主 题：sing box 居然不声不响支持了三层转发
发 布 者：Simonzxm
标签分类： 技术
时 间：2026-09-23 14:41:15
内容预览：注：以下内容与代理无关，仅讨论组网技术https://github.com/SagerNet/sing-box/releases/tag/v1.14.0好像是三个星期前的事了Building on the ICMP proxy support introduced in sing-box 1.13.0, TCP and UDP traffic from L3 inbounds (TUN, WireGuard, and Tailscale) can now be forwarded directly to WireGuard and Tailscale endpoints at L3, without going through L3 to L4 translation.The new bridge outbound is the L3 counterpart of direct: it forwards L3 traffic (TCP, UDP and ICMP) from a TUN or other L3 endpoints directly out of a network interface. It requires privileges and is supported on Linux, macOS, Windows (via WinDivert), rooted Android, and jailbroken iOS. It also works with the preferred_by route rule item.试了一下可以结合组网工具（如 easytier）和隧道（如 gre）进行使用，最后效果如图（这是连的软路由）感觉可以把 dae 一脚踢死了（x
直达链接： https://www.nodeseek.com/post-944259-1
发 布 者：Simonzxm
标签分类： 技术
时 间：2026-09-23 14:41:15
内容预览：注：以下内容与代理无关，仅讨论组网技术https://github.com/SagerNet/sing-box/releases/tag/v1.14.0好像是三个星期前的事了Building on the ICMP proxy support introduced in sing-box 1.13.0, TCP and UDP traffic from L3 inbounds (TUN, WireGuard, and Tailscale) can now be forwarded directly to WireGuard and Tailscale endpoints at L3, without going through L3 to L4 translation.The new bridge outbound is the L3 counterpart of direct: it forwards L3 traffic (TCP, UDP and ICMP) from a TUN or other L3 endpoints directly out of a network interface. It requires privileges and is supported on Linux, macOS, Windows (via WinDivert), rooted Android, and jailbroken iOS. It also works with the preferred_by route rule item.试了一下可以结合组网工具（如 easytier）和隧道（如 gre）进行使用，最后效果如图（这是连的软路由）感觉可以把 dae 一脚踢死了（x
直达链接： https://www.nodeseek.com/post-944259-1
