
+
+// Cache store element with a expired time
+type Cache struct {
+	*cache
+}
+
+type cache struct {
+	mapping sync.Map
+	janitor *janitor
+}
+
+type element struct {
+	Expired time.Time
+	Payload interface{}
+}
+
+// Put element in Cache with its ttl
+func (c *cache) Put(key interface{}, payload interface{}, ttl time.Duration) {
+	c.mapping.Store(key, &element{
+		Payload: payload,
+		Expired: time.Now().Add(ttl),
+	})
+}
+
+// Get element in Cache, and drop when it expired
+func (c *cache) Get(key interface{}) interface{} {
+	item, exist := c.mapping.Load(key)
+	if !exist {
+		return nil
+	}
+	elm := item.(*element)
+	// expired
+	if time.Since(elm.Expired) > 0 {
+		c.mapping.Delete(key)
+		return nil
+	}
+	return elm.Payload
+}
+
+// GetWithExpire element in Cache with Expire Time
+func (c *cache) GetWithExpire(key interface{}) (payload interface{}, expired time.Time) {
+	item, exist := c.mapping.Load(key)
+	if !exist {
+		return
+	}
+	elm := item.(*element)
+	// expired
+	if time.Since(elm.Expired) > 0 {
+		c.mapping.Delete(key)
+		return
+	}
+	return elm.Payload, elm.Expired
+}
+
+func (c *cache) cleanup() {
+	c.mapping.Range(func(k, v interface{}) bool {
+		key := k.(string)
+		elm := v.(*element)
+		if time.Since(elm.Expired) > 0 {
+			c.mapping.Delete(key)
+		}
+		return true
+	})
+}
+
+type janitor struct {
+	interval time.Duration
+	stop     chan struct{}
+}
+
+func (j *janitor) process(c *cache) {
+	ticker := time.NewTicker(j.interval)
+	for {
+		select {
+		case <-ticker.C:
+			c.cleanup()
+		case <-j.stop:
+			ticker.Stop()
+			return
+		}
+	}
+}
+
+func stopJanitor(c *Cache) {
+	c.janitor.stop <- struct{}{}
+}
+
+// New return *Cache
+func New(interval time.Duration) *Cache {
+	j := &janitor{
+		interval: interval,
+		stop:     make(chan struct{}),
+	}
+	c := &cache{janitor: j}
+	go j.process(c)
+	C := &Cache{c}
+	runtime.SetFinalizer(C, stopJanitor)
+	return C
+}
--- a/common/cache/cache_test.go
+++ b/common/cache/cache_test.go
@ -0,0 +1,70 @@
+package cache
+
+import (
+	"runtime"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestCache_Basic(t *testing.T) {
+	interval := 200 * time.Millisecond
+	ttl := 20 * time.Millisecond
+	c := New(interval)
+	c.Put("int", 1, ttl)
+	c.Put("string", "a", ttl)
+
+	i := c.Get("int")
+	assert.Equal(t, i.(int), 1, "should recv 1")
+
+	s := c.Get("string")
+	assert.Equal(t, s.(string), "a", "should recv 'a'")
+}
+
+func TestCache_TTL(t *testing.T) {
+	interval := 200 * time.Millisecond
+	ttl := 20 * time.Millisecond
+	now := time.Now()
+	c := New(interval)
+	c.Put("int", 1, ttl)
+	c.Put("int2", 2, ttl)
+
+	i := c.Get("int")
+	_, expired := c.GetWithExpire("int2")
+	assert.Equal(t, i.(int), 1, "should recv 1")
+	assert.True(t, now.Before(expired))
+
+	time.Sleep(ttl * 2)
+	i = c.Get("int")
+	j, _ := c.GetWithExpire("int2")
+	assert.Nil(t, i, "should recv nil")
+	assert.Nil(t, j, "should recv nil")
+}
+
+func TestCache_AutoCleanup(t *testing.T) {
+	interval := 10 * time.Millisecond
+	ttl := 15 * time.Millisecond
+	c := New(interval)
+	c.Put("int", 1, ttl)
+
+	time.Sleep(ttl * 2)
+	i := c.Get("int")
+	j, _ := c.GetWithExpire("int")
+	assert.Nil(t, i, "should recv nil")
+	assert.Nil(t, j, "should recv nil")
+}
+
+func TestCache_AutoGC(t *testing.T) {
+	sign := make(chan struct{})
+	go func() {
+		interval := 10 * time.Millisecond
+		ttl := 15 * time.Millisecond
+		c := New(interval)
+		c.Put("int", 1, ttl)
+		sign <- struct{}{}
+	}()
+
+	<-sign
+	runtime.GC()
+}
--- a/common/cache/lrucache.go
+++ b/common/cache/lrucache.go
@ -12,7 +12,7 @@ import (
 type Option func(*LruCache)

 // EvictCallback is used to get a callback when a cache entry is evicted
-type EvictCallback = func(key any, value any)
+type EvictCallback = func(key interface{}, value interface{})

 // WithEvict set the evict callback
 func WithEvict(cb EvictCallback) Option {
@ -57,18 +57,18 @@ type LruCache struct {
 	maxAge         int64
 	maxSize        int
 	mu             sync.Mutex
-	cache          map[any]*list.Element
+	cache          map[interface{}]*list.Element
 	lru            *list.List // Front is least-recent
 	updateAgeOnGet bool
 	staleReturn    bool
 	onEvict        EvictCallback
 }

-// New creates an LruCache
-func New(options ...Option) *LruCache {
+// NewLRUCache creates an LruCache
+func NewLRUCache(options ...Option) *LruCache {
 	lc := &LruCache{
 		lru:   list.New(),
-		cache: make(map[any]*list.Element),
+		cache: make(map[interface{}]*list.Element),
 	}

 	for _, option := range options {
@ -78,9 +78,9 @@ func New(options ...Option) *LruCache {
 	return lc
 }

-// Get returns the any representation of a cached response and a bool
+// Get returns the interface{} representation of a cached response and a bool
 // set to true if the key was found.
-func (c *LruCache) Get(key any) (any, bool) {
+func (c *LruCache) Get(key interface{}) (interface{}, bool) {
 	entry := c.get(key)
 	if entry == nil {
 		return nil, false
@ -90,11 +90,11 @@ func (c *LruCache) Get(key any) (any, bool) {
 	return value, true
 }

-// GetWithExpire returns the any representation of a cached response,
+// GetWithExpire returns the interface{} representation of a cached response,
 // a time.Time Give expected expires,
 // and a bool set to true if the key was found.
 // This method will NOT check the maxAge of element and will NOT update the expires.
-func (c *LruCache) GetWithExpire(key any) (any, time.Time, bool) {
+func (c *LruCache) GetWithExpire(key interface{}) (interface{}, time.Time, bool) {
 	entry := c.get(key)
 	if entry == nil {
 		return nil, time.Time{}, false
@ -104,7 +104,7 @@ func (c *LruCache) GetWithExpire(key any) (any, time.Time, bool) {
 }

 // Exist returns if key exist in cache but not put item to the head of linked list
-func (c *LruCache) Exist(key any) bool {
+func (c *LruCache) Exist(key interface{}) bool {
 	c.mu.Lock()
 	defer c.mu.Unlock()

@ -112,8 +112,8 @@ func (c *LruCache) Exist(key any) bool {
 	return ok
 }

-// Set stores the any representation of a response for a given key.
-func (c *LruCache) Set(key any, value any) {
+// Set stores the interface{} representation of a response for a given key.
+func (c *LruCache) Set(key interface{}, value interface{}) {
 	expires := int64(0)
 	if c.maxAge > 0 {
 		expires = time.Now().Unix() + c.maxAge
@ -121,9 +121,9 @@ func (c *LruCache) Set(key any, value any) {
 	c.SetWithExpire(key, value, time.Unix(expires, 0))
 }

-// SetWithExpire stores the any representation of a response for a given key and given expires.
+// SetWithExpire stores the interface{} representation of a response for a given key and given expires.
 // The expires time will round to second.
-func (c *LruCache) SetWithExpire(key any, value any, expires time.Time) {
+func (c *LruCache) SetWithExpire(key interface{}, value interface{}, expires time.Time) {
 	c.mu.Lock()
 	defer c.mu.Unlock()

@ -155,7 +155,7 @@ func (c *LruCache) CloneTo(n *LruCache) {
 	defer n.mu.Unlock()

 	n.lru = list.New()
-	n.cache = make(map[any]*list.Element)
+	n.cache = make(map[interface{}]*list.Element)

 	for e := c.lru.Front(); e != nil; e = e.Next() {
 		elm := e.Value.(*entry)
@ -163,7 +163,7 @@ func (c *LruCache) CloneTo(n *LruCache) {
 	}
 }

-func (c *LruCache) get(key any) *entry {
+func (c *LruCache) get(key interface{}) *entry {
 	c.mu.Lock()
 	defer c.mu.Unlock()

@ -188,7 +188,7 @@ func (c *LruCache) get(key any) *entry {
 }

 // Delete removes the value associated with a key.
-func (c *LruCache) Delete(key any) {
+func (c *LruCache) Delete(key interface{}) {
 	c.mu.Lock()

 	if le, ok := c.cache[key]; ok {
@ -217,7 +217,7 @@ func (c *LruCache) deleteElement(le *list.Element) {
 }

 type entry struct {
-	key     any
-	value   any
+	key     interface{}
+	value   interface{}
 	expires int64
 }
--- a/common/cache/lrucache_test.go
+++ b/common/cache/lrucache_test.go
@ -19,7 +19,7 @@ var entries = []struct {
 }

 func TestLRUCache(t *testing.T) {
-	c := New()
+	c := NewLRUCache()

 	for _, e := range entries {
 		c.Set(e.key, e.value)
@ -45,7 +45,7 @@ func TestLRUCache(t *testing.T) {
 }

 func TestLRUMaxAge(t *testing.T) {
-	c := New(WithAge(86400))
+	c := NewLRUCache(WithAge(86400))

 	now := time.Now().Unix()
 	expected := now + 86400
@ -88,7 +88,7 @@ func TestLRUMaxAge(t *testing.T) {
 }

 func TestLRUpdateOnGet(t *testing.T) {
-	c := New(WithAge(86400), WithUpdateAgeOnGet())
+	c := NewLRUCache(WithAge(86400), WithUpdateAgeOnGet())

 	now := time.Now().Unix()
 	expires := now + 86400/2
@ -103,7 +103,7 @@ func TestLRUpdateOnGet(t *testing.T) {
 }

 func TestMaxSize(t *testing.T) {
-	c := New(WithSize(2))
+	c := NewLRUCache(WithSize(2))
 	// Add one expired entry
 	c.Set("foo", "bar")
 	_, ok := c.Get("foo")
@ -117,7 +117,7 @@ func TestMaxSize(t *testing.T) {
 }

 func TestExist(t *testing.T) {
-	c := New(WithSize(1))
+	c := NewLRUCache(WithSize(1))
 	c.Set(1, 2)
 	assert.True(t, c.Exist(1))
 	c.Set(2, 3)
@ -126,11 +126,11 @@ func TestExist(t *testing.T) {

 func TestEvict(t *testing.T) {
 	temp := 0
-	evict := func(key any, value any) {
+	evict := func(key interface{}, value interface{}) {
 		temp = key.(int) + value.(int)
 	}

-	c := New(WithEvict(evict), WithSize(1))
+	c := NewLRUCache(WithEvict(evict), WithSize(1))
 	c.Set(1, 2)
 	c.Set(2, 3)

@ -138,7 +138,7 @@ func TestEvict(t *testing.T) {
 }

 func TestSetWithExpire(t *testing.T) {
-	c := New(WithAge(1))
+	c := NewLRUCache(WithAge(1))
 	now := time.Now().Unix()

 	tenSecBefore := time.Unix(now-10, 0)
@ -152,7 +152,7 @@ func TestSetWithExpire(t *testing.T) {
 }

 func TestStale(t *testing.T) {
-	c := New(WithAge(1), WithStale(true))
+	c := NewLRUCache(WithAge(1), WithStale(true))
 	now := time.Now().Unix()

 	tenSecBefore := time.Unix(now-10, 0)
@ -165,11 +165,11 @@ func TestStale(t *testing.T) {
 }

 func TestCloneTo(t *testing.T) {
-	o := New(WithSize(10))
+	o := NewLRUCache(WithSize(10))
 	o.Set("1", 1)
 	o.Set("2", 2)

-	n := New(WithSize(2))
+	n := NewLRUCache(WithSize(2))
 	n.Set("3", 3)
 	n.Set("4", 4)

--- a/common/net/relay.go
+++ b/common/net/relay.go
@ -1,24 +0,0 @@
-package net
-
-import (
-	"io"
-	"net"
-	"time"
-)
-
-// Relay copies between left and right bidirectionally.
-func Relay(leftConn, rightConn net.Conn) {
-	ch := make(chan error)
-
-	go func() {
-		// Wrapping to avoid using *net.TCPConn.(ReadFrom)
-		// See also https://github.com/Dreamacro/clash/pull/1209
-		_, err := io.Copy(WriteOnlyWriter{Writer: leftConn}, ReadOnlyReader{Reader: rightConn})
-		leftConn.SetReadDeadline(time.Now())
-		ch <- err
-	}()
-
-	io.Copy(WriteOnlyWriter{Writer: rightConn}, ReadOnlyReader{Reader: leftConn})
-	rightConn.SetReadDeadline(time.Now())
-	<-ch
-}
--- a/common/observable/iterable.go
+++ b/common/observable/iterable.go
@ -1,3 +1,3 @@
 package observable

-type Iterable <-chan any
+type Iterable <-chan interface{}
--- a/common/observable/observable_test.go
+++ b/common/observable/observable_test.go
@ -9,8 +9,8 @@ import (
 	"go.uber.org/atomic"
 )

-func iterator(item []any) chan any {
-	ch := make(chan any)
+func iterator(item []interface{}) chan interface{} {
+	ch := make(chan interface{})
 	go func() {
 		time.Sleep(100 * time.Millisecond)
 		for _, elm := range item {
@ -22,7 +22,7 @@ func iterator(item []any) chan any {
 }

 func TestObservable(t *testing.T) {
-	iter := iterator([]any{1, 2, 3, 4, 5})
+	iter := iterator([]interface{}{1, 2, 3, 4, 5})
 	src := NewObservable(iter)
 	data, err := src.Subscribe()
 	assert.Nil(t, err)
@ -34,7 +34,7 @@ func TestObservable(t *testing.T) {
 }

 func TestObservable_MultiSubscribe(t *testing.T) {
-	iter := iterator([]any{1, 2, 3, 4, 5})
+	iter := iterator([]interface{}{1, 2, 3, 4, 5})
 	src := NewObservable(iter)
 	ch1, _ := src.Subscribe()
 	ch2, _ := src.Subscribe()
@ -42,7 +42,7 @@ func TestObservable_MultiSubscribe(t *testing.T) {

 	var wg sync.WaitGroup
 	wg.Add(2)
-	waitCh := func(ch <-chan any) {
+	waitCh := func(ch <-chan interface{}) {
 		for range ch {
 			count.Inc()
 		}
@ -55,7 +55,7 @@ func TestObservable_MultiSubscribe(t *testing.T) {
 }

 func TestObservable_UnSubscribe(t *testing.T) {
-	iter := iterator([]any{1, 2, 3, 4, 5})
+	iter := iterator([]interface{}{1, 2, 3, 4, 5})
 	src := NewObservable(iter)
 	data, err := src.Subscribe()
 	assert.Nil(t, err)
@ -65,7 +65,7 @@ func TestObservable_UnSubscribe(t *testing.T) {
 }

 func TestObservable_SubscribeClosedSource(t *testing.T) {
-	iter := iterator([]any{1})
+	iter := iterator([]interface{}{1})
 	src := NewObservable(iter)
 	data, _ := src.Subscribe()
 	<-data
@ -75,14 +75,14 @@ func TestObservable_SubscribeClosedSource(t *testing.T) {
 }

 func TestObservable_UnSubscribeWithNotExistSubscription(t *testing.T) {
-	sub := Subscription(make(chan any))
-	iter := iterator([]any{1})
+	sub := Subscription(make(chan interface{}))
+	iter := iterator([]interface{}{1})
 	src := NewObservable(iter)
 	src.UnSubscribe(sub)
 }

 func TestObservable_SubscribeGoroutineLeak(t *testing.T) {
-	iter := iterator([]any{1, 2, 3, 4, 5})
+	iter := iterator([]interface{}{1, 2, 3, 4, 5})
 	src := NewObservable(iter)
 	max := 100

@ -94,7 +94,7 @@ func TestObservable_SubscribeGoroutineLeak(t *testing.T) {

 	var wg sync.WaitGroup
 	wg.Add(max)
-	waitCh := func(ch <-chan any) {
+	waitCh := func(ch <-chan interface{}) {
 		for range ch {
 		}
 		wg.Done()
@ -115,7 +115,7 @@ func TestObservable_SubscribeGoroutineLeak(t *testing.T) {
 }

 func Benchmark_Observable_1000(b *testing.B) {
-	ch := make(chan any)
+	ch := make(chan interface{})
 	o := NewObservable(ch)
 	num := 1000

--- a/common/observable/subscriber.go
+++ b/common/observable/subscriber.go
@ -4,14 +4,14 @@ import (
 	"sync"
 )

-type Subscription <-chan any
+type Subscription <-chan interface{}

 type Subscriber struct {
-	buffer chan any
+	buffer chan interface{}
 	once   sync.Once
 }

-func (s *Subscriber) Emit(item any) {
+func (s *Subscriber) Emit(item interface{}) {
 	s.buffer <- item
 }

@ -27,7 +27,7 @@ func (s *Subscriber) Close() {

 func newSubscriber() *Subscriber {
 	sub := &Subscriber{
-		buffer: make(chan any, 200),
+		buffer: make(chan interface{}, 200),
 	}
 	return sub
 }
--- a/common/picker/picker.go
+++ b/common/picker/picker.go
@ -17,7 +17,7 @@ type Picker struct {

 	once    sync.Once
 	errOnce sync.Once
-	result  any
+	result  interface{}
 	err     error
 }

@ -43,7 +43,7 @@ func WithTimeout(ctx context.Context, timeout time.Duration) (*Picker, context.C

 // Wait blocks until all function calls from the Go method have returned,
 // then returns the first nil error result (if any) from them.
-func (p *Picker) Wait() any {
+func (p *Picker) Wait() interface{} {
 	p.wg.Wait()
 	if p.cancel != nil {
 		p.cancel()
@ -58,7 +58,7 @@ func (p *Picker) Error() error {

 // Go calls the given function in a new goroutine.
 // The first call to return a nil error cancels the group; its result will be returned by Wait.
-func (p *Picker) Go(f func() (any, error)) {
+func (p *Picker) Go(f func() (interface{}, error)) {
 	p.wg.Add(1)

 	go func() {
--- a/common/picker/picker_test.go
+++ b/common/picker/picker_test.go
@ -8,8 +8,8 @@ import (
 	"github.com/stretchr/testify/assert"
 )

-func sleepAndSend(ctx context.Context, delay int, input any) func() (any, error) {
-	return func() (any, error) {
+func sleepAndSend(ctx context.Context, delay int, input interface{}) func() (interface{}, error) {
+	return func() (interface{}, error) {
 		timer := time.NewTimer(time.Millisecond * time.Duration(delay))
 		select {
 		case <-timer.C:
--- a/common/pool/alloc.go
+++ b/common/pool/alloc.go
@ -23,7 +23,7 @@ func NewAllocator() *Allocator {
 	alloc.buffers = make([]sync.Pool, 17) // 1B -> 64K
 	for k := range alloc.buffers {
 		i := k
-		alloc.buffers[k].New = func() any {
+		alloc.buffers[k].New = func() interface{} {
 			return make([]byte, 1<<uint32(i))
 		}
 	}
@ -32,37 +32,28 @@ func NewAllocator() *Allocator {

 // Get a []byte from pool with most appropriate cap
 func (alloc *Allocator) Get(size int) []byte {
-	switch {
-	case size < 0:
-		panic("alloc.Get: len out of range")
-	case size == 0:
+	if size <= 0 || size > 65536 {
 		return nil
-	case size > 65536:
-		return make([]byte, size)
-	default:
-		bits := msb(size)
-		if size == 1<<bits {
-			return alloc.buffers[bits].Get().([]byte)[:size]
-		}
-
-		return alloc.buffers[bits+1].Get().([]byte)[:size]
 	}
+
+	bits := msb(size)
+	if size == 1<<bits {
+		return alloc.buffers[bits].Get().([]byte)[:size]
+	}
+
+	return alloc.buffers[bits+1].Get().([]byte)[:size]
 }

 // Put returns a []byte to pool for future use,
 // which the cap must be exactly 2^n
 func (alloc *Allocator) Put(buf []byte) error {
-	if cap(buf) == 0 || cap(buf) > 65536 {
-		return nil
-	}
-
 	bits := msb(cap(buf))
-	if cap(buf) != 1<<bits {
+	if cap(buf) == 0 || cap(buf) > 65536 || cap(buf) != 1<<bits {
 		return errors.New("allocator Put() incorrect buffer size")
 	}

-	//nolint
 	//lint:ignore SA6002 ignore temporarily
+	//nolint
 	alloc.buffers[bits].Put(buf)
 	return nil
 }
--- a/common/pool/alloc_test.go
+++ b/common/pool/alloc_test.go
@ -19,17 +19,17 @@ func TestAllocGet(t *testing.T) {
 	assert.Equal(t, 1024, cap(alloc.Get(1023)))
 	assert.Equal(t, 1024, len(alloc.Get(1024)))
 	assert.Equal(t, 65536, len(alloc.Get(65536)))
-	assert.Equal(t, 65537, len(alloc.Get(65537)))
+	assert.Nil(t, alloc.Get(65537))
 }

 func TestAllocPut(t *testing.T) {
 	alloc := NewAllocator()
-	assert.Nil(t, alloc.Put(nil), "put nil misbehavior")
+	assert.NotNil(t, alloc.Put(nil), "put nil misbehavior")
 	assert.NotNil(t, alloc.Put(make([]byte, 3)), "put elem:3 []bytes misbehavior")
 	assert.Nil(t, alloc.Put(make([]byte, 4)), "put elem:4 []bytes misbehavior")
 	assert.Nil(t, alloc.Put(make([]byte, 1023, 1024)), "put elem:1024 []bytes misbehavior")
 	assert.Nil(t, alloc.Put(make([]byte, 65536)), "put elem:65536 []bytes misbehavior")
-	assert.Nil(t, alloc.Put(make([]byte, 65537)), "put elem:65537 []bytes misbehavior")
+	assert.NotNil(t, alloc.Put(make([]byte, 65537)), "put elem:65537 []bytes misbehavior")
 }

 func TestAllocPutThenGet(t *testing.T) {
--- a/common/pool/buffer.go
+++ b/common/pool/buffer.go
@ -3,14 +3,9 @@ package pool
 import (
 	"bytes"
 	"sync"
-
-	"github.com/Dreamacro/protobytes"
 )

-var (
-	bufferPool      = sync.Pool{New: func() any { return &bytes.Buffer{} }}
-	bytesBufferPool = sync.Pool{New: func() any { return &protobytes.BytesWriter{} }}
-)
+var bufferPool = sync.Pool{New: func() interface{} { return &bytes.Buffer{} }}

 func GetBuffer() *bytes.Buffer {
 	return bufferPool.Get().(*bytes.Buffer)
@ -20,12 +15,3 @@ func PutBuffer(buf *bytes.Buffer) {
 	buf.Reset()
 	bufferPool.Put(buf)
 }
-
-func GetBytesBuffer() *protobytes.BytesWriter {
-	return bytesBufferPool.Get().(*protobytes.BytesWriter)
-}
-
-func PutBytesBuffer(buf *protobytes.BytesWriter) {
-	buf.Reset()
-	bytesBufferPool.Put(buf)
-}
--- a/common/queue/queue.go
+++ b/common/queue/queue.go
@ -6,12 +6,12 @@ import (

 // Queue is a simple concurrent safe queue
 type Queue struct {
-	items []any
+	items []interface{}
 	lock  sync.RWMutex
 }

 // Put add the item to the queue.
-func (q *Queue) Put(items ...any) {
+func (q *Queue) Put(items ...interface{}) {
 	if len(items) == 0 {
 		return
 	}
@ -22,7 +22,7 @@ func (q *Queue) Put(items ...any) {
 }

 // Pop returns the head of items.
-func (q *Queue) Pop() any {
+func (q *Queue) Pop() interface{} {
 	if len(q.items) == 0 {
 		return nil
 	}
@ -35,7 +35,7 @@ func (q *Queue) Pop() any {
 }

 // Last returns the last of item.
-func (q *Queue) Last() any {
+func (q *Queue) Last() interface{} {
 	if len(q.items) == 0 {
 		return nil
 	}
@ -47,8 +47,8 @@ func (q *Queue) Last() any {
 }

 // Copy get the copy of queue.
-func (q *Queue) Copy() []any {
-	items := []any{}
+func (q *Queue) Copy() []interface{} {
+	items := []interface{}{}
 	q.lock.RLock()
 	items = append(items, q.items...)
 	q.lock.RUnlock()
@ -66,6 +66,6 @@ func (q *Queue) Len() int64 {
 // New is a constructor for a new concurrent safe queue.
 func New(hint int64) *Queue {
 	return &Queue{
-		items: make([]any, 0, hint),
+		items: make([]interface{}, 0, hint),
 	}
 }
--- a/common/singledo/singledo.go
+++ b/common/singledo/singledo.go
@ -7,7 +7,7 @@ import (

 type call struct {
 	wg  sync.WaitGroup
-	val any
+	val interface{}
 	err error
 }

@ -20,12 +20,13 @@ type Single struct {
 }

 type Result struct {
-	Val any
+	Val interface{}
 	Err error
 }

 // Do single.Do likes sync.singleFlight
-func (s *Single) Do(fn func() (any, error)) (v any, err error, shared bool) {
+//lint:ignore ST1008 it likes sync.singleFlight
+func (s *Single) Do(fn func() (interface{}, error)) (v interface{}, err error, shared bool) {
 	s.mux.Lock()
 	now := time.Now()
 	if now.Before(s.last.Add(s.wait)) {
--- a/common/singledo/singledo_test.go
+++ b/common/singledo/singledo_test.go
@ -13,7 +13,7 @@ func TestBasic(t *testing.T) {
 	single := NewSingle(time.Millisecond * 30)
 	foo := 0
 	shardCount := atomic.NewInt32(0)
-	call := func() (any, error) {
+	call := func() (interface{}, error) {
 		foo++
 		time.Sleep(time.Millisecond * 5)
 		return nil, nil
@ -40,7 +40,7 @@ func TestBasic(t *testing.T) {
 func TestTimer(t *testing.T) {
 	single := NewSingle(time.Millisecond * 30)
 	foo := 0
-	call := func() (any, error) {
+	call := func() (interface{}, error) {
 		foo++
 		return nil, nil
 	}
@ -56,7 +56,7 @@ func TestTimer(t *testing.T) {
 func TestReset(t *testing.T) {
 	single := NewSingle(time.Millisecond * 30)
 	foo := 0
-	call := func() (any, error) {
+	call := func() (interface{}, error) {
 		foo++
 		return nil, nil
 	}
--- a/common/sockopt/reuseaddr_other.go
+++ b/common/sockopt/reuseaddr_other.go
@ -1,4 +1,5 @@
 //go:build !linux
+// +build !linux

 package sockopt

--- a/common/structure/structure.go
+++ b/common/structure/structure.go
@ -28,8 +28,8 @@ func NewDecoder(option Option) *Decoder {
 	return &Decoder{option: &option}
 }

-// Decode transform a map[string]any to a struct
-func (d *Decoder) Decode(src map[string]any, dst any) error {
+// Decode transform a map[string]interface{} to a struct
+func (d *Decoder) Decode(src map[string]interface{}, dst interface{}) error {
 	if reflect.TypeOf(dst).Kind() != reflect.Ptr {
 		return fmt.Errorf("Decode must recive a ptr struct")
 	}
@ -45,8 +45,12 @@ func (d *Decoder) Decode(src map[string]any, dst any) error {
 		}

 		tag := field.Tag.Get(d.option.TagName)
-		key, omitKey, found := strings.Cut(tag, ",")
-		omitempty := found && omitKey == "omitempty"
+		str := strings.SplitN(tag, ",", 2)
+		key := str[0]
+		omitempty := false
+		if len(str) > 1 {
+			omitempty = str[1] == "omitempty"
+		}

 		value, ok := src[key]
 		if !ok || value == nil {
@ -64,7 +68,7 @@ func (d *Decoder) Decode(src map[string]any, dst any) error {
 	return nil
 }

-func (d *Decoder) decode(name string, data any, val reflect.Value) error {
+func (d *Decoder) decode(name string, data interface{}, val reflect.Value) error {
 	switch val.Kind() {
 	case reflect.Int:
 		return d.decodeInt(name, data, val)
@ -85,14 +89,12 @@ func (d *Decoder) decode(name string, data any, val reflect.Value) error {
 	}
 }

-func (d *Decoder) decodeInt(name string, data any, val reflect.Value) (err error) {
+func (d *Decoder) decodeInt(name string, data interface{}, val reflect.Value) (err error) {
 	dataVal := reflect.ValueOf(data)
 	kind := dataVal.Kind()
 	switch {
 	case kind == reflect.Int:
 		val.SetInt(dataVal.Int())
-	case kind == reflect.Float64 && d.option.WeaklyTypedInput:
-		val.SetInt(int64(dataVal.Float()))
 	case kind == reflect.String && d.option.WeaklyTypedInput:
 		var i int64
 		i, err = strconv.ParseInt(dataVal.String(), 0, val.Type().Bits())
@ -110,7 +112,7 @@ func (d *Decoder) decodeInt(name string, data any, val reflect.Value) (err error
 	return err
 }

-func (d *Decoder) decodeString(name string, data any, val reflect.Value) (err error) {
+func (d *Decoder) decodeString(name string, data interface{}, val reflect.Value) (err error) {
 	dataVal := reflect.ValueOf(data)
 	kind := dataVal.Kind()
 	switch {
@ -127,7 +129,7 @@ func (d *Decoder) decodeString(name string, data any, val reflect.Value) (err er
 	return err
 }

-func (d *Decoder) decodeBool(name string, data any, val reflect.Value) (err error) {
+func (d *Decoder) decodeBool(name string, data interface{}, val reflect.Value) (err error) {
 	dataVal := reflect.ValueOf(data)
 	kind := dataVal.Kind()
 	switch {
@ -144,7 +146,7 @@ func (d *Decoder) decodeBool(name string, data any, val reflect.Value) (err erro
 	return err
 }

-func (d *Decoder) decodeSlice(name string, data any, val reflect.Value) error {
+func (d *Decoder) decodeSlice(name string, data interface{}, val reflect.Value) error {
 	dataVal := reflect.Indirect(reflect.ValueOf(data))
 	valType := val.Type()
 	valElemType := valType.Elem()
@ -159,19 +161,9 @@ func (d *Decoder) decodeSlice(name string, data any, val reflect.Value) error {
 		for valSlice.Len() <= i {
 			valSlice = reflect.Append(valSlice, reflect.Zero(valElemType))
 		}
-		fieldName := fmt.Sprintf("%s[%d]", name, i)
-		if currentData == nil {
-			// in weakly type mode, null will convert to zero value
-			if d.option.WeaklyTypedInput {
-				continue
-			}
-			// in non-weakly type mode, null will convert to nil if element's zero value is nil, otherwise return an error
-			if elemKind := valElemType.Kind(); elemKind == reflect.Map || elemKind == reflect.Slice {
-				continue
-			}
-			return fmt.Errorf("'%s' can not be null", fieldName)
-		}
 		currentField := valSlice.Index(i)
+
+		fieldName := fmt.Sprintf("%s[%d]", name, i)
 		if err := d.decode(fieldName, currentData, currentField); err != nil {
 			return err
 		}
@ -181,7 +173,7 @@ func (d *Decoder) decodeSlice(name string, data any, val reflect.Value) error {
 	return nil
 }

-func (d *Decoder) decodeMap(name string, data any, val reflect.Value) error {
+func (d *Decoder) decodeMap(name string, data interface{}, val reflect.Value) error {
 	valType := val.Type()
 	valKeyType := valType.Key()
 	valElemType := valType.Elem()
@ -253,7 +245,7 @@ func (d *Decoder) decodeMapFromMap(name string, dataVal reflect.Value, val refle
 	return nil
 }

-func (d *Decoder) decodeStruct(name string, data any, val reflect.Value) error {
+func (d *Decoder) decodeStruct(name string, data interface{}, val reflect.Value) error {
 	dataVal := reflect.Indirect(reflect.ValueOf(data))

 	// If the type of the value to write to and the data match directly,
@ -281,7 +273,7 @@ func (d *Decoder) decodeStructFromMap(name string, dataVal, val reflect.Value) e
 	}

 	dataValKeys := make(map[reflect.Value]struct{})
-	dataValKeysUnused := make(map[any]struct{})
+	dataValKeysUnused := make(map[interface{}]struct{})
 	for _, dataValKey := range dataVal.MapKeys() {
 		dataValKeys[dataValKey] = struct{}{}
 		dataValKeysUnused[dataValKey.Interface()] = struct{}{}
@ -406,7 +398,7 @@ func (d *Decoder) decodeStructFromMap(name string, dataVal, val reflect.Value) e
 	return nil
 }

-func (d *Decoder) setInterface(name string, data any, val reflect.Value) (err error) {
+func (d *Decoder) setInterface(name string, data interface{}, val reflect.Value) (err error) {
 	dataVal := reflect.ValueOf(data)
 	val.Set(dataVal)
 	return nil
--- a/common/structure/structure_test.go
+++ b/common/structure/structure_test.go
@ -27,7 +27,7 @@ type BazOptional struct {
 }

 func TestStructure_Basic(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo":   1,
 		"bar":   "test",
 		"extra": false,
@ -45,7 +45,7 @@ func TestStructure_Basic(t *testing.T) {
 }

 func TestStructure_Slice(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": 1,
 		"bar": []string{"one", "two"},
 	}
@ -62,7 +62,7 @@ func TestStructure_Slice(t *testing.T) {
 }

 func TestStructure_Optional(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": 1,
 	}

@ -77,7 +77,7 @@ func TestStructure_Optional(t *testing.T) {
 }

 func TestStructure_MissingKey(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": 1,
 	}

@ -87,14 +87,14 @@ func TestStructure_MissingKey(t *testing.T) {
 }

 func TestStructure_ParamError(t *testing.T) {
-	rawMap := map[string]any{}
+	rawMap := map[string]interface{}{}
 	s := Baz{}
 	err := decoder.Decode(rawMap, s)
 	assert.NotNilf(t, err, "should throw error: %#v", s)
 }

 func TestStructure_SliceTypeError(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": 1,
 		"bar": []int{1, 2},
 	}
@ -105,7 +105,7 @@ func TestStructure_SliceTypeError(t *testing.T) {
 }

 func TestStructure_WeakType(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": "1",
 		"bar": []int{1},
 	}
@ -122,7 +122,7 @@ func TestStructure_WeakType(t *testing.T) {
 }

 func TestStructure_Nest(t *testing.T) {
-	rawMap := map[string]any{
+	rawMap := map[string]interface{}{
 		"foo": 1,
 	}

@ -137,45 +137,3 @@ func TestStructure_Nest(t *testing.T) {
 	assert.Nil(t, err)
 	assert.Equal(t, s.BazOptional, goal)
 }
-
-func TestStructure_SliceNilValue(t *testing.T) {
-	rawMap := map[string]any{
-		"foo": 1,
-		"bar": []any{"bar", nil},
-	}
-
-	goal := &BazSlice{
-		Foo: 1,
-		Bar: []string{"bar", ""},
-	}
-
-	s := &BazSlice{}
-	err := weakTypeDecoder.Decode(rawMap, s)
-	assert.Nil(t, err)
-	assert.Equal(t, goal.Bar, s.Bar)
-
-	s = &BazSlice{}
-	err = decoder.Decode(rawMap, s)
-	assert.NotNil(t, err)
-}
-
-func TestStructure_SliceNilValueComplex(t *testing.T) {
-	rawMap := map[string]any{
-		"bar": []any{map[string]any{"bar": "foo"}, nil},
-	}
-
-	s := &struct {
-		Bar []map[string]any `test:"bar"`
-	}{}
-
-	err := decoder.Decode(rawMap, s)
-	assert.Nil(t, err)
-	assert.Nil(t, s.Bar[1])
-
-	ss := &struct {
-		Bar []Baz `test:"bar"`
-	}{}
-
-	err = decoder.Decode(rawMap, ss)
-	assert.NotNil(t, err)
-}
--- a/component/auth/auth.go
+++ b/component/auth/auth.go
@ -36,7 +36,7 @@ func NewAuthenticator(users []AuthUser) Authenticator {
 		au.storage.Store(user.User, user.Pass)
 	}
 	usernames := make([]string, 0, len(users))
-	au.storage.Range(func(key, value any) bool {
+	au.storage.Range(func(key, value interface{}) bool {
 		usernames = append(usernames, key.(string))
 		return true
 	})
--- a/component/dhcp/conn.go
+++ b/component/dhcp/conn.go
@ -14,15 +14,5 @@ func ListenDHCPClient(ctx context.Context, ifaceName string) (net.PacketConn, er
 		listenAddr = "255.255.255.255:68"
 	}

-	options := []dialer.Option{
-		dialer.WithInterface(ifaceName),
-		dialer.WithAddrReuse(true),
-	}
-
-	// fallback bind on windows, because syscall bind can not receive broadcast
-	if runtime.GOOS == "windows" {
-		options = append(options, dialer.WithFallbackBind(true))
-	}
-
-	return dialer.ListenPacket(ctx, "udp4", listenAddr, options...)
+	return dialer.ListenPacket(ctx, "udp4", listenAddr, dialer.WithInterface(ifaceName), dialer.WithAddrReuse(true))
 }
--- a/component/dialer/bind_darwin.go
+++ b/component/dialer/bind_darwin.go
@ -4,9 +4,9 @@ import (
 	"net"
 	"syscall"

-	"github.com/Dreamacro/clash/component/iface"
-
 	"golang.org/x/sys/unix"
+
+	"github.com/Dreamacro/clash/component/iface"
 )

 type controlFn = func(network, address string, c syscall.RawConn) error
@ -27,21 +27,14 @@ func bindControl(ifaceIdx int, chain controlFn) controlFn {
 			}
 		}

-		var innerErr error
-		err = c.Control(func(fd uintptr) {
+		return c.Control(func(fd uintptr) {
 			switch network {
 			case "tcp4", "udp4":
-				innerErr = unix.SetsockoptInt(int(fd), unix.IPPROTO_IP, unix.IP_BOUND_IF, ifaceIdx)
+				unix.SetsockoptInt(int(fd), unix.IPPROTO_IP, unix.IP_BOUND_IF, ifaceIdx)
 			case "tcp6", "udp6":
-				innerErr = unix.SetsockoptInt(int(fd), unix.IPPROTO_IPV6, unix.IPV6_BOUND_IF, ifaceIdx)
+				unix.SetsockoptInt(int(fd), unix.IPPROTO_IPV6, unix.IPV6_BOUND_IF, ifaceIdx)
 			}
 		})
-
-		if innerErr != nil {
-			err = innerErr
-		}
-
-		return
 	}
 }

--- a/component/dialer/bind_linux.go
+++ b/component/dialer/bind_linux.go
@ -25,16 +25,9 @@ func bindControl(ifaceName string, chain controlFn) controlFn {
 			}
 		}

-		var innerErr error
-		err = c.Control(func(fd uintptr) {
-			innerErr = unix.BindToDevice(int(fd), ifaceName)
+		return c.Control(func(fd uintptr) {
+			unix.BindToDevice(int(fd), ifaceName)
 		})
-
-		if innerErr != nil {
-			err = innerErr
-		}
-
-		return
 	}
 }

--- a/component/dialer/bind_others.go
+++ b/component/dialer/bind_others.go
@ -1,22 +1,68 @@
-//go:build !linux && !darwin && !windows
+//go:build !linux && !darwin
+// +build !linux,!darwin

 package dialer

 import (
 	"net"
 	"strconv"
+	"strings"
+
+	"github.com/Dreamacro/clash/component/iface"
 )

+func lookupLocalAddr(ifaceName string, network string, destination net.IP, port int) (net.Addr, error) {
+	ifaceObj, err := iface.ResolveInterface(ifaceName)
+	if err != nil {
+		return nil, err
+	}
+
+	var addr *net.IPNet
+	switch network {
+	case "udp4", "tcp4":
+		addr, err = ifaceObj.PickIPv4Addr(destination)
+	case "tcp6", "udp6":
+		addr, err = ifaceObj.PickIPv6Addr(destination)
+	default:
+		if destination != nil {
+			if destination.To4() != nil {
+				addr, err = ifaceObj.PickIPv4Addr(destination)
+			} else {
+				addr, err = ifaceObj.PickIPv6Addr(destination)
+			}
+		} else {
+			addr, err = ifaceObj.PickIPv4Addr(destination)
+		}
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	if strings.HasPrefix(network, "tcp") {
+		return &net.TCPAddr{
+			IP:   addr.IP,
+			Port: port,
+		}, nil
+	} else if strings.HasPrefix(network, "udp") {
+		return &net.UDPAddr{
+			IP:   addr.IP,
+			Port: port,
+		}, nil
+	}
+
+	return nil, iface.ErrAddrNotFound
+}
+
 func bindIfaceToDialer(ifaceName string, dialer *net.Dialer, network string, destination net.IP) error {
 	if !destination.IsGlobalUnicast() {
 		return nil
 	}

-	local := uint64(0)
+	local := int64(0)
 	if dialer.LocalAddr != nil {
 		_, port, err := net.SplitHostPort(dialer.LocalAddr.String())
 		if err == nil {
-			local, _ = strconv.ParseUint(port, 10, 16)
+			local, _ = strconv.ParseInt(port, 10, 16)
 		}
 	}

@ -36,7 +82,7 @@ func bindIfaceToListenConfig(ifaceName string, _ *net.ListenConfig, network, add
 		port = "0"
 	}

-	local, _ := strconv.ParseUint(port, 10, 16)
+	local, _ := strconv.ParseInt(port, 10, 16)

 	addr, err := lookupLocalAddr(ifaceName, network, nil, int(local))
 	if err != nil {
--- a/component/dialer/bind_windows.go
+++ b/component/dialer/bind_windows.go
@ -1,98 +0,0 @@
-package dialer
-
-import (
-	"encoding/binary"
-	"net"
-	"strings"
-	"syscall"
-	"unsafe"
-
-	"github.com/Dreamacro/clash/component/iface"
-
-	"golang.org/x/sys/windows"
-)
-
-const (
-	IP_UNICAST_IF   = 31
-	IPV6_UNICAST_IF = 31
-)
-
-type controlFn = func(network, address string, c syscall.RawConn) error
-
-func bindControl(ifaceIdx int, chain controlFn) controlFn {
-	return func(network, address string, c syscall.RawConn) (err error) {
-		defer func() {
-			if err == nil && chain != nil {
-				err = chain(network, address, c)
-			}
-		}()
-
-		ipStr, _, err := net.SplitHostPort(address)
-		if err == nil {
-			ip := net.ParseIP(ipStr)
-			if ip != nil && !ip.IsGlobalUnicast() {
-				return
-			}
-		}
-
-		var innerErr error
-		err = c.Control(func(fd uintptr) {
-			if ipStr == "" && strings.HasPrefix(network, "udp") {
-				// When listening udp ":0", we should bind socket to interface4 and interface6 at the same time
-				// and ignore the error of bind6
-				_ = bindSocketToInterface6(windows.Handle(fd), ifaceIdx)
-				innerErr = bindSocketToInterface4(windows.Handle(fd), ifaceIdx)
-				return
-			}
-			switch network {
-			case "tcp4", "udp4":
-				innerErr = bindSocketToInterface4(windows.Handle(fd), ifaceIdx)
-			case "tcp6", "udp6":
-				innerErr = bindSocketToInterface6(windows.Handle(fd), ifaceIdx)
-			}
-		})
-
-		if innerErr != nil {
-			err = innerErr
-		}
-
-		return
-	}
-}
-
-func bindSocketToInterface4(handle windows.Handle, ifaceIdx int) error {
-	// MSDN says for IPv4 this needs to be in net byte order, so that it's like an IP address with leading zeros.
-	// Ref: https://learn.microsoft.com/en-us/windows/win32/winsock/ipproto-ip-socket-options
-	var bytes [4]byte
-	binary.BigEndian.PutUint32(bytes[:], uint32(ifaceIdx))
-	index := *(*uint32)(unsafe.Pointer(&bytes[0]))
-	err := windows.SetsockoptInt(handle, windows.IPPROTO_IP, IP_UNICAST_IF, int(index))
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func bindSocketToInterface6(handle windows.Handle, ifaceIdx int) error {
-	return windows.SetsockoptInt(handle, windows.IPPROTO_IPV6, IPV6_UNICAST_IF, ifaceIdx)
-}
-
-func bindIfaceToDialer(ifaceName string, dialer *net.Dialer, _ string, _ net.IP) error {
-	ifaceObj, err := iface.ResolveInterface(ifaceName)
-	if err != nil {
-		return err
-	}
-
-	dialer.Control = bindControl(ifaceObj.Index, dialer.Control)
-	return nil
-}
-
-func bindIfaceToListenConfig(ifaceName string, lc *net.ListenConfig, _, address string) (string, error) {
-	ifaceObj, err := iface.ResolveInterface(ifaceName)
-	if err != nil {
-		return "", err
-	}
-
-	lc.Control = bindControl(ifaceObj.Index, lc.Control)
-	return address, nil
-}
--- a/component/dialer/dialer.go
+++ b/component/dialer/dialer.go
@ -38,7 +38,6 @@ func DialContext(ctx context.Context, network, address string, options ...Option
 func ListenPacket(ctx context.Context, network, address string, options ...Option) (net.PacketConn, error) {
 	cfg := &option{
 		interfaceName: DefaultInterface.Load(),
-		routingMark:   int(DefaultRoutingMark.Load()),
 	}

 	for _, o := range DefaultOptions {
@ -51,15 +50,7 @@ func ListenPacket(ctx context.Context, network, address string, options ...Optio

 	lc := &net.ListenConfig{}
 	if cfg.interfaceName != "" {
-		var (
-			addr string
-			err  error
-		)
-		if cfg.fallbackBind {
-			addr, err = fallbackBindIfaceToListenConfig(cfg.interfaceName, lc, network, address)
-		} else {
-			addr, err = bindIfaceToListenConfig(cfg.interfaceName, lc, network, address)
-		}
+		addr, err := bindIfaceToListenConfig(cfg.interfaceName, lc, network, address)
 		if err != nil {
 			return nil, err
 		}
@ -78,7 +69,6 @@ func ListenPacket(ctx context.Context, network, address string, options ...Optio
 func dialContext(ctx context.Context, network string, destination net.IP, port string, options []Option) (net.Conn, error) {
 	opt := &option{
 		interfaceName: DefaultInterface.Load(),
-		routingMark:   int(DefaultRoutingMark.Load()),
 	}

 	for _, o := range DefaultOptions {
@ -91,14 +81,8 @@ func dialContext(ctx context.Context, network string, destination net.IP, port s

 	dialer := &net.Dialer{}
 	if opt.interfaceName != "" {
-		if opt.fallbackBind {
-			if err := fallbackBindIfaceToDialer(opt.interfaceName, dialer, network, destination); err != nil {
-				return nil, err
-			}
-		} else {
-			if err := bindIfaceToDialer(opt.interfaceName, dialer, network, destination); err != nil {
-				return nil, err
-			}
+		if err := bindIfaceToDialer(opt.interfaceName, dialer, network, destination); err != nil {
+			return nil, err
 		}
 	}
 	if opt.routingMark != 0 {
--- a/component/dialer/fallbackbind.go
+++ b/component/dialer/fallbackbind.go
@ -1,90 +0,0 @@
-package dialer
-
-import (
-	"net"
-	"strconv"
-	"strings"
-
-	"github.com/Dreamacro/clash/component/iface"
-)
-
-func lookupLocalAddr(ifaceName string, network string, destination net.IP, port int) (net.Addr, error) {
-	ifaceObj, err := iface.ResolveInterface(ifaceName)
-	if err != nil {
-		return nil, err
-	}
-
-	var addr *net.IPNet
-	switch network {
-	case "udp4", "tcp4":
-		addr, err = ifaceObj.PickIPv4Addr(destination)
-	case "tcp6", "udp6":
-		addr, err = ifaceObj.PickIPv6Addr(destination)
-	default:
-		if destination != nil {
-			if destination.To4() != nil {
-				addr, err = ifaceObj.PickIPv4Addr(destination)
-			} else {
-				addr, err = ifaceObj.PickIPv6Addr(destination)
-			}
-		} else {
-			addr, err = ifaceObj.PickIPv4Addr(destination)
-		}
-	}
-	if err != nil {
-		return nil, err
-	}
-
-	if strings.HasPrefix(network, "tcp") {
-		return &net.TCPAddr{
-			IP:   addr.IP,
-			Port: port,
-		}, nil
-	} else if strings.HasPrefix(network, "udp") {
-		return &net.UDPAddr{
-			IP:   addr.IP,
-			Port: port,
-		}, nil
-	}
-
-	return nil, iface.ErrAddrNotFound
-}
-
-func fallbackBindIfaceToDialer(ifaceName string, dialer *net.Dialer, network string, destination net.IP) error {
-	if !destination.IsGlobalUnicast() {
-		return nil
-	}
-
-	local := uint64(0)
-	if dialer.LocalAddr != nil {
-		_, port, err := net.SplitHostPort(dialer.LocalAddr.String())
-		if err == nil {
-			local, _ = strconv.ParseUint(port, 10, 16)
-		}
-	}
-
-	addr, err := lookupLocalAddr(ifaceName, network, destination, int(local))
-	if err != nil {
-		return err
-	}
-
-	dialer.LocalAddr = addr
-
-	return nil
-}
-
-func fallbackBindIfaceToListenConfig(ifaceName string, _ *net.ListenConfig, network, address string) (string, error) {
-	_, port, err := net.SplitHostPort(address)
-	if err != nil {
-		port = "0"
-	}
-
-	local, _ := strconv.ParseUint(port, 10, 16)
-
-	addr, err := lookupLocalAddr(ifaceName, network, nil, int(local))
-	if err != nil {
-		return "", err
-	}
-
-	return addr.String(), nil
-}
--- a/component/dialer/mark_linux.go
+++ b/component/dialer/mark_linux.go
@ -1,4 +1,5 @@
 //go:build linux
+// +build linux

 package dialer

@ -31,13 +32,13 @@ func bindMarkToControl(mark int, chain controlFn) controlFn {
 			}
 		}

-		var innerErr error
-		err = c.Control(func(fd uintptr) {
-			innerErr = syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_MARK, mark)
+		return c.Control(func(fd uintptr) {
+			switch network {
+			case "tcp4", "udp4":
+				syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_MARK, mark)
+			case "tcp6", "udp6":
+				syscall.SetsockoptInt(int(fd), syscall.SOL_SOCKET, syscall.SO_MARK, mark)
+			}
 		})
-		if innerErr != nil {
-			err = innerErr
-		}
-		return
 	}
 }
--- a/component/dialer/mark_nonlinux.go
+++ b/component/dialer/mark_nonlinux.go
@ -1,4 +1,5 @@
 //go:build !linux
+// +build !linux

 package dialer

--- a/component/dialer/options.go
+++ b/component/dialer/options.go
@ -3,14 +3,12 @@ package dialer
 import "go.uber.org/atomic"

 var (
-	DefaultOptions     []Option
-	DefaultInterface   = atomic.NewString("")
-	DefaultRoutingMark = atomic.NewInt32(0)
+	DefaultOptions   []Option
+	DefaultInterface = atomic.NewString("")
 )

 type option struct {
 	interfaceName string
-	fallbackBind  bool
 	addrReuse     bool
 	routingMark   int
 }
@ -23,12 +21,6 @@ func WithInterface(name string) Option {
 	}
 }

-func WithFallbackBind(fallback bool) Option {
-	return func(opt *option) {
-		opt.fallbackBind = fallback
-	}
-}
-
 func WithAddrReuse(reuse bool) Option {
 	return func(opt *option) {
 		opt.addrReuse = reuse
--- a/component/dialer/reuse_others.go
+++ b/component/dialer/reuse_others.go
@ -1,4 +1,5 @@
 //go:build !darwin && !dragonfly && !freebsd && !linux && !netbsd && !openbsd && !solaris && !windows
+// +build !darwin,!dragonfly,!freebsd,!linux,!netbsd,!openbsd,!solaris,!windows

 package dialer

--- a/component/dialer/reuse_unix.go
+++ b/component/dialer/reuse_unix.go
@ -1,4 +1,5 @@
 //go:build darwin || dragonfly || freebsd || linux || netbsd || openbsd || solaris
+// +build darwin dragonfly freebsd linux netbsd openbsd solaris

 package dialer

--- a/component/fakeip/cachefile.go
+++ b/component/fakeip/cachefile.go
@ -38,12 +38,6 @@ func (c *cachefileStore) PutByIP(ip net.IP, host string) {
 	c.cache.PutFakeip(ip.To4(), []byte(host))
 }

-// DelByIP implements store.DelByIP
-func (c *cachefileStore) DelByIP(ip net.IP) {
-	ip = ip.To4()
-	c.cache.DelFakeipPair(ip, c.cache.GetFakeip(ip.To4()))
-}
-
 // Exist implements store.Exist
 func (c *cachefileStore) Exist(ip net.IP) bool {
 	_, exist := c.GetByIP(ip)
--- a/component/fakeip/memory.go
+++ b/component/fakeip/memory.go
@ -46,15 +46,6 @@ func (m *memoryStore) PutByIP(ip net.IP, host string) {
 	m.cache.Set(ipToUint(ip.To4()), host)
 }

-// DelByIP implements store.DelByIP
-func (m *memoryStore) DelByIP(ip net.IP) {
-	ipNum := ipToUint(ip.To4())
-	if elm, exist := m.cache.Get(ipNum); exist {
-		m.cache.Delete(elm.(string))
-	}
-	m.cache.Delete(ipNum)
-}
-
 // Exist implements store.Exist
 func (m *memoryStore) Exist(ip net.IP) bool {
 	return m.cache.Exist(ipToUint(ip.To4()))
--- a/component/fakeip/pool.go
+++ b/component/fakeip/pool.go
@ -3,7 +3,6 @@ package fakeip
 import (
 	"errors"
 	"net"
-	"strings"
 	"sync"

 	"github.com/Dreamacro/clash/common/cache"
@ -16,12 +15,11 @@ type store interface {
 	PutByHost(host string, ip net.IP)
 	GetByIP(ip net.IP) (string, bool)
 	PutByIP(ip net.IP, host string)
-	DelByIP(ip net.IP)
 	Exist(ip net.IP) bool
 	CloneTo(store)
 }

-// Pool is an implementation about fake ip generator without storage
+// Pool is a implementation about fake ip generator without storage
 type Pool struct {
 	max     uint32
 	min     uint32
@ -37,9 +35,6 @@ type Pool struct {
 func (p *Pool) Lookup(host string) net.IP {
 	p.mux.Lock()
 	defer p.mux.Unlock()
-
-	// RFC4343: DNS Case Insensitive, we SHOULD return result with all cases.
-	host = strings.ToLower(host)
 	if ip, exist := p.store.GetByHost(host); exist {
 		return ip
 	}
@ -99,21 +94,18 @@ func (p *Pool) CloneFrom(o *Pool) {
 func (p *Pool) get(host string) net.IP {
 	current := p.offset
 	for {
-		ip := uintToIP(p.min + p.offset)
-		if !p.store.Exist(ip) {
-			break
-		}
-
 		p.offset = (p.offset + 1) % (p.max - p.min)
 		// Avoid infinite loops
 		if p.offset == current {
-			p.offset = (p.offset + 1) % (p.max - p.min)
-			ip := uintToIP(p.min + p.offset)
-			p.store.DelByIP(ip)
+			break
+		}
+
+		ip := uintToIP(p.min + p.offset - 1)
+		if !p.store.Exist(ip) {
 			break
 		}
 	}
-	ip := uintToIP(p.min + p.offset)
+	ip := uintToIP(p.min + p.offset - 1)
 	p.store.PutByIP(ip, host)
 	return ip
 }
@ -168,7 +160,7 @@ func New(options Options) (*Pool, error) {
 		}
 	} else {
 		pool.store = &memoryStore{
-			cache: cache.New(cache.WithSize(options.Size * 2)),
+			cache: cache.NewLRUCache(cache.WithSize(options.Size * 2)),
 		}
 	}

--- a/component/fakeip/pool_test.go
+++ b/component/fakeip/pool_test.go
@ -74,8 +74,8 @@ func TestPool_Basic(t *testing.T) {
 	}
 }

-func TestPool_Case_Insensitive(t *testing.T) {
-	_, ipnet, _ := net.ParseCIDR("192.168.0.1/29")
+func TestPool_CycleUsed(t *testing.T) {
+	_, ipnet, _ := net.ParseCIDR("192.168.0.1/30")
 	pools, tempfile, err := createPools(Options{
 		IPNet: ipnet,
 		Size:  10,
@ -85,33 +85,8 @@ func TestPool_Case_Insensitive(t *testing.T) {

 	for _, pool := range pools {
 		first := pool.Lookup("foo.com")
-		last := pool.Lookup("Foo.Com")
-		foo, exist := pool.LookBack(last)
-
-		assert.True(t, first.Equal(pool.Lookup("Foo.Com")))
-		assert.Equal(t, pool.Lookup("fOo.cOM"), first)
-		assert.True(t, exist)
-		assert.Equal(t, foo, "foo.com")
-	}
-}
-
-func TestPool_CycleUsed(t *testing.T) {
-	_, ipnet, _ := net.ParseCIDR("192.168.0.1/29")
-	pools, tempfile, err := createPools(Options{
-		IPNet: ipnet,
-		Size:  10,
-	})
-	assert.Nil(t, err)
-	defer os.Remove(tempfile)
-
-	for _, pool := range pools {
-		assert.Equal(t, net.IP{192, 168, 0, 2}, pool.Lookup("2.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 3}, pool.Lookup("3.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 4}, pool.Lookup("4.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 5}, pool.Lookup("5.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 6}, pool.Lookup("6.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 2}, pool.Lookup("12.com"))
-		assert.Equal(t, net.IP{192, 168, 0, 3}, pool.Lookup("3.com"))
+		same := pool.Lookup("baz.com")
+		assert.True(t, first.Equal(same))
 	}
 }

--- a/component/iface/iface.go
+++ b/component/iface/iface.go
@ -23,7 +23,7 @@ var (
 var interfaces = singledo.NewSingle(time.Second * 20)

 func ResolveInterface(name string) (*Interface, error) {
-	value, err, _ := interfaces.Do(func() (any, error) {
+	value, err, _ := interfaces.Do(func() (interface{}, error) {
 		ifaces, err := net.Interfaces()
 		if err != nil {
 			return nil, err
--- a/component/ipset/ipset_linux.go
+++ b/component/ipset/ipset_linux.go
@ -1,22 +0,0 @@
-//go:build linux
-
-package ipset
-
-import (
-	"net"
-
-	"github.com/vishvananda/netlink"
-)
-
-// Test whether the ip is in the set or not
-func Test(setName string, ip net.IP) (bool, error) {
-	return netlink.IpsetTest(setName, &netlink.IPSetEntry{
-		IP: ip,
-	})
-}
-
-// Verify dumps a specific ipset to check if we can use the set normally
-func Verify(setName string) error {
-	_, err := netlink.IpsetList(setName)
-	return err
-}
--- a/component/ipset/ipset_others.go
+++ b/component/ipset/ipset_others.go
@ -1,17 +0,0 @@
-//go:build !linux
-
-package ipset
-
-import (
-	"net"
-)
-
-// Always return false in non-linux
-func Test(setName string, ip net.IP) (bool, error) {
-	return false, nil
-}
-
-// Always pass in non-linux
-func Verify(setName string) error {
-	return nil
-}
--- a/component/pool/pool.go
+++ b/component/pool/pool.go
@ -6,17 +6,17 @@ import (
 	"time"
 )

-type Factory = func(context.Context) (any, error)
+type Factory = func(context.Context) (interface{}, error)

 type entry struct {
-	elm  any
+	elm  interface{}
 	time time.Time
 }

 type Option func(*pool)

 // WithEvict set the evict callback
-func WithEvict(cb func(any)) Option {
+func WithEvict(cb func(interface{})) Option {
 	return func(p *pool) {
 		p.evict = cb
 	}
@ -32,7 +32,7 @@ func WithAge(maxAge int64) Option {
 // WithSize defined max size of Pool
 func WithSize(maxSize int) Option {
 	return func(p *pool) {
-		p.ch = make(chan any, maxSize)
+		p.ch = make(chan interface{}, maxSize)
 	}
 }

@ -42,13 +42,13 @@ type Pool struct {
 }

 type pool struct {
-	ch      chan any
+	ch      chan interface{}
 	factory Factory
-	evict   func(any)
+	evict   func(interface{})
 	maxAge  int64
 }

-func (p *pool) GetContext(ctx context.Context) (any, error) {
+func (p *pool) GetContext(ctx context.Context) (interface{}, error) {
 	now := time.Now()
 	for {
 		select {
@ -68,11 +68,11 @@ func (p *pool) GetContext(ctx context.Context) (any, error) {
 	}
 }

-func (p *pool) Get() (any, error) {
+func (p *pool) Get() (interface{}, error) {
 	return p.GetContext(context.Background())
 }

-func (p *pool) Put(item any) {
+func (p *pool) Put(item interface{}) {
 	e := &entry{
 		elm:  item,
 		time: time.Now(),
@ -100,7 +100,7 @@ func recycle(p *Pool) {

 func New(factory Factory, options ...Option) *Pool {
 	p := &pool{
-		ch:      make(chan any, 10),
+		ch:      make(chan interface{}, 10),
 		factory: factory,
 	}

--- a/component/pool/pool_test.go
+++ b/component/pool/pool_test.go
@ -10,7 +10,7 @@ import (

 func lg() Factory {
 	initial := -1
-	return func(context.Context) (any, error) {
+	return func(context.Context) (interface{}, error) {
 		initial++
 		return initial, nil
 	}
@ -34,7 +34,7 @@ func TestPool_MaxSize(t *testing.T) {
 	size := 5
 	pool := New(g, WithSize(size))

-	items := []any{}
+	items := []interface{}{}

 	for i := 0; i < size; i++ {
 		item, _ := pool.Get()
--- a/component/process/process.go
+++ b/component/process/process.go
@ -2,7 +2,7 @@ package process

 import (
 	"errors"
-	"net/netip"
+	"net"
 )

 var (
@ -16,6 +16,6 @@ const (
 	UDP = "udp"
 )

-func FindProcessPath(network string, from netip.AddrPort, to netip.AddrPort) (string, error) {
-	return findProcessPath(network, from, to)
+func FindProcessName(network string, srcIP net.IP, srcPort int) (string, error) {
+	return findProcessName(network, srcIP, srcPort)
 }
--- a/component/process/process_darwin.go
+++ b/component/process/process_darwin.go
@ -2,9 +2,8 @@ package process

 import (
 	"encoding/binary"
-	"net/netip"
-	"strconv"
-	"strings"
+	"net"
+	"path/filepath"
 	"syscall"
 	"unsafe"

@ -17,23 +16,7 @@ const (
 	proccallnumpidinfo  = 0x2
 )

-var structSize = func() int {
-	value, _ := syscall.Sysctl("kern.osrelease")
-	major, _, _ := strings.Cut(value, ".")
-	n, _ := strconv.ParseInt(major, 10, 64)
-	switch true {
-	case n >= 22:
-		return 408
-	default:
-		// from darwin-xnu/bsd/netinet/in_pcblist.c:get_pcblist_n
-		// size/offset are round up (aligned) to 8 bytes in darwin
-		// rup8(sizeof(xinpcb_n)) + rup8(sizeof(xsocket_n)) +
-		// 2 * rup8(sizeof(xsockbuf_n)) + rup8(sizeof(xsockstat_n))
-		return 384
-	}
-}()
-
-func findProcessPath(network string, from netip.AddrPort, _ netip.AddrPort) (string, error) {
+func findProcessName(network string, ip net.IP, port int) (string, error) {
 	var spath string
 	switch network {
 	case TCP:
@ -44,7 +27,7 @@ func findProcessPath(network string, from netip.AddrPort, _ netip.AddrPort) (str
 		return "", ErrInvalidNetwork
 	}

-	isIPv4 := from.Addr().Is4()
+	isIPv4 := ip.To4() != nil

 	value, err := syscall.Sysctl(spath)
 	if err != nil {
@ -52,62 +35,48 @@ func findProcessPath(network string, from netip.AddrPort, _ netip.AddrPort) (str
 	}

 	buf := []byte(value)
-	itemSize := structSize
+
+	// from darwin-xnu/bsd/netinet/in_pcblist.c:get_pcblist_n
+	// size/offset are round up (aligned) to 8 bytes in darwin
+	// rup8(sizeof(xinpcb_n)) + rup8(sizeof(xsocket_n)) +
+	// 2 * rup8(sizeof(xsockbuf_n)) + rup8(sizeof(xsockstat_n))
+	itemSize := 384
 	if network == TCP {
 		// rup8(sizeof(xtcpcb_n))
 		itemSize += 208
 	}
-
-	var fallbackUDPProcess string
 	// skip the first xinpgen(24 bytes) block
 	for i := 24; i+itemSize <= len(buf); i += itemSize {
 		// offset of xinpcb_n and xsocket_n
 		inp, so := i, i+104

 		srcPort := binary.BigEndian.Uint16(buf[inp+18 : inp+20])
-		if from.Port() != srcPort {
+		if uint16(port) != srcPort {
 			continue
 		}

-		// FIXME: add dstPort check
-
 		// xinpcb_n.inp_vflag
 		flag := buf[inp+44]

-		var (
-			srcIP     netip.Addr
-			srcIPOk   bool
-			srcIsIPv4 bool
-		)
+		var srcIP net.IP
 		switch {
 		case flag&0x1 > 0 && isIPv4:
 			// ipv4
-			srcIP, srcIPOk = netip.AddrFromSlice(buf[inp+76 : inp+80])
-			srcIsIPv4 = true
+			srcIP = net.IP(buf[inp+76 : inp+80])
 		case flag&0x2 > 0 && !isIPv4:
 			// ipv6
-			srcIP, srcIPOk = netip.AddrFromSlice(buf[inp+64 : inp+80])
+			srcIP = net.IP(buf[inp+64 : inp+80])
 		default:
 			continue
 		}
-		if !srcIPOk {
+
+		if !ip.Equal(srcIP) {
 			continue
 		}

-		if from.Addr() == srcIP { // FIXME: add dstIP check
-			// xsocket_n.so_last_pid
-			pid := readNativeUint32(buf[so+68 : so+72])
-			return getExecPathFromPID(pid)
-		}
-
-		// udp packet connection may be not equal with srcIP
-		if network == UDP && srcIP.IsUnspecified() && isIPv4 == srcIsIPv4 {
-			fallbackUDPProcess, _ = getExecPathFromPID(readNativeUint32(buf[so+68 : so+72]))
-		}
-	}
-
-	if network == UDP && fallbackUDPProcess != "" {
-		return fallbackUDPProcess, nil
+		// xsocket_n.so_last_pid
+		pid := readNativeUint32(buf[so+68 : so+72])
+		return getExecPathFromPID(pid)
 	}

 	return "", ErrNotFound
@ -127,7 +96,7 @@ func getExecPathFromPID(pid uint32) (string, error) {
 		return "", errno
 	}

-	return unix.ByteSliceToString(buf), nil
+	return filepath.Base(unix.ByteSliceToString(buf)), nil
 }

 func readNativeUint32(b []byte) uint32 {
--- a/component/process/process_freebsd.go
+++ b/component/process/process_freebsd.go
@ -1,217 +0,0 @@
-package process
-
-import (
-	"encoding/binary"
-	"fmt"
-	"net/netip"
-	"strconv"
-	"strings"
-	"unsafe"
-
-	"golang.org/x/sys/unix"
-)
-
-type Xinpgen12 [64]byte // size 64
-
-type InEndpoints12 struct {
-	FPort  [2]byte
-	LPort  [2]byte
-	FAddr  [16]byte
-	LAddr  [16]byte
-	ZoneID uint32
-} // size 40
-
-type XTcpcb12 struct {
-	Len         uint32        // offset 0
-	_           [20]byte      // offset 4
-	SocketAddr  uint64        // offset 24
-	_           [84]byte      // offset 32
-	Family      uint32        // offset 116
-	_           [140]byte     // offset 120
-	InEndpoints InEndpoints12 // offset 260
-	_           [444]byte     // offset 300
-} // size 744
-
-type XInpcb12 struct {
-	Len         uint32        // offset 0
-	_           [12]byte      // offset 4
-	SocketAddr  uint64        // offset 16
-	_           [84]byte      // offset 24
-	Family      uint32        // offset 108
-	_           [140]byte     // offset 112
-	InEndpoints InEndpoints12 // offset 252
-	_           [108]byte     // offset 292
-} // size 400
-
-type XFile12 struct {
-	Size     uint64   // offset 0
-	Pid      uint32   // offset 8
-	_        [44]byte // offset 12
-	DataAddr uint64   // offset 56
-	_        [64]byte // offset 64
-} // size 128
-
-var majorVersion = func() int {
-	releaseVersion, err := unix.Sysctl("kern.osrelease")
-	if err != nil {
-		return 0
-	}
-
-	majorVersionText, _, _ := strings.Cut(releaseVersion, ".")
-
-	majorVersion, err := strconv.Atoi(majorVersionText)
-	if err != nil {
-		return 0
-	}
-
-	return majorVersion
-}()
-
-func findProcessPath(network string, from netip.AddrPort, to netip.AddrPort) (string, error) {
-	switch majorVersion {
-	case 12, 13:
-		return findProcessPath12(network, from, to)
-	}
-
-	return "", ErrPlatformNotSupport
-}
-
-func findProcessPath12(network string, from netip.AddrPort, to netip.AddrPort) (string, error) {
-	switch network {
-	case TCP:
-		data, err := unix.SysctlRaw("net.inet.tcp.pcblist")
-		if err != nil {
-			return "", err
-		}
-
-		if len(data) < int(unsafe.Sizeof(Xinpgen12{})) {
-			return "", fmt.Errorf("invalid sysctl data len: %d", len(data))
-		}
-
-		data = data[unsafe.Sizeof(Xinpgen12{}):]
-
-		for len(data) > int(unsafe.Sizeof(XTcpcb12{}.Len)) {
-			tcb := (*XTcpcb12)(unsafe.Pointer(&data[0]))
-			if tcb.Len < uint32(unsafe.Sizeof(XTcpcb12{})) || uint32(len(data)) < tcb.Len {
-				break
-			}
-
-			data = data[tcb.Len:]
-
-			var (
-				connFromAddr netip.Addr
-				connToAddr   netip.Addr
-			)
-			if tcb.Family == unix.AF_INET {
-				connFromAddr = netip.AddrFrom4([4]byte(tcb.InEndpoints.LAddr[12:16]))
-				connToAddr = netip.AddrFrom4([4]byte(tcb.InEndpoints.FAddr[12:16]))
-			} else if tcb.Family == unix.AF_INET6 {
-				connFromAddr = netip.AddrFrom16(tcb.InEndpoints.LAddr)
-				connToAddr = netip.AddrFrom16(tcb.InEndpoints.FAddr)
-			} else {
-				continue
-			}
-
-			connFrom := netip.AddrPortFrom(connFromAddr, binary.BigEndian.Uint16(tcb.InEndpoints.LPort[:]))
-			connTo := netip.AddrPortFrom(connToAddr, binary.BigEndian.Uint16(tcb.InEndpoints.FPort[:]))
-
-			if connFrom == from && connTo == to {
-				pid, err := findPidBySocketAddr12(tcb.SocketAddr)
-				if err != nil {
-					return "", err
-				}
-
-				return findExecutableByPid(pid)
-			}
-		}
-	case UDP:
-		data, err := unix.SysctlRaw("net.inet.udp.pcblist")
-		if err != nil {
-			return "", err
-		}
-
-		if len(data) < int(unsafe.Sizeof(Xinpgen12{})) {
-			return "", fmt.Errorf("invalid sysctl data len: %d", len(data))
-		}
-
-		data = data[unsafe.Sizeof(Xinpgen12{}):]
-
-		for len(data) > int(unsafe.Sizeof(XInpcb12{}.Len)) {
-			icb := (*XInpcb12)(unsafe.Pointer(&data[0]))
-			if icb.Len < uint32(unsafe.Sizeof(XInpcb12{})) || uint32(len(data)) < icb.Len {
-				break
-			}
-			data = data[icb.Len:]
-
-			var connFromAddr netip.Addr
-			if icb.Family == unix.AF_INET {
-				connFromAddr = netip.AddrFrom4([4]byte(icb.InEndpoints.LAddr[12:16]))
-			} else if icb.Family == unix.AF_INET6 {
-				connFromAddr = netip.AddrFrom16(icb.InEndpoints.LAddr)
-			} else {
-				continue
-			}
-
-			connFromPort := binary.BigEndian.Uint16(icb.InEndpoints.LPort[:])
-
-			if (connFromAddr == from.Addr() || connFromAddr.IsUnspecified()) && connFromPort == from.Port() {
-				pid, err := findPidBySocketAddr12(icb.SocketAddr)
-				if err != nil {
-					return "", err
-				}
-
-				return findExecutableByPid(pid)
-			}
-		}
-	}
-
-	return "", ErrNotFound
-}
-
-func findPidBySocketAddr12(socketAddr uint64) (uint32, error) {
-	buf, err := unix.SysctlRaw("kern.file")
-	if err != nil {
-		return 0, err
-	}
-
-	filesLen := len(buf) / int(unsafe.Sizeof(XFile12{}))
-	files := unsafe.Slice((*XFile12)(unsafe.Pointer(&buf[0])), filesLen)
-
-	for _, file := range files {
-		if file.Size != uint64(unsafe.Sizeof(XFile12{})) {
-			return 0, fmt.Errorf("invalid xfile size: %d", file.Size)
-		}
-
-		if file.DataAddr == socketAddr {
-			return file.Pid, nil
-		}
-	}
-
-	return 0, ErrNotFound
-}
-
-func findExecutableByPid(pid uint32) (string, error) {
-	buf := make([]byte, unix.PathMax)
-	size := uint64(len(buf))
-	mib := [4]uint32{
-		unix.CTL_KERN,
-		14, // KERN_PROC
-		12, // KERN_PROC_PATHNAME
-		pid,
-	}
-
-	_, _, errno := unix.Syscall6(
-		unix.SYS___SYSCTL,
-		uintptr(unsafe.Pointer(&mib[0])),
-		uintptr(len(mib)),
-		uintptr(unsafe.Pointer(&buf[0])),
-		uintptr(unsafe.Pointer(&size)),
-		0,
-		0,
-	)
-	if errno != 0 || size == 0 {
-		return "", fmt.Errorf("sysctl: get proc name: %w", errno)
-	}
-
-	return string(buf[:size-1]), nil
-}
--- a/component/process/process_freebsd_amd64.go
+++ b/component/process/process_freebsd_amd64.go
@ -0,0 +1,234 @@
+package process
+
+import (
+	"encoding/binary"
+	"fmt"
+	"net"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"sync"
+	"syscall"
+	"unsafe"
+
+	"github.com/Dreamacro/clash/log"
+)
+
+// store process name for when dealing with multiple PROCESS-NAME rules
+var (
+	defaultSearcher *searcher
+
+	once sync.Once
+)
+
+func findProcessName(network string, ip net.IP, srcPort int) (string, error) {
+	once.Do(func() {
+		if err := initSearcher(); err != nil {
+			log.Errorln("Initialize PROCESS-NAME failed: %s", err.Error())
+			log.Warnln("All PROCESS-NAME rules will be skipped")
+			return
+		}
+	})
+
+	if defaultSearcher == nil {
+		return "", ErrPlatformNotSupport
+	}
+
+	var spath string
+	isTCP := network == TCP
+	switch network {
+	case TCP:
+		spath = "net.inet.tcp.pcblist"
+	case UDP:
+		spath = "net.inet.udp.pcblist"
+	default:
+		return "", ErrInvalidNetwork
+	}
+
+	value, err := syscall.Sysctl(spath)
+	if err != nil {
+		return "", err
+	}
+
+	buf := []byte(value)
+	pid, err := defaultSearcher.Search(buf, ip, uint16(srcPort), isTCP)
+	if err != nil {
+		return "", err
+	}
+
+	return getExecPathFromPID(pid)
+}
+
+func getExecPathFromPID(pid uint32) (string, error) {
+	buf := make([]byte, 2048)
+	size := uint64(len(buf))
+	// CTL_KERN, KERN_PROC, KERN_PROC_PATHNAME, pid
+	mib := [4]uint32{1, 14, 12, pid}
+
+	_, _, errno := syscall.Syscall6(
+		syscall.SYS___SYSCTL,
+		uintptr(unsafe.Pointer(&mib[0])),
+		uintptr(len(mib)),
+		uintptr(unsafe.Pointer(&buf[0])),
+		uintptr(unsafe.Pointer(&size)),
+		0,
+		0)
+	if errno != 0 || size == 0 {
+		return "", errno
+	}
+
+	return filepath.Base(string(buf[:size-1])), nil
+}
+
+func readNativeUint32(b []byte) uint32 {
+	return *(*uint32)(unsafe.Pointer(&b[0]))
+}
+
+type searcher struct {
+	// sizeof(struct xinpgen)
+	headSize int
+	// sizeof(struct xtcpcb)
+	tcpItemSize int
+	// sizeof(struct xinpcb)
+	udpItemSize  int
+	udpInpOffset int
+	port         int
+	ip           int
+	vflag        int
+	socket       int
+
+	// sizeof(struct xfile)
+	fileItemSize int
+	data         int
+	pid          int
+}
+
+func (s *searcher) Search(buf []byte, ip net.IP, port uint16, isTCP bool) (uint32, error) {
+	var itemSize int
+	var inpOffset int
+
+	if isTCP {
+		// struct xtcpcb
+		itemSize = s.tcpItemSize
+		inpOffset = 8
+	} else {
+		// struct xinpcb
+		itemSize = s.udpItemSize
+		inpOffset = s.udpInpOffset
+	}
+
+	isIPv4 := ip.To4() != nil
+	// skip the first xinpgen block
+	for i := s.headSize; i+itemSize <= len(buf); i += itemSize {
+		inp := i + inpOffset
+
+		srcPort := binary.BigEndian.Uint16(buf[inp+s.port : inp+s.port+2])
+
+		if port != srcPort {
+			continue
+		}
+
+		// xinpcb.inp_vflag
+		flag := buf[inp+s.vflag]
+
+		var srcIP net.IP
+		switch {
+		case flag&0x1 > 0 && isIPv4:
+			// ipv4
+			srcIP = net.IP(buf[inp+s.ip : inp+s.ip+4])
+		case flag&0x2 > 0 && !isIPv4:
+			// ipv6
+			srcIP = net.IP(buf[inp+s.ip-12 : inp+s.ip+4])
+		default:
+			continue
+		}
+
+		if !ip.Equal(srcIP) {
+			continue
+		}
+
+		// xsocket.xso_so, interpreted as big endian anyway since it's only used for comparison
+		socket := binary.BigEndian.Uint64(buf[inp+s.socket : inp+s.socket+8])
+		return s.searchSocketPid(socket)
+	}
+	return 0, ErrNotFound
+}
+
+func (s *searcher) searchSocketPid(socket uint64) (uint32, error) {
+	value, err := syscall.Sysctl("kern.file")
+	if err != nil {
+		return 0, err
+	}
+
+	buf := []byte(value)
+
+	// struct xfile
+	itemSize := s.fileItemSize
+	for i := 0; i+itemSize <= len(buf); i += itemSize {
+		// xfile.xf_data
+		data := binary.BigEndian.Uint64(buf[i+s.data : i+s.data+8])
+		if data == socket {
+			// xfile.xf_pid
+			pid := readNativeUint32(buf[i+s.pid : i+s.pid+4])
+			return pid, nil
+		}
+	}
+	return 0, ErrNotFound
+}
+
+func newSearcher(major int) *searcher {
+	var s *searcher
+	switch major {
+	case 11:
+		s = &searcher{
+			headSize:     32,
+			tcpItemSize:  1304,
+			udpItemSize:  632,
+			port:         198,
+			ip:           228,
+			vflag:        116,
+			socket:       88,
+			fileItemSize: 80,
+			data:         56,
+			pid:          8,
+			udpInpOffset: 8,
+		}
+	case 12:
+		fallthrough
+	case 13:
+		s = &searcher{
+			headSize:     64,
+			tcpItemSize:  744,
+			udpItemSize:  400,
+			port:         254,
+			ip:           284,
+			vflag:        392,
+			socket:       16,
+			fileItemSize: 128,
+			data:         56,
+			pid:          8,
+		}
+	}
+	return s
+}
+
+func initSearcher() error {
+	osRelease, err := syscall.Sysctl("kern.osrelease")
+	if err != nil {
+		return err
+	}
+
+	dot := strings.Index(osRelease, ".")
+	if dot != -1 {
+		osRelease = osRelease[:dot]
+	}
+	major, err := strconv.Atoi(osRelease)
+	if err != nil {
+		return err
+	}
+	defaultSearcher = newSearcher(major)
+	if defaultSearcher == nil {
+		return fmt.Errorf("unsupported freebsd version %d", major)
+	}
+	return nil
+}
--- a/component/process/process_freebsd_test.go
+++ b/component/process/process_freebsd_test.go
@ -1,35 +0,0 @@
-//go:build freebsd
-
-package process
-
-import (
-	"testing"
-	"unsafe"
-
-	"github.com/stretchr/testify/assert"
-)
-
-func TestEnforceStructValid12(t *testing.T) {
-	if majorVersion != 12 && majorVersion != 13 {
-		t.Skipf("Unsupported freebsd version: %d", majorVersion)
-
-		return
-	}
-
-	assert.Equal(t, 0, int(unsafe.Offsetof(XTcpcb12{}.Len)))
-	assert.Equal(t, 24, int(unsafe.Offsetof(XTcpcb12{}.SocketAddr)))
-	assert.Equal(t, 116, int(unsafe.Offsetof(XTcpcb12{}.Family)))
-	assert.Equal(t, 260, int(unsafe.Offsetof(XTcpcb12{}.InEndpoints)))
-	assert.Equal(t, 0, int(unsafe.Offsetof(XInpcb12{}.Len)))
-	assert.Equal(t, 16, int(unsafe.Offsetof(XInpcb12{}.SocketAddr)))
-	assert.Equal(t, 108, int(unsafe.Offsetof(XInpcb12{}.Family)))
-	assert.Equal(t, 252, int(unsafe.Offsetof(XInpcb12{}.InEndpoints)))
-	assert.Equal(t, 0, int(unsafe.Offsetof(XFile12{}.Size)))
-	assert.Equal(t, 8, int(unsafe.Offsetof(XFile12{}.Pid)))
-	assert.Equal(t, 56, int(unsafe.Offsetof(XFile12{}.DataAddr)))
-	assert.Equal(t, 64, int(unsafe.Sizeof(Xinpgen12{})))
-	assert.Equal(t, 744, int(unsafe.Sizeof(XTcpcb12{})))
-	assert.Equal(t, 400, int(unsafe.Sizeof(XInpcb12{})))
-	assert.Equal(t, 40, int(unsafe.Sizeof(InEndpoints12{})))
-	assert.Equal(t, 128, int(unsafe.Sizeof(XFile12{})))
-}
--- a/component/process/process_linux.go
+++ b/component/process/process_linux.go
@ -4,226 +4,236 @@ import (
 	"bytes"
 	"encoding/binary"
 	"fmt"
+	"io"
 	"net"
-	"net/netip"
 	"os"
+	"path"
+	"path/filepath"
+	"syscall"
 	"unsafe"

 	"github.com/Dreamacro/clash/common/pool"
-
-	"github.com/mdlayher/netlink"
-	"golang.org/x/sys/unix"
 )

-type inetDiagRequest struct {
-	Family   byte
-	Protocol byte
-	Ext      byte
-	Pad      byte
-	States   uint32
+// from https://github.com/vishvananda/netlink/blob/bca67dfc8220b44ef582c9da4e9172bf1c9ec973/nl/nl_linux.go#L52-L62
+var nativeEndian = func() binary.ByteOrder {
+	var x uint32 = 0x01020304
+	if *(*byte)(unsafe.Pointer(&x)) == 0x01 {
+		return binary.BigEndian
+	}

-	SrcPort [2]byte
-	DstPort [2]byte
-	Src     [16]byte
-	Dst     [16]byte
-	If      uint32
-	Cookie  [2]uint32
-}
+	return binary.LittleEndian
+}()

-type inetDiagResponse struct {
-	Family  byte
-	State   byte
-	Timer   byte
-	ReTrans byte
+type (
+	SocketResolver      func(network string, ip net.IP, srcPort int) (inode, uid int, err error)
+	ProcessNameResolver func(inode, uid int) (name string, err error)
+)

-	SrcPort [2]byte
-	DstPort [2]byte
-	Src     [16]byte
-	Dst     [16]byte
-	If      uint32
-	Cookie  [2]uint32
+// export for android
+var (
+	DefaultSocketResolver      SocketResolver      = resolveSocketByNetlink
+	DefaultProcessNameResolver ProcessNameResolver = resolveProcessNameByProcSearch
+)

-	Expires uint32
-	RQueue  uint32
-	WQueue  uint32
-	UID     uint32
-	INode   uint32
-}
+const (
+	sizeOfSocketDiagRequest = syscall.SizeofNlMsghdr + 8 + 48
+	socketDiagByFamily      = 20
+	pathProc                = "/proc"
+)

-func findProcessPath(network string, from netip.AddrPort, to netip.AddrPort) (string, error) {
-	inode, uid, err := resolveSocketByNetlink(network, from, to)
+func findProcessName(network string, ip net.IP, srcPort int) (string, error) {
+	inode, uid, err := DefaultSocketResolver(network, ip, srcPort)
 	if err != nil {
 		return "", err
 	}

-	return resolveProcessPathByProcSearch(inode, uid)
+	return DefaultProcessNameResolver(inode, uid)
 }

-func resolveSocketByNetlink(network string, from netip.AddrPort, to netip.AddrPort) (inode uint32, uid uint32, err error) {
-	var families []byte
-	if from.Addr().Unmap().Is4() {
-		families = []byte{unix.AF_INET, unix.AF_INET6}
-	} else {
-		families = []byte{unix.AF_INET6, unix.AF_INET}
-	}
-
+func resolveSocketByNetlink(network string, ip net.IP, srcPort int) (int, int, error) {
+	var family byte
 	var protocol byte
+
 	switch network {
 	case TCP:
-		protocol = unix.IPPROTO_TCP
+		protocol = syscall.IPPROTO_TCP
 	case UDP:
-		protocol = unix.IPPROTO_UDP
+		protocol = syscall.IPPROTO_UDP
 	default:
 		return 0, 0, ErrInvalidNetwork
 	}

-	if protocol == unix.IPPROTO_UDP {
-		// Swap from & to for udp
-		// See also https://www.mail-archive.com/netdev@vger.kernel.org/msg248638.html
-		from, to = to, from
-	}
-
-	for _, family := range families {
-		inode, uid, err = resolveSocketByNetlinkExact(family, protocol, from, to, netlink.Request)
-		if err == nil {
-			return inode, uid, err
-		}
-	}
-
-	return 0, 0, ErrNotFound
-}
-
-func resolveSocketByNetlinkExact(family byte, protocol byte, from netip.AddrPort, to netip.AddrPort, flags netlink.HeaderFlags) (inode uint32, uid uint32, err error) {
-	request := &inetDiagRequest{
-		Family:   family,
-		Protocol: protocol,
-		States:   0xffffffff,
-		Cookie:   [2]uint32{0xffffffff, 0xffffffff},
-	}
-
-	var (
-		fromAddr []byte
-		toAddr   []byte
-	)
-	if family == unix.AF_INET {
-		fromAddr = net.IP(from.Addr().AsSlice()).To4()
-		toAddr = net.IP(to.Addr().AsSlice()).To4()
+	if ip.To4() != nil {
+		family = syscall.AF_INET
 	} else {
-		fromAddr = net.IP(from.Addr().AsSlice()).To16()
-		toAddr = net.IP(to.Addr().AsSlice()).To16()
+		family = syscall.AF_INET6
 	}

-	copy(request.Src[:], fromAddr)
-	copy(request.Dst[:], toAddr)
+	req := packSocketDiagRequest(family, protocol, ip, uint16(srcPort))

-	binary.BigEndian.PutUint16(request.SrcPort[:], from.Port())
-	binary.BigEndian.PutUint16(request.DstPort[:], to.Port())
-
-	conn, err := netlink.Dial(unix.NETLINK_INET_DIAG, nil)
+	socket, err := syscall.Socket(syscall.AF_NETLINK, syscall.SOCK_DGRAM, syscall.NETLINK_INET_DIAG)
 	if err != nil {
 		return 0, 0, err
 	}
-	defer conn.Close()
+	defer syscall.Close(socket)

-	message := netlink.Message{
-		Header: netlink.Header{
-			Type:  20, // SOCK_DIAG_BY_FAMILY
-			Flags: flags,
-		},
-		Data: (*(*[unsafe.Sizeof(*request)]byte)(unsafe.Pointer(request)))[:],
+	syscall.SetNonblock(socket, true)
+	syscall.SetsockoptTimeval(socket, syscall.SOL_SOCKET, syscall.SO_SNDTIMEO, &syscall.Timeval{Usec: 50})
+	syscall.SetsockoptTimeval(socket, syscall.SOL_SOCKET, syscall.SO_RCVTIMEO, &syscall.Timeval{Usec: 50})
+
+	if err := syscall.Connect(socket, &syscall.SockaddrNetlink{
+		Family: syscall.AF_NETLINK,
+		Pad:    0,
+		Pid:    0,
+		Groups: 0,
+	}); err != nil {
+		return 0, 0, err
 	}

-	messages, err := conn.Execute(message)
+	if _, err := syscall.Write(socket, req); err != nil {
+		return 0, 0, err
+	}
+
+	rb := pool.Get(pool.RelayBufferSize)
+	defer pool.Put(rb)
+
+	n, err := syscall.Read(socket, rb)
 	if err != nil {
 		return 0, 0, err
 	}

-	for _, msg := range messages {
-		if len(msg.Data) < int(unsafe.Sizeof(inetDiagResponse{})) {
-			continue
-		}
-
-		response := (*inetDiagResponse)(unsafe.Pointer(&msg.Data[0]))
-
-		return response.INode, response.UID, nil
+	messages, err := syscall.ParseNetlinkMessage(rb[:n])
+	if err != nil {
+		return 0, 0, err
+	} else if len(messages) == 0 {
+		return 0, 0, io.ErrUnexpectedEOF
 	}

-	return 0, 0, ErrNotFound
+	message := messages[0]
+	if message.Header.Type&syscall.NLMSG_ERROR != 0 {
+		return 0, 0, syscall.ESRCH
+	}
+
+	uid, inode := unpackSocketDiagResponse(&messages[0])
+
+	return int(uid), int(inode), nil
 }

-func resolveProcessPathByProcSearch(inode, uid uint32) (string, error) {
-	procDir, err := os.Open("/proc")
-	if err != nil {
-		return "", err
-	}
-	defer procDir.Close()
+func packSocketDiagRequest(family, protocol byte, source net.IP, sourcePort uint16) []byte {
+	s := make([]byte, 16)

-	pids, err := procDir.Readdirnames(-1)
+	if v4 := source.To4(); v4 != nil {
+		copy(s, v4)
+	} else {
+		copy(s, source)
+	}
+
+	buf := make([]byte, sizeOfSocketDiagRequest)
+
+	nativeEndian.PutUint32(buf[0:4], sizeOfSocketDiagRequest)
+	nativeEndian.PutUint16(buf[4:6], socketDiagByFamily)
+	nativeEndian.PutUint16(buf[6:8], syscall.NLM_F_REQUEST|syscall.NLM_F_DUMP)
+	nativeEndian.PutUint32(buf[8:12], 0)
+	nativeEndian.PutUint32(buf[12:16], 0)
+
+	buf[16] = family
+	buf[17] = protocol
+	buf[18] = 0
+	buf[19] = 0
+	nativeEndian.PutUint32(buf[20:24], 0xFFFFFFFF)
+
+	binary.BigEndian.PutUint16(buf[24:26], sourcePort)
+	binary.BigEndian.PutUint16(buf[26:28], 0)
+
+	copy(buf[28:44], s)
+	copy(buf[44:60], net.IPv6zero)
+
+	nativeEndian.PutUint32(buf[60:64], 0)
+	nativeEndian.PutUint64(buf[64:72], 0xFFFFFFFFFFFFFFFF)
+
+	return buf
+}
+
+func unpackSocketDiagResponse(msg *syscall.NetlinkMessage) (inode, uid uint32) {
+	if len(msg.Data) < 72 {
+		return 0, 0
+	}
+
+	data := msg.Data
+
+	uid = nativeEndian.Uint32(data[64:68])
+	inode = nativeEndian.Uint32(data[68:72])
+
+	return
+}
+
+func resolveProcessNameByProcSearch(inode, uid int) (string, error) {
+	files, err := os.ReadDir(pathProc)
 	if err != nil {
 		return "", err
 	}

-	expectedSocketName := fmt.Appendf(nil, "socket:[%d]", inode)
+	buffer := make([]byte, syscall.PathMax)
+	socket := []byte(fmt.Sprintf("socket:[%d]", inode))

-	pathBuffer := pool.Get(64)
-	defer pool.Put(pathBuffer)
-
-	readlinkBuffer := pool.Get(32)
-	defer pool.Put(readlinkBuffer)
-
-	copy(pathBuffer, "/proc/")
-
-	for _, pid := range pids {
-		if !isPid(pid) {
+	for _, f := range files {
+		if !f.IsDir() || !isPid(f.Name()) {
 			continue
 		}

-		pathBuffer = append(pathBuffer[:len("/proc/")], pid...)
-
-		stat := &unix.Stat_t{}
-		err = unix.Stat(string(pathBuffer), stat)
+		info, err := f.Info()
 		if err != nil {
-			continue
-		} else if stat.Uid != uid {
+			return "", err
+		}
+		if info.Sys().(*syscall.Stat_t).Uid != uint32(uid) {
 			continue
 		}

-		pathBuffer = append(pathBuffer, "/fd/"...)
-		fdsPrefixLength := len(pathBuffer)
+		processPath := path.Join(pathProc, f.Name())
+		fdPath := path.Join(processPath, "fd")

-		fdDir, err := os.Open(string(pathBuffer))
-		if err != nil {
-			continue
-		}
-
-		fds, err := fdDir.Readdirnames(-1)
-		fdDir.Close()
+		fds, err := os.ReadDir(fdPath)
 		if err != nil {
 			continue
 		}

 		for _, fd := range fds {
-			pathBuffer = pathBuffer[:fdsPrefixLength]
-
-			pathBuffer = append(pathBuffer, fd...)
-
-			n, err := unix.Readlink(string(pathBuffer), readlinkBuffer)
+			n, err := syscall.Readlink(path.Join(fdPath, fd.Name()), buffer)
 			if err != nil {
 				continue
 			}

-			if bytes.Equal(readlinkBuffer[:n], expectedSocketName) {
-				return os.Readlink("/proc/" + pid + "/exe")
+			if bytes.Equal(buffer[:n], socket) {
+				cmdline, err := os.ReadFile(path.Join(processPath, "cmdline"))
+				if err != nil {
+					return "", err
+				}
+
+				return splitCmdline(cmdline), nil
 			}
 		}
 	}

-	return "", fmt.Errorf("inode %d of uid %d not found", inode, uid)
+	return "", syscall.ESRCH
 }

-func isPid(name string) bool {
-	for _, c := range name {
-		if c < '0' || c > '9' {
+func splitCmdline(cmdline []byte) string {
+	indexOfEndOfString := len(cmdline)
+
+	for i, c := range cmdline {
+		if c == 0 {
+			indexOfEndOfString = i
+			break
+		}
+	}
+
+	return filepath.Base(string(cmdline[:indexOfEndOfString]))
+}
+
+func isPid(s string) bool {
+	for _, s := range s {
+		if s < '0' || s > '9' {
 			return false
 		}
 	}
--- a/component/process/process_other.go
+++ b/component/process/process_other.go
@ -1,11 +1,13 @@
-//go:build !darwin && !linux && !windows && !freebsd
+//go:build !darwin && !linux && !windows && (!freebsd || !amd64)
+// +build !darwin
+// +build !linux
+// +build !windows
+// +build !freebsd !amd64

 package process

-import (
-	"net/netip"
-)
+import "net"

-func findProcessPath(_ string, _, _ netip.AddrPort) (string, error) {
+func findProcessName(network string, ip net.IP, srcPort int) (string, error) {
 	return "", ErrPlatformNotSupport
 }
--- a/component/process/process_test.go
+++ b/component/process/process_test.go
@ -1,112 +0,0 @@
-package process
-
-import (
-	"net"
-	"net/netip"
-	"os"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-)
-
-func testConn(t *testing.T, network, address string) {
-	l, err := net.Listen(network, address)
-	if err != nil {
-		assert.FailNow(t, "Listen failed", err)
-	}
-	defer l.Close()
-
-	conn, err := net.Dial("tcp", l.Addr().String())
-	if err != nil {
-		assert.FailNow(t, "Dial failed", err)
-	}
-	defer conn.Close()
-
-	rConn, err := l.Accept()
-	if err != nil {
-		assert.FailNow(t, "Accept conn failed", err)
-	}
-	defer rConn.Close()
-
-	path, err := FindProcessPath(TCP, conn.LocalAddr().(*net.TCPAddr).AddrPort(), conn.RemoteAddr().(*net.TCPAddr).AddrPort())
-	if err != nil {
-		assert.FailNow(t, "Find process path failed", err)
-	}
-
-	exePath, err := os.Executable()
-	if err != nil {
-		assert.FailNow(t, "Get executable failed", err)
-	}
-
-	assert.Equal(t, exePath, path)
-}
-
-func TestFindProcessPathTCP(t *testing.T) {
-	t.Run("v4", func(t *testing.T) {
-		testConn(t, "tcp4", "127.0.0.1:0")
-	})
-	t.Run("v6", func(t *testing.T) {
-		testConn(t, "tcp6", "[::1]:0")
-	})
-}
-
-func testPacketConn(t *testing.T, network, lAddress, rAddress string) {
-	lConn, err := net.ListenPacket(network, lAddress)
-	if err != nil {
-		assert.FailNow(t, "ListenPacket failed", err)
-	}
-	defer lConn.Close()
-
-	rConn, err := net.ListenPacket(network, rAddress)
-	if err != nil {
-		assert.FailNow(t, "ListenPacket failed", err)
-	}
-	defer rConn.Close()
-
-	_, err = lConn.WriteTo([]byte{0}, rConn.LocalAddr())
-	if err != nil {
-		assert.FailNow(t, "Send message failed", err)
-	}
-
-	_, lAddr, err := rConn.ReadFrom([]byte{0})
-	if err != nil {
-		assert.FailNow(t, "Receive message failed", err)
-	}
-
-	path, err := FindProcessPath(UDP, lAddr.(*net.UDPAddr).AddrPort(), rConn.LocalAddr().(*net.UDPAddr).AddrPort())
-	if err != nil {
-		assert.FailNow(t, "Find process path", err)
-	}
-
-	exePath, err := os.Executable()
-	if err != nil {
-		assert.FailNow(t, "Find executable", err)
-	}
-
-	assert.Equal(t, exePath, path)
-}
-
-func TestFindProcessPathUDP(t *testing.T) {
-	t.Run("v4", func(t *testing.T) {
-		testPacketConn(t, "udp4", "127.0.0.1:0", "127.0.0.1:0")
-	})
-	t.Run("v6", func(t *testing.T) {
-		testPacketConn(t, "udp6", "[::1]:0", "[::1]:0")
-	})
-	t.Run("v4AnyLocal", func(t *testing.T) {
-		testPacketConn(t, "udp4", "0.0.0.0:0", "127.0.0.1:0")
-	})
-	t.Run("v6AnyLocal", func(t *testing.T) {
-		testPacketConn(t, "udp6", "[::]:0", "[::1]:0")
-	})
-}
-
-func BenchmarkFindProcessName(b *testing.B) {
-	from := netip.MustParseAddrPort("127.0.0.1:11447")
-	to := netip.MustParseAddrPort("127.0.0.1:33669")
-
-	b.ResetTimer()
-	for i := 0; i < b.N; i++ {
-		FindProcessPath(TCP, from, to)
-	}
-}
--- a/component/process/process_windows.go
+++ b/component/process/process_windows.go
@ -1,206 +1,197 @@
 package process

 import (
-	"errors"
 	"fmt"
-	"net/netip"
+	"net"
+	"path/filepath"
+	"sync"
+	"syscall"
 	"unsafe"

-	"golang.org/x/sys/windows"
+	"github.com/Dreamacro/clash/log"

-	"github.com/Dreamacro/clash/common/pool"
+	"golang.org/x/sys/windows"
+)
+
+const (
+	tcpTableFunc      = "GetExtendedTcpTable"
+	tcpTablePidConn   = 4
+	udpTableFunc      = "GetExtendedUdpTable"
+	udpTablePid       = 1
+	queryProcNameFunc = "QueryFullProcessImageNameW"
 )

 var (
-	modIphlpapi = windows.NewLazySystemDLL("iphlpapi.dll")
+	getExTCPTable uintptr
+	getExUDPTable uintptr
+	queryProcName uintptr

-	procGetExtendedTcpTable = modIphlpapi.NewProc("GetExtendedTcpTable")
-	procGetExtendedUdpTable = modIphlpapi.NewProc("GetExtendedUdpTable")
+	once sync.Once
 )

-func findProcessPath(network string, from netip.AddrPort, to netip.AddrPort) (string, error) {
-	family := uint32(windows.AF_INET)
-	if from.Addr().Is6() {
+func initWin32API() error {
+	h, err := windows.LoadLibrary("iphlpapi.dll")
+	if err != nil {
+		return fmt.Errorf("LoadLibrary iphlpapi.dll failed: %s", err.Error())
+	}
+
+	getExTCPTable, err = windows.GetProcAddress(h, tcpTableFunc)
+	if err != nil {
+		return fmt.Errorf("GetProcAddress of %s failed: %s", tcpTableFunc, err.Error())
+	}
+
+	getExUDPTable, err = windows.GetProcAddress(h, udpTableFunc)
+	if err != nil {
+		return fmt.Errorf("GetProcAddress of %s failed: %s", udpTableFunc, err.Error())
+	}
+
+	h, err = windows.LoadLibrary("kernel32.dll")
+	if err != nil {
+		return fmt.Errorf("LoadLibrary kernel32.dll failed: %s", err.Error())
+	}
+
+	queryProcName, err = windows.GetProcAddress(h, queryProcNameFunc)
+	if err != nil {
+		return fmt.Errorf("GetProcAddress of %s failed: %s", queryProcNameFunc, err.Error())
+	}
+
+	return nil
+}
+
+func findProcessName(network string, ip net.IP, srcPort int) (string, error) {
+	once.Do(func() {
+		err := initWin32API()
+		if err != nil {
+			log.Errorln("Initialize PROCESS-NAME failed: %s", err.Error())
+			log.Warnln("All PROCESS-NAMES rules will be skiped")
+			return
+		}
+	})
+	family := windows.AF_INET
+	if ip.To4() == nil {
 		family = windows.AF_INET6
 	}

-	var protocol uint32
+	var class int
+	var fn uintptr
 	switch network {
 	case TCP:
-		protocol = windows.IPPROTO_TCP
+		fn = getExTCPTable
+		class = tcpTablePidConn
 	case UDP:
-		protocol = windows.IPPROTO_UDP
+		fn = getExUDPTable
+		class = udpTablePid
 	default:
 		return "", ErrInvalidNetwork
 	}

-	pid, err := findPidByConnectionEndpoint(family, protocol, from, to)
+	buf, err := getTransportTable(fn, family, class)
 	if err != nil {
 		return "", err
 	}

+	s := newSearcher(family == windows.AF_INET, network == TCP)
+
+	pid, err := s.Search(buf, ip, uint16(srcPort))
+	if err != nil {
+		return "", err
+	}
 	return getExecPathFromPID(pid)
 }

-func findPidByConnectionEndpoint(family uint32, protocol uint32, from netip.AddrPort, to netip.AddrPort) (uint32, error) {
-	buf := pool.Get(0)
-	defer pool.Put(buf)
+type searcher struct {
+	itemSize int
+	port     int
+	ip       int
+	ipSize   int
+	pid      int
+	tcpState int
+}

-	bufSize := uint32(len(buf))
+func (s *searcher) Search(b []byte, ip net.IP, port uint16) (uint32, error) {
+	n := int(readNativeUint32(b[:4]))
+	itemSize := s.itemSize
+	for i := 0; i < n; i++ {
+		row := b[4+itemSize*i : 4+itemSize*(i+1)]

-loop:
-	for {
-		var ret uintptr
-
-		switch protocol {
-		case windows.IPPROTO_TCP:
-			ret, _, _ = procGetExtendedTcpTable.Call(
-				uintptr(unsafe.Pointer(unsafe.SliceData(buf))),
-				uintptr(unsafe.Pointer(&bufSize)),
-				0,
-				uintptr(family),
-				4, // TCP_TABLE_OWNER_PID_CONNECTIONS
-				0,
-			)
-		case windows.IPPROTO_UDP:
-			ret, _, _ = procGetExtendedUdpTable.Call(
-				uintptr(unsafe.Pointer(unsafe.SliceData(buf))),
-				uintptr(unsafe.Pointer(&bufSize)),
-				0,
-				uintptr(family),
-				1, // UDP_TABLE_OWNER_PID
-				0,
-			)
-		default:
-			return 0, errors.New("unsupported network")
+		if s.tcpState >= 0 {
+			tcpState := readNativeUint32(row[s.tcpState : s.tcpState+4])
+			// MIB_TCP_STATE_ESTAB, only check established connections for TCP
+			if tcpState != 5 {
+				continue
+			}
 		}

-		switch ret {
-		case 0:
-			buf = buf[:bufSize]
-
-			break loop
-		case uintptr(windows.ERROR_INSUFFICIENT_BUFFER):
-			pool.Put(buf)
-			buf = pool.Get(int(bufSize))
-
-			continue loop
-		default:
-			return 0, fmt.Errorf("syscall error: %d", ret)
+		// according to MSDN, only the lower 16 bits of dwLocalPort are used and the port number is in network endian.
+		// this field can be illustrated as follows depends on different machine endianess:
+		//     little endian: [ MSB LSB  0   0  ]   interpret as native uint32 is ((LSB<<8)|MSB)
+		//       big  endian: [  0   0  MSB LSB ]   interpret as native uint32 is ((MSB<<8)|LSB)
+		// so we need an syscall.Ntohs on the lower 16 bits after read the port as native uint32
+		srcPort := syscall.Ntohs(uint16(readNativeUint32(row[s.port : s.port+4])))
+		if srcPort != port {
+			continue
 		}
+
+		srcIP := net.IP(row[s.ip : s.ip+s.ipSize])
+		// windows binds an unbound udp socket to 0.0.0.0/[::] while first sendto
+		if !ip.Equal(srcIP) && (!srcIP.IsUnspecified() || s.tcpState != -1) {
+			continue
+		}
+
+		pid := readNativeUint32(row[s.pid : s.pid+4])
+		return pid, nil
 	}
-
-	if len(buf) < int(unsafe.Sizeof(uint32(0))) {
-		return 0, fmt.Errorf("invalid table size: %d", len(buf))
-	}
-
-	entriesSize := *(*uint32)(unsafe.Pointer(&buf[0]))
-
-	switch protocol {
-	case windows.IPPROTO_TCP:
-		if family == windows.AF_INET {
-			type MibTcpRowOwnerPid struct {
-				State      uint32
-				LocalAddr  [4]byte
-				LocalPort  uint32
-				RemoteAddr [4]byte
-				RemotePort uint32
-				OwningPid  uint32
-			}
-
-			if uint32(len(buf))-4 < entriesSize*uint32(unsafe.Sizeof(MibTcpRowOwnerPid{})) {
-				return 0, fmt.Errorf("invalid tables size: %d", len(buf))
-			}
-
-			entries := unsafe.Slice((*MibTcpRowOwnerPid)(unsafe.Pointer(&buf[4])), entriesSize)
-			for _, entry := range entries {
-				localAddr := netip.AddrFrom4(entry.LocalAddr)
-				localPort := windows.Ntohs(uint16(entry.LocalPort))
-				remoteAddr := netip.AddrFrom4(entry.RemoteAddr)
-				remotePort := windows.Ntohs(uint16(entry.RemotePort))
-
-				if localAddr == from.Addr() && remoteAddr == to.Addr() && localPort == from.Port() && remotePort == to.Port() {
-					return entry.OwningPid, nil
-				}
-			}
-		} else {
-			type MibTcp6RowOwnerPid struct {
-				LocalAddr     [16]byte
-				LocalScopeID  uint32
-				LocalPort     uint32
-				RemoteAddr    [16]byte
-				RemoteScopeID uint32
-				RemotePort    uint32
-				State         uint32
-				OwningPid     uint32
-			}
-
-			if uint32(len(buf))-4 < entriesSize*uint32(unsafe.Sizeof(MibTcp6RowOwnerPid{})) {
-				return 0, fmt.Errorf("invalid tables size: %d", len(buf))
-			}
-
-			entries := unsafe.Slice((*MibTcp6RowOwnerPid)(unsafe.Pointer(&buf[4])), entriesSize)
-			for _, entry := range entries {
-				localAddr := netip.AddrFrom16(entry.LocalAddr)
-				localPort := windows.Ntohs(uint16(entry.LocalPort))
-				remoteAddr := netip.AddrFrom16(entry.RemoteAddr)
-				remotePort := windows.Ntohs(uint16(entry.RemotePort))
-
-				if localAddr == from.Addr() && remoteAddr == to.Addr() && localPort == from.Port() && remotePort == to.Port() {
-					return entry.OwningPid, nil
-				}
-			}
-		}
-	case windows.IPPROTO_UDP:
-		if family == windows.AF_INET {
-			type MibUdpRowOwnerPid struct {
-				LocalAddr [4]byte
-				LocalPort uint32
-				OwningPid uint32
-			}
-
-			if uint32(len(buf))-4 < entriesSize*uint32(unsafe.Sizeof(MibUdpRowOwnerPid{})) {
-				return 0, fmt.Errorf("invalid tables size: %d", len(buf))
-			}
-
-			entries := unsafe.Slice((*MibUdpRowOwnerPid)(unsafe.Pointer(&buf[4])), entriesSize)
-			for _, entry := range entries {
-				localAddr := netip.AddrFrom4(entry.LocalAddr)
-				localPort := windows.Ntohs(uint16(entry.LocalPort))
-
-				if (localAddr == from.Addr() || localAddr.IsUnspecified()) && localPort == from.Port() {
-					return entry.OwningPid, nil
-				}
-			}
-		} else {
-			type MibUdp6RowOwnerPid struct {
-				LocalAddr    [16]byte
-				LocalScopeId uint32
-				LocalPort    uint32
-				OwningPid    uint32
-			}
-
-			if uint32(len(buf))-4 < entriesSize*uint32(unsafe.Sizeof(MibUdp6RowOwnerPid{})) {
-				return 0, fmt.Errorf("invalid tables size: %d", len(buf))
-			}
-
-			entries := unsafe.Slice((*MibUdp6RowOwnerPid)(unsafe.Pointer(&buf[4])), entriesSize)
-			for _, entry := range entries {
-				localAddr := netip.AddrFrom16(entry.LocalAddr)
-				localPort := windows.Ntohs(uint16(entry.LocalPort))
-
-				if (localAddr == from.Addr() || localAddr.IsUnspecified()) && localPort == from.Port() {
-					return entry.OwningPid, nil
-				}
-			}
-		}
-	default:
-		return 0, ErrInvalidNetwork
-	}
-
 	return 0, ErrNotFound
 }

+func newSearcher(isV4, isTCP bool) *searcher {
+	var itemSize, port, ip, ipSize, pid int
+	tcpState := -1
+	switch {
+	case isV4 && isTCP:
+		// struct MIB_TCPROW_OWNER_PID
+		itemSize, port, ip, ipSize, pid, tcpState = 24, 8, 4, 4, 20, 0
+	case isV4 && !isTCP:
+		// struct MIB_UDPROW_OWNER_PID
+		itemSize, port, ip, ipSize, pid = 12, 4, 0, 4, 8
+	case !isV4 && isTCP:
+		// struct MIB_TCP6ROW_OWNER_PID
+		itemSize, port, ip, ipSize, pid, tcpState = 56, 20, 0, 16, 52, 48
+	case !isV4 && !isTCP:
+		// struct MIB_UDP6ROW_OWNER_PID
+		itemSize, port, ip, ipSize, pid = 28, 20, 0, 16, 24
+	}
+
+	return &searcher{
+		itemSize: itemSize,
+		port:     port,
+		ip:       ip,
+		ipSize:   ipSize,
+		pid:      pid,
+		tcpState: tcpState,
+	}
+}
+
+func getTransportTable(fn uintptr, family int, class int) ([]byte, error) {
+	for size, buf := uint32(8), make([]byte, 8); ; {
+		ptr := unsafe.Pointer(&buf[0])
+		err, _, _ := syscall.Syscall6(fn, 6, uintptr(ptr), uintptr(unsafe.Pointer(&size)), 0, uintptr(family), uintptr(class), 0)
+
+		switch err {
+		case 0:
+			return buf, nil
+		case uintptr(syscall.ERROR_INSUFFICIENT_BUFFER):
+			buf = make([]byte, size)
+		default:
+			return nil, fmt.Errorf("syscall error: %d", err)
+		}
+	}
+}
+
+func readNativeUint32(b []byte) uint32 {
+	return *(*uint32)(unsafe.Pointer(&b[0]))
+}
+
 func getExecPathFromPID(pid uint32) (string, error) {
 	// kernel process starts with a colon in order to distinguish with normal processes
 	switch pid {
@ -217,13 +208,17 @@ func getExecPathFromPID(pid uint32) (string, error) {
 	}
 	defer windows.CloseHandle(h)

-	buf := make([]uint16, windows.MAX_LONG_PATH)
+	buf := make([]uint16, syscall.MAX_LONG_PATH)
 	size := uint32(len(buf))
-
-	err = windows.QueryFullProcessImageName(h, 0, &buf[0], &size)
-	if err != nil {
+	r1, _, err := syscall.Syscall6(
+		queryProcName, 4,
+		uintptr(h),
+		uintptr(1),
+		uintptr(unsafe.Pointer(&buf[0])),
+		uintptr(unsafe.Pointer(&size)),
+		0, 0)
+	if r1 == 0 {
 		return "", err
 	}
-
-	return windows.UTF16ToString(buf[:size]), nil
+	return filepath.Base(syscall.UTF16ToString(buf[:size])), nil
 }
--- a/component/profile/cachefile/cache.go
+++ b/component/profile/cachefile/cache.go
@ -1,6 +1,8 @@
 package cachefile

 import (
+	"bytes"
+	"encoding/gob"
 	"os"
 	"sync"
 	"time"
@ -88,31 +90,6 @@ func (c *CacheFile) PutFakeip(key, value []byte) error {
 	return err
 }

-func (c *CacheFile) DelFakeipPair(ip, host []byte) error {
-	if c.DB == nil {
-		return nil
-	}
-
-	err := c.DB.Batch(func(t *bbolt.Tx) error {
-		bucket, err := t.CreateBucketIfNotExists(bucketFakeip)
-		if err != nil {
-			return err
-		}
-		err = bucket.Delete(ip)
-		if len(host) > 0 {
-			if err := bucket.Delete(host); err != nil {
-				return err
-			}
-		}
-		return err
-	})
-	if err != nil {
-		log.Warnln("[CacheFile] write cache to %s failed: %s", c.DB.Path(), err.Error())
-	}
-
-	return err
-}
-
 func (c *CacheFile) GetFakeip(key []byte) []byte {
 	if c.DB == nil {
 		return nil
@ -136,30 +113,69 @@ func (c *CacheFile) Close() error {
 	return c.DB.Close()
 }

-func initCache() {
-	options := bbolt.Options{Timeout: time.Second}
-	db, err := bbolt.Open(C.Path.Cache(), fileMode, &options)
-	switch err {
-	case bbolt.ErrInvalid, bbolt.ErrChecksum, bbolt.ErrVersionMismatch:
-		if err = os.Remove(C.Path.Cache()); err != nil {
-			log.Warnln("[CacheFile] remove invalid cache file error: %s", err.Error())
-			break
+// TODO: remove migrateCache until 2022
+func migrateCache() {
+	defer func() {
+		options := bbolt.Options{Timeout: time.Second}
+		db, err := bbolt.Open(C.Path.Cache(), fileMode, &options)
+		switch err {
+		case bbolt.ErrInvalid, bbolt.ErrChecksum, bbolt.ErrVersionMismatch:
+			if err = os.Remove(C.Path.Cache()); err != nil {
+				log.Warnln("[CacheFile] remove invalid cache file error: %s", err.Error())
+				break
+			}
+			log.Infoln("[CacheFile] remove invalid cache file and create new one")
+			db, err = bbolt.Open(C.Path.Cache(), fileMode, &options)
+		}
+		if err != nil {
+			log.Warnln("[CacheFile] can't open cache file: %s", err.Error())
 		}
-		log.Infoln("[CacheFile] remove invalid cache file and create new one")
-		db, err = bbolt.Open(C.Path.Cache(), fileMode, &options)
-	}
-	if err != nil {
-		log.Warnln("[CacheFile] can't open cache file: %s", err.Error())
-	}

-	defaultCache = &CacheFile{
-		DB: db,
+		defaultCache = &CacheFile{
+			DB: db,
+		}
+	}()
+
+	buf, err := os.ReadFile(C.Path.OldCache())
+	if err != nil {
+		return
 	}
+	defer os.Remove(C.Path.OldCache())
+
+	// read old cache file
+	type cache struct {
+		Selected map[string]string
+	}
+	model := &cache{
+		Selected: map[string]string{},
+	}
+	bufReader := bytes.NewBuffer(buf)
+	gob.NewDecoder(bufReader).Decode(model)
+
+	// write to new cache file
+	db, err := bbolt.Open(C.Path.Cache(), fileMode, nil)
+	if err != nil {
+		return
+	}
+	defer db.Close()
+
+	db.Batch(func(t *bbolt.Tx) error {
+		bucket, err := t.CreateBucketIfNotExists(bucketSelected)
+		if err != nil {
+			return err
+		}
+		for group, selected := range model.Selected {
+			if err := bucket.Put([]byte(group), []byte(selected)); err != nil {
+				return err
+			}
+		}
+		return nil
+	})
 }

 // Cache return singleton of CacheFile
 func Cache() *CacheFile {
-	initOnce.Do(initCache)
+	initOnce.Do(migrateCache)

 	return defaultCache
 }
--- a/component/resolver/defaults.go
+++ b/component/resolver/defaults.go
@ -1,12 +0,0 @@
-//go:build aix || darwin || dragonfly || freebsd || linux || netbsd || openbsd || solaris
-
-package resolver
-
-import _ "unsafe"
-
-//go:linkname defaultNS net.defaultNS
-var defaultNS []string
-
-func init() {
-	defaultNS = []string{"114.114.114.114:53", "8.8.8.8:53"}
-}
--- a/Show More
+++ b/Show More