[GH-ISSUE #2541] Windows Xray regression between 4.8.11.4 and 4.8.12.8 – broken routing / DNS / “No Internet” #1150

Open
opened 2026-10-13 20:35:19 +00:00 by bsakaguchi · 4 comments
Owner

Originally created by @TODO4EVER on GitHub (Apr 29, 2026).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2541

Describe the bug
There is a regression in the client between versions 4.8.11.4 and 4.8.12.8 affecting Xray.

  • Version 4.8.11.4 works correctly
  • Version 4.8.12.8 and newer break routing and DNS behavior

This results in partial tunneling, DNS instability, and traffic leakage.


To Reproduce
Steps to reproduce the behavior:

  1. Install AmneziaVPN 4.8.12.8 or newer
  2. Import a working Xray (VLESS Reality) profile
  3. Connect to the VPN
  4. Observe:
    • DNS instability (timeouts)
    • Incomplete tunneling
    • On Windows: system may show “No Internet”
  5. Downgrade to 4.8.11.4
  6. Reconnect with the same profile
  7. Observe that everything works correctly

Expected behavior

  • Full tunnel should be correctly established
  • Routes should be installed as:
    0.0.0.0/1 → tun interface
    128.0.0.0/1 → tun interface
  • DNS should be stable and routed through the tunnel
  • No traffic leakage or throttling

Desktop (please complete the following information):

  • OS: Windows 11 LTSC
  • Version: 4.8.11.4 (working), 4.8.12.8+ (broken)

Smartphone (please complete the following information):

  • Device: Android phone
  • OS: Android 10
  • Version: 4.8.11.4 (working), newer versions (broken)

Server (please complete the following information):

  • OS: Linux VPS (same server used in all tests)

Additional context

  • Issue is reproducible across multiple devices and platforms (Windows + Android)
  • Same VPS and configuration used → not server-related
  • Using Xray with SNI camouflage (e.g. www.youtube.com). On this network, YouTube traffic is not throttled.
  • This setup works correctly in 4.8.11.4 but fails in newer versions under the same conditions, indicating a regression
  • In broken versions:
  • UDP DNS fails or times out
  • TCP DNS works (nslookup -vc works, normal nslookup fails)
  • On Windows:
  • Routes are missing or incorrect compared to working version
  • System may report “No Internet” after connecting
  • Manual route fixes partially help but do not fully resolve DNS issues

Regression window:

  • Works: 4.8.11.4
  • Broken: 4.8.12.8 and newer
Originally created by @TODO4EVER on GitHub (Apr 29, 2026). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/2541 **Describe the bug** There is a regression in the client between versions **4.8.11.4 and 4.8.12.8** affecting Xray. - Version **4.8.11.4 works correctly** - Version **4.8.12.8 and newer break routing and DNS behavior** This results in partial tunneling, DNS instability, and traffic leakage. --- **To Reproduce** Steps to reproduce the behavior: 1. Install AmneziaVPN **4.8.12.8 or newer** 2. Import a working Xray (VLESS Reality) profile 3. Connect to the VPN 4. Observe: - DNS instability (timeouts) - Incomplete tunneling - On Windows: system may show “No Internet” 5. Downgrade to **4.8.11.4** 6. Reconnect with the same profile 7. Observe that everything works correctly --- **Expected behavior** - Full tunnel should be correctly established - Routes should be installed as: 0.0.0.0/1 → tun interface 128.0.0.0/1 → tun interface - DNS should be stable and routed through the tunnel - No traffic leakage or throttling --- **Desktop (please complete the following information):** - OS: Windows 11 LTSC - Version: 4.8.11.4 (working), 4.8.12.8+ (broken) --- **Smartphone (please complete the following information):** - Device: Android phone - OS: Android 10 - Version: 4.8.11.4 (working), newer versions (broken) --- **Server (please complete the following information):** - OS: Linux VPS (same server used in all tests) --- **Additional context** - Issue is reproducible across **multiple devices and platforms (Windows + Android)** - Same VPS and configuration used → not server-related - Using Xray with SNI camouflage (e.g. `www.youtube.com`). On this network, YouTube traffic is not throttled. - This setup works correctly in 4.8.11.4 but fails in newer versions under the same conditions, indicating a regression - In broken versions: - UDP DNS fails or times out - TCP DNS works (`nslookup -vc` works, normal `nslookup` fails) - On Windows: - Routes are missing or incorrect compared to working version - System may report “No Internet” after connecting - Manual route fixes partially help but do not fully resolve DNS issues **Regression window:** - Works: **4.8.11.4** - Broken: **4.8.12.8 and newer**
Author
Owner

@libmonsoon-dev commented on GitHub (May 2, 2026):

I have similar problems on Windows, but everything works on Linux and Android.

<!-- gh-comment-id:4363666760 --> @libmonsoon-dev commented on GitHub (May 2, 2026): I have similar problems on Windows, but everything works on Linux and Android.
Author
Owner

@Shurik-Murik commented on GitHub (May 2, 2026):

Hello, i can confirm the issue. Version 4.8.11.4 works perfect on windows 10,11. The late ons don't work, if obfuscation parameters of Wireguard protocol are not 0 ( Jc, Jmin, Jmax etc). All versions work perfekt with pure Wireguard.

<!-- gh-comment-id:4363750881 --> @Shurik-Murik commented on GitHub (May 2, 2026): Hello, i can confirm the issue. Version 4.8.11.4 works perfect on windows 10,11. The late ons don't work, if obfuscation parameters of Wireguard protocol are not 0 ( Jc, Jmin, Jmax etc). All versions work perfekt with pure Wireguard.
Author
Owner

@Shurik-Murik commented on GitHub (May 2, 2026):

Mallfunction: unable to connect

<!-- gh-comment-id:4363754592 --> @Shurik-Murik commented on GitHub (May 2, 2026): Mallfunction: unable to connect
Author
Owner

@ruslanyar commented on GitHub (May 7, 2026):

I have same issue

<!-- gh-comment-id:4395031487 --> @ruslanyar commented on GitHub (May 7, 2026): I have same issue
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#1150
No description provided.