Upgrade core engine to v3.3.25

Instadrain + hard-remove for stuck draining writers, runtime
guardrails, ME writer draining fixes. Should reduce random drops.

Author: SamNet-dev

.github/workflows/build-engine.yml

@@ -6,11 +6,11 @@ on:
       telemt_commit:
         description: 'Telemt commit hash to build from'
         required: true
-        default: '1544e3f'
+        default: '67dc1e8'
       version_tag:
-        description: 'Version tag (e.g. 3.3.22-1544e3f)'
+        description: 'Version tag (e.g. 3.3.25-67dc1e8)'
         required: true
-        default: '3.3.22-1544e3f'
+        default: '3.3.25-67dc1e8'
 
 env:
   REGISTRY: ghcr.io

README.md

@@ -516,14 +516,16 @@ mtproxymax telegram remove              # Remove bot completely
 - **`--no-restart` flag** — `secret add/remove/add-batch/remove-batch --no-restart` for scripting and automation
 - **TUI options** — Interactive menu options [6] and [7] for batch operations
 
-### v1.0.0 — Engine v3.3.22
+### v1.0.0 — Engine v3.3.25
 
-**Engine Upgrade (v3.3.3 → v3.3.22):**
+**Engine Upgrade (v3.3.3 → v3.3.25):**
 
+- **Instadrain + Hard-Remove** — Writers stuck in draining state are now force-removed, reducing random connection drops
+- **Runtime Guardrails** — Internal safety checks to prevent resource exhaustion
+- **ME Writer Draining Fixes** — Stuck draining writers properly cleaned up instead of hanging
 - **Adaptive Buffers** — Dynamic buffer sizing: less RAM at low load, more throughput at high load
 - **Session Eviction** — Smarter cleanup of idle/dead connections under memory pressure
 - **Flow Performance** — 3x faster D2C flush (1500μs → 500μs) + immediate ACK flushing for lower latency
-- **Tighter Timeouts** — Keepalive 60s → 15s, ACK 300s → 90s for faster dead-connection cleanup
 - **Hot-Reload Fixes** — More reliable config reload without restart
 - **Configurable max_connections** — New option to cap total connections (default: 10000)
 - **Event-Driven ME** — Pool switches from busy-polling to event-driven, reducing CPU on idle servers

mtproxymax.sh

@@ -22,8 +22,8 @@ UPSTREAMS_FILE="${INSTALL_DIR}/upstreams.conf"
 BACKUP_DIR="${INSTALL_DIR}/backups"
 CONTAINER_NAME="mtproxymax"
 DOCKER_IMAGE_BASE="mtproxymax-telemt"
-TELEMT_MIN_VERSION="3.3.22"
-TELEMT_COMMIT="1544e3f"  # Pinned: v3.3.22 — Adaptive buffers, session eviction, flow perf, hot-reload fixes
+TELEMT_MIN_VERSION="3.3.25"
+TELEMT_COMMIT="67dc1e8"  # Pinned: v3.3.25 — Instadrain, runtime guardrails, ME writer draining fixes
 GITHUB_REPO="SamNet-dev/MTProxyMax"
 REGISTRY_IMAGE="ghcr.io/samnet-dev/mtproxymax-telemt"