d7f4cefce8
Add Windows TLS engine
2026-05-14 21:56:21 +08:00
770a0c7499
Improve UDP batch support
2026-05-14 21:56:21 +08:00
77142b61d3
Fix stderr deprecated manager
2026-05-14 21:56:21 +08:00
58a318f913
Fix darwin cgo DNS again
2026-05-14 21:56:21 +08:00
881736a7c9
platform: Improve oom-killer
2026-05-14 21:56:21 +08:00
00149d8c7d
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-05-14 21:56:21 +08:00
88486daac7
Add ACME profile support for IP address certificates
2026-05-14 21:56:21 +08:00
4b9221fce1
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-05-14 21:56:21 +08:00
a6c4539440
Fix Tailscale search domain response name mismatch
2026-05-14 21:56:21 +08:00
5f8d846a90
Log DNS optimistic background refresh outcomes
2026-05-14 21:56:20 +08:00
6d1803f2a4
Add search domain support for Tailscale DNS
2026-05-14 21:56:20 +08:00
b656af66a0
Fix tls-spoof
2026-05-14 21:56:20 +08:00
e9bf6915d6
Fix Apple TLS metadata capture
2026-05-14 21:56:20 +08:00
596c85a001
Strip EDNS padding from upstream DNS responses
2026-05-14 21:56:20 +08:00
eedd92560f
Defer implicit default HTTP client fallback to first use
2026-05-14 21:56:20 +08:00
463d808cab
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-05-14 21:56:20 +08:00
6e59653f78
Fix macOS tlsspoof
2026-05-14 21:56:20 +08:00
644b9bcf3c
Reject IP literal server name with TLS spoof
2026-05-14 21:56:20 +08:00
719a002e70
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-05-14 21:56:20 +08:00
8224f2e5f9
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-05-14 21:56:20 +08:00
7fe1f47690
Fix legacy rule-set download_detour blocked by empty direct check
2026-05-14 21:56:20 +08:00
227e0ca30f
Add TLS spoof support
2026-05-14 21:56:20 +08:00
69f9f0232e
Standardize hosts path
2026-05-14 21:56:20 +08:00
195e129000
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-05-14 21:56:20 +08:00
04dc9fc353
oom-killer: Record report before reset network
2026-05-14 21:56:20 +08:00
6f23a9652b
Add optimistic DNS cache
2026-05-14 21:56:20 +08:00
b207d37a11
Fix tailscale error
2026-05-14 21:56:20 +08:00
f7cf93e2b4
Fix darwin cgo DNS again
2026-05-14 21:56:20 +08:00
914a6c51a1
Fix stun test
2026-05-14 21:56:20 +08:00
9b44e1b9da
documentation: Fix missing update for ip_version and query_type
2026-05-14 21:56:20 +08:00
0cc595866c
Add cloudflared inbound
2026-05-14 21:56:20 +08:00
72f89974ed
Fix lint errors
2026-05-14 21:56:20 +08:00
0dc7d6e40d
platform: Wrap command RPC error returns with E.Cause
2026-05-14 21:56:20 +08:00
0a9d8f945e
Add package_name_regex route, DNS and headless rule item
2026-05-14 21:56:20 +08:00
39dda9fb42
documentation: Fixes
2026-05-14 21:56:20 +08:00
825f86af7d
Un-deprecate ip_accept_any DNS rule item
2026-05-14 21:56:20 +08:00
972a03592c
tools: Tailscale status
2026-05-14 21:56:20 +08:00
775f683e98
Fix darwin local DNS transport
2026-05-14 21:56:20 +08:00
1ee527af75
Fix rules lock
2026-05-14 21:56:20 +08:00
c5a3e59945
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02f
2026-05-14 21:56:20 +08:00
7d382fe3fc
tools: Tailscale status
2026-05-14 21:56:20 +08:00
11b7ffdff5
platform: Fix darwin signal handler
2026-05-14 21:56:19 +08:00
3b5e8c8a17
tools: Network Quality & STUN
2026-05-14 21:56:19 +08:00
3cfbfbbdb9
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-05-14 21:56:19 +08:00
b9ac437bce
Fix deprecated warning double-formatting on localized clients
2026-05-14 21:56:19 +08:00
f2945572e2
platform: Fix set local
2026-05-14 21:56:19 +08:00
6fa641a277
Add evaluate DNS rule action and related rule items
2026-05-14 21:55:53 +08:00
01efb67654
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-05-14 16:38:11 +08:00
17a63d553a
platform: Add OOM Report & Crash Report
2026-05-14 16:38:11 +08:00
914fc9c2c9
Add BBR profile and hop interval randomization for Hysteria2
2026-05-14 16:37:11 +08:00
nekohasekai