Adaptive Failover: Cloudflare Workers as the default with CDN-fronted auth on all 33 servers; failover later reverted to the primary api.orbai.world endpoint after the Workers route proved unreliable on some restricted networks
VLESS: CDN WebSocket ALPN, DNS-over-HTTPS, and transport reordering tuned for high-censorship networks
Smart Connect: Bridge execution wired into Smart Connect
Stability: iOS tunnel stability and protocol-switch fixes; Android fdsan crash fix; WireGuard wg-go isolated in a separate Android process to prevent Go runtime conflicts with VLESS/gomobile
OrbNET Go Backend
Amazon IAP: Amazon in-app purchase provider, gRPC proto updates, and SSH tunnel support
Subscriptions: Derive is_token_based from plan price on all subscription updates
OrbMESH Server
SSH Tunneling: SSH tunnel handlers, health endpoint, a dedicated SSH TUN device (tun-ssh0, 10.12.0.0/24), and SSH bridge mode with NAT/iptables routing
OrbConnect Keepalive: Heartbeat to keep tunnels stable on high-latency, restricted networks
VLESS Reality: Reality port architecture (2083), Dockerfile entrypoint extraction, and bridge config updates