3.0.0

New Features

• Added support for the ShadowSocks2022 protocol
• Added support for ShadowTLS
• Added support for AND, OR, NOT logical rules
• Added DOMAIN-WILDCARD rule
• Added DOMAIN-REGEX rule
• Added NETWORK rule with selectable values: tcp, udp
• Added PROTOCOL rule with selectable values: TCP, HTTP, HTTPS, UDP, QUIC
• Added URL-REGEX rule
• Added USER-AGENT rule
• Added body-rewrite feature, supporting:
• request-jq, request-replace-regex, request-json-replace, request-json-add, request-json-del
• response-jq, response-replace-regex, response-json-replace, response-json-add, response-json-del
• Added support for sniffing TLS Client Hello to obtain SNI domain names
• When establishing a UDP connection, the system now attempts to use the target proxy to perform DNS queries to determine the destination IP
• Added support for sniffing QUIC / HTTP3
• The Connections page now displays more detailed TCP / UDP protocol information
• DoH and DoH3 now support User-Agent configuration
• Added BGP.Tools as an IP information provider
• Rewrites now support reading the zstd compression algorithm
• Visual editor:
• Added support for reject-drop
• Now supports modifying url-rewrite, header-rewrite, and body-rewrite
• Now supports modifying scripts
• Long press to copy icon URLs

Optimizations

• Significantly improved power efficiency, especially under low-load scenarios
• Optimized QUIC sniffing
• Optimized performance for bulk remote resource updates
• Optimized memory usage under high UDP concurrency
• Optimized memory pool allocation strategy
• Optimized long text display in the visual editor
• Optimized ECH implementation

Bug Fixes

• Fixed an issue where icons might fail to import on the second attempt
• Fixed sorting issues in the visual editor

2.7.1

Happy New Year!

• Fixed an issue where certain service provider configurations could cause crashes

2.7.0

New Features

• iOS 18 Control Widget
• Added REJECT-DROP Policy
• Added GEOIP database updates during Stash runtime
• Added basic rewrite editing via a visual editor
• Added ip.im IP information provider
• Icons adapted for iOS 18 Dark and Tinted modes

Improvements

• When updating remote resources, Stash will now use ETag for cache negotiation. If the resource hasn't changed, Stash won't re-download it, saving bandwidth for both users and rule set providers.
• When setting server-cert-fingerprint, there's no need to set skip-cert-verify to true
• Improved multilingual translations
• Optimized system DNS

Fixes

• Fixed an issue where configuration file names would occasionally appear abnormal

2.6.6

• Fixed an issue in version 2.6.5 where YAML whitespace could cause configuration file recognition errors
• Optimized QUIC

2.6.5

• Optimized Sniffing When connecting to a domain, Stash will initiate a TCP handshake for all resolved results simultaneously and use the connection that succeeds the fastest. Upon sniffing a domain, Stash triggers a DNS resolution to perform the above function. If the domain has no resolution in public DNS servers, it may cause a connection error. This version improves compatibility with unresolved domains.

• Enhanced HTTP Engine Compatibility for Hosts with Ports

• Happy Eyeballs Dual Stack Moved from Experimental to Stable. Enabling this will improve compatibility between IPv4 and IPv6 dual stack.

• Support for setting benchmark-url and benchmark-timeout in Proxy Providers

• Fixed Unexpected Jumping in Some UI Lists

2.6.4

New Features

• Support for Hysteria 2 port hopping feature
• Added support for SSH protocol
• Added support for Juicity protocol
• Shortcuts now support match_geosite syntax
• MitM feature will automatically disable when CA certificate is untrusted
• Ability to delete created certificates in the MitM settings page
• Added support for Russian language

Improvements

• Optimized QUIC protocol 0-RTT
• Enhanced script Header compatibility
• Improved interaction on the Skip Proxy / Skip Tun page
• Reduced app size
• Optimized CA certificate logic, with issued certificates now valid for 10 years
• Improved interaction logic for installing CA certificates

Fixes

• Fixed potential UI misalignment issue during drag-and-drop sorting in visual editing
• Fixed excessive space usage by cached files in some cases

2.6.3

• Optimized the stability of WireGuard connections
• Improved the compatibility of Hysteria2 0-RTT on certain networks
• Enhanced the runtime MitM certificate generation process, reducing redundant calculations, improving performance, and saving power consumption
• Improved WireGuard using underlying-proxy to automatically recover from connection errors
• Fixed the issue where scripts could not run on systems below version 15.4

2.6.2

• Fixed the issue where $persistentStore might not save correctly in certain situations.

2.6.1

New

• Stash is now optimized for sniffing, supporting more STOverrides under "Tunnel Proxy Only" mode.
• Now supports sniffing possible HTTP requests in TCP connections, including Method, Host, and URL.
• Supports DNS over HTTP/3.
• Supports Server Certificate Fingerprint Pinning for proxy servers, verifying the server certificate's SHA256 fingerprint during the TLS handshake when enabled.
• Added Script Hub to the tools.
• Supports collapsing policy groups by clicking on the policy group icon.

Optimization

• Optimized script performance and memory usage, significantly improving script performance.
• Optimized performance based on the QUIC protocol.
• Optimized the speed when disconnecting VPN connections.

Fixes

• Fixed the issue where QR codes could not be scanned on iPads.
• Fixed a potential crash in the visual editor.
• Fixed a recent issue with delayed memory release in scripts.
• Fixed incorrect exception handling in script $httpClient.
• Fixed the issue where $persistentStore.write could not save when the value passed was null or undefined.
• Fixed the issue where the status might not refresh after toggling switches in the Today Widget.
• Fixed script timeout exceptions.
• Fixed issues causing some scripts to fail execution.

2.6.0

New Features

• Added support for iOS 17 Interactive Widget
• Replaced JavaScript engine with a new engine that supports WebAPI
• Added support for DNS query following rules
• Added support for classical text rule sets
• Added support for one-click update for all overrides
• Added override categorization
• Added override icons
• Added support for proxying "Apple Push Notifications", "Wi-Fi Calling, MMS, SMS", "AirPlay, AirDrop"
• Script $environment now supports device-model
• Script $httpClient now supports parameters: timeout, insecure, auto-cookie, auto-redirect

Enhancements

• Enhanced UDP compatibility
• Optimized Script memory usage
• Optimized override previews
• Optimized script $httpClient compatibility, fixing potential communication issues with some servers
• Enhanced visual DNS editing, now accessible from the homepage

Fixes

• Fixed an issue with DNS over QUIC response timeouts
• Corrected the behavior of script $argument parameters; when not set, $argument is now undefined
• Addressed potential inaccuracies in matching with some large rule sets
• Fixed potential disconnection issues with doq
• Corrected an issue where connections from Stash internals were not properly recognized
• Fixed unresponsive import configuration issue
• Fixed a policy group crash
• Fixed an issue where overrides with the same name couldn't be installed

2.5.6

• Fixed an issue where the toggle button state was incorrect in some cases
• Fixed an issue where some converted scripts could not be installed
• Corrected issues with concurrent scripts behaving abnormally in certain situations
• Optimized script memory usage
• The script's setTimeout() now supports parameters: setTimeout(function, delay, param1, param2, /* …, */ paramN)

2.5.5

• Fixed the issue of memory anomalies causing disconnections when using scripts in the previous version

2.5.4

• Fix some potential crashes
• Fix scripts not running in some cases

2.5.3

• Fixed a minor probability of crash in Network Extension.
• Fixed the issue where scheduled scripts may not run on time.
• Fixed the issue where switching configurations on the settings page might not refresh the homepage information.
• Fixed the issue where the homepage rules could not be accessed in certain cases.
• Fixed the issue of repeated notifications for automatic configuration updates in some cases.

2.5.2

• Fix Hysteria 2 timeout in some cases
• Bug fixes and improvements

2.5.0

• Enhanced Tun performance

• Added support for Hysteria 2

• Fixed GEOSITE

• Addressed roaming issues with the WireGuard protocol

• When switching from cellular data to Wi-Fi, protocols based on QUIC will now attempt to roam to Wi-Fi

• DoH/DoQ will re-establish connections when transitioning from cellular data to Wi-Fi to ensure more accurate DNS query records

• Stash now automatically blocks QUIC traffic that hits the MitM list, allowing it to fall back to HTTP1/2

• Fixed issues with delayed updating of information on the home page

• Resolved crashes related to the routing table under IPv6 environments

• Experimentally introduced Happy Eyeballs Dual Stack When it enabled, IPv6 and IPv4 are treated with equal priority. For instance, in concurrent mode, Stash initiates TCP handshakes for all A and AAAA records of a domain, connecting to the fastest successful handshake.

2.4.7

• Fixed Sub-Store™

2.4.6

• Fix an issue where Network Extension may disconnect under high loads

2.4.4

• Optimize JavaScript Engine
• Added "Toggle" Shortcut

2.4.2

• Optimizing HTTP Engine Compatibility
• Bug Fixes and Improvements

2.4.1

• Bug fixes and improvements

2.4.0

• Sync Configuration supports transferring configuration files to tvOS
• Remote Controller supports automatic device registration
• Optimize QUIC protocol
• Optimize power consumption
• Optimize UI animations
• Bug fixes and improvements

2.3.1

• Fixed Country.mmdb does not update automatically
• Fixed the Policy Group was not displayed in some cases.
• Fixed iCloud files could not be read in some cases.

2.3.0

• Added support for Tuic v5 protocol
• Automatically generates a policy group named PROXY, which by default includes all proxies for external Override referencing

Introduced a brand-new visual editor

• The visual editor now supports retaining comments and styles

• Local Proxies editing now supports more proxy protocols and fields

• Rules editing now supports more fields and allows for drag and drop sorting

• Policy Groups editing supports more fields and can hide policy groups in the interface

• Proxy Providers editing now supports more fields

• Rule Set editing supports more fields and allows selection of Remote Rule Sets

• Proxy Chains now support individual delay testing in a holistic manner for more accurate results

• Deleting or renaming proxies, policy groups, and remote proxies, etc, will cause corresponding modifications in references to ensure operational consistency

• Subscription cards now support displaying subscription information from multiple service providers

• Quick access to the visual editor for editing and managing by clicking the related card on the home page

• QR code scanning for import now supports choosing images from the Photos

• QR code scanning for import supports more QR code formats

• QR code scanning for import now supports importing QR codes with plugins, obfs, network protocols, and TLS

• Improved menu display

• Optimized icon set installation and deletion

• Optimized one-click log deletion, preserving the latest logs

• Enhanced interaction on iOS 15+ devices

• Fixed compatibility issues when upstream DNS servers return Fake IP

• Fixed configuration errors that may occur when visually editing DNS and log levels

• Fixed some UI misalignment issues

• Fixed crashes on iOS 13 in some cases

• Bug fixes and improvements

2.2.4

• Added more information for Recent Requests
• Improved App performance
• Improved iCloud file storage
• Refined UI details
• Config file changes in iCloud support real-time reload
• Fixed the issue of automatic speed test failing under certain circumstances
• Fixed the issue where remote resources cannot be automatically updated under certain circumstances
• Bug fixes and improvements

2.2.3

• Added a workaround to fix the Vmess performance issue
• Bug fixes and improvements

2.2.2

• Added custom Host
• Fixed the issue where the iPad's right-side page does not update under certain circumstances
• Fixed the issue where the home page configuration does not update under certain circumstances

2.2.1

New Features

• Added GEOSITE rule type.
• Script $httpClient now supports binary mode.
• Script $httpClient now supports specifying outbound proxy strategy via HTTP Header.
• Introduced Stash remote controller, which allows controlling Stash on other devices via Stash iOS / Stash Mac Dashboard. Saved remote devices will be synced through iCloud.
• Supports TLS Session Resumption, improving TLS handshake efficiency. This feature requires server-side support, and you can check the connection page to confirm whether it is successfully enabled.
• Added Lite mode, which optimizes memory usage and battery consumption while disabling some features.
• Introduced the no-track parameter, connections matching this rule will be hidden in the connection list.

Improvements

• Optimized memory usage under many common nameserver-policy scenarios.
• Improved the network diagnosis page.
• Enhanced HTTP / TLS sniffing capabilities.
• Improved the stability of relay strategy groups.
• Optimized the performance of the home and strategy group pages, fixing lag issues.
• Enhanced the accuracy of the Stash Tile timer.
• Optimized DNS cache refresh strategy during network switching.
• Improved script editor user experience.
• Enhanced the installation experience of Override.

Bug Fixes

• Fixed some visual editing issues.
• Resolved the problem of emoji expressions being escaped during override merging.
• Fixed a series of compatibility issues related to downloading configurations.

2.2.0

Features

• Added GEOSITE rule type.
• Script $httpClient now supports binary mode.
• Script $httpClient now supports specifying outbound proxy strategy via HTTP Header.
• Introduced Stash remote controller, which allows controlling Stash on other devices via Stash iOS / Stash Mac Dashboard. Saved remote devices will be synced through iCloud.
• Supports TLS Session Resumption, improving TLS handshake efficiency. This feature requires server-side support, and you can check the connection page to confirm whether it is successfully enabled.
• Added Lite mode, which optimizes memory usage and battery consumption while disabling some features.
• Introduced the no-track parameter, connections matching this rule will be hidden in the connection list.

Improvements

• Optimized memory usage under many common nameserver-policy scenarios.
• Improved the network diagnosis page.
• Enhanced HTTP / TLS sniffing capabilities.
• Improved the stability of relay strategy groups.
• Optimized the performance of the home and strategy group pages, fixing lag issues.
• Enhanced the accuracy of the Stash Tile timer.
• Optimized DNS cache refresh strategy during network switching.
• Improved script editor user experience.
• Enhanced the installation experience of Override.

Bug Fixes

• Fixed some visual editing issues.
• Resolved the problem of emoji expressions being escaped during override merging.
• Fixed a series of compatibility issues related to downloading configurations.

2.1.1

Bug fixes and improvements

2.1.0

• Added support for WireGuard as a Layer 4 proxy
• Added inbound and outbound information for proxy nodes
• New JavaScript engine with support for concurrent execution, binary scripts, and redirecting notifications to a URL
• New script environment variable $environment.system (iOS / macOS)
• Visual Editor now supports WireGuard and TUIC
• Import configuration file by scanning a QR code
• Optimized dashboard now displays network traffic statistics, DNS cache information, and the total number of rules
• Option to disable automatic policy group connectivity checks by setting interval=-1
• Improved compatibility of QUIC protocol
• Reduced memory usage in Hysteria
• Fixed behavior of some requests in the Stash HTTP engine
• Fixed issue with notifications not stacking
• Optimized script header compatibility
• Added override syntax

2.0.0

• Redesigned Network Stack
• Brand New User Interface

Stash 2 redesigned the network stack to optimize network performance from TCP, QUIC, and DNS at multiple levels. Separate health check policies for various proxy protocols are designed to detect the offline of proxy nodes in time and build highly available policy groups with URL-TEST.

Simple and clear home page, showing real-time network traffic, link quality, OTT media service unlock information, and allowing you to write custom panels (Tile) using JavaScript.

1.6.9

• bug fixes and improvements

1.6.8

• Fixes the certificate installation may fail in some cases
• Optimize iCloud synchronization process

1.6.7

• Enhance Packet Transmission Capacity

1.6.6

• Bug fixes and improvements

1.6.5

• Added Japanese translation
• Added Korean translation

1.6.4

• Fix the problem of incorrect display of some information

1.6.3

bug fixes and improvements

1.6.2

• Fix script HTTP Header parsing issue
• Fix potential crash of CA certificate page
• Fix the problem of script log not being displayed in some cases.
• Fix the problem that the configuration file cannot be switched in some cases.

1.6.1

• Added Connection Log

• Added local profile to get subscription information via "subscribe-url" key

• Add Visual Editor to import Icon Set JSON

• Added Time Tab to Connection page to view the time spent on each link of the connection process

• Added Fallback DNS switch, if you need Fallback DNS, please turn it on manually

• Added support for refreshing subscription information by long press

• Added delay test method modification

• New log list display

• New independent script log

• Improve the compatibility of HTTP Engine with some clients.

• Fix the problem that the Exclude list may not be effective.

• Fix the problem of incorrect matching of Rule Set

• Fix the problem of rule loss after Rule Provider loading.

• Show Request Header of HTTP connection

• Support breaking existing connections when switching policy groups.

• Improve Shortcuts support

• Eliminate URL-Regex rules and replace them with HTTP rewrites

• Optimized the performance of large number of rule matches by caching policy

• Optimize iCloud synchronization process.

• Fix the problem of iPad speed measurement failure

1.6.0

• Added iCloud Configuration Sync
• Added Overwrite Repository
• Added TUIC protocol
• Support for Cellular SSID Policy
• Support for Rewrite Header
• Support for HTTP Protocol Custom Headers
• Support Script Argument
• Support Script to modify Request & Response at the same time
• Support for custom certificates for installation profiles
• New overwrite import
• New growth by copying URLs
• Compatible with DNS Fallback
• Compatible with subscription information without expiration time

1.5.4

Now you can apply for the TestFlight through the App!

1.5.3

• Fix http engine compatibility issue
• Fix hysteria issue

1.5.2

• Kernel performance optimisation
• New built-in SpeedTest
• Support for script execution and rewriting in TUN mode
• Streaming unlock detection support for Disney+
• Support for modifying Skip-Proxy, Exclude-Tune-Routes
• Support for sorting of overwrite lists

1.5.1

• Optimising JavaScript memory usage
• JavaScript Console Log output to Stash logs
• Fix a problem with visual editor DNS modification failing in some cases

1.5.0

• Fully refactored JavaScript engine

• Support for concurrent Hybrid networks

• Support for custom GEOIP databases

• Support for VLESS / XTLS protocols

• Support for LAN proxies

• Support for self-issued ECC root certificates

• Support for custom profile update times

• Support for visual update of Script Providers

• Optimised batch update speed for Providers

• Optimized UI for editing proxy servers

• Fix DNS editing not working

• Fix incorrect memory warnings

1.4.3

• hysteria updated to v1.0.1

• Fixed some protocol compatibility issues

• Visual editor supports relay

• Visual editor support for domain-text / ipcidr-text

1.4.2

• Optimize speedtest

• Show http request metadata

• Add visual editing of DNS configuration

• Optimize memory usage of IP-CIDR rules

• Optimize the configuration file loading process

• Optimize the configuration file update process

• Change the name in the proxy group after changing the proxy name

• Check for correct configuration file format when downloading configuration files

1.4.1

• Support for DNS-over-QUIC

• Optimized memory usage

• New RuleSet compatible with text format https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L485 (opens in a new tab)

Ruleset documentation: https://manual.stash.ws/basic/rule-set (opens in a new tab)

1.4.0

• Support for overriding some of the settings in the current configuration file with overwriting

• Support for rewriting HTTP(S) requests using JavaScript scripts, the script runs and the console output can be viewed in the log. This first release may not be compatible with some JavaScript syntax, please wait for a later update.

• Add proxy quick add and remove for Group Policy

• Support for using system DNS

• Performance optimisation

• Allow custom notifications

• Support swipe to add SS and SSR proxies

• Fix incorrect DNS for personal hotspots

• Fix Chinese encoding issue in the visual editor

• Fix the problem that some Domain RuleSets cannot be used

• Fix the problem of deleting Rule crashing

1.3.1

• Allow custom application icons

• Allow customization of proxy group icons

• Added manual update of Provider

• Add MitM rule import

• Improve Visual Editor

• Optimize shortcut launch process

• Fix proxy addition failure in some cases

• Fix the editor keyboard height issue

• Optimize Hysteria protocol ReceiveWindow, optimize memory usage to avoid exceeding NE memory limit. Thanks to Hysteria author tobyxdd for technical support.

Icon configuration file reference. https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L366 (opens in a new tab)

1.3.0

• New Home DashBoard interface

• New Policy Group interface

• Allows customisation of home page layout

• Visual editor supports selection of proxies and proxy groups

• New Tun Only mode to improve compatibility with certain applications

• Support for Hysteria Auth

• Support for 307 redirects

• Support for breaking actively connections

• Support for more regular expression formats

• Updated Hysteria to 0.9.6

• Improved log display

• Optimise memory usage

• Optimize power consumption

• Fix policy group display issue in split screen mode on iPad

• Allow Stash to continue to start when a ruleset download fails

• Fix widget startup failure

1.2.1

• Added Rewrite & MitM Mixin with subscription profile

• Added Today Extension (widget)

• Added Hysteria support

• Added 3D Touch long press support

• Enhanced profile conversion compatibility

• Optimised proxy editing

Reference configuration: https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L319 (opens in a new tab)

1.2.0

• Added MitM

• Added URL Rewrite

• Added forcing the Stash Engine to handle TCP connections using the HTTP protocol

• Added writing rules using Script, which can be combined with different conditions, making it more flexible to write rules

• Added shortcut commands

• Added visual editor

• Adapted to Clash v1.9.0 Vmess configuration format

• Optimised update logic for statistics, current connection, real-time logs.

• Optimise iPad view

• Optimize alert logic

• Fix the problem that iOS 14 crashing in some cases

• Fix the problem that load balancing cannot be displayed

• Fix the problem that remote controller can not return

MITM Example: https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L26 (opens in a new tab)

Rewrite Example: https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L33 (opens in a new tab)

Script Shorcuts Example: https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L38 (opens in a new tab)

Force-HTTP-Engine Example: https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L16 (opens in a new tab)

1.1.1

• Optimised for iOS 14 and below

• Add Provider use proxy to updates

• Add policy group list view

• Add diagnostic tools

• Add YAML format validation

• Add iPerf3 reverse mode test

• Fix Rule Set mismatch in some cases

• Fix the Policy Groups does not update when the configuration file is updated in some cases

• Optimize performance

• Optimize memory

• Optimize power management

• Optimize folding animation

• Optimise vibration feedback

• Optimize policy group display

• Optimize subscription profile modification

• Optimize home page status

• Stash Engine Update v1.1.0

1.1.0

• Add On-Demand connection

• Add subscription information

• Use Stash Engine v1.0.2

• Supports automatic policy switching based on SSID in Select Proxy Group Configuration format reference https://github.com/STASH-NETWORKS-LIMITED/stash-example/blob/main/config.yaml#L335 (opens in a new tab)

• Added hidden VPN icon

• New log search function

• Add network change notification

• Add current connection display policy

• Add routing table

• Add file export function

• Optimized Rule-Set matcher

• Optimize network switching process

• Optimize Country.mmdb

• Optimize the main page

• Optimize the policy group page

• Optimize the dark mode of policy group

• Optimized proxy group type display

• Optimize the click event of expansion

• Optimize log display

• Optimize the display of rate

• Optimize the problem of too long profile name on the home page

1.0.4

New features:

• Proxy information detection
• Streaming media unlock detection
• Proxy server UDP detection
• Proxy Server IPv6 Detection
• Long press the server for more information
• Import configuration from Airdrop
• Copy configuration files

Optimization:

• VPN is not connected after switching networks
• Optimize switching configuration process
• Optimize the configuration page pop-up box
• Optimize the configuration editor
• Optimize the speed measurement result display
• Bug fixes