c5e37e69ce
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-06-20 22:22:26 +08:00
71fd71729a
Fix Tailscale search domain response name mismatch
2026-06-20 22:22:26 +08:00
bc0ae035ad
Log DNS optimistic background refresh outcomes
2026-06-20 22:22:26 +08:00
39b8d37ecf
Add search domain support for Tailscale DNS
2026-06-20 22:22:26 +08:00
82d49e8250
Fix tls-spoof
2026-06-20 22:22:25 +08:00
7b7d95a1da
Fix Apple TLS metadata capture
2026-06-20 22:22:25 +08:00
098849e481
Strip EDNS padding from upstream DNS responses
2026-06-20 22:22:25 +08:00
380845ad9e
Defer implicit default HTTP client fallback to first use
2026-06-20 22:22:25 +08:00
e6f0d1f704
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-06-20 22:22:24 +08:00
23046880db
Fix macOS tlsspoof
2026-06-20 22:22:24 +08:00
8020972c9d
Reject IP literal server name with TLS spoof
2026-06-20 22:22:24 +08:00
8272845859
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-06-20 22:22:23 +08:00
e8b53265d4
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-06-20 22:22:23 +08:00
0cac33ceaf
Fix legacy rule-set download_detour blocked by empty direct check
2026-06-20 22:22:22 +08:00
98b0d7eda3
Add TLS spoof support
2026-06-20 22:22:22 +08:00
2ad83c52ae
Standardize hosts path
2026-06-20 22:22:22 +08:00
716541b61c
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-06-20 22:22:22 +08:00
f7b8eed2e4
oom-killer: Record report before reset network
2026-06-20 22:22:13 +08:00
997a64e014
Add optimistic DNS cache
2026-06-20 22:22:05 +08:00
56d0b40020
Fix tailscale error
2026-06-20 22:21:10 +08:00
6926e5178c
Fix darwin cgo DNS again
2026-06-20 22:21:10 +08:00
798066d65e
Fix stun test
2026-06-20 22:21:10 +08:00
87d3e177e5
documentation: Fix missing update for ip_version and query_type
2026-06-20 22:21:10 +08:00
31bbb536b4
Add cloudflared inbound
2026-06-20 22:21:09 +08:00
58706b0aef
Fix lint errors
2026-06-20 22:20:58 +08:00
8b653b9461
platform: Wrap command RPC error returns with E.Cause
2026-06-20 22:20:58 +08:00
941ce58b8e
Add package_name_regex route, DNS and headless rule item
2026-06-20 22:20:58 +08:00
d92729daa1
documentation: Fixes
2026-06-20 22:20:57 +08:00
3a307e71f7
Un-deprecate ip_accept_any DNS rule item
2026-06-20 22:20:57 +08:00
674752a0d8
tools: Tailscale status
2026-06-20 22:20:57 +08:00
dd10328e78
Fix darwin local DNS transport
2026-06-20 22:20:33 +08:00
c927896818
Fix rules lock
2026-06-20 22:20:33 +08:00
d403880de3
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-06-20 22:20:33 +08:00
4074c3e7ec
tools: Tailscale status
2026-06-20 22:20:33 +08:00
601608666a
platform: Fix darwin signal handler
2026-06-20 22:20:33 +08:00
5aba37bd35
tools: Network Quality & STUN
2026-06-20 22:20:32 +08:00
a393f3e24c
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-06-20 22:20:32 +08:00
087060f14e
Fix deprecated warning double-formatting on localized clients
2026-06-20 22:20:32 +08:00
d10dd4c2f9
platform: Fix set local
2026-06-20 22:20:32 +08:00
31bea69a23
Add evaluate DNS rule action and related rule items
2026-06-20 22:20:31 +08:00
46b86d1c56
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-06-20 22:20:31 +08:00
98b2ecd7e0
platform: Add OOM Report & Crash Report
2026-06-20 22:20:31 +08:00
5692f638e6
Add BBR profile and hop interval randomization for Hysteria2
2026-06-20 22:20:31 +08:00
3b36eeab84
Refactor ACME support to certificate provider
2026-06-20 22:20:22 +08:00
5b8bb39122
documentation: Update descriptions for neighbor rules
2026-06-20 22:20:22 +08:00
14e1e7e95e
Add macOS support for MAC and hostname rule items
2026-06-20 22:20:22 +08:00
05e226a1d9
Add Android support for MAC and hostname rule items
2026-06-20 22:20:22 +08:00
ff9fced367
Add MAC and hostname rule items
2026-06-20 22:20:17 +08:00
0b7ffbaafa
tun: Fix system stack TCP NAT collision & route address set polluted by appended default element
2026-06-20 22:17:44 +08:00
6bae28b771
cronet: Fix arm build
2026-06-20 22:16:37 +08:00
世界