Upgrade engine to v3.3.38 — conntrack control, new relay methods, ME2DC fast init

Author: SamNet-dev

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '8ac1a00'
+        default: 'e630ea0'
       version_tag:
-        description: 'Version tag (e.g. 3.3.36-8ac1a00)'
+        description: 'Version tag (e.g. 3.3.38-e630ea0)'
         required: true
-        default: '3.3.36-8ac1a00'
+        default: '3.3.38-e630ea0'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -585,7 +585,7 @@ mtproxymax telegram remove              # Remove bot completely
 
 ## 📋 Changelog
 
-### v1.0.4 — Replication, Engine v3.3.36, SNI Policy & Metrics Dashboard
+### v1.0.4 — Replication, Engine v3.3.38, SNI Policy & Metrics Dashboard
 
 - **Replication** — sync config from master to slave servers via rsync+SSH with systemd timer
 - **Auto-exclude** — `settings.conf` and `replication.conf` are never synced to slaves, preserving their role and local state
@@ -595,14 +595,17 @@ mtproxymax telegram remove              # Remove bot completely
 - **Role guards** — `replication add/remove/sync` are blocked with a clear error on slave servers
 - **Sync script auto-update** — manual `sync` always regenerates the script from current binary
 
-**Engine Upgrade (v3.3.31 → v3.3.36):**
+**Engine Upgrade (v3.3.31 → v3.3.38):**
 
 - **Apple/XNU Connectivity Fixes** — Resolves connection issues for iOS/macOS Telegram clients
 - **ME Rewrite** — Hybrid routing loop, ArcSwap snapshots, parallel health checks, refined quarantine, tiered backpressure
+- **Conntrack Control** — Automatic conntrack table management under connection pressure with configurable watermarks
+- **New Relay Methods** — Improved middle/direct relay with adaptive buffers
+- **ME2DC Fast Init** — Faster startup, unstoppable initialization (now enabled by default)
 - **Memory Optimizations** — Buffer pool trim, session vec shrink, reduced stats memory footprint
 - **Upstream Timeout Tuning** — `tg_connect` timeout now applied to DC TCP connect attempts, prevents hanging connections
 - **Active IPs API** — New `/v1/stats/users/active-ips` endpoint
-- **Configurable `listen_backlog`** — Tunable TCP listen queue for high-connection servers
+- **Config Fallback** — Engine gracefully falls back if primary config fails to load
 
 **New Features:**
 

mtproxymax.sh

@@ -26,8 +26,8 @@ REPLICATION_FILE="${INSTALL_DIR}/replication.conf"
 REPLICATION_SSH_DIR="${INSTALL_DIR}/.ssh"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.3.36"
-TELEMT_COMMIT="8ac1a00"  # Pinned: v3.3.36 — Apple/XNU fixes, memory optimizations, upstream timeout tuning
+TELEMT_MIN_VERSION="3.3.38"
+TELEMT_COMMIT="e630ea0"  # Pinned: v3.3.38 — conntrack control, new relay methods, ME2DC fast init
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="ghcr.io/samnet-dev/mtproxymax-telemt"