6e2c0fa249
Add ACME profile support for IP address certificates
2026-06-25 17:38:05 +08:00
da6ab370df
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-06-25 17:38:05 +08:00
4f279bc1e7
Fix tls-spoof
2026-06-25 17:38:04 +08:00
6b07ec3aff
Fix Apple TLS metadata capture
2026-06-25 17:38:04 +08:00
6e4f70f155
Defer implicit default HTTP client fallback to first use
2026-06-25 17:38:03 +08:00
16fe1e7ee0
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-06-25 17:38:03 +08:00
5ca971aa4d
Fix macOS tlsspoof
2026-06-25 17:38:03 +08:00
146f35483d
Reject IP literal server name with TLS spoof
2026-06-25 17:38:02 +08:00
b04b235661
Fix legacy rule-set download_detour blocked by empty direct check
2026-06-25 17:38:01 +08:00
3d1d6acbe3
Add TLS spoof support
2026-06-25 17:38:01 +08:00
cfe83a5dcc
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-06-25 17:37:59 +08:00
ecd07e2f85
Add optimistic DNS cache
2026-06-25 17:37:59 +08:00
2f62a35e1b
Fix stun test
2026-06-25 17:37:58 +08:00
cfe5fdcb79
Fix lint errors
2026-06-25 17:35:31 +08:00
dec919e0ca
Add package_name_regex route, DNS and headless rule item
2026-06-25 17:35:30 +08:00
7bac8dc815
tools: Network Quality & STUN
2026-06-25 17:35:27 +08:00
1d523907cb
Refactor ACME support to certificate provider
2026-06-25 17:35:24 +08:00
761b7f4e12
Handle TUN loopback in direct outbound
2026-06-03 12:56:36 +08:00
5e7fd7ad78
Fix lint errors
2026-05-13 23:39:27 +08:00
ddb757a25c
Reduce built-in certificate store memory
2026-04-28 07:44:20 +08:00
71f6a2ab4e
Fix process search skipped for TUN
2026-04-21 15:45:05 +08:00
7c3d8cf8db
Fix disable tcp keep alive
2026-04-10 13:29:15 +08:00
0045103d14
Fix package_name shared uid matching
2026-03-23 18:57:35 +08:00
d2a933784c
Optimize Darwin process finder
2026-03-23 18:57:35 +08:00
3f05a37f65
Optimize Linux process finder
2026-03-23 18:57:35 +08:00
7623bcd19e
Fix DialerForICMPDestination
2026-03-23 13:58:55 +08:00
d2fa21d07b
Deprecate Socksaddr.IsFqdn: do not reject potentially valid domain names
2026-03-16 09:37:59 +08:00
041646b728
Fix kTLS crash
2026-03-14 21:38:38 +08:00
2ba896c5ac
Fix netns fd leak in ListenNetworkNamespace
2026-03-09 20:06:34 +08:00
1803471e02
endpoint: Fix UDP resolved destination
2026-03-02 13:55:26 +08:00
8ae93a98e5
Remove overdue deprecated features
2026-03-01 12:30:43 +08:00
9bd9e9a58b
dialer: use KeepAliveConfig for TCP keepalive
2026-02-27 14:58:06 +08:00
9c2cdc7203
Fix per-outbound bind_interface
2026-02-27 14:58:06 +08:00
cf4791f1ad
platform: Improve iOS OOM killer
2026-02-26 14:13:32 +08:00
1af14a0237
Remove varbin usages
2026-01-29 13:40:34 +08:00
60a1e4c866
Add acmedns support
2026-01-17 20:52:43 +08:00
8d88c6532f
Add dial option bind_address_no_port
2026-01-17 05:49:56 +08:00
c2b697a778
Fix missing build constraints for linux wifi state monitor
2026-01-17 05:48:15 +08:00
ddec2ab282
Update dependencies
2026-01-17 05:48:15 +08:00
cba18635c8
Add Chrome Root Store certificate option
...
Adds `chrome` as a new certificate store option alongside `mozilla`.
Both stores filter out China-based CA certificates.
2026-01-17 05:47:54 +08:00
0585f6d065
Add ECH support for NaiveProxy outbound and tls.ech.query_server_name option
...
- Enable ECH for NaiveProxy outbound with DNS resolver integration
- Add query_server_name option to override domain for ECH HTTPS record queries
- Update cronet-go dependency and remove windows_386 support
2026-01-17 05:47:42 +08:00
5bc0dfa9dd
platform: Refactoring libbox to use gRPC-based protocol
2026-01-17 05:47:32 +08:00
743b460e51
Add Windows WI-FI state support
2026-01-17 05:47:27 +08:00
8d8ca282a1
Add Linux WI-FI state support
...
Support monitoring WIFI state on Linux through:
- NetworkManager (D-Bus)
- IWD (D-Bus)
- wpa_supplicant (control socket)
- ConnMan (D-Bus)
2026-01-17 05:47:04 +08:00
cd56eaaba2
Add more tcp keep alive options
...
Also update default TCP keep-alive initial period from 10 minutes to 5 minutes.
2026-01-17 05:47:04 +08:00
3dc285be8c
Fix missing mTLS support in client options
2026-01-17 05:46:23 +08:00
79bbce3db3
Add curve preferences, pinned public key SHA256 and mTLS for TLS options
2026-01-17 05:46:22 +08:00
ab0869c972
Update tfo-go to latest
2026-01-17 05:46:21 +08:00
9ac0539ffd
Remove compatibility codes
2026-01-17 05:46:14 +08:00
cb4deb0c20
Do not use linkname by default to simplify debugging
2026-01-17 05:46:14 +08:00
世界