8bce66d952
platform: Improve oom-killer
2026-06-25 17:38:06 +08:00
fb1ddc1702
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-06-25 17:38:05 +08:00
6e2c0fa249
Add ACME profile support for IP address certificates
2026-06-25 17:38:05 +08:00
da6ab370df
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-06-25 17:38:05 +08:00
e2d860ac77
Fix Tailscale search domain response name mismatch
2026-06-25 17:38:05 +08:00
051e8fb4b8
Log DNS optimistic background refresh outcomes
2026-06-25 17:38:05 +08:00
157eb993de
Add search domain support for Tailscale DNS
2026-06-25 17:38:04 +08:00
4f279bc1e7
Fix tls-spoof
2026-06-25 17:38:04 +08:00
6b07ec3aff
Fix Apple TLS metadata capture
2026-06-25 17:38:04 +08:00
c092abe2ff
Strip EDNS padding from upstream DNS responses
2026-06-25 17:38:03 +08:00
6e4f70f155
Defer implicit default HTTP client fallback to first use
2026-06-25 17:38:03 +08:00
16fe1e7ee0
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-06-25 17:38:03 +08:00
5ca971aa4d
Fix macOS tlsspoof
2026-06-25 17:38:03 +08:00
146f35483d
Reject IP literal server name with TLS spoof
2026-06-25 17:38:02 +08:00
043fdfad1d
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-06-25 17:38:02 +08:00
b5ec033a57
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-06-25 17:38:02 +08:00
b04b235661
Fix legacy rule-set download_detour blocked by empty direct check
2026-06-25 17:38:01 +08:00
3d1d6acbe3
Add TLS spoof support
2026-06-25 17:38:01 +08:00
590b176c47
Standardize hosts path
2026-06-25 17:38:00 +08:00
cfe83a5dcc
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-06-25 17:37:59 +08:00
23ebdba5d0
oom-killer: Record report before reset network
2026-06-25 17:37:59 +08:00
ecd07e2f85
Add optimistic DNS cache
2026-06-25 17:37:59 +08:00
ce9502122b
Fix tailscale error
2026-06-25 17:37:59 +08:00
97aad6394e
Fix darwin cgo DNS again
2026-06-25 17:37:58 +08:00
2f62a35e1b
Fix stun test
2026-06-25 17:37:58 +08:00
2255e1f80b
documentation: Fix missing update for ip_version and query_type
2026-06-25 17:37:58 +08:00
fd7bc21175
Add cloudflared inbound
2026-06-25 17:37:08 +08:00
cfe5fdcb79
Fix lint errors
2026-06-25 17:35:31 +08:00
df27819403
platform: Wrap command RPC error returns with E.Cause
2026-06-25 17:35:31 +08:00
dec919e0ca
Add package_name_regex route, DNS and headless rule item
2026-06-25 17:35:30 +08:00
db1e08a07f
documentation: Fixes
2026-06-25 17:35:30 +08:00
d8b7e92cc2
Un-deprecate ip_accept_any DNS rule item
2026-06-25 17:35:29 +08:00
6792fd18e1
tools: Tailscale status
2026-06-25 17:35:29 +08:00
47929493b9
Fix darwin local DNS transport
2026-06-25 17:35:29 +08:00
5b4628a5fb
Fix rules lock
2026-06-25 17:35:28 +08:00
be866108cd
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-06-25 17:35:28 +08:00
83d681b7fd
tools: Tailscale status
2026-06-25 17:35:27 +08:00
d991b1533b
platform: Fix darwin signal handler
2026-06-25 17:35:27 +08:00
7bac8dc815
tools: Network Quality & STUN
2026-06-25 17:35:27 +08:00
2ae0fc6ab1
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-06-25 17:35:26 +08:00
38bb6e9b11
Fix deprecated warning double-formatting on localized clients
2026-06-25 17:35:26 +08:00
3bdae735bc
platform: Fix set local
2026-06-25 17:35:26 +08:00
92118b594c
Add evaluate DNS rule action and related rule items
2026-06-25 17:35:25 +08:00
d8fd90d956
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-06-25 17:35:25 +08:00
666bfdbe4e
platform: Add OOM Report & Crash Report
2026-06-25 17:35:25 +08:00
f96582c5d1
Add BBR profile and hop interval randomization for Hysteria2
2026-06-25 17:35:24 +08:00
1d523907cb
Refactor ACME support to certificate provider
2026-06-25 17:35:24 +08:00
306ed3e496
documentation: Update descriptions for neighbor rules
2026-06-25 17:35:24 +08:00
49349e2e5c
Add macOS support for MAC and hostname rule items
2026-06-25 17:35:23 +08:00
22f683e5a3
Add Android support for MAC and hostname rule items
2026-06-25 17:35:23 +08:00
世界