2e1a7a53ae
Update hysteria2 realm
2026-05-11 17:00:55 +08:00
34c90e6f2e
Add hysteria2 realm service and support
2026-05-10 13:31:53 +08:00
18f10561c9
Skip kickWriteHandshake for server first protocols
2026-05-08 12:35:14 +08:00
e0c137e232
Fix missing deadline for naive
2026-05-06 12:32:51 +08:00
3e5991744d
Fix reset network
2026-05-05 20:19:19 +08:00
4807ee9007
Bump version
2026-05-05 10:48:28 +08:00
228eb2df78
dns: Fix deadline
2026-05-05 10:48:28 +08:00
31252a7e95
Fix cronet close and crash
2026-05-05 10:48:28 +08:00
0ee7592343
release: Add replace_macos_standalone make target
2026-05-03 21:36:37 +08:00
9ee56ae7f5
Bump version
2026-05-03 09:07:20 +08:00
48c65a2f8a
Add more spoof method
...
Signed-off-by: macronut <4027187+macronut@users.noreply.github.com >
2026-05-02 23:07:54 +08:00
772ab58f8c
Update naiveproxy to v148.0.7778.96-1
2026-05-02 19:18:41 +08:00
bb60b58f00
Allow customizing TUN DNS mode and hijack interface DNS by default
2026-05-02 19:18:41 +08:00
85889fc701
cronet: Remove additional QUIC certificate check
2026-05-02 19:18:41 +08:00
98b21227fa
dns: Add mDNS server
2026-05-02 19:18:41 +08:00
fdec2fe051
dns: Add preferred_by rule item
2026-05-02 19:18:41 +08:00
e171852b19
dns: Add neighbor-based hostname resolution to local server
2026-05-02 19:18:41 +08:00
2a533b0daa
Fix tailscale start dependencies
2026-04-28 18:35:00 +08:00
ddc20355cf
sing: Fix contentjson crash
2026-04-28 18:34:51 +08:00
abedea4e57
Bump version
2026-04-28 15:12:39 +08:00
1bad8d87eb
dns: Add timeout configuration
2026-04-28 15:12:39 +08:00
60a5f874e2
Cleanup compatible code for legacy Go
2026-04-28 15:12:38 +08:00
610aa9432d
ssh: Add cipher, MAC, and key exchange configuration
2026-04-28 15:12:38 +08:00
78f502d016
tun: Add read waiter support for gVisor conn
2026-04-28 08:55:06 +08:00
b418ee1a98
Improve oom-killer
2026-04-28 08:55:06 +08:00
fd1624e426
Preserve comments between formatting
2026-04-28 08:55:06 +08:00
d9c9edd6f8
tun: Add compatibility with docker bridge
2026-04-28 08:55:06 +08:00
1610c18a2f
Add Windows TLS engine
2026-04-28 08:55:05 +08:00
3d3c8a2fe9
Improve UDP batch support
2026-04-28 08:20:44 +08:00
968bbd832c
Fix stderr deprecated manager
2026-04-28 08:20:44 +08:00
d06d3bf2a4
Fix darwin cgo DNS again
2026-04-28 08:04:55 +08:00
fbc1ca36e6
platform: Improve oom-killer
2026-04-28 08:04:54 +08:00
0f719a0715
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-04-28 08:04:54 +08:00
817f9c6364
Add ACME profile support for IP address certificates
2026-04-28 08:04:54 +08:00
5cd421401d
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-04-28 08:04:54 +08:00
acfb90a38e
Fix Tailscale search domain response name mismatch
2026-04-28 08:04:54 +08:00
6b51bd6778
Log DNS optimistic background refresh outcomes
2026-04-28 08:04:54 +08:00
b358fdd564
Add search domain support for Tailscale DNS
2026-04-28 08:04:53 +08:00
6ecd3deef5
Fix tls-spoof
2026-04-28 08:04:53 +08:00
a8b8f15a76
Fix Apple TLS metadata capture
2026-04-28 08:04:53 +08:00
3c9c4aee07
Strip EDNS padding from upstream DNS responses
2026-04-28 08:04:53 +08:00
32f56cce07
Defer implicit default HTTP client fallback to first use
2026-04-28 08:04:53 +08:00
4b15fccb78
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-04-28 08:04:52 +08:00
9bffb64bbd
Fix macOS tlsspoof
2026-04-28 08:04:52 +08:00
4a68bc9274
Reject IP literal server name with TLS spoof
2026-04-28 08:04:52 +08:00
fee6afdbf5
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-04-28 08:04:52 +08:00
90a642ef96
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-28 08:04:52 +08:00
9bee53225c
Fix legacy rule-set download_detour blocked by empty direct check
2026-04-28 08:04:52 +08:00
08ce083b9b
Add TLS spoof support
2026-04-28 08:04:51 +08:00
6ef38042f3
Standardize hosts path
2026-04-28 08:04:51 +08:00
世界