147cc0038c
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-17 14:06:46 +08:00
4fdfda25d8
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-04-17 14:06:46 +08:00
ca63351ec2
Add optimistic DNS cache
2026-04-16 16:49:01 +08:00
c80f4add73
tools: Tailscale status
2026-04-16 16:48:22 +08:00
d70bfb9bb6
tools: Tailscale status
2026-04-16 16:48:21 +08:00
c208f4aea4
Add evaluate DNS rule action and related rule items
2026-04-16 16:48:19 +08:00
986de07d0c
Refactor ACME support to certificate provider
2026-04-16 16:46:15 +08:00
df806c96fb
Add Android support for MAC and hostname rule items
2026-04-16 16:46:14 +08:00
72a039a8f3
Add MAC and hostname rule items
2026-04-16 16:46:13 +08:00
0045103d14
Fix package_name shared uid matching
2026-03-23 18:57:35 +08:00
795d1c2892
Fix nested rule-set match cache isolation
2026-03-23 12:26:19 +08:00
8ae93a98e5
Remove overdue deprecated features
2026-03-01 12:30:43 +08:00
cf4791f1ad
platform: Improve iOS OOM killer
2026-02-26 14:13:32 +08:00
1af14a0237
Remove varbin usages
2026-01-29 13:40:34 +08:00
0caebd3171
platform: Improve interface
2026-01-17 05:49:12 +08:00
aa8dd6e44f
Fix DNS transports
2026-01-17 05:48:41 +08:00
494990f914
Update bypass action behavior for auto redirect
2026-01-17 05:48:41 +08:00
faff3174a3
Add trace logging for lifecycle calls
...
Log start/close operations with timing information for debugging.
2026-01-17 05:47:54 +08:00
ac427b98f4
platform: Add UsePlatformWIFIMonitor to gRPC interface
...
Align dev-next-grpc with wip2 by adding UsePlatformWIFIMonitor()
to the new PlatformInterface, allowing platform clients to indicate
they handle WIFI monitoring themselves.
2026-01-17 05:47:32 +08:00
5bc0dfa9dd
platform: Refactoring libbox to use gRPC-based protocol
2026-01-17 05:47:32 +08:00
8d8ca282a1
Add Linux WI-FI state support
...
Support monitoring WIFI state on Linux through:
- NetworkManager (D-Bus)
- IWD (D-Bus)
- wpa_supplicant (control socket)
- ConnMan (D-Bus)
2026-01-17 05:47:04 +08:00
f84129ca79
Add proxy support for ICMP echo request
2026-01-17 05:44:41 +08:00
239e6ec701
Add preferred_by route rule item
2026-01-17 05:44:27 +08:00
1ebff74c21
Fix DNS cache not working when domain strategy is set
...
The cache lookup was performed before rule matching, using the caller's
strategy (usually AsIS/0) instead of the resolved strategy. This caused
cache misses when ipv4_only was configured globally but the cache lookup
expected both A and AAAA records.
Remove LookupCache and ExchangeCache from Router, as the cache checks
inside client.Lookup and client.Exchange already handle caching correctly
after rule matching with the proper strategy and transport.
2025-12-21 16:59:10 +08:00
216c4c8bd4
Fix adapter handler
2025-11-16 08:34:46 +08:00
f352f84483
Fix read address
2025-09-05 15:16:14 +08:00
cbf48e9b8c
Fix multiple sniff
2025-09-03 20:09:05 +08:00
22782ca6fc
Fix outbound start
2025-08-21 09:41:31 +08:00
acda4ce985
Fix bind_interface not working with auto_redirect
2025-08-17 14:48:01 +08:00
354ece2bdf
Fix resolved service
2025-08-16 00:09:29 +08:00
378e39f70c
Update golangci-lint to v2
2025-08-13 23:37:40 +08:00
0146fbfc40
Add SSM API service
2025-07-08 13:14:42 +08:00
6ee3117755
Add resolved service and DNS server
2025-07-08 13:14:41 +08:00
7a1eee78df
Add service component type
2025-07-08 13:14:41 +08:00
3b480de38a
Add TLS record fragment support
2025-07-08 13:14:38 +08:00
fb622ccbdf
Explicitly reject detour to empty direct outbounds
2025-07-08 13:12:28 +08:00
b4a8fa59f5
Fix Outbound deadlock
2025-07-08 13:12:19 +08:00
17576e9f66
Add certificate store
2025-07-08 13:12:14 +08:00
90ec9c8bcb
Add TLS fragment support
2025-07-08 13:12:14 +08:00
988ac62a1b
refactor: Outbound domain resolver
2025-07-08 13:12:14 +08:00
3016338e34
refactor: DNS
2025-07-08 13:12:14 +08:00
7d3ee29bd0
Also skip duplicate sniff for TCP
2025-06-21 12:57:27 +08:00
5eeef6b28e
Fix multiple trackers
2025-04-08 14:16:22 +08:00
d55d5009c2
Fix processing multiple sniffs
2025-03-16 09:21:54 +08:00
93b68312cf
platform: Add update WIFI state func
2025-02-23 08:35:30 +08:00
27c31eac5d
Fix local rule-set not updated
2025-02-01 19:42:21 +08:00
9a1efbe54d
Fix domain strategy
2025-01-13 15:14:30 +08:00
1d2720bf5e
Add UDP timeout route option
2025-01-13 15:14:30 +08:00
0c66888691
Fix lint
2025-01-13 15:14:30 +08:00
68781387fe
refactor: WireGuard endpoint
2025-01-13 15:14:30 +08:00
世界