diff --git a/trusted-network-gateway-2.2.1.tar.gz b/trusted-network-gateway-2.2.4.tar.gz
similarity index 84%
rename from trusted-network-gateway-2.2.1.tar.gz
rename to trusted-network-gateway-2.2.4.tar.gz
index 4bb2adfc1608acd1fa57bbc58691fc5c1ada6fe7..8327082fc633e4148bb767efd1fc0c569966b535 100644
Binary files a/trusted-network-gateway-2.2.1.tar.gz and b/trusted-network-gateway-2.2.4.tar.gz differ
diff --git a/trusted-network-gateway.spec b/trusted-network-gateway.spec
index c5c7e331e7fb13a4a9e3357e4dedb632b096037a..abd96b71864c1dbf71bf642199664cfa49f72112 100644
--- a/trusted-network-gateway.spec
+++ b/trusted-network-gateway.spec
@@ -1,12 +1,12 @@
 %global debug_package %{nil}
 
 Name: trusted-network-gateway
-Version: 2.2.1
+Version: 2.2.4
 Release: 1%{?dist}
 Summary: Trusted Network Gateway
 Group: Applications/System
-License: ASL 2.0
-URL: www.alibaba.com
+License: Apache-2.0
+URL: https://www.alibaba.com
 Source0: https://github.com/inclavare-containers/tng/releases/download/v{version}/trusted-network-gateway-%{version}.tar.gz
 
 Requires: curl iptables openssl iproute
@@ -48,7 +48,7 @@ A tool for establishing secure communication tunnels in confidential computing.
 %build
 # Build tng
 pushd src/
-cargo install --locked --path . --root %{_builddir}/%{name}-%{version}/install/tng/
+RUSTFLAGS="--cfg tokio_unstable" cargo install --locked --path ./tng/ --root %{_builddir}/%{name}-%{version}/install/tng/
 popd
 
 
@@ -72,6 +72,26 @@ install -p -m 755 src/dist/trusted-network-gateway.service %{buildroot}/usr/lib/
 
 
 %changelog
+* Thu Jul  3 2025 Kun Lai <laikun@linux.alibaba.com> - 2.2.4-1
+- ingress/socks5: add dst_filters option for filtering destination domains
+- egress: add direct_forward option to allow traffic forwarded directly
+
+
+* Tue Jun 24 2025 Kun Lai <laikun@linux.alibaba.com> - 2.2.3-1
+- ingress/netfilter: add matching dst ip address with ip rannge or ipset
+- optimize network throughput
+- cli: add --tokio-console option
+- egress/transport: add timeout for waiting client tcp connection
+- iptables: fix capturing traffics target to docker -p mapping port
+- ingress/socks5: add "socks5" ingress type which expose a socks5 server to client
+
+
+* Tue Jun 17 2025 Kun Lai <laikun@linux.alibaba.com> - 2.2.2-1
+- egress/netfilter: Fix tng traffic not captured when tng client server run on same node.
+- egress/netfilter: Fix behavior when capture_cgroup is empty and add check for cgroup v2.
+- ingress/http_proxy: fix error when both domain and domain_regex are not set
+
+
 * Thu May 15 2025 Kun Lai <laikun@linux.alibaba.com> - 2.2.1-1
 - Fix broken trusted-network-gateway.service