ef06e4c2c0
Add more spoof method
...
Signed-off-by: macronut <4027187+macronut@users.noreply.github.com >
2026-05-15 07:43:29 +08:00
ac900b1742
Allow customizing TUN DNS mode and hijack interface DNS by default
2026-05-15 07:43:29 +08:00
93d3869f48
dns: Add mDNS server
2026-05-15 07:43:29 +08:00
d02a055122
dns: Add preferred_by rule item
2026-05-15 07:43:29 +08:00
d701464377
dns: Add neighbor-based hostname resolution to local server
2026-05-15 07:43:29 +08:00
3076764463
Fix tailscale start dependencies
2026-05-15 07:43:29 +08:00
7b258f2430
dns: Add timeout configuration
2026-05-14 21:56:21 +08:00
19f696d1f6
ssh: Add cipher, MAC, and key exchange configuration
2026-05-14 21:56:21 +08:00
5d0c132d7b
tun: Add read waiter support for gVisor conn
2026-05-14 21:56:21 +08:00
73fc988fc5
Improve oom-killer
2026-05-14 21:56:21 +08:00
b268fe0c6c
Preserve comments between formatting
2026-05-14 21:56:21 +08:00
a31244b555
tun: Add compatibility with docker bridge
2026-05-14 21:56:21 +08:00
d7f4cefce8
Add Windows TLS engine
2026-05-14 21:56:21 +08:00
770a0c7499
Improve UDP batch support
2026-05-14 21:56:21 +08:00
77142b61d3
Fix stderr deprecated manager
2026-05-14 21:56:21 +08:00
58a318f913
Fix darwin cgo DNS again
2026-05-14 21:56:21 +08:00
881736a7c9
platform: Improve oom-killer
2026-05-14 21:56:21 +08:00
00149d8c7d
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-05-14 21:56:21 +08:00
88486daac7
Add ACME profile support for IP address certificates
2026-05-14 21:56:21 +08:00
4b9221fce1
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-05-14 21:56:21 +08:00
a6c4539440
Fix Tailscale search domain response name mismatch
2026-05-14 21:56:21 +08:00
5f8d846a90
Log DNS optimistic background refresh outcomes
2026-05-14 21:56:20 +08:00
6d1803f2a4
Add search domain support for Tailscale DNS
2026-05-14 21:56:20 +08:00
b656af66a0
Fix tls-spoof
2026-05-14 21:56:20 +08:00
e9bf6915d6
Fix Apple TLS metadata capture
2026-05-14 21:56:20 +08:00
596c85a001
Strip EDNS padding from upstream DNS responses
2026-05-14 21:56:20 +08:00
eedd92560f
Defer implicit default HTTP client fallback to first use
2026-05-14 21:56:20 +08:00
463d808cab
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-05-14 21:56:20 +08:00
6e59653f78
Fix macOS tlsspoof
2026-05-14 21:56:20 +08:00
644b9bcf3c
Reject IP literal server name with TLS spoof
2026-05-14 21:56:20 +08:00
719a002e70
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-05-14 21:56:20 +08:00
8224f2e5f9
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-05-14 21:56:20 +08:00
7fe1f47690
Fix legacy rule-set download_detour blocked by empty direct check
2026-05-14 21:56:20 +08:00
227e0ca30f
Add TLS spoof support
2026-05-14 21:56:20 +08:00
69f9f0232e
Standardize hosts path
2026-05-14 21:56:20 +08:00
195e129000
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-05-14 21:56:20 +08:00
04dc9fc353
oom-killer: Record report before reset network
2026-05-14 21:56:20 +08:00
6f23a9652b
Add optimistic DNS cache
2026-05-14 21:56:20 +08:00
b207d37a11
Fix tailscale error
2026-05-14 21:56:20 +08:00
f7cf93e2b4
Fix darwin cgo DNS again
2026-05-14 21:56:20 +08:00
914a6c51a1
Fix stun test
2026-05-14 21:56:20 +08:00
9b44e1b9da
documentation: Fix missing update for ip_version and query_type
2026-05-14 21:56:20 +08:00
0cc595866c
Add cloudflared inbound
2026-05-14 21:56:20 +08:00
72f89974ed
Fix lint errors
2026-05-14 21:56:20 +08:00
0dc7d6e40d
platform: Wrap command RPC error returns with E.Cause
2026-05-14 21:56:20 +08:00
0a9d8f945e
Add package_name_regex route, DNS and headless rule item
2026-05-14 21:56:20 +08:00
39dda9fb42
documentation: Fixes
2026-05-14 21:56:20 +08:00
825f86af7d
Un-deprecate ip_accept_any DNS rule item
2026-05-14 21:56:20 +08:00
972a03592c
tools: Tailscale status
2026-05-14 21:56:20 +08:00
775f683e98
Fix darwin local DNS transport
2026-05-14 21:56:20 +08:00
macronut