3a1ac538f1
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-04-20 09:51:13 +08:00
c16ae338de
Fix macOS tlsspoof
2026-04-20 09:51:13 +08:00
ea9617b427
Reject IP literal server name with TLS spoof
2026-04-20 09:51:12 +08:00
55b85bf9f6
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-04-20 09:51:12 +08:00
5c704df3e3
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-20 09:51:12 +08:00
a5d8b14d19
Fix legacy rule-set download_detour blocked by empty direct check
2026-04-20 09:51:12 +08:00
345311e106
Add TLS spoof support
2026-04-20 09:51:12 +08:00
90a850b2af
Standardize hosts path
2026-04-20 09:51:12 +08:00
2b53c64742
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-04-20 09:51:12 +08:00
f5d045ec0a
oom-killer: Record report before reset network
2026-04-20 09:51:12 +08:00
a86337b9b7
Add optimistic DNS cache
2026-04-20 09:51:11 +08:00
088adce0ee
Fix tailscale error
2026-04-20 09:51:11 +08:00
41ea60fef2
Fix darwin cgo DNS again
2026-04-20 09:51:11 +08:00
a604bef974
Fix stun test
2026-04-20 09:51:11 +08:00
a7c52dc026
documentation: Fix missing update for ip_version and query_type
2026-04-20 09:51:11 +08:00
6c62ca33e2
Add cloudflared inbound
2026-04-20 09:51:11 +08:00
764e55efab
Fix lint errors
2026-04-20 09:51:11 +08:00
57896fc829
platform: Wrap command RPC error returns with E.Cause
2026-04-20 09:51:11 +08:00
2e80ba6f86
Add package_name_regex route, DNS and headless rule item
2026-04-20 09:51:11 +08:00
5af95ba5da
documentation: Fixes
2026-04-20 09:51:10 +08:00
523ed6e497
Un-deprecate ip_accept_any DNS rule item
2026-04-20 09:51:10 +08:00
6c5340403b
tools: Tailscale status
2026-04-20 09:51:10 +08:00
24a49941b7
Fix darwin local DNS transport
2026-04-20 09:51:10 +08:00
4ab33abbd5
Fix rules lock
2026-04-20 09:51:10 +08:00
71375833c1
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-04-20 09:51:10 +08:00
1a33c01638
tools: Tailscale status
2026-04-20 09:51:10 +08:00
25cbe697b6
platform: Fix darwin signal handler
2026-04-20 09:51:09 +08:00
13d012e5e3
tools: Network Quality & STUN
2026-04-20 09:51:09 +08:00
3352a8580d
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-04-20 09:51:09 +08:00
98c9634bca
Fix deprecated warning double-formatting on localized clients
2026-04-20 09:51:08 +08:00
972e5e6c23
platform: Fix set local
2026-04-20 09:51:08 +08:00
9a452fa83d
Add evaluate DNS rule action and related rule items
2026-04-20 09:51:08 +08:00
67fc71bcdb
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-04-20 09:51:08 +08:00
9e2b7573c5
platform: Add OOM Report & Crash Report
2026-04-20 09:51:07 +08:00
fa242b0135
Add BBR profile and hop interval randomization for Hysteria2
2026-04-20 09:51:07 +08:00
fc1cd52612
Refactor ACME support to certificate provider
2026-04-20 09:51:07 +08:00
149a14ec5a
documentation: Update descriptions for neighbor rules
2026-04-20 09:51:06 +08:00
11783aa547
Add macOS support for MAC and hostname rule items
2026-04-20 09:51:06 +08:00
c69d3965f9
Add Android support for MAC and hostname rule items
2026-04-20 09:51:06 +08:00
2cf78e1dfd
Add MAC and hostname rule items
2026-04-20 09:51:06 +08:00
d942ecc904
Bump version 1.13.9
2026-04-20 09:49:39 +08:00
c3de6a25fb
documentation: Remove warp ads
2026-04-20 09:49:39 +08:00
b3523abad5
tun: Fix multi include/exclude interfaces
2026-04-20 09:49:39 +08:00
60dd7ea5c9
Simplify lifecycle logs
2026-04-20 09:49:39 +08:00
e4bc459975
Skip process search for non-local source addresses
2026-04-20 09:49:39 +08:00
3124cdd661
Fix windows bssid matching
2026-04-20 09:49:39 +08:00
b3606e33a6
release: fix apk package file ownership
2026-04-20 09:49:39 +08:00
9b72b352d5
sing: Fix UoT connect race
2026-04-20 00:10:46 +08:00
fb61987d93
tun: memmod: be more resilient toward weird PE files
2026-04-19 21:54:20 +08:00
a80ef94f09
Fix tailscale endpoint early-start close panic
2026-04-19 21:15:54 +08:00
世界