d2fd2ab794
Fix tls-spoof
2026-07-09 11:19:10 +08:00
00f0cc9d0f
Fix Apple TLS metadata capture
2026-07-09 11:19:10 +08:00
3660737223
Strip EDNS padding from upstream DNS responses
2026-07-09 11:19:10 +08:00
8092f78453
Defer implicit default HTTP client fallback to first use
2026-07-09 11:19:09 +08:00
336ed8bae9
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-07-09 11:19:09 +08:00
c87408c455
Fix macOS tlsspoof
2026-07-09 11:19:09 +08:00
b58afd9784
Reject IP literal server name with TLS spoof
2026-07-09 11:19:09 +08:00
af5ca87b49
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-07-09 11:19:08 +08:00
9b97a0de6f
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-07-09 11:19:08 +08:00
894f6eae60
Fix legacy rule-set download_detour blocked by empty direct check
2026-07-09 11:19:08 +08:00
a2872c3f32
Add TLS spoof support
2026-07-09 11:19:08 +08:00
ed294d8c1e
Standardize hosts path
2026-07-09 11:19:07 +08:00
c1da99eede
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-07-09 11:19:07 +08:00
d725846081
oom-killer: Record report before reset network
2026-07-09 11:17:55 +08:00
c8101bf1b7
Add optimistic DNS cache
2026-07-09 11:17:55 +08:00
1e88d08462
Fix tailscale error
2026-07-09 11:17:55 +08:00
a5bdaf5817
Fix darwin cgo DNS again
2026-07-09 11:17:55 +08:00
c08c6d52d0
Fix stun test
2026-07-09 11:17:54 +08:00
84cbca844d
documentation: Fix missing update for ip_version and query_type
2026-07-09 11:17:54 +08:00
b212049768
Add cloudflared inbound
2026-07-09 11:17:53 +08:00
2e932bef52
Fix lint errors
2026-07-09 11:17:53 +08:00
bc6f10832d
platform: Wrap command RPC error returns with E.Cause
2026-07-09 11:17:53 +08:00
ef954777d0
Add package_name_regex route, DNS and headless rule item
2026-07-09 11:17:53 +08:00
79ba7e59a9
documentation: Fixes
2026-07-09 11:17:52 +08:00
c61e5820a5
Un-deprecate ip_accept_any DNS rule item
2026-07-09 11:17:51 +08:00
ee1ed8f016
tools: Tailscale status
2026-07-09 11:17:51 +08:00
f4c053e929
Fix darwin local DNS transport
2026-07-09 11:17:51 +08:00
7b855595f4
Fix rules lock
2026-07-09 11:17:50 +08:00
323ed11d6f
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-07-09 11:17:50 +08:00
a5bf7be359
tools: Tailscale status
2026-07-09 11:17:49 +08:00
73091e10b8
platform: Fix darwin signal handler
2026-07-09 11:17:49 +08:00
da89c5b509
tools: Network Quality & STUN
2026-07-09 11:17:49 +08:00
6173a90898
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-07-09 11:17:49 +08:00
1a7c996986
Fix deprecated warning double-formatting on localized clients
2026-07-09 11:17:48 +08:00
f9e376e617
platform: Fix set local
2026-07-09 11:17:48 +08:00
daff1623b2
Add evaluate DNS rule action and related rule items
2026-07-09 11:17:47 +08:00
a3b98fc902
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-07-09 11:17:47 +08:00
3cf2b6e4fc
platform: Add OOM Report & Crash Report
2026-07-09 11:17:47 +08:00
73d9ffc4f3
Add BBR profile and hop interval randomization for Hysteria2
2026-07-09 11:17:30 +08:00
bbb8051c83
Refactor ACME support to certificate provider
2026-07-09 11:16:44 +08:00
eaf1f5e563
documentation: Update descriptions for neighbor rules
2026-07-09 11:16:44 +08:00
8d7015ffe1
Add macOS support for MAC and hostname rule items
2026-07-09 11:16:44 +08:00
07b1e5563e
Add Android support for MAC and hostname rule items
2026-07-09 11:16:44 +08:00
801505e628
Add MAC and hostname rule items
2026-07-09 11:16:41 +08:00
7067276170
Fix quic-go write leak
2026-07-09 11:07:27 +08:00
0f1763877c
Fix v2rayhttp upgrade leak
2026-07-03 12:28:39 +08:00
25a600db24
Bump version
2026-06-25 16:36:07 +08:00
ef2a012301
Fix http proxy authentication
2026-06-25 16:13:35 +08:00
0b7ffbaafa
tun: Fix system stack TCP NAT collision & route address set polluted by appended default element
2026-06-20 22:17:44 +08:00
6bae28b771
cronet: Fix arm build
2026-06-20 22:16:37 +08:00
世界