Commit Graph

2337 Commits

Author SHA1 Message Date
世界 227df81897 Fix macOS tlsspoof 2026-04-23 07:49:24 +08:00
世界 4cc9404704 Reject IP literal server name with TLS spoof 2026-04-23 07:49:24 +08:00
世界 dd087f9f7e Fix use-after-free of pooled value buffers in bbolt Batch writes 2026-04-23 07:49:24 +08:00
世界 222bb41063 Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-23 07:49:23 +08:00
世界 65c79a438e Fix legacy rule-set download_detour blocked by empty direct check 2026-04-23 07:49:23 +08:00
世界 c17569e4a5 Add TLS spoof support 2026-04-23 07:49:23 +08:00
世界 0a904a5f99 Standardize hosts path 2026-04-23 07:49:22 +08:00
世界 f02a1781eb Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-04-23 07:49:22 +08:00
世界 c902a9c625 oom-killer: Record report before reset network 2026-04-23 07:49:21 +08:00
世界 c6b3161a0a Add optimistic DNS cache 2026-04-23 07:49:21 +08:00
世界 3fe2687f3e Fix tailscale error 2026-04-23 07:49:21 +08:00
世界 70aaf29a93 Fix darwin cgo DNS again 2026-04-23 07:49:21 +08:00
世界 838902688e Fix stun test 2026-04-23 07:49:21 +08:00
世界 c680b4a30e documentation: Fix missing update for ip_version and query_type 2026-04-23 07:49:21 +08:00
世界 01207b2072 Add cloudflared inbound 2026-04-23 07:49:20 +08:00
世界 2be423b324 Fix lint errors 2026-04-23 07:49:20 +08:00
世界 4413b5ebe4 platform: Wrap command RPC error returns with E.Cause 2026-04-23 07:49:20 +08:00
世界 7b70e4ce20 Add package_name_regex route, DNS and headless rule item 2026-04-23 07:49:19 +08:00
世界 c884f9d000 documentation: Fixes 2026-04-23 07:49:19 +08:00
世界 eb2b0f49a1 Un-deprecate ip_accept_any DNS rule item 2026-04-23 07:49:18 +08:00
世界 10f448150f tools: Tailscale status 2026-04-23 07:49:18 +08:00
世界 69b9198ea3 Fix darwin local DNS transport 2026-04-23 07:49:18 +08:00
世界 84b5c2f2a0 Fix rules lock 2026-04-23 07:49:17 +08:00
世界 c669743e04 Revert "Also enable certificate store by default on Apple platforms"
This reverts commit 62cb06c02f.
2026-04-23 07:49:17 +08:00
世界 5eec1a2eae tools: Tailscale status 2026-04-23 07:49:17 +08:00
世界 48e18c7658 platform: Fix darwin signal handler 2026-04-23 07:49:16 +08:00
世界 34a5ae7192 tools: Network Quality & STUN 2026-04-23 07:49:16 +08:00
世界 bc6d0fe54e oom-killer: Free memory on pressure notification and use gradual interval backoff 2026-04-23 07:49:15 +08:00
世界 f02472a307 Fix deprecated warning double-formatting on localized clients 2026-04-23 07:49:15 +08:00
世界 df5f2cc688 platform: Fix set local 2026-04-23 07:49:15 +08:00
nekohasekai 144a3fbcd2 Add evaluate DNS rule action and related rule items 2026-04-23 07:49:14 +08:00
世界 82d590a752 Also enable certificate store by default on Apple platforms
`SecTrustEvaluateWithError` is serial
2026-04-23 07:49:14 +08:00
世界 d89a7121c0 platform: Add OOM Report & Crash Report 2026-04-23 07:49:13 +08:00
世界 ed165ee86c Add BBR profile and hop interval randomization for Hysteria2 2026-04-23 07:49:13 +08:00
nekohasekai 47df58f0d2 Refactor ACME support to certificate provider 2026-04-23 07:49:13 +08:00
世界 027f11c7ee documentation: Update descriptions for neighbor rules 2026-04-23 07:49:13 +08:00
世界 92310b42cb Add macOS support for MAC and hostname rule items 2026-04-23 07:49:12 +08:00
世界 a9decacf9e Add Android support for MAC and hostname rule items 2026-04-23 07:48:41 +08:00
世界 27ca71ff34 Add MAC and hostname rule items 2026-04-23 07:48:20 +08:00
世界 553cfa1f9f Bump version v1.13.11 2026-04-23 07:30:34 +08:00
世界 f102ef1d94 Fix process search skipped for Android again 2026-04-23 05:52:22 +08:00
世界 3312b8da50 Clean up DNS transports 2026-04-23 02:30:32 +08:00
世界 a3fc14f35f Bump version v1.13.10 2026-04-22 13:40:36 +08:00
世界 8947cb243e sing: Fix UoT write race 2026-04-21 18:54:52 +08:00
世界 83d3a6d4e1 Hide lifecycle logs for fast operations 2026-04-21 17:15:16 +08:00
世界 71f6a2ab4e Fix process search skipped for TUN 2026-04-21 15:45:05 +08:00
世界 d942ecc904 Bump version 1.13.9 v1.13.9 2026-04-20 09:49:39 +08:00
世界 c3de6a25fb documentation: Remove warp ads 2026-04-20 09:49:39 +08:00
世界 b3523abad5 tun: Fix multi include/exclude interfaces 2026-04-20 09:49:39 +08:00
世界 60dd7ea5c9 Simplify lifecycle logs 2026-04-20 09:49:39 +08:00