60a5f874e2
Cleanup compatible code for legacy Go
2026-04-28 15:12:38 +08:00
610aa9432d
ssh: Add cipher, MAC, and key exchange configuration
2026-04-28 15:12:38 +08:00
78f502d016
tun: Add read waiter support for gVisor conn
2026-04-28 08:55:06 +08:00
b418ee1a98
Improve oom-killer
2026-04-28 08:55:06 +08:00
fd1624e426
Preserve comments between formatting
2026-04-28 08:55:06 +08:00
d9c9edd6f8
tun: Add compatibility with docker bridge
2026-04-28 08:55:06 +08:00
1610c18a2f
Add Windows TLS engine
2026-04-28 08:55:05 +08:00
3d3c8a2fe9
Improve UDP batch support
2026-04-28 08:20:44 +08:00
968bbd832c
Fix stderr deprecated manager
2026-04-28 08:20:44 +08:00
d06d3bf2a4
Fix darwin cgo DNS again
2026-04-28 08:04:55 +08:00
fbc1ca36e6
platform: Improve oom-killer
2026-04-28 08:04:54 +08:00
0f719a0715
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-04-28 08:04:54 +08:00
817f9c6364
Add ACME profile support for IP address certificates
2026-04-28 08:04:54 +08:00
5cd421401d
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-04-28 08:04:54 +08:00
acfb90a38e
Fix Tailscale search domain response name mismatch
2026-04-28 08:04:54 +08:00
6b51bd6778
Log DNS optimistic background refresh outcomes
2026-04-28 08:04:54 +08:00
b358fdd564
Add search domain support for Tailscale DNS
2026-04-28 08:04:53 +08:00
6ecd3deef5
Fix tls-spoof
2026-04-28 08:04:53 +08:00
a8b8f15a76
Fix Apple TLS metadata capture
2026-04-28 08:04:53 +08:00
3c9c4aee07
Strip EDNS padding from upstream DNS responses
2026-04-28 08:04:53 +08:00
32f56cce07
Defer implicit default HTTP client fallback to first use
2026-04-28 08:04:53 +08:00
4b15fccb78
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-04-28 08:04:52 +08:00
9bffb64bbd
Fix macOS tlsspoof
2026-04-28 08:04:52 +08:00
4a68bc9274
Reject IP literal server name with TLS spoof
2026-04-28 08:04:52 +08:00
fee6afdbf5
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-04-28 08:04:52 +08:00
90a642ef96
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-28 08:04:52 +08:00
9bee53225c
Fix legacy rule-set download_detour blocked by empty direct check
2026-04-28 08:04:52 +08:00
08ce083b9b
Add TLS spoof support
2026-04-28 08:04:51 +08:00
6ef38042f3
Standardize hosts path
2026-04-28 08:04:51 +08:00
5a618c6b68
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-04-28 08:04:39 +08:00
0d7230e42c
oom-killer: Record report before reset network
2026-04-28 08:04:34 +08:00
0319b22c76
Add optimistic DNS cache
2026-04-28 08:04:34 +08:00
e6f5c2438b
Fix tailscale error
2026-04-28 08:04:34 +08:00
8fb019164e
Fix darwin cgo DNS again
2026-04-28 08:04:33 +08:00
104c7ae24d
Fix stun test
2026-04-28 08:04:33 +08:00
3828b4f30e
documentation: Fix missing update for ip_version and query_type
2026-04-28 08:04:33 +08:00
08260fa770
Add cloudflared inbound
2026-04-28 08:04:33 +08:00
5779b46ca6
Fix lint errors
2026-04-28 08:04:33 +08:00
012db0ef0e
platform: Wrap command RPC error returns with E.Cause
2026-04-28 08:04:32 +08:00
684ba79113
Add package_name_regex route, DNS and headless rule item
2026-04-28 08:04:32 +08:00
e714efa792
documentation: Fixes
2026-04-28 08:04:32 +08:00
e75e1c98a9
Un-deprecate ip_accept_any DNS rule item
2026-04-28 08:04:32 +08:00
524578a635
tools: Tailscale status
2026-04-28 08:04:32 +08:00
eade67726a
Fix darwin local DNS transport
2026-04-28 08:04:31 +08:00
ec75e5ec0a
Fix rules lock
2026-04-28 08:04:31 +08:00
a7b02f9cb2
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-04-28 08:04:31 +08:00
ce6d6838a8
tools: Tailscale status
2026-04-28 08:04:31 +08:00
ccc2742d2b
platform: Fix darwin signal handler
2026-04-28 08:04:31 +08:00
0b8f380817
tools: Network Quality & STUN
2026-04-28 08:04:31 +08:00
5ee373c549
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-04-28 08:04:30 +08:00
世界