Upgrade core engine to v3.3.22

Adaptive buffers, session eviction, 3x faster D2C flush, hot-reload
fixes. Tightened keepalive (15s) and ACK (90s) timeouts.

Author: SamNet-dev

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '2be3e4a'
+        default: '1544e3f'
       version_tag:
-        description: 'Version tag (e.g. 3.3.18-2be3e4a)'
+        description: 'Version tag (e.g. 3.3.22-1544e3f)'
         required: true
-        default: '3.3.18-2be3e4a'
+        default: '3.3.22-1544e3f'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -516,21 +516,22 @@ mtproxymax telegram remove              # Remove bot completely
 - **`--no-restart` flag** — `secret add/remove/add-batch/remove-batch --no-restart` for scripting and automation
 - **TUI options** — Interactive menu options [6] and [7] for batch operations
 
-### v1.0.0 — Engine v3.3.18
+### v1.0.0 — Engine v3.3.22
 
-**Engine Upgrade (v3.3.3 → v3.3.18):**
+**Engine Upgrade (v3.3.3 → v3.3.22):**
 
-- **Event-Driven ME** — Pool switches from busy-polling to event-driven, reducing CPU usage on idle/low-traffic servers
+- **Adaptive Buffers** — Dynamic buffer sizing: less RAM at low load, more throughput at high load
+- **Session Eviction** — Smarter cleanup of idle/dead connections under memory pressure
+- **Flow Performance** — 3x faster D2C flush (1500μs → 500μs) + immediate ACK flushing for lower latency
+- **Tighter Timeouts** — Keepalive 60s → 15s, ACK 300s → 90s for faster dead-connection cleanup
+- **Hot-Reload Fixes** — More reliable config reload without restart
+- **Configurable max_connections** — New option to cap total connections (default: 10000)
+- **Event-Driven ME** — Pool switches from busy-polling to event-driven, reducing CPU on idle servers
 - **CPU/RAM Hot-Path Optimization** — Removed hot-path obstacles for lower resource usage under load
-- **Hot-Reload Debounce** — Config reload requires 2 stable snapshots, preventing partial-write races during secret changes
-- **ME Writer Rebinding** — Lifecycle and consistency fixes: proper cleanup of stale writers, faster recovery after drops
-- **Source-IP ME Routing** — Routing decisions now factor in source IP for better multi-homed server support
-- **ME Gate Fixes** — Dead writer bindings cleaned up immediately instead of silently wasting resources
-- **ME Writer Selection** — Smarter active-by-endpoint writer picking for better DC routing
-- **DC-to-Client Tuning** — Fine-tuned data path from datacenter to client connections
+- **ME Writer Rebinding** — Lifecycle fixes: proper cleanup of stale writers, faster recovery after drops
+- **Source-IP ME Routing** — Routing decisions factor in source IP for multi-homed servers
 - **ME/DC Reroute** — Dynamic rerouting when preferred datacenter path degrades
 - **Per-Upstream Runtime Selftest** — Built-in diagnostics for upstream connectivity
-- **PROXY Real IP in Logs** — Real client IP now visible in PROXY protocol logs
 
 ### v1.0.0 — Per-User Limits + Telegram Bot
 

mtproxymax.sh

@@ -22,8 +22,8 @@ UPSTREAMS_FILE="${INSTALL_DIR}/upstreams.conf"
 BACKUP_DIR="${INSTALL_DIR}/backups"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.3.18"
-TELEMT_COMMIT="2be3e4a"  # Pinned: v3.3.18 — Hot-reload debounce, ME writer rebinding fixes, src-IP routing, TPL-3 license
+TELEMT_MIN_VERSION="3.3.22"
+TELEMT_COMMIT="1544e3f"  # Pinned: v3.3.22 — Adaptive buffers, session eviction, flow perf, hot-reload fixes
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="ghcr.io/samnet-dev/mtproxymax-telemt"
 
@@ -1042,8 +1042,8 @@ metrics_whitelist = ["127.0.0.1", "::1"]
 [timeouts]
 client_handshake = 30
 tg_connect = 10
-client_keepalive = 60
-client_ack = 300
+client_keepalive = 15
+client_ack = 90
 
 [censorship]
 tls_domain = "${domain}"