bug-fixed

2024-09-25 19:24:37 +08:00 · 2024-09-25 19:23:25 +08:00 · 2024-09-23 19:51:29 +08:00 · 2024-09-23 19:50:36 +08:00 · 2024-09-20 22:14:30 +08:00 · 2024-09-20 22:13:46 +08:00
43 changed files with 1210 additions and 94 deletions
@@ -1,42 +1,622 @@
+# Quick Overview
+* **Platform Adaptation**: Supports Linux, Windows, macOS, Android, (Tob, small machines: HP-UX, Solaris, AIX)<br>
+* **CPU Architectures**: Supports x86, arm, mips, riscv (Tob: alpha, PowerPC, SPRAC)<br>
+* **Security Focus**: Intranet-to-intranet penetration, no need to map any ports to the external network, no changes to firewall configurations<br>
+* **Bandwidth Emphasis**: "4G phone + v6 broadband" accesses intranet services using P2P (based on TCP protocol, v4 supports NAT1-3 penetration)<br>
+* **Cost Savings Priority**: No need to buy VPS, no need for a public IP; old Android phones at home can be used as servers<br>
+* **Reliability Priority**: On-demand availability, can provide uninterrupted service 24/7, and unaffected by UDP protocol QoS issues<br>
+* **Control Emphasis**: Client configuration is straightforward, and service can be controlled to start/stop anytime, anywhere<br>
+* **Environmental Friendliness**: No installation required, compact size (around 1MB for the mini version), all-in-one, high performance with minimal resource usage<br>
+* **Portability Priority**: Whether working or on vacation, everything is in control as long as the phone has a network connection<br>
+* ... If this is what you want! Please continue reading patiently; if you have additional requirements, please raise an issue, and there's also interesting stuff in the [Update History].
+
+* **Free**, considering open source after stable testing.
+* Includes an Android client and a server that needs to be installed in the intranet.
+
+# APP Configuration (Required) --- Typical usage may be affected if not configured properly
+* Must configure "Allow Background Running" permission, otherwise, the connection will be severed by the system when switching to the background.
+* Must configure "Keep Network Connection Always Active during Sleep," otherwise, the connection will be severed by the system once in sleep mode.
+* "Allow Auto-Start" permission can be configured, otherwise, Android server mode cannot start on boot (v0.30 and later versions).
+* "Microphone" permission can be configured, otherwise, the Android server cannot provide voice monitoring functionality (v0.30 and later versions).
+* Note: SG official proxy does not provide data forwarding to IPs in Hong Kong, Macau, Taiwan, and foreign countries.
+
+## What is smarGate?
+#### Officially named "Mobile Gateway," it exposes the server network located in the intranet on demand through the mobile client. The core engine is implemented in C++.
+#### "Mobile Gateway" is a user's private gateway, and all shared access entry points are in the client, not like other penetration tools that promote public access entry points based on domain names. In other words, smarGate is like carrying a personal theft-proof door, while other penetration products place the theft-proof door in public places... Although they need a key, there's a profession called a locksmith.
+
+##### It has the following technical features:
+* **Security**
+  * The mobile client serves as the main access entry, opened on demand and closed promptly.
+  * Supports port mapping networking between servers (v0.31 and later versions).
+  * Computers can connect to the internal network through access to open ports on the phone in a hotspot or Wi-Fi environment (the client will display the phone's IP).
+  * The phone network is generally in a private network segment that others cannot access.
+  * User isolation.
+* **Scalability**
+  * Based on intranet segment proxy, it can work with numerous tools to achieve various network service capabilities (telnet, ssh, http services, intranet cameras, remote desktop, etc.).
+  * Geared towards geeks, can access custom intranet services (RPC).
+* **Convenience**
+  * Simple configuration with the mobile client.
+  * Dynamic addition and removal of service capabilities.
+* **High Performance**
+  * Starting from version 0.1.1, it uses a proprietary network engine with high performance. The client on a thousand-dollar phone can support over 1,000 concurrent shared accesses.
+  * High-performance design:
+    * Cross-platform implementation of socket multiplexing, supporting models such as poll, epoll, kqueue, port, select, IOCP, etc.
+    * Uses lock-free algorithms.
+    * Thread pool design.
+    * Socket connection pool.
+    * Multi-level task queue.
+    * ...
+
+<details>
+<summary>
+  <mark><font size=6 color=darkred>Attachment: Interaction Diagram</font></mark>
+</summary>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/smarGateArch.png" /><br>
+</details>
+
+## What are the main functions of smarGate?
+* **Supports Proxy Penetration**
+  * The official provides a free proxy server (shared bandwidth, slower when shared by multiple users, best practice is to use a self-owned proxy server).
+  * <I>If you have your own cloud server (with a public IP), you can customize your proxy server, and install proxy_server on the proxy server. All data transmission goes through the user-configured proxy server (the proxy server needs a certificate, which can be generated automatically or configured with an existing certificate).</I>

-A mobile gateway that exposes the intranet service points. <br>
-Free, after testing will be open source. <br>
-It contains a Android client app and server program.<br>
-Usage:<br>
-### 1、download android client app<br>
-### 2、register user（the invitation code must be numeric and can be filled with any value）<br>
-![login](https://github.com/lazy-luo/smarGate/blob/master/res/login.png)<br>
-![register](https://github.com/lazy-luo/smarGate/blob/master/res/register.png)<br>
-### 3、remember register key-number(N)<br>
-![register result](https://github.com/lazy-luo/smarGate/blob/master/res/registerok.png)<br>
-### 4、download server program matched you serverOS<br>
-### 5、modify config file(conf-proxy.xml):<br>
 ```
+1、Configuration of the "Proxy Server" is as follows (the proxy server must allow any port "inbound" connections):
+```
+```
+<?xml version="1.0" encoding="GBK"?>
+<app-config code="PROXY" name="proxy-server">
+    <app-parameter>
+        <proxy-service-port value="9001"/><!--Custom proxy port-->
+        <owner-id value="xxxx" /><!-- xxxx is the user ID returned after successful registration -->
+        <access-token value="nnnnn"/><!--Access token, must be a number [optional] -->
+        <ssl-create-certfile value="true" /><!-- If the following options are not used to specify the certificate, it will be generated automatically [Must ensure that openssl is installed], default is false meaning no need to generate -->
+        <!-- If you have a certificate and private key, configure the following items. Start a secure SSL channel. The file names need to be configured correctly. If there is no certificate, no need to configure. Enable the above option to generate the certificate automatically.
+        <ssl-cacert-file value="xxx.crt"/>
+        <ssl-privatekey-file value="xxx.key"/>
+        -->
+    </app-parameter>
+    <module-parameter>
+        <log-level value="LOG_ERROR"/>
+        <log-write-mode value="CONSOLE_ONLY"/>
+    </module-parameter>
+</app-config>
+```
+```
+2. Add the following configuration to the "Server":
+```
+```
+......
+<app-parameter>
+    <ssl-create-certfile value="true" />
+    <!-- If the proxy server starts a secure SSL channel, you must configure the certificate and private key here.
+    <ssl-cacert-file value="xxx.crt"/>
+    <ssl-privatekey-file value="xxx.key"/>
+    -->
+</app-parameter>
+<module-parameter>
+  ......
+</module-parameter>
+<!-- Configure the IP or domain name + port of the proxy server mentioned above. Note: the IP must be a public IP. The ssl option must be configured correctly. If the proxy server has a certificate (including automatically generated certificates) and is effective, configure it as true, otherwise, it is false -->
+<channel address="xxx.xxx.xxx.xxx:9001" ssl="true" token="nnnnn" /><!--Access token, must match the proxy server, if not, no need to configure -->
+```
+* **Supports P2P Channel**
+  * Utilizes TCP protocol for P2P penetration, enhancing security.
+  * Not all networks support P2P, depending on the NAT types on both ends.
+  * From version v0.14 and above, directly supports IPv6 and provides firewall penetration.
+  * P2P Test Conclusion: Unable to establish a connection when one end is NAT4 and the other end is NAT3 or NAT4.
+Note: NAT1-〉Full Cone, NAT2-〉Restricted Cone, NAT3-〉Port Restricted Cone, NAT4-〉Symmetric
+
+  <table>
+    <th>Server NAT</th><th>Client NAT</th><th>P2P Success</th>
+    <tr><td>NAT1-3</td><td>NAT1-3</td><td>YES</td></tr>
+    <tr><td>NAT1-2</td><td>NAT4</td><td>YES</td></tr>
+    <tr><td>NAT4</td><td>NAT1-2</td><td>YES</td></tr>
+    <tr><td>NAT4</td><td>NAT3-4</td><td>NO</td></tr>
+    <tr><td>NAT3-4</td><td>NAT4</td><td>NO</td></tr>
+  </table>
+
+* **Supports External Network Publishing (Contrary to Security Design Principles, Opened in v0.31)**
+  * The main mode of other intranet penetration tools, directly mapping internal network services to external network ports.
+* **Supports P2P Port Mapping Between Servers (v0.31 and Later Versions)**
+  * Specific configuration mainly supported through ip@index.
+  * 
+<details>
+<summary>
+  <mark><font size=6 color=darkred>Attachment: Brief Overview of Main Functions</font></mark>
+</summary>
+  
+1. Supports TCP-based P2P connection tunnels
+   - Secure and reliable, avoiding QoS issues
+  
+2. Supports all types of protocols based on TCP for "transparent proxy"
+   - Can proxy all internal TCP services (SSH, RDP, SMB, VNC, cameras, database services, etc.)
+     
+3. Supports HTTP, HTTPS to HTTP
+   - Supports HTTP-head rewrite, can proxy HTTPS services as HTTP
+     
+4. Supports UDP over TCP
+   - Can proxy services using the UDP protocol
+     
+5. Transparent mode (no need to focus on IPv6 addresses) supports IPv6 tunnel
+   - Automatically establishes a v6 tunnel, always using v4 address for access
+6. Supports custom proxy (requires public IP), taking over all data forwarding
+   - When P2P is not possible, automatically connects to a custom proxy for data forwarding
+7. Custom proxy supports token and whitelist configuration
+   - Supports security mechanisms
+8. Supports multi-level cascading proxy
+   - Supports chained proxies, supports multi-level acyclic proxies
+9. Supports mobile phones as the only access point — Secure + Mobile Convenience
+   - With the phone in hand, access is available on demand
+10. Dynamic configuration for port mapping, supports "hot-plugging" of mapping configurations
+    - Proxies are effective immediately when added or removed, no need to restart
+11. All features are "one-point configuration" on the app side
+    - Client configuration is a single point, no need for server configuration during runtime
+12. Supports automatic detection and connection of P2P tunnels and custom proxy tunnels
+    - No intervention required, the app automatically connects and retries
+13. Supports dynamic negotiation of ports, supports specifying negotiated ports
+    - Default dynamic port negotiation, supports negotiating ports in conjunction with firewall configurations
+14. Supports tunnel connection priority (P2P -> Custom Proxy -> Official Proxy)
+    - During data transmission, supports priority for tunnels
+15. Supports SSL encrypted tunnel
+    - Supports SSL encryption for both P2P and proxy tunnels, ensuring data transmission is secure
+16. Supports traffic limitation
+    - Supports network bandwidth limitation, default is unlimited
+17. Supports network switching (e.g., mobile <-> Wi-Fi) automatic identification + automatic connection
+    - Intelligent reconnection on the app side, ensuring service availability at all times
+18. Supports port mapping between different LAN hosts — If one end host has a public IP, it can be accessed directly from the external network (version > v0.31)
+    - Supports server-side networking mapping, traffic does not need to pass through the mobile app (traditional penetration mode)
+19. App supports server mode, can configure the phone as a server
+    - Android phones can be used as servers
+20. Supports remote file management functionality: browsing, uploading, downloading, deleting, supports resuming downloads (version >= v0.31.6)
+    - Activates file management functionality when there is P2P or custom proxy, basic operations on files on the phone and server-side computer are possible
+21. Supports built-in SOCKS5, HTTP proxies (version >= v0.32.1)
+    - Since there are third-party specialized tools such as ss5, squid, etc., SOCKS5 and HTTP proxies are optional features
+22. SOCKS5, HTTP proxies support domain and IP whitelists (version >= v0.32.1)
+    - Domain whitelist supports four matching modes (exact match, forward match, backward match, middle match), default configuration file name: .white_list
+    - IP whitelist supports CIDR format ip-range configuration, default configuration file name: .ipchecks
+      
+... To be continued
+
+</details>
+  
+## User Guide:
+
+### 1. Download the App and Register a New User
+* Download the Android app (app-release.apk includes both the client and server) supporting armv7 and arm64 CPU architectures.
+* Register a new user (Invitation code is required and can be any number. Note: If the required information is not filled in completely or contains Chinese characters, registration will fail).
+* After successful registration, remember to note the returned service ID (N). [Important]: After successful registration, be sure to complete the first login within 1 hour.
+
+<details>
+<summary>
+  <mark><font size=5 color=darkred>Expand for Illustrations</font></mark>
+</summary>
+
+![Login](https://github.com/lazy-luo/smarGate/blob/master/res/login.png)
+![Register](https://github.com/lazy-luo/smarGate/blob/master/res/register.png)
+![Register Success](https://github.com/lazy-luo/smarGate/blob/master/res/registerok.png)
+</details>
+
+### 2. Download Server and Configure
+
+* Download the server version suitable for the intranet server (currently supports linux-x86-32/64, windows, and linux-arm [Raspberry Pi, Synology], also: Android app comes with server mode).
+* Unzip the server compression package and modify the configuration file (conf-proxy.xml):
+
+<details>
+<summary>
+  <mark><font size=5 color=darkred>Configuration Example</font></mark>
+</summary>
+
+```xml
  <?xml version="1.0" encoding="GBK"?>
    <app-config code="PROXY" name="proxy-server">
+       <app-parameter>
+	<!-- [ none | first | only ] , none is the default. Enable SSL encryption for P2P connections, only means only accept encrypted connections -->
+	<ssl-tunnel-required value="first" />
+	<!-- If not specifying a certificate with the following options, it will generate a certificate [must ensure openssl is installed], default is false means no need to generate -->
+	<ssl-create-certfile value="true" /> 
+ <!-- The following options are only applicable to the mini version under dynamic, specify the actual files of the ssl library and crypto library, on Linux, you can obtain them with: ldd $(which openssl)|grep -E "libssl|libcrypto"|awk '{print $1}' -->
+	<libssl value="libssl.so" />
+	<libcrypto value="libcrypto.so" />
+       </app-parameter>
       <moudle-parameter>
        <log-level value="LOG_ERROR"/>
        <log-write-mode value="CONSOLE_ONLY"/>
-        <app-name value="xxxxx [name of service points]." /><!-- need modify -->
-        <app-description value="yyyyy [description of service points]" /><!-- need modify -->
-        <user-audit value="N:index"/><!-- need modify (N is step 3 return,index is you service point order. e.g:[12345:1])-->
+        <app-name value="xxxxx [name of service points]." /><!-- need to modify -->
+        <app-description value="yyyyy [description of service points]" /><!-- need to modify -->
+	<!-- user-audit needs to be modified (N is the service ID returned after successful registration, index is the custom server instance number, it is recommended to start from 1, cannot be repeated. For example: [12345:1]) -->
+        <user-audit value="N:index"/>
    </moudle-parameter>
  </app-config>
 ```
-### 6、excute shell "nohup ./proxy_server -i1000 -o1000 -w8 >/dev/null &"(parameter i:input connections,o:output connections,w:max threads)<br>
-### 7、login from android client app<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper1.png)<br>
-### 8、create service local proxy in android app<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper2.png)<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper3.png)<br>
-### 9、enjoy it！<br>
-## ps:<br>
-* The server does dependless any third party package.<br>
-* Android Client app requires permission:<br>
->> 1、background running privileges<br>
->> 2、network access<br>
-* Cell phone settings (Android):<br>
->> 1、setting -> wireless and network -> WLAN -> maintain WLAN connections in dormant state  "ALLOW"<br>
->> 2、setting -> wireless and network -> mobile network -> advanced ->always connected network data service "ALLOW"<br>
+</details>
+
+### 3. Run the Intranet Server (Command Parameters Explanation i: Max incoming connections, o: Max outgoing connections, w: Max threads)
+* Execute the command on Linux: `chmod +x proxy_server && nohup ./proxy_server -i1000 -o1000 -w8 >/dev/null &`
+* Execute the command on Windows: `proxy_server.exe -i1000 -o1000 -w8`
+* Android Phone/Device: Run the app -> In edit mode, configure server information -> Turn on the "Server" switch -> Restart the app
+* For OpenWrt MIPS devices installation, see: [【Correct Usage on MIPS Linux】](https://github.com/lazy-luo/smarGate/issues/65)
+
+### 4. Log in to the mobile app and configure port mapping
+* In the client, you can see the online server ("access point") and define port mapping rules on the client.
+
+<details>
+<summary>
+  <mark><font size=5 color=darkred>Expand for Illustrations</font></mark>
+</summary>
+
+![Operational](https://github.com/lazy-luo/smarGate/blob/master/res/oper2.png)
+<b>In the configuration, the "Remote IP" corresponds to the IP of a host in the intranet ("access point"). "localhost" or "127.0.0.1" represents the machine where the internal server-side is located.</b>
+![Operational](https://github.com/lazy-luo/smarGate/blob/master/res/oper3.png)
+
+</details>
+
+### 5. Computers or phones can directly access the services set in the mobile client (such as SSH, HTTP, etc.)
+
+## Additional Information:
+* All versions come with packaged dependencies and are ready to use.
+* The system will automatically clear "zombie accounts" that have not been used for more than 30 days.
+* Android client requires permissions:
+    1. Background execution permission (if not allowed, the connection will be disconnected when the app goes to the background).
+    2. Network access permission (basic permission).
+* Phone settings (Android):
+    1. Settings -> Wireless & networks -> WLAN -> Keep Wi-Fi on during sleep "Allow" (otherwise, the connection will be disconnected during system sleep).
+    2. Settings -> Wireless & networks -> Mobile network -> Advanced -> Keep mobile data always active "Allow".
+    
+* Q: How to download and install the Android app?
+  >> A: Open the link [https://github.com/lazy-luo/smarGate/raw/master/app-release.apk](https://github.com/lazy-luo/smarGate/raw/master/app-release.apk) in the browser of your Android phone, and then install it when prompted.
+  >> B: Pan.baidu.com download link for the latest test version: [https://pan.baidu.com/s/14Iq60kxHW711NVoCVKWySg](https://pan.baidu.com/s/14Iq60kxHW711NVoCVKWySg)
+  >> C: Gitee address (faster download speed, no issues with image display): [https://gitee.com/lazy-luo/smarGate](https://gitee.com/lazy-luo/smarGate)
+  >> D: If needed, add WeChat: ws_lzy008, specifying "smarGate". Depending on the situation, a technical discussion group may be formed.
+* Q: Do I need to install the server on every device at home to access multiple devices on the local network?
+  >> A: No, you only need to install the server on any one device.
+* Q: Why sometimes unable to connect?
+  >> A: The server will automatically disconnect after about 2-3 minutes of idle time and will reconnect after waiting for about 10 seconds.
+* Q: Why can't I establish a P2P connection over IPv6?
+  >> A: Please update both the client and server to the latest version; make sure your phone and the internal computer can obtain a global IPv6 address; ensure it is not blocked by the firewall (Windows); check if both IPv6 can be routed out; and check the hosts file to ensure the hostname resolves to the IPv6 address.
+* Q: Why does P2P connection over IPv4 and IPv6 not have UDP ports?
+  >> A: smarGate uses TCP protocol for P2P penetration, which provides better security and connection reliability.
+* Q: Why can't the phone NAS client log in?
+  >> A: Make sure the phone NAS client's IP is not blacklisted, and it does not include "localhost" (127.0.0.1).
+* Q: How to share machines in a remote company network with multiple teams in different locations?
+  >> A: Connect the phone to Wi-Fi, let team members' computers connect to the phone's IP: PORT, and access directly through the phone's proxy. Tested on phones with 2k resolution or higher, it can support sharing access for up to a hundred people.
+* Q: Why doesn't the Windows server have a console window?
+  >> A: To prevent accidental shutdown of the server, the new version of the Windows server runs in the background. If you need to close it, use "Task Manager".
+* Q: Do I still need to go through an intermediate proxy when using P2P?
+  >> A: No, connect directly point-to-point, and the network speed depends on the networks of your client and server.
+* Q: Does smarGate consume a lot of power when running in the background?
+  >> A: After long-term testing, for occasional use, the power consumption is similar to any system process, extremely low. In the case of frequent background use, the overall power consumption is equivalent to occasional use of WeChat. The power management prompt "Frequent background refresh..." can be ignored; it appears whenever there is background data transfer, and the key is to look at the power consumption ranking.
+* Q: What are the connection priority rules in smarGate?
+  >> A: Prefer P2P connection. If there is no P2P, use a custom proxy connection. If neither of the previous two connects, use the official proxy connection.
+* Q: Can the same user log in from multiple locations?
+  >> A: Multiple logins are allowed, but only one client can perform P2P at a time. Each server machine can only run one instance, and the configuration of each instance ensures that the serial number is not duplicated, otherwise it will not work properly.
+* Q: Can the server support Android phones?
+  >> A: The Android app version 0.27 has added support for "server mode".
+* Q: What does the different color represent in the client?
+  >> A: P2P identification under IPv4:
+    ![IPv4 P2P](https://github.com/lazy-luo/smarGate/blob/master/res/ipv4p2p.png)
+  >> A: P2P identification under IPv6:
+    ![IPv6 P2P](https://github.com/lazy-luo/smarGate/blob/master/res/ipv6p2p.png)
+  >> A: User-defined proxy identification:
+    ![User-defined proxy P2P](https://github.com/lazy-luo/smarGate/blob/master/res/userdefineproxyer.png)
+
+## Best Practices
+* The following are recommended best practices for reference:
+  1. Set the Android client to "Auto Login" to avoid the hassle of entering the username/password each time.
+  2. Let the Android client run in the background after setting it up. If it remains in the foreground, it will refresh regularly, consuming power due to the WebView component.
+  3. Keep the server running in the background at all times for security and peace of mind. Only you can access it.


+## Disclaimer
+* Please read the following disclaimer carefully. Your use of the smarGate tool software indicates your acceptance of the following:
+  1. It is strictly forbidden to use this software for computer hacking and any other activities that may harm computer information network security.
+  2. This software is a regular network access tool. Please use it reasonably and legally. Do not use it for activities that violate laws, morals, and affect the interests of others. If used for illegal purposes, the user is responsible for any consequences, and the developer of this software assumes no responsibility or loss.
+
+## Donation
+If you find smarGate helpful, feel free to make a donation to support the long-term development of the project!
+Note: It is recommended to include your registered username with the donation.
+
+<details>
+<summary>
+	<mark><font size=5 color=darkred>WeChat Donation</font></mark>
+</summary>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/donation.png"/>
+</details>
+
+## Appendix
+<details>
+<summary>
+	<mark><font size=5 color=darkred>Update History</font></mark>
+</summary>
+  
+### 2023-11-28:<br>
+1. Safety protection for the elderly and children, supports GPS positioning for easy tracking of the latitude and longitude of the care recipient (manual authorization required).<br>
+   * This feature is only supported on the Android server.<br>
+   * If the coordinates are successfully obtained, the latitude and longitude will be automatically copied to the clipboard.<br>
+
+2. Other optimizations<br>
+
+### Update to v0.32.2 on 2023-11-17:<br>
+1. Support for username/password authentication in the SOCKS protocol.<br>
+2. Support for saving and playing recordings (VIP).<br>
+3. Version updated to v0.32.2.<br>
+
+### Update to v0.32.1 on 2023-10-25:<br>
+1. Bug fixes<br>
+2. Improved support for SOCKS protocol (IPv4 TCP only).<br>
+3. Improved support for HTTP proxy protocol.<br>
+4. App supports VIP function license.<br>
+5. Version updated to v0.32.1.<br>
+
+### Update to v0.31.12 on 2023-09-08:<br>
+1. Bug fixes<br>
+2. Experimental support for SOCKS protocol (IPv4 TCP only).<br>
+3. Added built-in support for HTTP proxy protocol.<br>
+4. Memory recycling (for devices with memory limitations).<br>
+5. Improved response speed with full asynchronous mode.<br>
+6. Version updated to v0.31.12.<br>
+
+### Update to v0.31.11 on 2023-08-29:<br>
+1. File management supports default sorting by time.<br>
+2. Added support for macOS M1/M2.<br>
+3. Version updated to v0.31.11.<br>
+
+### Update to v0.31.10 on 2023-06-03:<br>
+1. Network reliability optimization.<br>
+2. Improved network transmission efficiency.<br>
+3. Version updated to v0.31.10.<br>
+
+### Update to v0.31.9 on 2023-03-04:<br>
+1. App server mode adds "Accessibility" service, user manually opens it for automatic restart.<br>
+2. App-side operation optimization: Added automatic fill-in feature for click operations, making it easier to add configurations.<br>
+3. Fixed the BUG that custom proxy installation on MIPS routers could not provide services.<br>
+4. Provided server-side custom proxy domain timed IP refresh function (dynamic domain).<br>
+5. Other optimizations.<br>
+
+### Update to v0.31.8 on 2022-12-14:<br>
+1. App server mode supports configuring custom proxies and SSL encryption.<br>
+2. Custom proxy server supports SSL self-signed certificate distribution.<br>
+3. Other optimizations.<br>
+
+### Update to v0.31.7 on 2022-11-04:<br>
+1. Provided one-click version upgrade function, no manual update required.<br>
+   * This feature's version source points to GitHub. If unable to update, please confirm GitHub connectivity.<br>
+   * Generally, usability is restored in about 10-20 seconds after the update.<br>
+   * The server provides an automatic update option (checks once a day), which is off by default.<br>
+   ```xml
+   <auto-update value="true" />
+   ```
+### Update to v0.31.6 on 2022-10-20:<br>
+1. File management adds file deletion functionality.<br>
+2. File management adds breakpoint resume functionality.<br>
+3. File management adds file timestamp.<br>
+4. File management on Windows adds disk switching operation.<br>
+   * This feature is only activated when there is P2P or custom proxy connection.<br>
+   * Upload and download through drag-and-drop mode.<br>
+   * Confirmation box for file deletion pops up with a double click.<br>
+
+### Update to v0.31.5 on 2022-10-14:<br>
+1. Fixed the bug where custom proxy couldn't connect under short interval reconnection.<br>
+2. Added simple file upload and download functionality for easy synchronization of documents in different locations.<br>
+   * This feature is only activated when there is P2P or custom proxy connection.<br>
+   * Upload and download through drag-and-drop mode.<br>
+3. Version updated to v0.31.5.<br>
+
+### Update on 2022-09-05:<br>
+1. Resolved the bug of abnormal disconnection in custom proxy connection.<br>
+2. Version remains unchanged.<br>
+
+### Update to v0.31.4 on 2022-08-30:<br>
+1. Reduced virtual memory usage during runtime.<br>
+2. Routine optimizations.<br>
+3. Version updated to v0.31.4.<br>
+
+### Update to v0.31.3 on 2022-08-14:<br>
+1. Fixed the bug where MIPS architecture systems couldn't connect to custom proxies.<br>
+2. Fixed the issue of long loading time for HTTP protocol.<br>
+3. Version updated to v0.31.3.<br>
+
+### Update to v0.31.2 on 2022-08-06:<br>
+1. Fixed occasional crashes on the Windows platform, enhanced stability.<br>
+2. Keep-alive operations for P2P connection and custom proxy to minimize reconnection time window, improving availability.<br>
+3. Other usability optimizations, reduced app consumption.<br>
+4. Version updated to v0.31.2.<br>
+
+### Update to v0.31.1 on 2022-07-28:<br>
+1. Fixed the bug where, under specific circumstances, network configurations did not take effect when the server restarted.<br>
+2. Fixed NAT1 server P2P negotiation bug.<br>
+3. Version updated to v0.31.1.<br>
+
+### Update to v0.31 on 2022-07-22:<br>
+1. Provided port mapping between servers, allowing direct access from the public network if the server has a public IP (only needs to be configured on the app).
+   * Configuration: In the original mapping configuration, "Remote IP" supports configuration in the form of ip@idx (idx is the sequence number of different "access points").
+   * The "Local Port" configured in this way is actually on the host where the current "access point" is located (Note: not on the phone where the app is located).
+   * If P2P between servers is successful (or custom proxy connection is successful), the configured mapping will take effect, otherwise, it will not.
+   * On the app, the proxy status between servers is refreshed only when there is a P2P connection.
+   * After successful configuration, it takes about 10 seconds to see the actual status on the app.
+2. Version upgraded to v0.31.<br>
+
+### Update on 2022-06-30:<br>
+1. Fixed the bug where the server could not proxy normally on 32-bit big-endian machines.<br>
+2. Version remains unchanged.<br>
+
+### Update on 2022-05-17:<br>
+1. Server supports automatically generating self-signed certificates (default file name is server.xxx).
+   * Configuration: ssl-create-certfile option<br>
+     ```
+     <app-parameter>	
+       <ssl-create-certfile value="true" />
+     ...
+     </app-parameter>
+     ```
+   * Make sure to install openssl.
+   * Do not specify certificate files (do not configure ssl-cacert-file and ssl-privatekey-file).
+   
+### Update on 2022-05-04:<br>
+1. Support for riscv32/64 architecture, linked with musl library during compilation like mips architecture.<br>
+2. Optimized network transmission layer.<br>
+3. Version remains unchanged.<br>
+
+### Update to v0.30.4 on 2022-02-07: <br>
+1. Provided support for mips64el.<br>
+2. Added system icon display on the app.<br>
+3. Other optimizations.<br>
+
+### Update to v0.30.3 on 2021-11-06: <br>
+1. Fixed the bug where app-side memory usage only displayed JVM without native.<br>
+2. Optimized network engine, improving stability and fairness under high concurrency.<br>
+
+### Update to v0.30.2 on 2021-10-17: <br>
+1. Custom proxy supports SSL verification.<br>
+2. In the case of P2P network, supports configuring SSL tunnel ( **requires server-side certificate configuration** )<br>
+```
+<app-parameter>
+     <ssl-tunnel-required value="first" /><!-- Options: none, first, only -->
+     ...
+   </app-parameter>
+   ```
+3. Other optimizations.<br>
+  
+### Update to v0.30 on 2021-09-24: <br>
+1. Provided Android server-side automatic startup support (only in server mode, and manual authorization is required).<br>
+2. In the case of P2P network, Android server-side supports real-time audio (microphone permission needs manual authorization, must open the SG interface to record).<br>
+3. Other optimizations.<br>
+
+### Update to v0.29.2 on 2021-05-03: <br>
+1. Fixed the issue of not being able to exit on high versions of Android.<br>
+2. Optimized network: Fixed a BUG that may cause network latency, further improving network transmission speed.<br>
+3. Provided version number display for easier client and server version management.<br>
+4. Optimized app CPU usage, reduced power consumption.<br>
+
+### Update to v0.29 on 2021-03-05: <br>
+1. Fixed the issue of server-side core dump when switching between IPv6 and IPv4 networks.<br>
+2. Added IPv4-only network mode option on the client side, for scenarios where IPv6 is present but IPv4 is needed for P2P connections due to special requirements (forces the use of IPv4 for network penetration).<br>
+3. Some other bug fixes.<br>
+   Note: Due to fatal issues with core dump in specific scenarios, both the client and server need to be updated to version 0.29.
+
+### Update to v0.28 on 2020-12-13: <br>
+1. Custom proxy added token support to prevent unauthorized access. Also supports configuring an access permission list (access-token can only input numbers, access-restricting can input allowed SIDs, multiple SIDs separated by ":"; access-restricting can be left unconfigured).<br>
+   A. Proxy server configuration:
+   ```
+   <app-parameter>
+    <proxy-service-port value="9001"/>
+    <access-token value="nnnnn"/>
+    <access-restricting value="xxxxx"/>
+    …
+   </app-parameter>
+   ```
+  B、Server-side configuration (token must match the proxy server):
+ ```
+ <channel address="x.x.x.x:9001" ssl="true" token="nnnnn" />
+```
+2.Optimized the tunnel timeout disconnect mechanism (only for P2P tunnels and user agent tunnels): As long as there is a connection and the connection is normal, the client will randomly delay sending heartbeats to prevent timeout disconnections.<br>
+Scenario: When accessing SSH, if there is no input for a long time, it will maintain a heartbeat to prevent disconnection after 1 or 2 minutes of inactivity.<br>
+### Update to v0.27 on 2020-05-23: <br>
+1. Removed the root permission acquisition feature to maintain the minimum permission requirement. Currently not developing support for configuring ports below 1024.<br>
+2. Due to personal Raspberry Pi being damaged by a child, making use of the remaining value of old smartphones, Android app added "Server Mode" support, enabling it to be used as a server at home.<br>
+
+### Update to v0.26 on 2020-04-30: <br>
+1. Fixed the issue where configured HTTP services might be unavailable when IP is switched.<br>
+~~2. For rooted phones, attempted to acquire root permissions, supporting the configuration of reserved ports below 1024.~~ (This feature has been removed.)<br>
+3. Solved the problem of absolute path execution (mostly for startup scripts) and not specifying the -f parameter causing the inability to locate the default configuration file.<br>
+4. Server-side added HTTP-based content replacement option (affects efficiency, ignores compressed data). For some non-standard intranet web applications that return IP ports in JavaScript to the browser, content filtering is not applied by default.<br>
+```
+	……
+	<moudle-parameter>
+		<http-content-type-filter value="application/javascript" />
+		……
+	<moudle-parameter/>
+	……
+```
+5. Server-side added an option to specify the P2P negotiation port, with the default being a random port.<br>
+```
+	……
+	<moudle-parameter>
+		<negotiation-port value="xxxxx" />
+		……
+	<moudle-parameter/>
+	……
+```
+
+6. Added an "Official Proxy" switch, defaulting to open. When closed, data will not be forwarded through the official proxy under any circumstances.<br>
+### 2020-03-13：<br>
+1. Fixed a bug causing network latency due to the loss of writable-event under specific conditions with tcp-cork.<br>
+2. Improved the performance of the memory pool.<br>
+3. Added the `-f` command line parameter to specify the full path of the configuration file.<br>
+4. Other optimizations, version remains unchanged.<br>
+
+### 2020-01-18 updated to v0.25：<br>
+1. Fixed the issue of HTTP proxy failure.<br>
+2. The app now provides IPv6 address display.<br>
+3. Version updated to 0.25.<br>
+
+### 2019-11-30 updated to v0.24：<br>
+1. Peanut shell supports UDP now? Okay, support UDP port forwarding, friends who stream games can give it a try.<br>
+2. Support UDP over TCP mode.<br>
+3. Other minor optimizations.<br>
+
+### 2019-11-03：<br>
+1. Fixed memory leak bug.<br>
+2. Other minor optimizations, version remains unchanged.<br>
+3. Improved P2P reconnection reliability.<br>
+
+### 2019-09-30 updated to v0.23：<br>
+1. Fixed high CPU usage bug under weak network conditions on Windows server.<br>
+2. Overall improved network transmission speed.<br>
+
+### 2019-09-20 updated to v0.22：<br>
+1. Improved P2P detection reliability.<br>
+2. Fixed a bug on Windows that prevented P2P connection under certain conditions.<br>
+3. The client now provides manual P2P reconnection feature (automatic reconnection may fail under weak network conditions, in such cases, manual reconnection can be used).<br>
+
+### 2019-09-15：<br>
+1. Further reduced server CPU usage under low-speed conditions.<br>
+2. General optimizations, version remains unchanged.<br>
+
+### 2019-09-10 updated to v0.21：<br>
+1. Network performance optimization.<br>
+2. The client now supports displaying real-time network speed.<br>
+
+### 2019-09-05：<br>
+1. Fixed the bug of automatic login failure after changing the password on the client.<br>
+2. Provided automatic login timeout control.<br>
+
+### 2019-09-01 updated to v0.20：<br>
+1. Optimized connection checking performance (provided parallel asynchronous detection).<br>
+2. Supports proxying HTTPS to HTTP (client-side HTTP access, server-side HTTPS).<br>
+
+### 2019-08-18 updated to v0.19：<br>
+1. Performance optimization.<br>
+2. Fixed a bug where server connections could not be reliably disconnected under certain conditions (custom routing).<br>
+3. Static compilation, no longer dependent on the gcc dynamic library of the inux system, can run directly in alpine (requires creating a symbolic link).<br>
+4. Supports compiling as a mini version, no longer statically compiling OpenSSL; fully compatible with OpenSSL library from 0.9.8 to 1.1.1, binary package reduced to about 1M (already placed in the dynamic directory, SSL library needs to be configured).<br>
+
+### 2019-05-27 updated to v0.18：<br>
+1. Performance optimization.<br>
+2. Provided IPv6 P2P switch mechanism: `<ipv4-tunnel-first value="false"/>` Set to "true" to close IPv6 P2P, the default value is "false".<br>
+3. Added client IPv6 flag and connection status display.<br>
+
+### 2019-05-21：<br>
+1. Fixed the bug that IPv6 could not be detected under Raspbian jessie.<br>
+
+### 2019-05-16 updated to v0.17：<br>
+1. Performance optimization.<br>
+2. Provided P2P disconnect and reconnect mechanism.<br>
+
+### 2019-05-04：<br>
+1. Fixed a bug where the server occasionally had high CPU usage when mounting private routes with a thread count < 4, version remains unchanged.<br>
+
+### 2019-04-23 updated to v0.16：<br>
+1. Fixed a bug where the server occasionally core dumped when mounting private routes.<br>
+
+### 2019-04-16 updated to v0.15：<br>
+1. Fixed the bug of IPV4/IPV6 network switching, unable to P2P.<br>
+
+### 2019-04-15 updated to v0.14：<br>
+1. Fixed the issue of network switching reconnection failure.<br>
+2. Engine performance optimization.<br>
+3. Added support for IPv6 firewall penetration (mobile end supports IPv6, and the internal network server supports IPv6).<br>
+   [Important Note] Version 0.14 is incompatible with previous versions, be sure to update!<br>
+
+### ....Initial version v0.13<br>
+
+</details>
@@ -6,7 +6,7 @@ var g_languages = [
    ,"清缓存"//4
    ,"改密码"//5
    ,"保 存"//6
-    ,"自动刷新"//7
+    ,"模式切换"//7
    ,"删 除"//8
    ,"登 录"//9
    ,"注 册"//10
@@ -22,12 +22,12 @@ var g_languages = [
    ,"姓名"//20
    ,"联系电话"//21
    ,"邮箱"//22
-    ,"同意协议"//23
+    ,"用户协议"//23
    ,"必须填写邀请码"//24
    ,"描述"//25
    ,"基础信息"//26
-    ,"发送"//27
-    ,"接收"//28
+    ,"发送 ↑ "//27
+    ,"接收 ↓ "//28
    ,"总内存"//29
    ,"已用内存"//30
    ,"内存峰值"//31
@@ -35,12 +35,12 @@ var g_languages = [
    ,"在线"//33
    ,"离线"//34
    ,"系统状态"//35
-    ,"工作线程数"//36
-    ,"空闲线程数"//37
-    ,"最大连接数"//38
-    ,"当前连接数"//39
-    ,"待处理事件"//40
-    ,"检测线程数"//41
+    ,"工作线程"//36
+    ,"空闲线程"//37
+    ,"最大连接"//38
+    ,"当前连接"//39
+    ,"等待事件"//40
+    ,"检测线程"//41
    ,"服务集合"//42
    ,"本地端口"//43
    ,"路由指向"//44
@@ -103,6 +103,90 @@ var g_languages = [
    ,"配置修改成功！将在下次重启时生效"//101
    ,"移动网关将保持提供服务"//102
    ,"服务启动时间"//103
+    ,"暴露服务集"//104
+    ,"服务端代理"//105
+    ,"请选择文件操作："//106
+    ,"上传"//107
+    ,"下载"//108
+    ,"文件管理"//109
+    ,"文件名"//110
+    ,"大小"//111
+    ,"当前版本过低,不支持自动升级,请手动更新！"//112
+    ,"自定义代理"//113
+    ,"自定义代理 IP:port..."//114
+    ,"访问Token"//115
+    ,"代理服务器Token..."//116
+    ,"P2P加密选项" //117
+    ,"none"//118
+    ,"first"//119
+    ,"only"//120
+    ,"序列号注册成功！"//121
+    ,"序列号注册失败！"//122
+    ,"序列号注册" //123
+    ,"序列号" //124
+    ,"必须输入序列号" //125
+    ,"VIP 到期剩余时间（天）:" //126
+    ,"播放" //127
+    ,"已发送定位请求..." //128
+    ,"定位请求失败" //129
+    ,"已成功获取定位信息" //130
+    ,"请输入账号"//131
+    ,"请输入密码"//132
+    ,"账号最短为 5 个字符"//133
+    ,"密码长度至少为 6 个字符"//134
+    ,"邀请码必须输入数字，且不为0"//135
+    ,"邮箱地址格式错误"//136
+    ,"请输入邀请码"//137
+    ,"请确认密码"//138
+    ,"请输入电话号码"//139
+    ,"请输入邮箱"//140
+    ,"注册成功后，请于2小时内完成首次登录，用户名、密码请妥善保管，用户相关数据仅存储于本地。"//141
+    ,"密码两次输入不一致"//142
+    ,"设置"//143
+    ,"左滑可以打开设置"//144
+    ,"设置完成后，即时生效，你可以右滑返回"//145
+    ,"语言选择"//146
+    ,"常用设置"//147
+    ,"高级设置"//148
+    ,"操作确认"//149
+    ,"确认删除该条收藏记录？"//150
+    ,"系统免费用户"//151
+    ,"确认删除该条代理记录？"//152
+    ,"添加映射配置"//153
+    ,"注意：请仔细核对，如输入序列号错误，须等待半小时才能继续注册"//154
+    ,"下拉可以刷新"//155
+    ,"释放立即刷新"//156
+    ,"正在刷新..."//157
+    ,"提示信息"//158
+    ,"错误信息"//159
+    ,"常用收藏"//160
+    ,"为常用连接提供收藏"//161
+    ,"请输入收藏标题"//162
+    ,"加入收藏"//163
+    ,"文件传输功能只能在P2P或自定义代理生效时使用"//164
+    ,"您暂时没有此功能权限"//165
+    ,"目标文件夹"//166
+    ,"当前文件夹"//167
+    ,"任务区"//168
+    ,"可点击切换文件主机"//169
+    ,"刷新操作需要30秒间隔"//170
+    ,"操作失败，条目可能已添加" //171
+    ,"是否切换为服务端模式？"//172
+    ,"切换服务端/客户端模式后，需要重启APP才能生效！" //173
+    ,"请输入姓名"//174
+    ,"请间隔30秒后再试！"//175
+    ,"新用户注册失败！"//176
+    ,"网络太慢，数据加载超时！"//177
+    ,"确认删除当前选中文件？"//178
+    ,"确认传输当前选中文件？"//179
+    ,"玩命加载中..."//180
+    ,"请自行申请百度地图浏览器版AK。如首次使用地图，请在配置中设置AK"//181
+    ,"AK码设置"//182
+    ,"请输入百度地图浏览器版AK码"//183
+    ,"地图"//184
+    ,"描述"//185
+    ,"备注设置"//186
+    ,"请输入服务简短备注"//187
    ],
    ["English"
    , "OK" //1
@@ -111,28 +195,28 @@ var g_languages = [
    , "Clear" //4
    , "Chpass" //5
    , "Save" //6
-    , "Refresh" //7
+    , "Chmode" //7
    , "Delete" //8
    , "Login" //9
    , "Register" //10
    , "Back to login" //11
-    , "Mobile Gateway" //12
+    , "SmarGate" //12
    , "User login" //13
    , "User name" //14
    , "Password" //15
    , "Auto login" //16
    , "User registration" //17
-    , "Invitation code" //18
-    , "Confirm password" //19
+    , "Invitation NO" //18
+    , "Confirm" //19
    , "Name" //20
-    , "Contact number" //21
+    , "Phone NO" //21
    , "Mailbox" //22
-    , "Agreement of consent" //23
+    , "User Agreement" //23
    , "Invitation code must be filled in" //24
    , "Desc" //25
-    , "Information" //26
-    , "SND" //27
-    , "RX" //28
+    , "Info" //26
+    , "SND ↑ " //27
+    , "RX ↓ " //28
    , "Tot-mem" //29
    , "Usage" //30
    , "Max-usage" //31
@@ -140,12 +224,12 @@ var g_languages = [
    , "Online" //33
    , "Offline" //34
    , "Summery" //35
-    , "Tot-threads" //36
-    , "Idle threads" //37
+    , "Workers" //36
+    , "Idles" //37
    , "Max-sockets" //38
    , "Connections" //39
-    , "Pending event" //40
-    , "Event threads" //41
+    , "Pending" //40
+    , "Products" //41
    , "Services" //42
    , "Local port" //43
    , "Routing to" //44
@@ -166,8 +250,8 @@ var g_languages = [
    , "No need specified by default..." //59
    , "The access point number must be entered and is an integer of <64" //60
    , "Change password" //61
-    , "Old password" //62
-    , "New password" //63
+    , "Older" //62
+    , "Newer" //63
    , "Congratulations: registration request is successful. Please keep your service ID properly" //64
    , "Login failed. Please verify the user name password you entered!"// 65
    , "Logging in..." //66
@@ -208,5 +292,89 @@ var g_languages = [
    , "Configuration modification succeeded! Will take effect on the next reboot "//101
    , "The SmarGate will remain in service" // 102
    , "Service start time" // 103
+    , "Exposed services"//104
+    , "Server Proxy"//105
+    , "Please select a file operation:"//106
+    , "upload"//107
+    , "download"//108
+    , "File Manager" //109
+    , "file name" //110
+    , "size" //111
+    , "The current version is too low to support automatic upgrade, please update manually!" //112
+    , "User proxy"//113
+    , "User proxy IP:port..."//114
+    , "Access token"//115
+    , "Token of proxy server..."//116
+    , "SSL for P2P" //117
+    , "none"//118
+    , "first"//119
+    , "only"//120
+    , "Successful license register！"//121
+    , "Fault to license register！"//122
+    , "License register" //123
+    , "License key" //124
+    , "license key must be filled" //125
+    , "VIP exp-after-days:" //126
+    , "Play" //127
+    , "Location request has been sent..." //128
+    , "Location request failed" //129
+    , "Successfully obtained location information" //130
+    , "Please enter your account"//131
+    , "Please enter password"//132
+    , "The minimum account length is 5 characters"//133
+    , "The password length should be at least 6 characters"//134
+    , "The invitation code must be entered as a number and not 0"//135
+    , "Email address format error"//136
+    , "Please enter the invitation code"//137
+    , "Please confirm password"//138
+    , "Please enter a phone number"//139
+    , "Please enter your email address"//140
+    , "After successful registration, please complete the first login within 2 hours. Please keep your username and password properly, and user related data is only stored locally."//141
+    , "The password entered twice is inconsistent"//142
+    , "Setting"//143
+    , "Left swipe to open settings"//144
+    , "After setting up, you can slide right to return"//145
+    , "Language "//146
+    , "Common Settings"//147
+    , "Advanced Setting"//148
+    , "Operate Confirm"//149
+    , "Are you sure to delete this favorite record?"//150
+    , "You are free users"//151
+    , "Confirm deleting the proxy record?"//152
+    , "Add mapping configuration" //153
+    , "Attention: Please check carefully. If you enter the wrong serial number, you will need to wait for half an hour before continuing to register"//154
+    , "Dropdown can refresh"//155
+    , "Release and refresh immediately"//156
+    , "Refreshing..."//157
+    , "Information"//158
+    , "Error"//159
+    , "Favorites"//160
+    , "Provide favorites for commonly used connections"//161
+    , "Please enter the bookmark title"//162
+    , "Add to favorites"//163
+    , "The file transfer function can only be used when P2P or custom proxies are in effect"//164
+    , "You currently do not have permission for this feature"//165
+    , "Destination Folder"//166
+    , "Current Folder"//167
+    , "Mission Area"//168
+    , "Click to switch file hosts"//169
+    , "The refresh operation requires a 30 second interval"//170
+    , "Operation failed, entry may have been added"//171
+    , "Switch to server-side mode?"//172
+    , "After switching between server/client mode, you need to restart the app to take effect!"//173
+    , "Please enter your name"//174
+    , "Please try again after a 30 second interval"//175
+    , "New user registration failed！"//176
+    , "The network is too slow, data loading timed out!"//177
+    , "Confirm deleting the currently selected file？"//178
+    , "Confirm the transfer of the currently selected file？"//179
+    , "Loading..."//180
+    , "Please apply for Baidu Map Browser version AK by yourself. If using the map for the first time, please set AK in the configuration"//181
+    , "AK code setting"//182
+    , "Enter AK code of the Baidu Map"//183
+    , "Map"//184
+    , "MEMO"//185
+    , "Notes modify"//186
+    , "Enter notes of the services"//187
    ]
  ];
@@ -1,26 +1,83 @@
-# 中文 | [English](https://github.com/lazy-luo/smarGate/blob/master/README_en.md)
-# 快速概览
+# samrGate（SG） 中文 | [English](https://github.com/lazy-luo/smarGate/blob/master/README_en.md)
+
+## SG是什么？
+* 是个跨网段远程端口映射工具
+  * 支持内网到内网、内网到外网映射
+* 是个随身携带可灵活控制访问入口的工具
+  * 所有配置操作都在app客户端，一眼看全、高度安全可控
+  * 访问入口既可配置到app所在手机上，也能配置到任意SG服务端电脑上
+* 是个简单的远程文件管理工具
+  * 可对手机及服务端所在服务器进行文件管理操作
+* 是个简单的socks代理工具
+* 是个简单的http(s)代理工具
+* ......
+
+## SG有什么特点？
+* 所有映射都通过app客户端进行配置，服务端运行时免配置
+* 支持服务端到APP及服务端到服务端的端口映射
+  * 可以将服务端所在内网任意机器任意端口映射到app所在手机上，通过访问手机本地端口进行穿透访问
+  * 可以通过app客户端配置，将A服务端内网任意主机任意端口映射到B服务端所在主机上
+* 支持链式代理
+* 支持多用户隔离
+* 支持ipv4/6，基于TCP进行P2P穿透
+* 支持自建代理进行数据转发
+* 支持数据隧道加密（TLS）
+* 支持自动数据隧道选择
+  * 优先P2P，次选自定义代理，官方代理兜底
+* 支持自动版本升级及APP客户端上一键升级
+* socks及http(s)代理支持自定义ip白名单及域名白名单，支持CIDR格式IP段及域名统配符
+* 支持TCP协议服务，也支持UDP协议
+  * UDP采用UDP over TCP模式
+* ......
+
+## SG能解决什么问题？
+* 无视内外网，安全访问内网资源的场景
+* 需要P2P高带宽安全传输的场景
+* 有公网IP，需要将内网服务发布出去的场景
+* ......
+
+## SG怎么使用？
+* 下载APP并注册
+* 下载合适的服务端版本，根据用户ID进行配置并运行
+* 登录APP进行端口映射配置
+* 使用配置的映射进行访问
+
+## 有兴趣再细看
+
+<details>
+<summary>
+	<mark><font size=3 color=darkred>查看详细</font></mark>
+</summary>
+
+# 
+## 快速概览<a href=https://github.com/lazy-luo/smarGate/wiki/快速上手手册>【快速上手手册】</a> <a href="https://www.bilibili.com/video/BV1LM411k7Rf">【三方视频教学- B站】</a><br>
+* 平台适配，支持linux、windows、macos、android（tob，小型机：hp-unix、solaris、AIX）<br>
+* cpu架构，支持x86、arm、mips、riscv、LoongArch64（tob：alpha、PowerPC、SPRAC）<br>
 * 注重安全，“内网”到“内网”的穿透，无需映射任何端口到外网，不更改任何防火墙配置<br>
-* 注重带宽，”4G手机+v6宽带“采用P2P方式访问内网服务（v4支持NAT1-3穿透）<br>
+* 注重带宽，”4G手机+v6宽带“采用P2P方式访问内网服务（基于TCP协议，v4支持NAT1-3穿透）<br>
 * 注重节约，无需购买vps、无需公网IP；家中淘汰Android手机可做服务器<br>
 * 注重可靠，随用随有，可7*24不间断服务，且不受UDP协议Qos之苦<br>
 * 注重可控，客户端一点配置，且随时随地控制服务开启/关闭<br>
 * 注重环保，免安装，体量小巧（mini版1MB左右） allinone，高性能且资源占用最少<br>
 * 注重便携，无论工作或是度假，不管在任何地方，只要手机有网络，一切尽在掌控<br>
 * ......如果这都是你想要的！请耐心继续往下看；如果你还想要...请提issue，【更新历史】也有看头哦<br>
-# 移动网关
-* 无需公网IP，提供内网穿透能力，通过加密隧道，能安全的将内网服务暴露出来. <br>
-* 支持p2p通讯（基于TCP协议，p2p通道可用时显示为绿色）<br>
-* 支持自定义代理服务器 <br>
 * 免费，测试稳定后考虑开源. <br>
 * 包含一个android客户端和需内网安装的服务端.<br>
+
+## APP端配置（必须）--- 无法正常使用典型情况
+* 必须配置“允许后台运行”权限，否则切后台即被系统断连
+* 必须配置“休眠时始终保持网络连接”，否则一旦休眠则被系统断连
+* 可以配置“允许自启动”权限，否则Android服务端模式下无法开机启动（v0.30及后续版本）
+* 可以配置“麦克风”权限，否则Android服务端无法提供语音监听功能（v0.30及后续版本）
+* 注意：SG官方代理不提供到港澳台及国外IP的数据转发
 ## smarGate是什么？<br>
 #### 官方命名为“移动网关”，通过手机客户端将位于内网的服务端网络进行按需暴露，核心引擎采用c++实现。<br>
 #### “移动网关”是用户私有网关，所有共享访问入口都在客户端，不是类似其它穿透工具主推的面向域名的公共访问入口。打个比方：smarGate是将防盗门随身携带，其它穿透产品是将防盗门放到公共场所，额...虽然需要钥匙，但有种职业叫开锁匠<br>

 ##### 具备如下技术特点：<br>
 * 安全性 <br>
-  * 手机客户端作为唯一的访问入口，按需开放，及时关闭。<br>
+  * 手机客户端作为主要的访问入口，按需开放，及时关闭。<br>
+  * 支持服务端间端口映射组网（v0.31及以后版本）。<br>
  * 电脑可以接入手机热点或wifi环境下通过访问手机开放的端口穿透到内网进行访问（客户端会显示手机ip）。<br>
  * 手机网络一般为私有网段别人无法访问。<br>
  * 用户间隔离。<br>
@@ -39,13 +96,18 @@
 	* socket 连接池<br>
 	* 多级任务队列 <br>
 	* ...<br>
-* 附：交互示意图<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/smarGateArch.png)<br>
-
+<details>
+<summary>
+	<mark><font size=6 color=darkred>附：交互示意图</font></mark>
+</summary>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/smarGateArch.png" /><br>
+</details>
+	
 ## smarGate有什么主要功能？<br>
 * 支持代理穿透<br>
  * 官方提供免费的代理服务器（共享带宽，多人共用时比较慢，最佳实践为启用自有代理服务器）<br>
-  * <I>如果自己有云服务器（具备公网ip），用户可自定义自己的代理服务器，且在代理服务器上安装proxy_server。所有数据传输走用户配置的代理服务器（为了防止中间人攻击，代理服务器需要用户生成自签名证书）</I> <br>
+  * <I>如果自己有云服务器（具备公网ip），用户可自定义自己的代理服务器，且在代理服务器上安装proxy_server。所有数据传输走用户配置的代理服务器（代理服务器需要证书，可自动生成也可配置已有证书）</I> <br>
+
 ```  
  1、“代理服务器”配置如下（代理服务器必须允许任意端口“入站”连接）：
 ```
@@ -54,8 +116,10 @@
    <app-config code="PROXY" name="proxy-server">
        <app-parameter>
 	        <proxy-service-port value="9001"/><!--自定义代理端口 -->
-		<access-token value="nnnnn”"/><!--访问token，必须为数字【可选配】 -->
-          <!-- 如果自己有证书及私钥，则配置如下项，启动安全的SSL通道，其中文件名需要配置正确；没有证书则不需要配置，启用普通tcp连接
+		<owner-id value="xxxx" /><!-- xxxx 为注册成功返回的用户ID -->
+		<access-token value="nnnnn"/><!--访问token，必须为数字【可选配】 -->
+		<ssl-create-certfile value="true" /><!-- 如未用如下选项指定证书，则自动生成证书【必须确保安装openssl】，默认为 false 代表无需自动生成 -->
+          <!-- 如果自己有证书及私钥，则配置如下项，启动安全的SSL通道，其中文件名需要配置正确；没有证书则不需要配置，可启用上面自动生成证书选项
 	        <ssl-cacert-file value="xxx.crt"/>
 	        <ssl-privatekey-file value="xxx.key"/>
          -->
@@ -72,6 +136,7 @@
 ```
 ......
    <app-parameter>
+       	     <ssl-create-certfile value="true" />
       <!-- 如果代理服务器启动安全的SSL通道，这里必须配置证书及私钥
 	     <ssl-cacert-file value="xxx.crt"/>
 	     <ssl-privatekey-file value="xxx.key"/>
@@ -80,8 +145,8 @@
    <moudle-parameter>
      ......
    </moudle-parameter>
-    <!-- 配置上述代理服务器的ip或域名+端口，注意：ip必须为公网IP。ssl选项必须配置正确，如果代理服务器有证书且生效则配置为true否则为false -->
-    <channel address="xxx.xxx.xxx.xxx:9001" ssl="false" token="nnnnn" /><!--访问token，必须与代理服务器一致，如果没有则不配 -->
+    <!-- 配置上述代理服务器的ip或域名+端口，注意：ip必须为公网IP。ssl选项必须配置正确，如果代理服务器有证书（包括自动生成证书）且生效则配置为true否则为false -->
+    <channel address="xxx.xxx.xxx.xxx:9001" ssl="true" token="nnnnn" /><!--访问token，必须与代理服务器一致，如果没有则不配 -->
 ```
 * 支持p2p通道<br>
  * 使用TCP协议进行p2p穿透，提升安全性<br>
@@ -98,42 +163,136 @@
 	<tr><td>NAT3-4</td><td>NAT4</td><td>NO</td></tr>
  </table>
  
-* 支持外网发布（有违安全设计理念，免费版不提供支持）<br>
+* 支持外网发布（有违安全设计理念，v0.31版本开放）<br>
  * 其它内网穿透工具的主推模式，将内网服务直接映射到外网端口<br>
-
+* 支持服务端之间的P2P端口映射（v0.31及以后版本） <br>
+  * 具体配置主要通过 ip@index方式支持<br>
+  
+<details>
+<summary>
+	<mark><font size=6 color=darkred>附：主要功能简述</font></mark>
+</summary>
+	
+```	
+1、支持基于tcp的P2P连接隧道
+	。安全可靠，避免Qos
+2、支持所有基于tcp的各类协议”透明代理”
+	。可代理所有内网tcp服务（ssh、rdp、smb、vnc、摄像头、数据库服务等）
+3、支持HTTP、HTTPS to HTTP
+	。支持http-head rewrite，支持将https服务代理成http
+4、支持udp over tcp
+	。支持udp协议的服务代理
+5、透明方式（无需关注ipv6地址）支持ipv6隧道
+	。自动建立v6隧道，访问时始终使用v4地址
+6、支持自定义代理（需外网ip），接管所有数据转发
+	。无法p2p时，自动连接自定义代理，实现数据转发
+7、自定义代理支持token及白名单配置
+	。支持安全机制
+8、支持多级级联代理
+	。支持链式代理，支持多级无环代理
+9、支持手机作为访问唯一入口 —— 安全 + 移动便捷
+	。手机在手、随用随有
+10、端口映射全动态配置，支持映射配置“热拔插”
+	。代理增、删及时生效，无需重启
+11、所有功能app端“一点配置”
+	。客户端一点配置，服务端运行时免配
+12、支持P2P隧道及自定义代理隧道自动探测及连接
+	。无需干预，app自动连接，自动重试
+13、支持动态协商端口,支持指定协商端口
+	。默认动态端口协商，支持配合防火墙配置协商端口
+14、支持隧道连接优先级（P2P—>自定义代理-->官网代理）
+	。数据传输时，支持优先级隧道
+15、支持ssl加密隧道
+	。支持P2P及代理隧道ssl加密，确保数据传输不泄密
+16、支持流量限制
+	。支持进行网络带宽限制，默认不限流
+17、支持网络切换（如：移动<—>wifi）自动识别+自动连接
+	。app端智能重连，始终确保服务可用性
+18、支持不同局域网主机间端口映射 —— 如有一端主机有外网ip则可直接外网访问（version > v0.31）
+	。支持服务端组网映射，流量无需通过手机app（传统穿透模式）
+19、app支持服务端模式，可以将手机配置成服务端
+	。android手机可作为服务端
+20、支持远程文件管理功能：浏览、上传、下载、删除，支持断点续传（version >= v0.31.6）
+	。在有p2p或自定义代理时，激活文件管理功能，可对手机和服务端电脑文件进行基本操作
+21、支持内置socks5、http代理（version >= v0.32.1）
+	。毕竟有三方专业工具如ss5、squid等，因此socks5及http代理是可选的功能
+22、socks5、http代理支持域名和IP白名单（version >= v0.32.1）
+	。域名白名单支持四种模式匹配(完全匹配、向前匹配、向后匹配、中间匹配)，默认配置文件名.white_list
+	。IP白名单支持CIDR格式ip-range配置，默认配置文件名.ipchecks
+。。。待续
+	
+```
+</details>
+	
 ## 使用指南:<br>
-<a href=https://github.com/lazy-luo/smarGate/wiki/常用服务穿透配置>【常用服务配置】</a><br>
-### 1、下载android app（app-release.apk包含客户端和服务端）支持armv7及arm64 cpu架构<br>
-### 2、注册新用户（邀请码必填，为数字，可任意填。ps：如果必填信息未填完整,或包含中文字符，会注册失败）<br>
-![login](https://github.com/lazy-luo/smarGate/blob/master/res/login.png)<br>
-![register](https://github.com/lazy-luo/smarGate/blob/master/res/register.png)<br>
-### 3、注册成功后请务必记住返回的服务ID(N) 【重要】：注册成功后务必在1小时内完成首次登录<br>
-![register result](https://github.com/lazy-luo/smarGate/blob/master/res/registerok.png)<br>
-### 4、下载内网服务器适合的服务端版本（目前支持linux-x86-32/64，windows，及linux-arm【树莓派、群晖】,另：Android app自带服务端模式）<br>
-### 5、解压服务端压缩包，修改配置文件(conf-proxy.xml):<br>
+<a href="https://www.bilibili.com/video/BV1LM411k7Rf">三方视频教学- B站</a><br><br>
+<a href="https://www.baidu.com/s?wd=smargate%20内网穿透">使用实践-度娘</a><br><br>
+<a href="https://www.google.com/search?q=smargate+内网穿透">使用实践-google</a>
+### 1、下载app && 注册新用户
+* 下载android app（app-release.apk包含客户端和服务端）支持armv7及arm64 cpu架构<br>
+* 注册新用户（邀请码必填，为数字，可任意填。ps：如果必填信息未填完整,或包含中文字符，会注册失败）<br>
+* 注册成功后请务必记住返回的服务ID(N) 【重要】：注册成功后务必在1小时内完成首次登录<br>
+<details>
+<summary>
+	<mark><font size=5 color=darkred>展开图示</font></mark>
+</summary>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/login.png" /><br>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/reg.png" /><br>
+</details>
+
+### 2、下载服务端 && 配置
+* 下载内网服务器适合的服务端版本（目前支持linux-x86-32/64，windows，及linux-arm【树莓派、群晖】,另：Android app自带服务端模式）<br>
+* 解压服务端压缩包，修改配置文件(conf-proxy.xml):<br>
+<details>	
+<summary>
+	<mark><font size=5 color=darkred>配置样例</font></mark>
+</summary>
+	
 ```
  <?xml version="1.0" encoding="GBK"?>
    <app-config code="PROXY" name="proxy-server">
+       <app-parameter>
+	<!-- [ none | first | only ] ,none is default. 为P2P连接启用SSL加密，only代表只接受加密连接 -->
+	<ssl-tunnel-required value="first" />
+	<!-- 如未用如下选项指定证书，则自动生成证书【必须确保安装openssl】，默认为 false 代表无需自动生成 -->
+	<ssl-create-certfile value="true" /> 
+ <!-- 以下选项仅适用dynamic下的mini版本，指定ssl库及crypto库实际文件，linux下可由：ldd $(which openssl)|grep -E "libssl|libcrypto"|awk '{print $1}' 获取
+	<libssl value="libssl.so" />
+	<libcrypto value="libcrypto.so" />
+ -->
+       </app-parameter>
       <moudle-parameter>
        <log-level value="LOG_ERROR"/>
        <log-write-mode value="CONSOLE_ONLY"/>
        <app-name value="xxxxx [name of service points]." /><!-- need modify -->
        <app-description value="yyyyy [description of service points]" /><!-- need modify -->
-        <user-audit value="N:index"/><!-- need modify (N 为注册成功返回的服务ID，index为自定义的服务端实例序号，建议从1开始，不能重复. 例如:[12345:1])-->
+	<!-- user-audit need modify (N 为注册成功返回的服务ID，index为自定义的服务端实例序号，建议从1开始，不能重复. 例如:[12345:1])-->
+        <user-audit value="N:index"/>
    </moudle-parameter>
  </app-config>
 ```
-### 6、执行服务端命令(参数说明 i:最大接入连接数,o:最大接出连接数,w:最大线程数)<br>
+</details>
+
+### 3、运行内网服务端(命令参数说明 i:最大接入连接数,o:最大接出连接数,w:最大线程数)<br>
 * linux下执行命令：chmod +x proxy_server && nohup ./proxy_server -i1000 -o1000 -w8 >/dev/null & <br>
 * windows下执行命令：proxy_server.exe -i1000 -o1000 -w8 <br>
 * Android 手机/设备：运行app -〉编辑模式下，配置服务端信息 -〉打开“服务端”开关 -〉重启app <br>
-### 7、使用注册时的用户名/密码登陆手机客户端<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper1.png)<br>
-### 8、在客户端中可以看到上线的服务端，可以在客户端上定义端口反弹规则<br>
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper2.png)<br>
-### 配置中的“远程ip”为“访问点”对应内网中的某台主机ip（localhost或127.0.0.1代表内网server端所在机器本身）
-![operator](https://github.com/lazy-luo/smarGate/blob/master/res/oper3.png)<br>
-### 9、电脑或手机可以直接访问手机客户端设置的服务（如ssh、http等）<br>
+* OpenWrt mips设备安装请见：<a href=https://github.com/lazy-luo/smarGate/issues/65>【MIPS linux下正确使用方式】</a><br>
+### 4、登陆手机app && 配置端口映射 <a href="https://github.com/lazy-luo/smarGate/wiki/常用服务穿透配置">【常用服务配置】</a><br>
+* 在客户端中可以看到上线的服务端（“访问点”），可以在客户端上定义端口映射规则<br>
+<details>
+<summary>
+	<mark><font size=5 color=darkred>展开图示</font></mark>
+</summary>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/proxy.png" /><br>
+<b>服务端间端口映射配置需要在ip后加上服务端index序号，格式为：ip@idx</b>
+<img src="https://github.com/lazy-luo/smarGate/blob/master/res/server-proxy.png" /><br>
+</details>
+
+### 5、电脑或手机可以直接访问手机客户端设置的服务（如ssh、http等）<br>
+
+</details>
+
 ## 补充说明:<br>
 * 所有版本已经打包了依赖，开箱即用.<br>
 * 系统将自动清除30天以上未使用的“僵尸账号”.<br>
@@ -144,6 +303,11 @@
 >> 1、设置 -> 无线及网络 -> WLAN -> 系统休眠保持连接  "允许" （否则，系统休眠会被断连）<br>
 >> 2、设置 -> 无线及网络 -> 移动网络 -> 高级 ->始终保持数据连接 "允许"<br>

+<details>
+<summary>
+	<mark><font size=5 color=darkred>常见问题答疑</font></mark>
+</summary>
+	
 * Q：如何下载安装 android app？<br>
  >> 1、用android手机浏览器打开 https://github.com/lazy-luo/smarGate/raw/master/app-release.apk <br>
  >> 2、弹出框中下载安装 <br>
@@ -182,13 +346,16 @@
   ![ipv6 p2p](https://github.com/lazy-luo/smarGate/blob/master/res/ipv6p2p.png)<br>
   >> A:自定义路由标识为：<br>
   ![userdefineproxyer p2p](https://github.com/lazy-luo/smarGate/blob/master/res/userdefineproxyer.png)<br>
-   
+
+</details>
+
 ## 最佳实践<br>  
 * 以下为推荐使用的最佳实践，供参考：<br> 
  1、android客户端设置为“自动登录”，免除每次输入用户名/密码的麻烦;<br> 
  2、android客户端设置好后让其在后台运行，如果始终保持前台会定时刷新，webview控件空耗电，你懂的;<br>
  3、服务端始终保持后台运行，安全放心，只有你自己才能访问；<br>
-  ...待补充...<br>
+  ...使用场景...<br>
+  <a href="https://cloud.tencent.com/developer/article/1926888">【家用摄像头P2P直连】</a><br>
 ## 免责申明<br>  
 * 请您仔细阅读以下申明，您在使用smarGate工具软件，表明您对以下内容的接受：<br> 
  1、严禁使用本软件从事计算机黑客以及其他任何危害计算机信息网络安全的行为;<br> 
@@ -208,11 +375,212 @@ ps：捐赠建议附上注册用户名<br>
 <summary>
 	<mark><font size=5 color=darkred>更新历史</font></mark>
 </summary>
+
+### 2024-08-20<br>
+1、提升文件传输速度<br>
+2、其它优化<br>
+
+### 2024-08-17<br>
+1、修复网络出口变化时服务端长时间丢失的BUG<br>
+2、改进P2P连接机制，提升P2P连接成功率<br>
+
+### 2024-08-06更新到v0.40.3<br>
+1、修复windows下代理连接偶发断开的BUG<br>
+2、修复windows下低带宽时高CPU占用的BUG<br>
+3、服务端支持动态资源回收，适合内存限制设备<br>
+4、新增编译包，支持LoongArch64架构<br>
+5、版本更新到v0.40.3<br>
+
+### 2024-07-11<br>
+1、修复代理地址错误显示为localhost的BUG<br>
+2、修复windows下偶发coredump的BUG<br>
+
+### 2024-05-11<br>
+1、启用异步连接，防止慢连接阻塞正常连接<br>
+2、修复链式代理、Socks5、http代理在特定情况下无法释放连接的BUG<br>
+
+### 2024-04-27更新到v0.40.2：<br>
+1、改进P2P的连接成功率<br>
+2、修复部分已知BUG<br>
+3、版本更新到v0.40.2<br>
+  
+### 2024-04-18：<br>
+1、收藏夹BUG修复<br>
+2、新增服务备注功能，便于服务识别及打标<br>
+  
+### 2024-04-10：<br>
+1、VIP支持百度地图定位<br>
+* APP服务端支持GPS定位
+* 百度地图开放平台，自行申请“浏览器端”AK，然后将AK配置到SG客户端中，即可正常使用地图定位功能
+  
+2、版本更新到v0.40.1<br>
+
+### 2024-02-02：<br>
+1、APP易用性更新，后续版本将采用全新界面<br>
+2、修复特定情况无法创建ipv6隧道的BUG<br>
+3、APP增加收藏夹功能，常用连接一览无余<br>
+4、版本更新到v0.32.3<br>
+
+### 2023-11-28：<br>
+1、老幼安全防护，支持GPS定位，便于掌握关怀对象所在经纬度（自行手动授权）<br>
+* 此功能仅支持Android服务端<br>
+* 坐标获取成功，则经纬度坐标将会自动复制到剪贴板<br>
+
+2、其它优化<br>
+
+### 2023-11-17更新到v0.32.2：<br>
+1、socks协议支持用户名/密码验证<br>
+2、支持保存及播放录音（VIP）<br>
+3、版本更新到v0.32.2<br>
+
+### 2023-10-25更新到v0.32.1：<br>
+1、修复bug<br>
+2、完善支持socks协议(仅支持ipv4 tcp)<br>
+3、完善支持HTTP proxy协议<br>
+4、APP支持VIP功能许可<br>
+5、版本更新到v0.32.1<br>
+
+### 2023-09-08更新到v0.31.12：<br>
+1、修复bug<br>
+2、试验性支持socks协议(仅支持ipv4 tcp)<br>
+3、新增内置支持HTTP proxy协议<br>
+4、内存回收（适用于内存限制设备）<br>
+5、全异步方式提升响应速度 <br>
+6、版本更新到v0.31.12<br>
+
+### 2023-08-29更新到v0.31.11：<br>
+1、文件管理支持默认按时间排序<br>
+2、新增macos M1/M2支持<br>
+3、版本更新到v0.31.11<br>
+
+### 2023-06-03更新到v0.31.10：<br>
+1、网络可靠性优化<br>
+2、优化网络传输效率<br>
+3、版本更新到v0.31.10<br>
 	
+### 2023-03-04更新到v0.31.9：<br>
+1、APP服务端模式新增“无障碍”服务，用户自行打开,实现自动重启<br>
+2、APP端操作优化：新增点击操作自动填充功能，便于新增配置<br>
+3、修复mips路由器下安装自定义代理无法提供服务的BUG<br>
+4、提供服务端自定义代理域名定时ip刷新功能（动态域名）<br>
+5、其它优化<br>
+
+### 2022-12-14更新到v0.31.8：<br>
+1、APP服务端模式支持配置自定义代理及SSL加密<br>
+2、自定义代理服务器支持SSL自签名证书下发<br>
+3、其它优化<br>
+
+### 2022-11-04更新到v0.31.7：<br>
+1、提供一键版本升级功能，无需手动更新<br>
+* 此功能版本源指向github，如无法更新，请确认github连通性<br>
+* 更新后一般10-20秒左右恢复可用<br>
+* 服务端提供自动更新选项（每天检测一次），默认关闭<br>	
+```
+<auto-update value="true" />
+```
+
+### 2022-10-20更新到v0.31.6：<br>
+1、文件管理增加删除文件功能<br>
+2、文件管理增加断点续传功能<br>
+3、文件管理增加文件时间<br>
+4、文件管理windows下增加切换磁盘操作<br>
+* 此功能仅在有P2P连接或自定义代理连接时激活<br>
+* 通过拖拽模式进行上传和下载<br>	
+* 通过双击弹出文件删除确认框<br>		
+
+### 2022-10-14更新到v0.31.5：<br>
+1、修复自定义代理短间隔重连情况下连不上的BUG<br>
+2、新增了简易文件上传下载功能，可方便同步异地文档<br>
+* 此功能仅在有P2P连接或自定义代理连接时激活<br>
+* 通过拖拽模式进行上传和下载<br>	
+	
+3、版本更新到v0.31.5<br>
+	
+### 2022-09-05：<br>
+1、解决自定义代理连接异常断开BUG<br>
+2、版本保持不变<br>
+
+### 2022-08-30更新到v0.31.4：<br>
+1、降低运行时虚拟内存占用<br>
+2、常规性优化<br>
+3、版本更新到v0.31.4<br>
+
+### 2022-08-14更新到v0.31.3：<br>
+1、修复mips架构系统无法连接自定义代理的BUG<br>
+2、修复HTTP协议加载完成时间长的问题<br>
+3、版本更新到v0.31.3<br>
+
+### 2022-08-06更新到v0.31.2：<br>
+1、修复Windows平台偶发闪退BUG，增强稳定性<br>
+2、P2P连接及自定义代理进行keep-alive操作，尽可能避免重连时间窗口，提升可用性<br>
+3、其它可用性优化,降低app能耗<br>
+4、版本更新到v0.31.2<br>
+
+### 2022-07-28更新到v0.31.1：<br>
+1、修复特定情况下，服务端重启，组网配置不生效的BUG<br>
+2、修复NAT1服务器P2P协商BUG<br>
+3、版本更新到v0.31.1<br>
+
+### 2022-07-22更新到v0.31: <br>
+1、提供服务端之间端口映射，服务端如有公网ip则可直接从公网访问(仅需在app上配置)
+* 配置方式，在原有映射配置“远程ip”配置中支持：ip@idx方式进行配置(idx为不同“访问点”的序号)
+* 此种方式配置的“本地端口”实际是在当前“访问点”所在主机上（注意：不在APP所在手机上）
+* 服务端间如能P2P成功（或自定义代理连接成功）则配置的映射将生效，否则不生效
+* APP上只有在P2P连接时才会定时刷新服务端间代理状态
+* 配置成功后需要等待10秒左右才能在App上看到实际状态
+
+2、版本升级到v0.31<br>
+
+### 2022-06-30: <br>
+1、修复32位大端机器运行服务端，无法正常代理的BUG<br>
+2、版本暂保持不变<br>
+
+### 2022-05-17: <br>
+1、服务端支持自动生成自签名证书（默认文件名为server.xxx）<br>
+-->a、配置ssl-create-certfile选项 <br>
+```
+<app-parameter>	
+  <ssl-create-certfile value="true" />
+...
+</app-parameter>
+```
+-->b、确保安装openssl <br>
+-->c、不要指定证书文件（不配置 ssl-cacert-file 及 ssl-privatekey-file）<br>
+	
+### 2022-05-04: <br>
+1、支持riscv32/64架构，编译时同mips架构使用musl库进行链接<br>
+2、优化网络传输层<br>
+3、版本暂保持不变<br>
+	
+### 2022-02-07更新到v0.30.4: <br>
+1、提供mips64el支持<br>
+2、增加app端系统图标显示 <br>
+3、其它优化<br>
+	
+### 2021-11-06更新到v0.30.3: <br>
+1、修复app端内存占用只显示jvm不包含native的BUG<br>
+2、优化网络引擎，提升高并发下的稳定性及公平性 <br>
+	
+### 2021-10-17更新到v0.30.2: <br>
+1、自定义代理支持ssl验证<br>
+2、网络P2P情况下，支持配置成ssl隧道（ **要求服务端必须配置证书** ）<br>
+```
+<app-parameter>
+  <ssl-tunnel-required value="first" /><!-- 取值有3个：none、first、only -->
+  ...
+</app-parameter>
+```
+3、其他优化<br>
+	
+### 2021-09-24更新到v0.30: <br>
+1、提供了Android服务端开机自启动支持(仅服务端模式，且需要自行手动授权)<br>
+2、网络P2P情况下，Android服务端支持实时音频（麦克风权限需要自行手动授权，必须打开SG界面才能录音）<br>
+3、其他优化<br>
+
 ### 2021-05-03更新到v0.29.2: <br>
 1、修复Android高版本无法退出问题<br>
 2、优化网络:修复了可能带来网络延迟的BUG，进一步提升网络传输速度<br>
-3、提供版本号展示，便于客户端及服务端<br>
+3、提供版本号展示，便于客户端及服务端版本管理<br>
 4、优化app cpu占用，降低能耗<br>

 ### 2021-03-05更新到v0.29: <br>