a8bd2e2a2f
Fix darwin cgo DNS again
2026-04-23 08:10:52 +08:00
cd4a4e6229
platform: Improve oom-killer
2026-04-23 08:04:03 +08:00
a20f5fd7b6
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-04-23 08:04:03 +08:00
986c7f830f
Add ACME profile support for IP address certificates
2026-04-23 08:04:03 +08:00
6904d91db9
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-04-23 08:04:03 +08:00
2640dd9dfa
Fix Tailscale search domain response name mismatch
2026-04-23 08:04:02 +08:00
87b80073c6
Log DNS optimistic background refresh outcomes
2026-04-23 08:03:59 +08:00
fa791aea8f
Add search domain support for Tailscale DNS
2026-04-23 08:03:58 +08:00
2e3d20d238
Fix tls-spoof
2026-04-23 07:49:25 +08:00
b771448023
Fix Apple TLS metadata capture
2026-04-23 07:49:25 +08:00
32bcf1ace9
Strip EDNS padding from upstream DNS responses
2026-04-23 07:49:25 +08:00
b96ef82369
Defer implicit default HTTP client fallback to first use
2026-04-23 07:49:25 +08:00
4bc13fc215
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-04-23 07:49:25 +08:00
227df81897
Fix macOS tlsspoof
2026-04-23 07:49:24 +08:00
4cc9404704
Reject IP literal server name with TLS spoof
2026-04-23 07:49:24 +08:00
dd087f9f7e
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-04-23 07:49:24 +08:00
222bb41063
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-23 07:49:23 +08:00
65c79a438e
Fix legacy rule-set download_detour blocked by empty direct check
2026-04-23 07:49:23 +08:00
c17569e4a5
Add TLS spoof support
2026-04-23 07:49:23 +08:00
0a904a5f99
Standardize hosts path
2026-04-23 07:49:22 +08:00
f02a1781eb
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-04-23 07:49:22 +08:00
c902a9c625
oom-killer: Record report before reset network
2026-04-23 07:49:21 +08:00
c6b3161a0a
Add optimistic DNS cache
2026-04-23 07:49:21 +08:00
3fe2687f3e
Fix tailscale error
2026-04-23 07:49:21 +08:00
70aaf29a93
Fix darwin cgo DNS again
2026-04-23 07:49:21 +08:00
838902688e
Fix stun test
2026-04-23 07:49:21 +08:00
c680b4a30e
documentation: Fix missing update for ip_version and query_type
2026-04-23 07:49:21 +08:00
01207b2072
Add cloudflared inbound
2026-04-23 07:49:20 +08:00
2be423b324
Fix lint errors
2026-04-23 07:49:20 +08:00
4413b5ebe4
platform: Wrap command RPC error returns with E.Cause
2026-04-23 07:49:20 +08:00
7b70e4ce20
Add package_name_regex route, DNS and headless rule item
2026-04-23 07:49:19 +08:00
c884f9d000
documentation: Fixes
2026-04-23 07:49:19 +08:00
eb2b0f49a1
Un-deprecate ip_accept_any DNS rule item
2026-04-23 07:49:18 +08:00
10f448150f
tools: Tailscale status
2026-04-23 07:49:18 +08:00
69b9198ea3
Fix darwin local DNS transport
2026-04-23 07:49:18 +08:00
84b5c2f2a0
Fix rules lock
2026-04-23 07:49:17 +08:00
c669743e04
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-04-23 07:49:17 +08:00
5eec1a2eae
tools: Tailscale status
2026-04-23 07:49:17 +08:00
48e18c7658
platform: Fix darwin signal handler
2026-04-23 07:49:16 +08:00
34a5ae7192
tools: Network Quality & STUN
2026-04-23 07:49:16 +08:00
bc6d0fe54e
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-04-23 07:49:15 +08:00
f02472a307
Fix deprecated warning double-formatting on localized clients
2026-04-23 07:49:15 +08:00
df5f2cc688
platform: Fix set local
2026-04-23 07:49:15 +08:00
144a3fbcd2
Add evaluate DNS rule action and related rule items
2026-04-23 07:49:14 +08:00
82d590a752
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-04-23 07:49:14 +08:00
d89a7121c0
platform: Add OOM Report & Crash Report
2026-04-23 07:49:13 +08:00
ed165ee86c
Add BBR profile and hop interval randomization for Hysteria2
2026-04-23 07:49:13 +08:00
47df58f0d2
Refactor ACME support to certificate provider
2026-04-23 07:49:13 +08:00
027f11c7ee
documentation: Update descriptions for neighbor rules
2026-04-23 07:49:13 +08:00
92310b42cb
Add macOS support for MAC and hostname rule items
2026-04-23 07:49:12 +08:00
世界